- IsDebuggerPresent
- CheckRemoteDebuggerPresent
- CloseHandle(0xDEADC0DE)
- ZwQueryInformationProcess(ProcessDebugObjectHandle), called correctly
- crc32 check on direct syscall
- ZwQueryInformationProcess(ProcessDebugObjectHandle), called with ReturnLength == ProcessInformationClass
forked from strivexjun/XAntiDebug
-
Notifications
You must be signed in to change notification settings - Fork 0
nicelnicel/XAntiDebug
Folders and files
Name | Name | Last commit message | Last commit date | |
---|---|---|---|---|
Repository files navigation
About
VMProtect 3.x Anti-debug Method Improved
Resources
Stars
Watchers
Forks
Releases
No releases published
Packages 0
No packages published
Languages
- C++ 98.8%
- C 1.2%