Hmily 发表于 2012-10-7 12:45

healiat - IAT recovery tool. basically aimed for Themida

healiat - IAT recovery tool. basically aimed for Themida

http://code.google.com/p/healiat/
It recovers packer's IAT Redirection.
doesn't recover code redirection or stolen byte.
it only handles IAT Redirection.
works well against Themida.
except... sometimes Themida implements its own LoadLibrary and GetProcAddress, and it's actually not an IAT Redirection we should handle.
use ImportREC after running healiat.

1354669803 发表于 2012-10-7 13:41

H大最近好活跃啊

boxinbinge 发表于 2013-9-27 20:13

fix IAT?i was try to use your tool on win7,it did not work,when i input the APP ID,it exited.why?
页: [1]
查看完整版本: healiat - IAT recovery tool. basically aimed for Themida