Skip to content

Instantly share code, notes, and snippets.

@spnow
Forked from evernick/Registry.cpp
Created August 1, 2017 23:13
Show Gist options
  • Save spnow/6281017345c8ac14bbbbe410e9c49678 to your computer and use it in GitHub Desktop.
Save spnow/6281017345c8ac14bbbbe410e9c49678 to your computer and use it in GitHub Desktop.
#include <windows.h>
#include <stdio.h>
BOOL anti_debug()
{
BOOL result = FALSE;
HKEY hKey;
char lpData[256];
DWORD lpSize = sizeof(lpData);
RegOpenKeyEx(HKEY_LOCAL_MACHINE,
"SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AeDebug",
0, KEY_QUERY_VALUE, &hKey);
RegQueryValueEx(hKey, "Debugger", NULL, NULL, (LPBYTE)&lpData, &lpSize);
strlwr(lpData);
if(strstr(lpData, "ollydbg") || strstr(lpData, "windbg") ||
strstr(lpData, "ImmunityDebugger") || strstr(lpData, "ida"))
result = TRUE;
return result;
}
int main(int argc, char **argv)
{
if(anti_debug())
printf("Debugger Detected\n");
else
printf("No Debugger...\n");
return 0;
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment