TLSCatch, An OllyDbg Plugin To Catch TLS Callbacks Easily
 Walied (waleedassar) <waliedassar gmail com> |
Saturday, October 30 2010 21:27.45 CDT |
This plugin simply intercepts any new module loaded into the current process address space, searches it for TLS callbacks, and sets a one-shot breakpoint on every found callback. It lets malware analysts catch any TLS callback in OllyDbg.
Just copy the plugin dll into OllyDbg plugin directory then fire OllyDbg.
Tested on OllyDbg v1.10 on Windows XP and Vista.
Original article here
http://waleedassar.blogspot.com/2010/10/quick-look-at-tls-callbacks.html
Plugin from here.
http://ollytlscatch.googlecode.com/files/TlsCatch.dll
Sorry guys , i don't know where to upload plugins in this forum.
[email protected]
Comments
| Posted: Wednesday, December 31 1969 18:00.00 CST | |