-
-
[转帖]healiat - IAT recovery tool. basically aimed for Themida
-
发表于: 2012-10-4 20:02
-
healiat - IAT recovery tool. basically aimed for Themida
dc7K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3y4G2k6r3g2Q4x3X3g2Y4L8$3!0Y4L8r3g2Q4x3X3g2U0L8$3#2Q4x3V1k6H3i4K6u0r3K9r3g2S2L8r3W2S2N6q4)9J5c8R3`.`.
It recovers packer's IAT Redirection.
doesn't recover code redirection or stolen byte.
it only handles IAT Redirection.
works well against Themida.
except... sometimes Themida implements its own LoadLibrary and GetProcAddress, and it's actually not an IAT Redirection we should handle.
use ImportREC after running healiat.
[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课
|
|
|---|---|
|
|
_a9aK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3g2^5k6h3I4S2j5W2)9J5k6i4u0#2i4K6u0r3k6W2)9J5c8X3W2F1k6r3g2^5i4K6u0W2M7r3S2H3i4K6y4r3j5h3y4@1K9h3!0F1i4K6y4p5N6Y4c8Z5M7X3g2S2k6q4)9J5y4X3k6G2M7Y4g2E0i4K6y4p5x3#2)9J5y4Y4c8G2M7r3W2U0i4K6y4p5x3U0l9@1x3o6b7`.
healIat.rar 
|
|
|
支持，，，
|
