Use this tool for fixing
Import Elimination, Directly
Imports and Hashed
Imports
.<br>so you can use this tool for changing IAT Base Address and Sorting IATs in<br>New
(other
) Address
.<br><br>Tested on:<br><br>Armadillo<br>ASProtect<br>Enigma<br>ExeCryptor<br>eXPressor<br>PeSpin<br>RlPack<br>TheMida<br>HyperUnpackMe
1<br><br>and any protector with
Import Elimination, Directly
Imports and Hashed
Imports
.<br><br><br>Notes:<br>=======<br>This tool is an
Import Fixer (not
Import Rebuilder ImpRec etc
) and Just work<br>in memory of target process
. dont tell me how to use this Tool
...if you can<br>not use this Simple Tool plz DRAG IT TO THE RECYCLE BIN ok?<br><br><br>How to use :<br>=============<br>
1.fill <Process ID> with target Process ID<br>2
.fill <Code Start> with start address of code that you want to fix it
.<br> if you fill it with ZERO,
UIF will fill it automatically
.<br>3
.fill <Code End> with End address of code that you want to fix it
.<br> if you fill it with ZERO,
UIF will fill it automatically
.<br>4
.fill <New IAT VA> with address of Empty or unused area<br>
(in Code section or Data section or any
...) that IAT will repair to it
.<br> if you fill it with ZERO,
UIF will fill it automatically
.<br><br>so you can fill <code Start> , <Code End> with a Dll address area,
UIF will<br>detect it automatically
.<br><br>for Fast Speed:<br>===============<br> -After Click on <Start> you can Minimize
UIF to the taskbar
.<br> -Just enter Code section start and end
.<br> -Dont check "Fix Directly
Imports" if you dont need to it
.<br><br>News in
Final version
(2
008
.02
.23
):<br>====================================<br>+
Algorithm improved for better fixing Directly
imports
.<br>+Show modules count and progress in StatusBar
.<br>-GUI bug fixed on large fonts >=
12
0 dpi
.<br><br><br>News in
Final version
(2
008
.01.15
):<br>====================================<br>-Some small
bugs fixed
.<br>+
Algorithm improved for very big IAT size
.<br>+Auto fill improved for detecting dlls correctly
.<br><br><br>
magic_h
2001@yahoo
.com<br>http://
magic.shabgard
.org<br><br>
扫一扫
4216
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
