#include <stdio.h>
#include <shlwapi.h>
#include "PEInfo.h"
#pragma comment(lib,"shlwapi")
 typedef NTSYSAPI NTSTATUS (NTAPI *ZWQUERYSYSTEMINFORMATION)(   
   IN ULONG SystemInformationClass,   
    IN PVOID SystemInformation,   
  IN ULONG SystemInformationLength,   
    OUT PULONG ReturnLength);  
DWORD OldProtect=0;
DWORD NewProtect=0;

typedef struct _SYSTEM_HANDLE_INFORMATION 
{
	ULONG ProcessId;
	UCHAR ObjectTypeNumber;
	UCHAR Flags;
	USHORT Handle;
	PVOID Object;
	ACCESS_MASK GrantedAccess;
}SYSTEM_HANDLE_INFORMATION, *PSYSTEM_HANDLE_INFORMATION;

typedef struct _SYSTEM_HANDLE_INFORMATION_EX 
{
	ULONG NumberOfHandles;
	SYSTEM_HANDLE_INFORMATION Information[1];
}SYSTEM_HANDLE_INFORMATION_EX, *PSYSTEM_HANDLE_INFORMATION_EX;

#define NT_SUCCESS(Status) (((NTSTATUS)(Status)) >= 0) 

	void KillPeHeader()
	{
		char *pBaseAddr = (char*)GetModuleHandle(NULL);
		VirtualProtect(pBaseAddr, 0x1000,PAGE_READWRITE, &OldProtect);
		ZeroMemory(pBaseAddr, 0x1000);
		VirtualProtect(pBaseAddr, 0x1000,PAGE_NOACCESS, &NewProtect);
	}
	//anti debug
	bool KillDebugHandle()
	{
		ULONG* pHandleInfor = NULL;
		NTSTATUS ntStatus;
		ZWQUERYSYSTEMINFORMATION ZwQuerySystemInformation = NULL;

		ULONG ulSize = 0x4000;
		HMODULE hHanlde = GetModuleHandle(L"ntdll.dll");
		if(NULL == hHanlde) return false;
		ZwQuerySystemInformation = (ZWQUERYSYSTEMINFORMATION)GetProcAddress(hHanlde, "ZwQuerySystemInformation");
		if(NULL == ZwQuerySystemInformation) return false;
		do
		{
			pHandleInfor = (ULONG*)malloc(ulSize);
			if(NULL == pHandleInfor) return false;
			ntStatus = ZwQuerySystemInformation(16,pHandleInfor,ulSize,NULL);
			if(!NT_SUCCESS(ntStatus))
			{
				free(pHandleInfor);
				ulSize = ulSize * 2;
				if(ulSize > 0x4000000) return false;
			}
		}while(!NT_SUCCESS(ntStatus));
		PSYSTEM_HANDLE_INFORMATION_EX Handles = (PSYSTEM_HANDLE_INFORMATION_EX)pHandleInfor;
		if(NULL == Handles) return false;
		for(ULONG i = 0; i < Handles->NumberOfHandles; i++)
		{
			if(GetCurrentProcessId() != Handles->Information[i].ProcessId)
			{
				if(Handles->Information[i].ObjectTypeNumber == 0x8) // Handle Type "DebugObject"
				{
					MessageBox(GetActiveWindow(),L"run debugger",L"run debugger",MB_OK);
					CloseHandle((HANDLE)Handles->Information[i].Handle);
					break;
				}
			}
		}
		free(Handles);
		return true;
	}





int main()

{
KillDebugHandle();
   
      return 0;
} 

- 对海风大侠很尊敬,没别的意思,请不要介意.
[CODE]namespace AntiDebug
{
void KillPeHeader()
……