how to handle this super annoying anti trace trick

		Exetools > General > General Discussion
how to handle this super annoying anti trace trick

04-09-2007, 17:31

niom

Friend

Join Date: Jul 2004

Posts: 21

Rept. Given: 0

Rept. Rcvd 0 Times in 0 Posts

Thanks Given: 0

Thanks Rcvd at 0 Times in 0 Posts

how to handle this super annoying anti trace trick

hi,

code like

Code:

mov     [esp-4],  8b5f26aa
add     [esp-4],  3ace657b
add     [esp-4],  3ace6533
jmp     [esp-4]

dies when executed while singlestepping for obvious reasons
does anyone has an idea how to make it singlestep proof?

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is Off HTML code is Off Forum Rules

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Windows Handle Hijacking	TechLord	General Discussion	2	05-15-2017 20:11
Release file lock handle	baatazu	General Discussion	7	06-30-2005 00:22
Softice: hwnd -> invalid window handle	dreamershl	General Discussion	2	04-19-2004 09:58

All times are GMT +8. The time now is 22:24.