Limee AKA Lamer
August 28th, 2004, 10:04
I trace the anti-debug code as follows,
Is the code at wrong direction?
as if this code will run and run until the
system be crashed!
0040DA3F > PUSHAD
0040DA40 CALL NOTEPAD.0040DA4B
0040DA45 MOV ESP,DWORD PTR SS:[ESP+8]
0040DA49 JMP SHORT NOTEPAD.0040DA65
0040DA4B > PUSH DWORD PTR FS:[0]
0040DA51 MOV DWORD PTR FS:[0],ESP
0040DA57 PUSHFD
0040DA58 OR DWORD PTR SS:[ESP],100
0040DA5F POPFD
0040DA60 CLC
0040DA61 JNB SHORT NOTEPAD.0040DA3F --->
Is the code at wrong direction?
as if this code will run and run until the
system be crashed!
0040DA3F > PUSHAD
0040DA40 CALL NOTEPAD.0040DA4B
0040DA45 MOV ESP,DWORD PTR SS:[ESP+8]
0040DA49 JMP SHORT NOTEPAD.0040DA65
0040DA4B > PUSH DWORD PTR FS:[0]
0040DA51 MOV DWORD PTR FS:[0],ESP
0040DA57 PUSHFD
0040DA58 OR DWORD PTR SS:[ESP],100
0040DA5F POPFD
0040DA60 CLC
0040DA61 JNB SHORT NOTEPAD.0040DA3F --->