Cheat Engine

Stylo

Hi,
I bumped into that crackme that uses few anti debugging & obfuscation tricks that some of them i cant really get . .
it uses int 1 somewhere in the code, and when I step it, the debugger won't continue anymore, how come?
and one other thing, is that I think it uses packing or something, because after a while I see that part where no assembly commands are available ( just the opcodes )
as shown at pic.
Can any of you explain that please?

atom0s · Posted: Sat Aug 06, 2011 2:12 pm Post subject:

Could be due to stolen bytes.

Check out this page for some common tricks:
http://www.codeproject.com/KB/security/AntiReverseEngineering.aspx

As for the Int1, check this article out:
http://vx.netlux.org/lib/static/textfiles.com/virus/adebgtut.txt

You can find a few others that explain how to deal with int1's in specific circumstances as well via Google.

If the file is packed with anything specific, you can check out Tuts4You for specific unpacker tutorials as well.
http://tuts4you.com/download.php