antitrack.h

通过机器硬件设备加密软件的算法,支持反败为胜跟踪等.

#include <afxwin.h>
#include "Nb30.h"

//反调试
#define AntiStaticAnalyse_1 ReadDate_1
#define AntiStaticAnalyse_2 ReadDate_2
#define PuzzleCode1 ReadCode1
#define PuzzleCode2 ImportantCode2

inline void Anti_SoftICE();
inline void Anti_Spy();
inline void Anti_DeDe();
bool DetectKernelModeDebug();
bool DetectRegMon();
inline void DetectSoftICEwithRegister();

//花指令 
inline void ReadCode1()
{
DWORD a=3,b=0x3757,c=5;
l_no1:
	a=b*c;
	if(c==3)
		return;
	goto l_no3;
l_no2:
	b=a-c*c;
	goto l_no1;
l_no3:
	c=a+b+c;
	a=c=3;
	goto l_no2;
}


inline void ImportantCode2()
{
	char buf[16];
	int a=3,b=0xcdef,c=5;
l_no1:
	memset(buf,a,sizeof(buf));
	a=b*c;
	if(c==3)
		return;
	goto l_no3;
l_no2:
	b=a-c*c;
	memset(buf,b,sizeof(buf));
	goto l_no1;
l_no3:
	c=a+b+c;
	memset(buf,c,sizeof(buf));
	a=c=3;
	goto l_no2;
}

//破坏静态分析,对付w32dasm
inline void ReadDate_1()
{

	__asm {
	    xor		eax,1
		add     eax,2
		jnz		label1
		jz		label1
		int		0E8h
label1:	xor     eax,3
		add     eax,4
        xor     eax,5
	}
}


inline void ReadDate_2()
{
__asm {		
		push	ecx
		xor		ecx,ecx
		jcxz	label
		int 	0AAh
label:	pop		ecx
		}
}