x64 and anti-debugging

[arlequim]

Originally Posted by ahmadmansoor

will be tested ...
Thanks arlequim

I see you are really interested on this subject, here is a little tricks for OllyDbg 1.10:

;bye OllyDbg 1.10 :))
.data
byeolly qword -1
word 403Dh
.code
start:
fld tbyte ptr ds:[byeolly] 
end start

Dunno if it works, let me know. Bye!

[arlequim]

Here is another good trick with DebugActiveProcess. Example in attachment

[Fyyre]

This code is intended to crash Ollydbg, or cause a silent exit ?

-Fyyre

Originally Posted by arlequim

I see you are really interested on this subject, here is a little tricks for OllyDbg 1.10:

;bye OllyDbg 1.10 :))
.data
byeolly qword -1
word 403Dh
.code
start:
fld tbyte ptr ds:[byeolly] 
end start

Dunno if it works, let me know. Bye!

[arlequim]

Originally Posted by Fyyre

This code is intended to crash Ollydbg, or cause a silent exit ?

-Fyyre

Unfortunately i can't reply you atm, try yourself as it ain't dangerous code...
If i gather other anti debug codes, i will post then on this thread, be sure. Bye!