IsDebuggerPresent
NtQueryInformationProcess获得PEB
NtGlobalFlag
ThreadHideFromDebugger
windows user mode debugging internals;windows native debugging internals; kernel user-mode debugging support
openrce.org
http://www.reactos.org/
GetForeGroundWindow