[ Back to PECompact order page ]

The enhanced anti-debug loader provides an increased level of protection against reverse engineering through a combination of anti-debugging and anti-dumping techniques. This loader is substantially more effective than is the standard anti-debug loader and is periodically updated and changed.

Since the enhanced anti-debug loader is only used by a handful of companies and is periodically changed, attacking a particular build of the enhanced anti-debug loader specifically is not very rewarding for an author of an automatic unpacking program.

We further guarantee that if  you find a tool that defeats the enhanced anti-debug loader, we'll make our best effort to make sure the next build of the loader is not susceptible to the attack.

FAQ:

How do I use the enhanced anti-debug loader?

You simply specify the loader plug-in in the command line of pec2.exe, or in the GUI settings dialog. We recommend you use it a long with the API redirect plug-in.

How do I download the latest build of the enhanced anti-debug loader?

Just as with other license purchases, the enhanced anti-debug loader is added to your user services account so that you may download all current and future builds to which you are licensed at any time, from any location with internet access.

We are sorry, but bundle packages are no longer available. You must order PECompact and the EAD loader separately on the PECompact purchasing page.

Please contact us at support@bitsum.com if you have any questions or concerns. Thank you for your interest.

 

 


 

 

(c)2006 Bitsum Technologies. All rights reserved.

Methods used by the Enhanced Anti-Debug Loader:

  • Anti-debugger: Anti-soft-ice technique #1.

  • Anti-debugger: Anti-td32 technique #2.

  • Anti-debugger: Anti-app debugger technique #3.

  • Anti-dump: Technique #1 [classified].

  • Anti-dump: Technique #2 [classified].

  • API redirection through API redirect hooks plug-in.

  • Manual imports through fast-import plug-in (bypasses GetProcAddress).

  • Anti-debugger: SEH Entry (standard in all PECompact loaders).

  • Many more...