首页
社区
课程
招聘
猛!原来THINSTALL是如此隐藏IAT的。
发表于: 2005-2-5 15:19 4801

猛!原来THINSTALL是如此隐藏IAT的。

2005-2-5 15:19
4801
External Module Loading
Every program loaded by Windows will use some external DLLs. You can find a list of DLLs that were loaded into your process by running your application under a debugger such Microsoft Visual Studio. In the Debug Window for Visual Studio, you'll see output similar to the output below. Each of the DLLs listed below are loaded by the operating system rather than Thinstall. When a DLL is loaded by Thinstall it will not appear in the debug window of a debugger.

Improving Security
By not allowing external DLLs access to your internal files, you greatly improve security. For best security, no external DLLs should be loaded or modified.

用这个功能可以实现 When a DLL is loaded by Thinstall it will not appear in the debug window of a debugger.

这样搞的话,OD看不到任何DLL的调用了,我看在破解时下正确的断点都有困难,不过此功能我还不是很清楚怎么用,所以无法作出这样的UNPACKME给各位研究看。

[培训]科锐逆向工程师培训第53期2025年7月8日开班!

收藏
免费 0
支持
分享
最新回复 (1)
雪    币: 6075
活跃值: (2236)
能力值: (RANK:1060 )
在线值:
发帖
回帖
粉丝
2
MyLoadLibraryA
2005-2-5 15:44
0
游客
登录 | 注册 方可回帖
返回