Exetools  

Go Back   Exetools > General > General Discussion

Notices

 
 
Thread Tools Display Modes
Prev Previous Post   Next Post Next
  #10  
Old 02-25-2005, 13:20
bollygud
 
Posts: n/a
the only thing 'special' i saw with this particular app is that it uses int41 to detect debuggers.

works like this:

mov eax,04F
int 41
cmp ax,0F386
je debugger_detected

and it kills olly in the int41.

so that may be your problem. this is very easy to overcome, obviously, you can just nop these commands and have it flow the way you want.
Reply With Quote
 

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Inline patch or loader for Asprotec 1,24-1.3???? the_beginner General Discussion 22 12-31-2004 02:19
is this possible to vonvert VS .NET DVD Version to CD Version? NoneForce General Discussion 1 03-13-2004 11:51


All times are GMT +8. The time now is 08:15.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )