Anti-debugging protection of binaries with proxy code execution
    1.
    发明授权
    Anti-debugging protection of binaries with proxy code execution 有权
    使用代理代码执行的二进制文件的防调试保护

    公开(公告)号:US08271803B2

    公开(公告)日:2012-09-18

    申请号:US11754024

    申请日:2007-05-25

    IPC分类号: G06F21/00

    摘要: A first process operating on a computer comprises code to be executed in connection therewith, where the code includes at least one triggering device. A digital license corresponds to the first process and sets forth terms and conditions for operating the first process. A second process operating on the computer proxy-executes code corresponding to each triggering device of the first process on behalf of such first process. The second process includes a selection of options to thwart reverse engineering by a debugger if a debugger is detected. The options include execution by a proxy engine of a re-routed call, crashing the first process, detection ad elimination of a debugger related interrupt a call to an arbitrary function.

    摘要翻译: 在计算机上操作的第一进程包括要与其一起执行的代码,其中代码包括至少一个触发设备。 数字许可证对应于第一个进程,并列出了操作第一个进程的条款和条件。 在计算机代理上操作的第二进程代表第一进程执行对应于第一进程的每个触发装置的代码。 如果检测到调试器,第二个过程包括一些选项来阻止调试器的逆向工程。 选项包括代理引擎执行重新路由呼叫,崩溃第一个进程,检测广告消除调试器相关中断对任意函数的调用。