ProcessDebugPortFlag

How it works

It is possible to retrieve the port number of the debugger for the process using the NtQueryInformationProcess(). There is a documented class ProcessDebugPort, which retrieves a DWORD value equal to 0xFFFFFFFF (decimal -1) if the process is being debugged.

Reference

Anti-Debug Tricks