Help/Support Disabling/Bypassing an anti-debugger

jayvee · March 18, 2015

What to NOP to disable the anti-debugger?

__text:0073F498 STR R1, [sP,#0x1FC]

__text:0073F49A STR R5, [sP,#0x1C]

__text:0073F49C STR R0, [sP,#0x200]

__text:0073F49E BLX _getpid

__text:0073F4A2 STR R0, [sP,#0x204]

__text:0073F4A4 MOV.W R0, #0x1EC

__text:0073F4A8 STR R0, [sP,#8]

__text:0073F4AA ADD R0, SP, #0x1F8

__text:0073F4AC ADD R2, SP, #0xC

__text:0073F4AE ADD R3, SP, #8

__text:0073F4B0 MOVS R1, #4

__text:0073F4B2 STR R5, [sP]

__text:0073F4B4 STR R5, [sP,#4]

__text:0073F4B6 BLX _sysctl

__text:0073F4BA CBZ R0, loc_73F4CE

__text:0073F4BC MOV R0, 0x497B3

__text:0073F4C4 ADD R0, PC

__text:0073F4C6 BL _CLSSafeLogToStderr

__text:0073F4CA MOVS R0, #0

Rook · March 18, 2015

Look for this:

MOVS R1, #0x1F

jayvee · March 18, 2015

There is no MOVS R1 #0x1F.

March 18, 2015

Is it gameloft? If its not I made a deb from some code I found on Github that bypasses ptrace and I can PM it to you

Updated March 18, 2015 by Guest

castix · March 18, 2015

On 3/18/2015 at 3:47 PM, shmoo said:
Is it gameloft? If its not I made a deb from some code I found on Github that bypasses ptrace and I can PM it to you

"from some code I found on Github that bypasses ptrace and I can PM it to you" I doubt you're allowed to

Rook · March 18, 2015

On 3/18/2015 at 3:49 PM, castix said:
"from some code I found on Github that bypasses ptrace and I can PM it to you" I doubt you're allowed to

It's open source, right?

castix · March 18, 2015

On 3/18/2015 at 3:51 PM, DiDA said:
It's open source, right?

Open source is not free to take. It's just for people to see what code was used in a program and how to apply some code. You can view it if you need help or don't understand something but it's not allowed to copy code without permissions. All Github repositories are copyrighted if not licensed

jayvee · March 18, 2015

On 3/18/2015 at 3:47 PM, shmoo said:
Is it gameloft? If its not I made a deb from some code I found on Github that bypasses ptrace and I can PM it to you

nope. It is One Piece Treasure Cruise by Bandai

Rook · March 18, 2015

On 3/18/2015 at 3:56 PM, castix said:
Open source is not free to take. It's just for people to see what code was used in a program and how to apply some code. You can view it if you need help or don't understand something but it's not allowed to copy code without permissions. All Github repositories are copyrighted if not licensed

He's sending the GitHub URL so he can compile and use so that's allowed...