healiat - IAT recovery tool. basically aimed for Themida
它恢复了打包程序的 IAT 重定向。不恢复代码重定向或被盗字节。
它只处理 IAT 重定向。
对抗 Themida 效果很好。
除了...有时Themida实现自己的LoadLibrary和GetProcAddress，它实际上不是我们应该处理的IAT重定向。
运行 healiat 后使用 ImportREC。
(It recovers packer's IAT Redirection.
doesn't recover code redirection or stolen byte.
it only handles IAT Redirection.
works well against Themida.
except... sometimes Themida implements its own LoadLibrary and GetProcAddress, and it's actually not an IAT Redirection we should handle.
use ImportREC after running healiat.)
页:
[1]