View Single Post
  #12  
Old 09-06-2004, 16:46
tr1stan
 
Posts: n/a
hi guys,

for cracking SF in a classic way with the help of Softice or something like that
it's nearly impossible, because SF not only redirects int1/int3 handlers to fool
tracers and debuggers...they use those handlers as part of the protection itself,
like handling the VM and that stuff....

I'm working on a SF protected program right now and it's really a pain though i
have managed to do a clean dump and rebuild nearly all imports...but the
nightmare beginns with the use of the VM "crypted" codeparts

t.
Reply With Quote