how to handle this super annoying anti trace trick

		Exetools > General > General Discussion
how to handle this super annoying anti trace trick

04-09-2007, 17:31

niom

Friend

Join Date: Jul 2004

Posts: 21

Rept. Given: 0

Rept. Rcvd 0 Times in 0 Posts

Thanks Given: 0

Thanks Rcvd at 0 Times in 0 Posts

how to handle this super annoying anti trace trick

hi,

code like

Code:

mov     [esp-4],  8b5f26aa
add     [esp-4],  3ace657b
add     [esp-4],  3ace6533
jmp     [esp-4]

dies when executed while singlestepping for obvious reasons
does anyone has an idea how to make it singlestep proof?

Thread Tools
Show Printable Version Email this Page
Display Modes
Switch to Linear Mode Switch to Hybrid Mode Threaded Mode

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is Off HTML code is Off Forum Rules

All times are GMT +8. The time now is 00:37.