how to handle this super annoying anti trace trick

		Exetools > General > General Discussion
how to handle this super annoying anti trace trick

04-11-2007, 07:36

deroko

cr4zyserb

Join Date: Nov 2005

Posts: 217

Rept. Given: 13

Rept. Rcvd 30 Times in 14 Posts

Thanks Given: 7

Thanks Rcvd at 33 Times in 16 Posts

securom IAT protection?
and this will anoy you only with nointrusive tracer, but with r3 or r0 debugger there should be no problem. Trick why seh tracing fails is because KiDispatchException writes context and error code at esp and your data at esp-X is overwriten.

__________________
http://accessroot.com

« Previous Thread | Next Thread »

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is Off HTML code is Off Forum Rules

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
[C++] Simple Anti-Debug trick	Mahmoudnia	Source Code	1	07-17-2022 20:13
Windows Handle Hijacking	TechLord	General Discussion	2	05-15-2017 20:11
Release file lock handle	baatazu	General Discussion	7	06-30-2005 00:22

All times are GMT +8. The time now is 21:26.