Using the API function CreateFileA to check for the presence of the SoftICE vxd/sys device or its display driver (\\.\SICE, \\.\SIWDEBUG, \\.\SIWVID, \\.\NTICE in Windows NT). Hidden detection can work very well if used in shareware key generation schemes, set a discrete flag and then send the would-be cracker to a routine that requires hours of analysis time for no result, eventually time is money for the best reverse engineers. Bear in mind that the use of these techniques will only add time to a crackers progress if he/she doesn't actually realise the debugger has been detected (use at least 2 techniques to make sure you aren't penalising legitamate users and don't show friendly message boxes like VBox's "Debugger Detected, please remove me screen"). Most of these examples are designed to thwart SoftICE users (virtually all of the existing documents on the web describe tricks which would have been useful in the days ofĭOS Debug/Turbo Debug but are happily traced by SoftICE). Most of the following tricks require implementation in Assembly language, evidently that isn't a problem if you are familiar with in-line ASM coding in your compiler environment (sadly many HLL programmers are not).
The worlds hard-core of crackers are determined, motivated and very resourceful, they might also be situated in places where the the 'money to time' ratio is not necessarily a factor, to think that you can beat them all is absolute folly.
Armadillo, ASProtect, ExeCryptor (these are some of the best) may help to raise the individual knowledge bar required to break your application, yet frequently this is a false economy, at any given time there might be thousands of people attacking generic instances of these protection schemes and the odds are very good that one eventually finds a way through. Copy protection vendors with their real meanings but I'll refrain for now), a few years back there were a glut of sites on the web offering the "ultimate in unbreakable protections", to my knowledge not one remains that hasn't been made to eat its words.
0 kommentar(er)
