Anti-Debugging

Test for Anti-Debugging

Method list

• Code/BeingDebugged.cpp
• Code/CheckRemoteDebuggerPresent.cpp
• Code/FindWindow.cpp
• Code/GetSystemTime.cpp
• Code/GetTickCount.cpp
• Code/Hardware_BreakPoint_GetThreadContext.cpp
• Code/Harware_Breakpoint_SEH.cpp
• Code/INT2D.cpp
• Code/INT3.cpp
• Code/IsDebuggerPresent.cpp
• Code/Magic_Number.cpp
• Code/NtGlobalFlag.cpp
• Code/NtQueryInformationProcess_ProcessDebugFlags.cpp
• Code/NtQueryInformationProcess_ProcessDebugObjectHandle.cpp
• Code/NtQueryInformationProcess_ProcessDebugPort.cpp
• Code/NtQueryPerformanceCounter.cpp
• Code/NtSetInformationThread.cpp
• Code/Ollydbg_static.cpp
• Code/OutputDebugString.cpp
• Code/OutputDebugStringBug.cpp
• Code/ParentProcess.cpp
• Code/ProcessHeap.cpp
• Code/RDTSC.cpp
• Code/REGISTRY.cpp
• Code/ReadTEB.cpp
• Code/SetUnhandledExceptionFilter.cpp
• Code/SingleStep.cpp
• Code/timeGetTime.cpp
• Code/Self-Debugging.cpp
• Code/Memory_BreakPoints.cpp
• Code/Prefix.cpp

References

1. https://www.codeproject.com/Articles/30815/An-Anti-Reverse-Engineering-Guide#DebugObjectHandle
2. http://ruinick.tistory.com/category/Reversing/Anti%20Debugging