Skip to content

GetTickCount used in anti-analysis and anti-debugging technique [enhancement] #108

Description

@hafedh-trimeche

Hello,

Would GetTickCount be replaced by QueryPerformanceCounter to avoid false positive malware detection?

{Returns the number of milliseconds that have elapsed since the system was started.  Note that this wraps back to 0
after 49.7 days.}
function OS_GetMillisecondsSinceStartup: Cardinal;
begin
  Result := Winapi.Windows.GetTickCount;
end;

Best regards.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions