Log in

View Full Version : IDA Pro and Adobe Acrobat/Reader 5/6/7 breakpoints problems ...


joblack
August 31st, 2010, 12:12
I'm checking out an Adobe Reader/Acrobat plugin (foo.api) and I get the problem that neither normal breakpoints nor hardware breakpoints are working.

I've attached the debugger exception output.

On Adobe Acrobat 9.x IDA Pro breakpoints (hardware and non-hardware) work fine if I pass DBG_CONTROL_* to the application. The unlucky thing is that the plugin doesn't support any Adobe (Reader) higher than 7.

Adobe seems to overwrite the BREAKPOINT exception - any ideas/suggestions how to handle the older Adobe Reader/Acrobat?

FrankRizzo
September 5th, 2010, 20:29
Well, never limit yourself to 1 tool. Try olly, soft-ice, windbg, etc. Also, if you continue to have problems, you might have to find where Adobe is messing with you.

Just had a look at an app that did all sorts of weird things. You just have to find them, and work around them.

Aimless
September 6th, 2010, 01:52
WHAT exactly are you trying to do?

1. Run a Acrobat plugin meant for v7 and which does not run on any other version to FORCE it to run in upper versions?

OR

2. The app runs OK, but you want to register it, crack it, yadda yadda?

Have Phun

joblack
September 8th, 2010, 17:16
Quote:
[Originally Posted by Aimless;87681]WHAT exactly are you trying to do?

1. Run a Acrobat plugin meant for v7 and which does not run on any other version to FORCE it to run in upper versions?

OR

2. The app runs OK, but you want to register it, crack it, yadda yadda?

Have Phun


The app runs okay in Adobe 5 - 7 but my IDA Pro Debugger doesn't react to breakpoints (both hardware and software ones). I want to analyze the plugin to get a deeper understanding what it actually does.

Ollydbg is perfectly fine but is too complicated in that case. IDA Pro is much more conventient and gives you more support.

I don't get it why an earlier version of Adobe doesn't seem to work.

joblack
September 8th, 2010, 17:46
Okay, I got it running. The secret is to use hardware breakpoints and IDA Pro doesn't warn you if you set up too much of them. Might be time to scrap some money and get a new version.

Anyway, thanks for the support.