Quote
Originally Posted by SunBeam
Your best protection would be your own personal library with to-be-written data and mutation of code. Hook game functions like so:
game.exe+0xoffset:
jmp [dll_function]
dll_function:
{mutated_code_here} // Themida or VMProtect
ret
Notice I said mutated and not virtualized. No need for crappy VMs..
Hmm i dont quite understand that =/
Well currently im using:
- Anti-Breakpoints (int3 and hardware)
- Check Debug Flags using NtQueryInformationProcess
- Checking Debugger using int2 (by setting up SEH? - not 100% sure on how that works)
- Few Anti-Debugging API's e.g. CheckRemoteDebuggerPresent() etc
Is it worth taking a look into your suggestion?