Timeline for Weird anti-debugging mechanism
Current License: CC BY-SA 4.0
6 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Feb 5, 2023 at 19:24 | comment | added | peter ferrie | If attaching the debugger triggers a crash soon afterwards, it's likely that the debugger is being detected and that the crash is intentional, and possibly this code is executed only in that case. | |
| Jan 29, 2023 at 20:26 | comment | added | blabb | iirc thevfirst 64 k 0 to 0c10000 is not mapoed in any process va accessing ds:[0] will result in 0xc0000005 so you may need yo find the veh handler or seh hsndler and look at it jmp eac slso will point to null so this is dead end | |
| Jan 28, 2023 at 23:04 | history | edited | millionmilesaway | CC BY-SA 4.0 |
added 271 characters in body
|
| Jan 28, 2023 at 16:25 | history | edited | millionmilesaway | CC BY-SA 4.0 |
added 186 characters in body
|
| S Jan 28, 2023 at 15:37 | review | First questions | |||
| Jan 29, 2023 at 15:37 | |||||
| S Jan 28, 2023 at 15:37 | history | asked | millionmilesaway | CC BY-SA 4.0 |