检测INT3 软断点

“INT3”断点指令的机器码是 “0xcch”

检测思路,取函数地址,判断第一个字节是不是 “CCh”

BYTE bFirst = 0;
ProcAddres = GetProcAddress(LoadLibrary("user32.dll","MessageBox"));
bFirst = *((BYTE*)ProcAddress);
if(bFirst == 0xCC)
{
    return TRUE;   
}
原文地址:https://www.cnblogs.com/nightnine/p/5223605.html