|
Armadillo440 public unpacked&cracked
这么多年了,你还惦记着。唉! |
|
Armadillo440 public unpacked&cracked
超人最近不正常总是主动发帖! |
|
据可靠消息,VMP有挂的危险,解密器已经快开发完成。
最初由 鸡蛋壳 发布 手工变一下那俄国老的东西就不能用了 |
|
好消息:IceExt登陆SourceForge
能不能把源代码传到这里?thx |
|
hacnho,please come in!!!
sorry, PM is disabled here. |
|
|
|
PE-Armor 最新到哪个版本了?我只有0.75:(
0.75脱壳机多的是,还有人用吗 |
|
unpack it 4
原来是马家庄庄主,久仰久仰 |
|
[求助]tls表里的东西一定先于EP的代码运行吗?
可能hying的TLS处理有问题吧 |
|
|
|
|
|
CSDN谈话更新ing
我日,里面居然有个forgot2000 |
|
Come On! 一起来体验一下TLS CALL的强大吧
这段代码会弹出2个msgbox,乖乖 原来结束的时候也要call back 最后发现要执行三次 PROC_ATTACH THREAD_ATTACH THREAD_DETACH ;这次可能弹不出了 ; 编译模式="CON" INCLUDE INCLUDE\INTRO.INC .DATA TlsIndex DD 0 ShowIndex DB "Tls Index = ", 0 ShowReason DB "Tls Callback Reason = ", 0 .CODE TlsTable: ; RVA = 0x1342 DD 0 DD 0 DD OFFSET TlsIndex DD OFFSET TlsCallbacks DD 0 DD 0 TlsCallbacks: DD OFFSET TLS_CALLBACK DD 0 START: LEA EDX, ShowIndex CALL dump_edx MOV EAX, TlsIndex CALL dump_hexdword CALL dump_crlf PUSH 0 CALL ExitProcess TLS_CALLBACK: LEA EDX, ShowReason CALL dump_edx MOV EAX, [ESP+4*2] CALL dump_hexdword CALL dump_crlf PUSH 0 @pushsz "Huh" @pushsz "I'm Tls Callback" PUSH 0 CALL MessageBoxA RETN 4*3 END START |
|
Come On! 一起来体验一下TLS CALL的强大吧
我是一直不了解TLS,看了个图之后这么理解: 程序用个全局变量保存一个 TlsIndex TlsIndex = TlsAlloc(); 之后每个线程可以用TlsGet/SetValue(TlsIndex)来获得对于线程来说透明的某个值(拗口啊),可以是动态内存的指针等等 最后要TlsFree 如果使用静态Tls譬如在PE Header里有 则指定一个地址固定接受系统给的Index 关于其他域我还不明白,我猜是: 这种情况下TlsGet/SetValue操作的就是 Raw Data Start VA 至 Raw Data End VA 并且 Size of Zero Fill 个00 这种内存块的地址. 万望指教。 |
|
Come On! 一起来体验一下TLS CALL的强大吧
simonzh的例子枪毙掉TlsDirectory也可以运行啊。 从这里看似乎是支持9x Thread Local Storage All threads of a process share its virtual address space. The local variables of a function are unique to each thread that runs the function. However, the static and global variables are shared by all threads in the process. With thread local storage (TLS), you can provide unique data for each thread that the process can access using a global index. One thread allocates the index, which can be used by the other threads to retrieve the unique data associated with the index. The constant TLS_MINIMUM_AVAILABLE defines the minimum number of TLS indexes available in each process. This minimum is guaranteed to be at least 64 for all systems. The limits are as follows: System Limit Windows Server 2003, Windows XP, and Windows 2000 1088 indexes per process Windows Me/98 80 indexes per process Windows NT and Windows 95 64 indexes per process 但是,注意看第2句,好像又是nt系列特有的? 6.7. The .tls Section The .tls section provides direct PE/COFF support for static Thread Local Storage (TLS). TLS is a special storage class supported by Windows NT, in which a data object is not an automatic (stack) variable, yet it is local to each individual thread that runs the code. Thus, each thread can maintain a different value for a variable declared using TLS. |
操作理由
RANk
{{ user_info.golds == '' ? 0 : user_info.golds }}
雪币
{{ experience }}
课程经验
{{ score }}
学习收益
{{study_duration_fmt}}
学习时长
基本信息
荣誉称号:
{{ honorary_title }}
能力排名:
No.{{ rank_num }}
等 级:
LV{{ rank_lv-100 }}
活跃值:
在线值:
浏览人数:{{ visits }}
最近活跃:{{ last_active_time }}
注册时间:{{ user_info.create_date_jsonfmt }}
勋章
兑换勋章
证书
证书查询 >
能力值