13th December 2008, 07:06
|
#7
| Link
|
Registered User
Join Date: Nov 2005
Posts: 497
|
Quote:
Originally Posted by schweinsz
What is your anti-virus software? I use the McAfee and it never report virus. I have used some the self-modified code, junk code and code metmorphic to protect the software.
For example,
#define pushSrcDstAssign {__asm push dst __asm push src __asm push ptkn}
#define emitJunkByte4(a, b, c, d) { __asm _emit a __asm _emit b \
__asm _emit c __asm _emit d}
void assign_u32_adjst(PVOID dst, PVOID src)
{
u32 token = 1, *ptkn = &token;
if((unsigned int)dst > 0x100) goto pushdsttEd;
emitJunkByte4(0x80, 0xe8, 0xcc, 0xd4)
pushdsttEd:
pushSrcDstAssign
if((unsigned int)src < 0x80000000)
goto popdsttEd;
emitJunkByte4(0x78, 0x28, 0x34, 0x6e)
popdsttEd:
__asm int 2dh
__asm add esp, 12
}
|
Besides, the self-generated code is generated on the stack and then it is executed.
|
|
|