Flag: Tornado! Hurricane!

 Forums >>  IDA Pro  >>  IDA Pro - Function tracing problem

Topic created on: March 8, 2012 12:50 CST by nosonja .

I'm decompiling some application and when I click function tracing button in IDA to enable the trace, I end up here:


ntdll.dll:7C951E13 ntdll_DbgUiRemoteBreakin:
ntdll.dll:7C951E13 push    8
ntdll.dll:7C951E15 push    offset unk_7C951E60
ntdll.dll:7C951E1A call    near ptr unk_7C90E8CB
ntdll.dll:7C951E1F mov     eax, large fs:18h
ntdll.dll:7C951E25 mov     eax, [eax+30h]
ntdll.dll:7C951E28 cmp     byte ptr [eax+2], 0
ntdll.dll:7C951E2C jnz     short loc_7C951E37
ntdll.dll:7C951E2E test    byte_7FFE02D4, 2
ntdll.dll:7C951E35 jz      short loc_7C951E57
ntdll.dll:7C951E37
ntdll.dll:7C951E37 loc_7C951E37:                           ; CODE XREF: ntdll.dll:7C951E2Cj
ntdll.dll:7C951E37 and     dword ptr [ebp-4], 0
ntdll.dll:7C951E3B call    near ptr ntdll_DbgBreakPoint
ntdll.dll:7C951E40 jmp     short loc_7C951E53


Is that some decompiling protection, or is it an IDA issue?

No posts found under this topic.
Note: Registration is required to post to the forums.

There are 30,781 total registered users.


Recently Created Topics
How can I write olly...
Oct/05
Career: Malware Reve...
Sep/30
How to produce separ...
Sep/20
How to decompile a f...
Sep/16
How to trap mouse cl...
Sep/03
Intel pin in loaded ...
Jun/27
Going to do today wi...
Jun/27
how to create delphi...
Jun/27
enabling menu in a s...
Jun/18
How to get the Image...
Jun/17


Recent Forum Posts
New LoadMAP plugin v...
mefisto...
Intel pin in loaded ...
djnemo
OOP_RE tool available?
Bl4ckm4n
OOP_RE tool available?
van7hu
Should binaries be n...
Kolisar
Problem with ollydbg
nullx42
!findtrampoline Immu...
skycrack
looking for a softwa...
raxen
Documenting reversed...
raxen
.orpc section what's...
mbin


Recent Blog Entries
oleavr
Oct/24
Anatomy of a code tracer

hasherezade
Sep/24
IAT Patcher - new tool for ...

oleavr
Aug/27
CryptoShark: code tracer ba...

oleavr
Jun/25
Build a debugger in 5 minutes

oleavr
Apr/17
frida.re 1.2.0 is out, with...

More ...


Recent Blog Comments
pedram on:
Dec/21
frida.github.io: scriptable...

capadleman on:
Jun/19
Using NtCreateThreadEx for ...

newlulu on:
Jun/10
Branch tracing and LBR acce...

newlulu on:
Jun/10
Advanced debugging techniques

newlulu on:
Jun/10
2 anti-trace mechanisms spe...

More ...


Imagery
SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit