ANTI静态逆向代码【转自看雪】

#include <windows.h>
#include<stdio.h>
#include<stdafx.h>
//...由于难度增加可以适当在这里加些代码

int APIENTRY WinMain(HINSTANCE hInstance,
                     HINSTANCE hPrevInstance,
                     LPSTR     lpCmdLine,
                     int       nCmdShow)
{
     char* str="hello world\n";
  
     //...这里添加代码,让IDA打开后不能直接看到调用的是MessageBoxA这个函数
  

  (*(int (__cdecl *)(HWND,LPCTSTR,LPCTSTR,UINT))((DWORD)MoveWindow+0x3299E))(0,str,0,0);

   return 0;
}

#include <windows.h>
#include<stdio.h>
#include<stdafx.h>
//...由于难度增加可以适当在这里加些代码

int APIENTRY WinMain(HINSTANCE hInstance,
                     HINSTANCE hPrevInstance,
                     LPSTR     lpCmdLine,
                     int       nCmdShow)
{
     char* str="hello world\n";
  
     //...这里添加代码,让IDA打开后不能直接看到调用的是MessageBoxA这个函数
  
   _asm{
    pushad;
    mov eax,MoveWindow;
    add eax,0x3299E;
    push 0;
    push 0;
    push str;
    push 0;
    call eax;
   }

   return 0;
}

char*str="hello world\n";

  typedef VOID (CALLBACK *MYMSGBOX)(    __in_opt HWND hWnd,
    __in_opt LPCSTR lpText,
    __in_opt LPCSTR lpCaption,
    __in UINT uType);
  char szApiName[] = "\x0MessageBoxA";
  char szLibName[] = "\x0user32.dll";
#define MessageBoxA(a,b,c,d) MYMSGBOX myMsgBox = (MYMSGBOX)GetProcAddress(LoadLibraryA(&szLibName[1]), &szApiName[1]); \
  myMsgBox(a,b,c,d);

  MessageBoxA(0,str,0,0);