Wednesday, August 16, 2006

In IDA Pro, to defeat a simple IsDebuggerPresent check

  • Set a breakpoint at the top of the start function
  • F9 to run the program
  • Shift-F2 to open the IDC window
  • PatchByte ( EBX+2, 0);