Use this tool for fixing Import Elimination, Directly Imports and Shuffled, Disordered, Scattered Imports.

So you can use this tool for changing IAT Base Address and Sorting IATs in New (other) Address.

Tested on:

Armadillo ASProtect Enigma ExeCryptor eXPressor PeSpin RlPack TheMida WinLicense

and any protector with Import Elimination, Directly Imports and Shuffled, Disordered, Scattered Imports.

Notes:

This tool is an Import Fixer (not Import Rebuilder ImpRec etc) and Just work in memory of target process. dont tell me how to use this Tool...if you can not use this Simple Tool plz DRAG IT TO THE RECYCLE BIN ok?

Always first use UIF then Dump target process.

UIF can fix actual APIs, dont use it for fixing Emulated/Redirected APIs to protector's stub.you must use UIF After fixing Magic IAT jump (or use any methods) to convert Emulated/Redirected APIs to Actual APIs.

Samples:

Armadillo : Import Elimination ASProtect : Directly Imports Enigma : Shuffled, Disordered, Scattered Imports ExeCryptor : Scattered Imports in Protector Stub eXPressor : Directly Imports PeSpin : Directly, Shuffled, Disordered, Scattered Imports RlPack : Shuffled, Disordered, Scattered Imports TheMida : Directly Imports WinLicense : Directly Imports