Log in

View Full Version : How to debbug a program that have antidebugging routines


Cyph8r
June 3rd, 2005, 17:09
i/m trying to debbug a program but it crashes before start and i can do nothing can anybody help me

joe
June 3rd, 2005, 17:54
Search for ExitProcess & then jumps to it.

joe
June 4th, 2005, 07:15
Or try to use IsDebuggerPresent

oep
June 13th, 2005, 06:12
Hi, joe, I have the same question, But the program has detected OD, SOFTICE, ICEXT, REGMONE and so on.
And I don't know HOW the program examined the above list, Then HOW can I do then?

joe
June 13th, 2005, 12:15
IsDebuggerPresent can help with some protection, but protections are in progress too. First of all, if it not works, You must detect protection system (FrogsICE can detect some). Then to read many tutorials about protections (for example http://woodmann.com/crackz/).
("http://woodmann.com/crackz/).
")
It's possible to find in the net some CrackMe with different sollution.
If I try to debugge program with protection I search for diferent behaviour (exit, warnings, ...), it can tell You what You can do.

Bob
June 20th, 2005, 13:48
If it crashes before loading, try setting the TLS index to 0..
you can use LordPE to do this easily..