; INFO: Anti-Debug "Hello World" :-) format PE GUI 4.0 at 0x400000 include 'win32a.inc' section '.text' code readable executable invoke IsDebuggerPresent cmp eax, 1 je MSG_FOUND MSG_OK: invoke MessageBoxA, 0, message_ok ,message_caption, MB_OK+MB_ICONINFORMATION jmp EXIT MSG_FOUND: invoke MessageBoxA, 0, message_found,message_caption, MB_OK+MB_ICONINFORMATION EXIT: ret section '.data' readable message_caption db 'MSG',0 message_ok db 'OK',0 message_found db 'Debugger found!',0 section '.idata' import data readable writeable library \ kernel32,'KERNEL32.DLL',\ user32 ,'USER32.DLL' import kernel32,\ IsDebuggerPresent ,'IsDebuggerPresent' import user32,\ MessageBoxA ,'MessageBoxA' ;section '.reloc' fixups data readable discardable