![]() |
|
#7
|
|||
|
|||
|
Many packers and protectors checks the first bytes of the API functions to decide whether breakpoints, "INT3" (CCh), are placed.
Thefore, you could defeat the API detector by breaking at the next second or third instructions. |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| ASPR, ARMA question | sgdt | General Discussion | 3 | 04-09-2006 03:38 |
| About Arma | hobgoblin | General Discussion | 1 | 02-02-2004 19:53 |