Using Thread Local Storage (tls) in Olly

hehe no post count scam
but i thought a seperate post would emphasis it more so here it is

i downloaded the hidedebuggerplugin v 1.22 from here and tried it to see what happens as i anticipated it fails as i stated

to illustrate the point that is having the cake and eating it too
get one of the above debugviewers (i would prefer debugmon from osronline )
run it first
then open ollydbg along with hidedebugplugin and load a debuggee
when you hit systembreakpoint modify NtGlobalFlag to 72
and run the app
you will see ollydbg wont catch any debug strings but debug mon will catch all debug string that are passed

021:37:02.480LDR: Real INIT LIST

121:37:02.5009     C:\WINNT\system32\KERNEL32.dll init routine 77e8c3d8

221:37:02.5007     C:\WINNT\system32\USER32.dll init routine 77e33bb4

321:37:02.5007     C:\WINNT\system32\RPCRT4.DLL init routine 77d43958

421:37:02.5009     C:\WINNT\system32\ADVAPI32.dll init routine 77db87c7

521:37:02.500<LDR: KERNEL32.dll loaded. - Calling init routine at 77e8c3d8

621:37:02.500:LDR: USER32.dll loaded. - Calling init routine at

[JMI]

"Post count spam" applies only to people who appear to be posting to be trying to get to Junior Member status to gain FTP access. Once a user has reached that level, their posts are not viewed as seeking post count, because they no longer need to increase their count, except possibly to get to VIP status.

Regards,

JMI,
you never sleep or do you have robots to check every post and secretly tell you to reply when appropriate
any way thanks for formatting the out put i didnt know how to do it

oops just 50 odd posts to vip staus i should post more posts like this
also i should spend some time exploring the cache i ve not even logged in once though i recieved the email with details

[JMI]

That post was actually made a little after 9:00 a.m. my time. It was the one around 3:30 a.m. that was more problematic.

All I did to improve the format of your "code" section was hit the Edit Button (I can edit anyone's posts, but you can edit your own). It showed the "code" section as a set of text characters with the word "code" (with [ ] around the word) at the start and the word "/code" (again with [ ] around the word) at the end. I then observed where the text should break, put the cursor there and hit the "Enter" key. Sometimes it took two hits of the "Enter" key to make the text move to the next line.

Check it out. Go to your Post with the "Code" and hit the Edit Button and look at what it shows you. You will then see what I saw after the changes.

Regards,