antisofticemain.~pas

来自「各种反分析软件的手法,包括(反Dede,反单步跟踪,反SoftICE,Ollyd」· ~PAS 代码 · 共 59 行

unit AntiSoftICEMain;

interface

uses
  Windows, Messages, SysUtils, Variants, Classes, Graphics, Controls, Forms,
  Dialogs, ComCtrls;

type
  TForm1 = class(TForm)
    StatusBar1: TStatusBar;
    procedure FormCreate(Sender: TObject);
  private
    { Private declarations }
  public
    { Public declarations }
  end;

var
  Form1: TForm1;

implementation

{$R *.dfm}

//*******************************************
//利用INT41子类型来检测SoftICE
//*******************************************
function AntiSoftICE():Boolean;
var
  AntiFlag:Integer;
begin
  AntiFlag:=0;
  try
    asm
      mov eax,$4F
      int $41 //INT41
      cmp ax,$0F386
      jz @Re
      @Re:
        mov AntiFlag,1
    end;
    if AntiFlag=1 then
      Result:=True;
  except
    Result:=False;
  end;
end;

procedure TForm1.FormCreate(Sender: TObject);
begin
  if AntiSoftICE then
    MessageBox(Handle,'发现SoftICE调试器!','提示',MB_OK+MB_ICONINFORMATION)
  else
    MessageBox(Handle,'没有发现SoftICE调试器!','提示',MB_OK+MB_ICONINFORMATION);
end;

end.