Log in

View Full Version : Antidebug


BruceLee
June 2nd, 2004, 06:19
How to avoid int3 or 0CCh antidebug trick?
Help Please!
I try with IsDebuggerPresent but stupid MessageBox "Debugger is detected" appear again!
I renama Olly... nothing!

Please help me!

Pansemuckl
July 3rd, 2004, 06:52
Olly, [ALT-F1], "BP MessageBoxA" (or try MessageBoxIndirectA, ...)
Run [F9] till message appears, step back and look at stack to find
the corresponding call to it. Somewhere around there should be
a debugger check.

Read something on "anti debug tricks" at http://crackslatinos.hispadominio.net/ ("http://crackslatinos.hispadominio.net/")
and try to identify them in your application. NOP em out (0x90) and there you go.

If you like, send me you app and I will have a look at it.