A Windows executable (PE) loader (x86 and x64) with full TLS (Thread Local Storage) support (manual mapper)
文章讨论了手动映射器在处理TLS时的常见问题,并提出了一种改进方案以支持更复杂的TLS初始化需求,如Rust二进制文件。该方案通过README文档和示例应用进行了说明和验证。 2025-6-27 07:24:27 Author: www.reddit.com(查看原文) 阅读量:33 收藏

Many implementations of PE loaders (manual mappers) struggle with proper TLS (Thread Local Storage) support. A common but often insufficient approach is to simply iterate over the TLS callbacks and invoke them with the DLL_PROCESS_ATTACH parameter. While this may work for some executables, it is inadequate for Rust binaries and other applications with more complex TLS initialization requirements.

My manual mapper addresses this issue. A write-up of the implementation and concept is available in the README, along with a small sample application that serves as a proof of concept.


文章来源: https://www.reddit.com/r/ReverseEngineering/comments/1llnrjx/a_windows_executable_pe_loader_x86_and_x64_with/
如有侵权请联系:admin#unsafe.sh