Flag: Tornado! Hurricane!

 Forums >>  IDA Pro  >>  IDA Pro - Function tracing problem

Topic created on: March 8, 2012 12:50 CST by nosonja .

I'm decompiling some application and when I click function tracing button in IDA to enable the trace, I end up here:


ntdll.dll:7C951E13 ntdll_DbgUiRemoteBreakin:
ntdll.dll:7C951E13 push    8
ntdll.dll:7C951E15 push    offset unk_7C951E60
ntdll.dll:7C951E1A call    near ptr unk_7C90E8CB
ntdll.dll:7C951E1F mov     eax, large fs:18h
ntdll.dll:7C951E25 mov     eax, [eax+30h]
ntdll.dll:7C951E28 cmp     byte ptr [eax+2], 0
ntdll.dll:7C951E2C jnz     short loc_7C951E37
ntdll.dll:7C951E2E test    byte_7FFE02D4, 2
ntdll.dll:7C951E35 jz      short loc_7C951E57
ntdll.dll:7C951E37
ntdll.dll:7C951E37 loc_7C951E37:                           ; CODE XREF: ntdll.dll:7C951E2Cj
ntdll.dll:7C951E37 and     dword ptr [ebp-4], 0
ntdll.dll:7C951E3B call    near ptr ntdll_DbgBreakPoint
ntdll.dll:7C951E40 jmp     short loc_7C951E53


Is that some decompiling protection, or is it an IDA issue?

No posts found under this topic.
Note: Registration is required to post to the forums.

There are 29,881 total registered users.


Recently Created Topics
PaiMei stalker modul...
May/19
Attach to program us...
May/13
IDA PRO how to make ...
May/12
FACT: OpenRCE is dead.
May/08
Int 3 anti debug?
May/05
help needed - Beginn...
May/03
Attaching IDA Pro to...
Apr/27
File type
Apr/21
Debugging iphone app...
Apr/15
Attaching
Apr/12


Recent Forum Posts
Ollydbg 2.0 - Plugin...
openrce...
IDA PRO how to make ...
codeinject
FACT: OpenRCE is dead.
codeinject
IDA Resource Viewer ...
r2x64
FACT: OpenRCE is dead.
djnemo
FACT: OpenRCE is dead.
codeinject
FACT: OpenRCE is dead.
pedram
help needed - Beginn...
araujo
Attaching IDA Pro to...
codeinject
Int 3 anti debug?
codeinject


Recent Blog Entries
sweetyss
May/18
Adam Wainwright continues t...

lowpriority
Apr/13
OllyMigrate Plugin for Olly...

everdox
Mar/08
2 anti-trace mechanisms spe...

everdox
Mar/07
Advanced debugging techniques

everdox
Mar/06
Branch tracing and LBR acce...

More ...


Recent Blog Comments
clarisonic on:
Apr/03
New version of Ollydbg!

clarisonic on:
Apr/03
New version of Ollydbg!

trackerx90 on:
Mar/04
SuppressDebugMsg As Anti-De...

coachfactory on:
Feb/25
Portable Executable Format ...

coachfactory on:
Feb/25
A new Anti-Olly trick.

More ...


Imagery
SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit