batman2xp, are you referring to a process which runs another copy of itself and debugs *that*? if so, then you are too late. what you need is to intercept the process creation and zero the debug port so that you can attach your own debugger.
Note: Registration is required to post to the forums.
.
![[+] expand](/imagery/files/soysauce_blueprint.gif){kind=link}