心血来潮的，写了个OD插件。先放出来，慢慢更新：）

================
history
================

2005.12.15 v0.11

patch PEB done.
IsDebuggerPresent,ProcessHeap(GetProcessHeap) and NtGlobalFlag are
gets values from PEB to check debugger at the same way, so I patch
for the same way.
After click this item, plugin will alloc a 1024b memory and will not
free it, this thing is happen because the characteristic of OllyDBG,
so, don't worry about it:)

2005.12.14  v0.1

DontChangeDRx done.
DontChangeDRx will set OllyDBG can/or cannot change DRx.

ban ZwSetInformationThread done.
Made the ZwSetInformationThread just 'retn 10'.

ban ZwQueryInformationProcess done.
Make the return value of ZwQueryInformationProcess always be 0.附件:anti-anti.rar

[注意]传递专业知识、拓宽行业人脉——看雪讲师团队等你加入！