![]() |
eXeL@B —› Протекторы —› OllyDBG 9 in 1 Plugin For themida1.9.5 |
Посл.ответ | Сообщение |
|
Создано: 28 октября 2007 13:14 · Личное сообщение · #1 еще одна сборка для фимки OllyDBG 9 in 1 Plugin For themida1.9.5 Hide OllyDBG Plugin V1.02 Functions: 1.Hide IsDebuggerPresent 2.Hide NtGlobalFlag 3.Hide ProcessHeapFlag 4.Patch ZwQueryInformationProcess (==patch UnhandledExceptionFilter) 5.Patch ZwSetInformationThread 6.Patch CheckRemoteDebuggerPresent 7.Patch OutputDebugStringA 8.Anti heap-checking (For themida1.9.5.0) V1.02: ! Fixed the bug of patching ZwSetInformationThread (For themida 1.9.5.0) + ADD heap-checking. rapidshare.com/files/65716863/O_ll_y_Dbg_modify_for_themida1.9.5.EXE ![]() |
|
Создано: 28 октября 2007 13:21 · Личное сообщение · #2 |
|
Создано: 28 октября 2007 13:22 · Поправил: Hellspawn · Личное сообщение · #3 |
|
Создано: 28 октября 2007 13:40 · Личное сообщение · #4 Hellspawn Может типа этого Windows 2000 Heap Checking As an application starts under a debugger, Windows 2000 turns on the operating system debug heap checking. This heap isn't the C run-time library debug heap; it's the Windows 2000 heap code for those heaps created with the HeapCreate API function. The C run-time library heap is a separate entity, and we'll examine it in Chapter 15 . Because processes use the Windows 2000 heaps extensively, you might see information related to heaps in your normal operation, which is why it's important to cover them here. If you attach a debugger to your application rather than start your application under the debugger, you won't activate the Windows 2000 debug heap checking. With the Windows 2000 debug heap checking turned on, your application will run slightly slower because the Windows 2000 debug heap checking will validate the heap when your application calls HeapFree. Listing 4-1 is a sample program that corrupts memory. When you run the code in Listing 4-1 under a debugger, you'll see that it calls DebugBreak twice on the first HeapFree. Additionally, you'll see output such as the following that shows what was wrong. If you run the program outside the debugger, it runs to completion without reporting any problems. ![]() |
|
Создано: 28 октября 2007 13:49 · Личное сообщение · #5 |
|
Создано: 28 октября 2007 14:18 · Личное сообщение · #6 |
![]() |
eXeL@B —› Протекторы —› OllyDBG 9 in 1 Plugin For themida1.9.5 |