反调试 —— 时间

#include <windows.h>
#include <iostream>
#include <time.h>
using namespace std;

VOID isDebuger() {
    
    
    
    time_t Tbefore = time(0);
    time_t Tafter = time(0);

    while (1) {
    
    
        Tafter = time(0);
        if (Tafter - Tbefore > 5) {
    
    
            cout << "found Debugger!" << endl;
            break;
        }
        Tbefore = Tafter;
    }

    return;
}


int main()
{
    
    
	// 卡死超过 5 秒则判定为被调试状态
    isDebuger();

    getchar();
    return 0;
}