Simple trick to hide IDA debugger

Quite often IDA users ask for a plugin or feature to hide the debugger from the application. In fact there are many anti-debugging tricks and each of them requires an appropriate reaction from the debugger, let’s start with something simple: we will make the IsDebuggerPresent function call always return zero.

Several files in one IDB, part 4

Final method of loading several files into a database

TLS callbacks

I promised to tell you about the TLS callbacks. Here is the discussion.

Several files in one IDB, part 3

The third method to create a database with several PE files.

Several files in one IDB, part 2

The second method to create a database with several PE files.

Several files in one IDB

IDA Pro can load one PE file into a database and analyze it. Some users assume this is the maximum. Let’s take a closer look at the situation…