Rather than merely hooking on IsDebuggerPresent(), and still allowing both SoftICE detection techniques to complete, this method adjusts the relevant register after the wrapper function iTunes.checkForDebuggers() returns, thus preventing a call to Kernel32.ExitProcess(0).
This PyScript will scan the process address space, looking for thelikely location to hook; just after iTunes.checkForDebuggers() returns.
Recommended Comments
Create an account or sign in to comment