- IsDebuggerPresent
- CheckRemoteDebuggerPresent
- CloseHandle(0xDEADC0DE)
- ZwQueryInformationProcess(ProcessDebugObjectHandle), called correctly
- crc32 check on direct syscall
- ZwQueryInformationProcess(ProcessDebugObjectHandle), called with ReturnLength == ProcessInformationClass
imamandacerny / xantidebug Goto Github PK
View Code? Open in Web Editor NEWThis project forked from strivexjun/xantidebug
VMProtect 3.x Anti-debug Method Improved