mistery code in taskman
Page 1 of 1

Author:  seppe [ Fri Sep 25, 2015 10:25 pm ]
Post subject:  mistery code in taskman

The following code is part of fs_execute, present in taskman:

        xor     edx, edx
        cmp     word [6], '02'
        jne     @f
        not     edx
        mov     [ebx+APPDATA.tls_base], edx
. . .

Can anyone explain the purpose of the "cmp word [6], '02'" ?

Author:  hidnplayr [ Fri Sep 25, 2015 10:34 pm ]
Post subject:  Re: mistery code in taskman

It checks if the current applications header is of the "MENUET02" type, and initializes TLS if so.
(Remember, everything below 0x80000000 is application memory)
See this thread for TLS: viewtopic.php?f=1&t=1340

Page 1 of 1 All times are UTC+03:00
Powered by phpBB® Forum Software © phpBB Limited