antisofticemain.~pas

Anti-SoftICE... ..Anti-SoftICE示例 ├──BackDoor...........SoftICE后门指令 ├──Service............判断NTICE

unit AntiSoftICEMain;

interface

uses
  Windows, Messages, SysUtils, Variants, Classes, Graphics, Controls, Forms,
  Dialogs, ComCtrls;

type
  TForm1 = class(TForm)
    StatusBar1: TStatusBar;
    procedure FormCreate(Sender: TObject);
  private
    { Private declarations }
  public
    { Public declarations }
  end;

var
  Form1: TForm1;

implementation

{$R *.dfm}

//****************************************
//利用SoftICE后门指令来检测SoftICE
//****************************************
function AntiSoftICE():Boolean;
var
  TempInt:Integer;
begin
  TempInt:=0;
  try
    asm
      //魔法值FG
      mov si,'FG'
      //魔法值JM
      mov di,'JM'
      int 3
      nop
      jmp @Label
      @Label:
        mov TempInt,1
    end;
    //如果为1则检测到SoftICE
    if TempInt=1 then
      Result:=True;
  except
    Result:=False;
  end;
end;

procedure TForm1.FormCreate(Sender: TObject);
begin
  if AntiSoftICE then
    MessageBox(Handle,'发现SoftICE调试器!','提示',MB_OK+MB_ICONINFORMATION)
  else
    MessageBox(Handle,'没有发现SoftICE调试器!','提示',MB_OK+MB_ICONINFORMATION);
end;

end.