Skip to content
 
 

Repository files navigation

VMProtect 3.x Anti-debug Method Improved

Quick summary:

  • IsDebuggerPresent
  • CheckRemoteDebuggerPresent
  • CloseHandle(0xDEADC0DE)
  • ZwQueryInformationProcess(ProcessDebugObjectHandle), called correctly
  • crc32 check on direct syscall
  • ZwQueryInformationProcess(ProcessDebugObjectHandle), called with ReturnLength == ProcessInformationClass

About

VMProtect 3.x Anti-debug Method Improved

Resources

Stars

0 stars

Watchers

0 watching

Forks

Releases

Packages

Contributors

Languages