![]() |
|
|
|
#1
|
||||
|
||||
|
Take a look at the TLS callback, used in Execryptor and some crackmes, maybe this trick can help.
|
|
#2
|
||||
|
||||
|
the TLS is meant for this.
Try the attached example code (C++), Anyway consider that the TLS is not the only option, the same result is obtained putting your code into the DllMain of a dll added to the import table. The Dll is loaded by the system loader and the import table resolved. The DllMain of each dll is called at this stage. This latter approach requires an external dll anyway, but a solution to this is to add an export to your own program and adding itself to the export table doing a circular reference to itself.
__________________
Ŝħůb-Ňìĝùŕřaŧħ ₪) There are only 10 types of people in the world: Those who understand binary, and those who don't http://www.accessroot.com |
|
#3
|
|||
|
|||
|
if u need here's tlscallback in asm..
|
![]() |
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Code snippet for Base34 Encoding | TempoMat | General Discussion | 11 | 03-29-2020 17:58 |
| Code timing snippet | Git | Developer Section | 5 | 01-05-2018 02:05 |
| Load and Execute unsigned code into kernel in Windows 10x64 | TechLord | General Discussion | 1 | 03-12-2017 16:30 |
| Any ideas about executing phpinfo() in this code snippet | XnHandt | General Discussion | 0 | 12-28-2012 00:46 |