DVRStudioPro terminate Olly maybe a new asprotec version

[asterix]

What packer or protector used in DVRStudioPro?
What PEiD says?

[dyn!o]

mc707: well, both NtQueryInformationProcess and ZwYieldExecution APIs are just kind of toys for "casual" market (like protectors developers). The hardcore ones are still behind the official knowledge

I am talking about anti-debug methods theoretically not possible to skip. The only metod to skip them is to write own software emulator (like VMWare) with wide CPU emulation ability. Debugger detections like XProtector and Starforce have are still toys (althought XP and SF debugger detection doesn't play so important role - even if you deal with it there is significant decompilation work to perform).

Ehh... these are topics for another threads..

Good luck.

[the_beginner]

DVRStudioPro RC04 PEID 0.93 -->Asprotect 2.0 but the Version RC03 can i Debug with olly without problem

the only thing 'special' i saw with this particular app is that it uses int41 to detect debuggers.

works like this:

mov eax,04F
int 41
cmp ax,0F386
je debugger_detected

and it kills olly in the int41.

so that may be your problem. this is very easy to overcome, obviously, you can just nop these commands and have it flow the way you want.

[the_beginner]

hi
thanks but I have found in two case int41 and nop this,the next debugger check is int 68 its very old on this Soft ,can you nop and it's run until RC03 now RC04 not