SDProtector Pro 1.12 - anti debug reference

Monday, July 31 2006 @ 07:06 PM CEST

Contributed by: haggar

Level : advanced

----------------------------------------------------------------
SDProtector Pro 1.12 - anti debug reference
----------------------------------------------------------------



SDProtector is nice protector with tons of anti-debug tricks. It is very hard to run protected target within debugger. Tutorial will try to show most of those tricks. Target is SDProtector Pro 1.12 itself. Tools that are used in tutorial are usuall unpacking tools (PEiD, olly, ImpREC, LordPE, hex editor) but also, this tutorial requires that you have Windows XP operating system.

This is second version of tutorial, an updated one.

It covers probably all anti-debug tricks, explains how Olly is detected, encrypted code and embedded protection.

Because tutorial is pretty long, it is available for download in rich text format. The archive itself is very small. Enjoy ;)

http://www.reversing.be/binaries/articles/20060731190327161.rar

1 comments



http://www.reversing.be/article.php?story=20060731190606456