From Collaborative RCE Tool Library

Jump to: navigation, search

Universal Import Fixer

Tool name: Universal Import Fixer
Rating: 0.0 (0 votes)
Author: Magic_h2001                        
Website: http://magic.shabgard.org
Current version: 1.2
Last updated: December 31, 2008
Direct D/L link: Locally archived copy
License type: Free
Description: Use this tool for fixing Import Elimination, Directly Imports, Shuffled, Disordered, Scattered and Hashed Imports.

So you can use this tool for changing IAT Base Address and Sorting IATs.

Tested on:

Armadillo
ASProtect
Enigma
ExeCryptor
eXPressor
PeSpin
RlPack
TheMida
WinLicense
HyperUnpackMe

and any protector with Import Elimination, Directly Imports and Hashed Imports.

A Flash tutorial for unpacking eXPressor with Universal Import Fixer is included in the local download package.

Use this tool for fixing Import Elimination, Directly Imports and Shuffled, Disordered, Scattered Imports.

So you can use this tool for changing IAT Base Address and Sorting IATs in New (other) Address.

Tested on:

Armadillo
ASProtect
Enigma
ExeCryptor
eXPressor
PeSpin
RlPack
TheMida
WinLicense

and any protector with Import Elimination, Directly Imports and Shuffled, Disordered, Scattered Imports.

Notes:
======
This tool is an Import Fixer (not Import Rebuilder ImpRec etc) and Just work in memory of target process.

Always first use UIF then Dump target process.

UIF can fix actual APIs, dont use it for fixing Emulated/Redirected APIs to protector's stub.you must use UIF After fixing Magic IAT jump (or use any methods) to convert Emulated/Redirected APIs to Actual APIs.

Samples:

Armadillo : Import Elimination
ASProtect : Directly Imports
Enigma : Shuffled, Disordered, Scattered Imports
ExeCryptor : Scattered Imports in Protector Stub
eXPressor : Directly Imports
PeSpin : Directly, Shuffled, Disordered, Scattered Imports
RlPack : Shuffled, Disordered, Scattered Imports
TheMida : Directly Imports
WinLicense : Directly Imports
Related URLs:
More info and how to use:
http://www.exetools.com/forum/showthread.php?t=11381
Direct download of latest version (unreliable, so don't replace the local copy with this link):
http://magic.shabgard.org/UIF.zip


Screenshot:
Screenshot of Universal Import Fixer


RSS feed Feed containing all updates for this tool.

You are welcome to add your own useful notes about this tool, for others to see!



If you find that any information for the tool above is missing, outdated or incorrect, please edit it!
(please also edit it if you think it fits well in some additional category, since this can also be controlled)


Views
Category Navigation Tree
   Code Coverage Tools  (12)
   Code Ripping Tools  (2)
   Crypto Tools  (5)
   Firefox Extensions  (1)
   Hex Editors  (12)
   Memory Patchers  (3)
   Packers  (16)
   Profiler Tools  (10)
   String Finders  (5)
   Tool Hiding Tools  (5)
   Tracers  (17)
   Needs New Category  (2)