首页
社区
课程
招聘
猛!原来THINSTALL是如此隐藏IAT的。
发表于: 2005-2-5 15:19 4684

猛!原来THINSTALL是如此隐藏IAT的。

2005-2-5 15:19
4684
External Module Loading
Every program loaded by Windows will use some external DLLs. You can find a list of DLLs that were loaded into your process by running your application under a debugger such Microsoft Visual Studio. In the Debug Window for Visual Studio, you'll see output similar to the output below. Each of the DLLs listed below are loaded by the operating system rather than Thinstall. When a DLL is loaded by Thinstall it will not appear in the debug window of a debugger.

Improving Security
By not allowing external DLLs access to your internal files, you greatly improve security. For best security, no external DLLs should be loaded or modified.

用这个功能可以实现 When a DLL is loaded by Thinstall it will not appear in the debug window of a debugger.

这样搞的话,OD看不到任何DLL的调用了,我看在破解时下正确的断点都有困难,不过此功能我还不是很清楚怎么用,所以无法作出这样的UNPACKME给各位研究看。

[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课

收藏
免费 0
支持
分享
最新回复 (1)
雪    币: 6075
活跃值: (2236)
能力值: (RANK:1060 )
在线值:
发帖
回帖
粉丝
2
MyLoadLibraryA
2005-2-5 15:44
0
游客
登录 | 注册 方可回帖
返回
//