antisofticemain.pas

各种反分析软件的手法,包括(反Dede,反单步跟踪,反SoftICE,Ollydbg,反静态分析,以及程序自身的CRC32效验等,对于初学者有很大的帮助.

unit AntiSoftICEMain;

interface

uses
  Windows, Messages, SysUtils, Variants, Classes, Graphics, Controls, Forms,
  Dialogs, ComCtrls;

type
  TForm1 = class(TForm)
    StatusBar1: TStatusBar;
    procedure FormCreate(Sender: TObject);
  private
    { Private declarations }
  public
    { Public declarations }
  end;

var
  Form1: TForm1;

implementation

{$R *.dfm}

//**********************************************
//利用UnhandledExceptionFilter检测SoftICE
//**********************************************
function AntiSoftICE():Boolean;
var
  ProcAddr:Pointer;
  ICEFlag:Byte;
begin
  ICEFlag:=0;
  ProcAddr:=GetProcAddress(GetModuleHandle('kernel32.dll'),'UnhandledExceptionFilter');
  ICEFlag:=Byte(ProcAddr^);
  if ICEFlag=$CC then
    Result:=True
  else
    Result:=False;
end;

procedure TForm1.FormCreate(Sender: TObject);
begin
  if AntiSoftICE then
    MessageBox(Handle,'发现SoftICE调试器!','提示',MB_OK+MB_ICONINFORMATION)
  else
    MessageBox(Handle,'没有发现SoftICE调试器!','提示',MB_OK+MB_ICONINFORMATION);
end;

end.