skip to main
|
skip to sidebar
ryanlrussell
Wednesday, August 16, 2006
In IDA Pro, to defeat a simple IsDebuggerPresent check
Set a breakpoint at the top of the start function
F9 to run the program
Shift-F2 to open the IDC window
PatchByte ( EBX+2, 0);
Newer Posts
Home
Followers
Full RSS Feed
Security RSS Feed
Contributors
Ryan Russell
Unknown
Blog Archive
►
2011
(1)
►
October
(1)
►
2010
(2)
►
April
(1)
►
March
(1)
►
2009
(5)
►
November
(2)
►
May
(2)
►
April
(1)
►
2008
(10)
►
August
(1)
►
July
(3)
►
June
(1)
►
May
(3)
►
March
(2)
►
2007
(38)
►
December
(2)
►
October
(1)
►
July
(4)
►
June
(4)
►
May
(2)
►
April
(1)
►
March
(4)
►
February
(12)
►
January
(8)
▼
2006
(23)
►
December
(3)
►
November
(6)
►
October
(6)
►
September
(7)
▼
August
(1)
In IDA Pro, to defeat a simple IsDebuggerPresent c...
Labels
books
(5)
cloudbaiting
(1)
egoblogging
(22)
IT
(1)
locks
(1)
malware
(3)
OS X sucks
(7)
pneumopunk
(2)
RE
(6)
review
(1)
secphil
(30)
security
(9)
spare brain
(5)
stories
(10)
v12n
(2)
work
(6)
Links
Syngress
Pedram Amini
Matasano
Halvar Flake
Emergent Chaos
Jason Scott