What tricks can be used to prevent or hinder debugging?
Examples:
IsDebuggerPresent
API on Windows- Exception handlers used for program flow.
GetTickCount
/rdtsc
checks.
Are there any good resources on this kind of thing?
What tricks can be used to prevent or hinder debugging?
Examples:
IsDebuggerPresent
API on WindowsGetTickCount
/ rdtsc
checks.Are there any good resources on this kind of thing?
You could begin looking at Symantec: http://www.symantec.com/connect/articles/windows-anti-debug-reference
And there is a question in Stackoverflow about anti-debugging tricks.