Anti-DebugNET icon indicating copy to clipboard operation
Anti-DebugNET copied to clipboard

AntiDump issue x64

Open bbday opened this issue 2 years ago • 1 comments

Look like there is issue with AntiDump() when i force x64 solution

var dwpeheader = System.Runtime.InteropServices.Marshal.ReadInt32((IntPtr)(base_address.ToInt32() + 0x3C)); Aritmetic overflow

Is it possible to fix this function for x64 runtime? thanks

bbday avatar Oct 19 '22 08:10 bbday

System.Runtime.InteropServices.Marshal.ReadInt32

Yes, well x32 bit address is smaller than x64 address. As you can see the function called is ReadInt32, so try to use ReadInt64 instead.

Mecanik avatar Jan 16 '23 05:01 Mecanik