|
Jeez, that's crap... What you do when you have no choice on the platform for reversing ?
So I was able to see the ring3 hooks with PC_Hunter, it's only ntdll.DbgUiRemoteBreakin. There is no ring0 hook (oreans driver not loaded). When I restore the ring3 hooks and then attach my debugger it's working. But when starting a "secure" function, then debugee does nothing.
Last edited by dummys; 10-19-2017 at 17:02.
|