|
ModulesBaseFixer
ModulesBaseFixer:
The purpose of this tool if fixing dlls (modules) bases stored as dword in selected PE file.
The usage of this tool is quite rare, I only need it on an Obsidium target.
How to use:
1. Select process, click on Attach button; now modules bases will be shown
2. Browse for "To Fix Filename", an PE file exe/dll and click on Detect button
this will select between GetModuleHandleA and GetModuleHandleW radio boxes and will get import thunk rva of GetModuleHandleA/GetModuleHandleW
3. The final step is pressing "Append to PE" button; new file will be created called originalName+"_mbases"+originalextension.
|