- UID
- 2198
注册时间2005-6-29
阅读权限255
最后登录1970-1-1
副坛主
  
该用户从未签到
|
Wannabe Universal Import Fixer (WannabeUIF) v1.1 Public by SmilingWolf
Use this tool to fix Import Elimination, Directly Imports and
Shuffled, Disordered, Scattered Imports (Just for 64 bit processes).
So you can use this tool to change IAT Base Address and Sorting IATs
in New (other) Address.
Notes:
======
This tool is an Import Fixer (not Import Rebuilder ImpRec etc) and just works
with the memory of the target process. Don't ask me how to use this tool... If you
can not use this simple tool please DRAG IT TO THE RECYCLE BIN ok?
Always first use WannabeUIF then dump target process.
WannabeUIF can fix actual APIs, don't use it for fixing Emulated/Redirected APIs to
protector's stub. You must use WannabeUIF after fixing Magic IAT jump
(or use any methods) to convert Emulated/Redirected APIs to actual APIs. |
|