首页
社区
课程
招聘
[转帖]Universal Import Fixer (UIF) v1.0 (FINAL) by Magic_h2001
发表于: 2008-2-23 13:54 4698

[转帖]Universal Import Fixer (UIF) v1.0 (FINAL) by Magic_h2001

2008-2-23 13:54
4698
Universal Import Fixer (UIF) v1.0 (FINAL) by Magic_h2001

Universal Import Fixer (UIF) v1.0 (FINAL) by: Magic_h2001

Use this tool for fixing Import Elimination, Directly Imports and Hashed Imports.
so you can use this tool for changing IAT Base Address and Sorting IATs in
New (other) Address.

Tested on:

Armadillo
ASProtect
Enigma
ExeCryptor
eXPressor
PeSpin
RlPack
TheMida
HyperUnpackMe1

and any protector with Import Elimination, Directly Imports and Hashed Imports.


Notes:
=======
This tool is an Import Fixer (not Import Rebuilder ImpRec etc) and Just work
in memory of target process. dont tell me how to use this Tool...if you can
not use this Simple Tool plz DRAG IT TO THE RECYCLE BIN ok?


How to use :
=============
1.fill <Process ID> with target Process ID
2.fill <Code Start> with start address of code that you want to fix it.
if you fill it with ZERO, UIF will fill it automatically.
3.fill <Code End> with End address of code that you want to fix it.
if you fill it with ZERO, UIF will fill it automatically.
4.fill <New IAT VA> with address of Empty or unused area
(in Code section or Data section or any...) that IAT will repair to it.
if you fill it with ZERO, UIF will fill it automatically.

so you can fill <code Start> , <Code End> with a Dll address area, UIF will
detect it automatically.

for Fast Speed:
===============
-After Click on <Start> you can Minimize UIF to the taskbar.
-Just enter Code section start and end.
-Dont check "Fix Directly Imports" if you dont need to it.


News in Final version (2008.02.23):
====================================
+Algorithm improved for better fixing Directly imports.
+Show modules count and progress in StatusBar.
-GUI bug fixed on large fonts >=120 dpi.


News in Final version (2008.01.15):
====================================
-Some small bugs fixed.
+Algorithm improved for very big IAT size.
+Auto fill improved for detecting dlls correctly.


magic_h2001@yahoo.com
http://magic.shabgard.org

[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课

上传的附件:
收藏
免费 1
支持
分享
最新回复 (11)
雪    币: 223
活跃值: (70)
能力值: ( LV6,RANK:90 )
在线值:
发帖
回帖
粉丝
2
这是个好东西
2008-2-23 15:00
0
雪    币: 200
活跃值: (20)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
3
虽然还不会用,但是要收藏一个!
2008-2-23 15:52
0
雪    币: 200
活跃值: (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
4
这是个好东西
2008-2-23 16:09
0
雪    币: 234
活跃值: (10)
能力值: ( LV3,RANK:30 )
在线值:
发帖
回帖
粉丝
5
这个大家都说不错
已下载收藏
谢谢版主
2008-2-23 16:23
0
雪    币: 817
活跃值: (1927)
能力值: ( LV12,RANK:2670 )
在线值:
发帖
回帖
粉丝
6
今天在exetools看到了,感谢林版更新
2008-2-23 17:37
0
雪    币: 2575
活跃值: (502)
能力值: ( LV2,RANK:85 )
在线值:
发帖
回帖
粉丝
7
要向林版学习
2008-2-23 17:39
0
雪    币: 136
活跃值: (105)
能力值: ( LV9,RANK:140 )
在线值:
发帖
回帖
粉丝
8
感谢 linsir
2008-2-23 21:52
0
雪    币: 134
活跃值: (84)
能力值: ( LV5,RANK:60 )
在线值:
发帖
回帖
粉丝
9
很老的东西了
2008-2-23 21:56
0
雪    币: 200
活跃值: (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
10
下载收藏备用
2008-2-23 22:40
0
雪    币: 3
活跃值: (1885)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
11
已下载收藏
谢谢版主
2008-2-24 19:28
0
雪    币: 234
活跃值: (12)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
12
谢谢,谢谢版主,下载收藏备用
2008-2-25 10:06
0
游客
登录 | 注册 方可回帖
返回
//