[Release][C++] Usaful anti dll injection function.

[belette321]

Anti DLL injection [C++] :

By DLL :

void AntiInject () 
{ 
   HANDLE hProc = GetCurrentProcess(); 
   while (TRUE) { 
      BlockAPI(hProc, "NTDLL.DLL", "LdrLoadDll"); 
      Sleep (100); 
   } 
} 
 
BOOLEAN BlockAPI (HANDLE hProcess, CHAR *libName, CHAR *apiName) 
{ 
   CHAR pRet[]={0xC3}; 
   HINSTANCE hLib = NULL; 
   VOID *pAddr = NULL; 
   BOOL bRet = FALSE; 
   DWORD dwRet = 0; 
 
   hLib = LoadLibrary (libName); 
   if (hLib) { 
       pAddr = (VOID*)GetProcAddress (hLib, apiName); 
       if (pAddr) { 
           if (WriteProcessMemory (hProcess, 
                            (LPVOID)pAddr, 
                            (LPVOID)pRet, 
                            sizeof (pRet), 
                            &dwRet )) { 
              if (dwRet) { 
                 bRet = TRUE; 
              } 
           } 
       } 
       FreeLibrary (hLib); 
   } 
   return bRet; 
}

Or like this if you do it on .EXE :

void AntiInject () 
{ 
   HANDLE hProc = FindWindow(0,"Gunz"); 
   while (TRUE) { 
      BlockAPI(hProc, "NTDLL.DLL", "LdrLoadDll"); 
      Sleep (100); 
   } 
} 
 
BOOLEAN BlockAPI (HANDLE hProcess, CHAR *libName, CHAR *apiName) 
{ 
   CHAR pRet[]={0xC3}; 
   HINSTANCE hLib = NULL; 
   VOID *pAddr = NULL; 
   BOOL bRet = FALSE; 
   DWORD dwRet = 0; 
 
   hLib = LoadLibrary (libName); 
   if (hLib) { 
       pAddr = (VOID*)GetProcAddress (hLib, apiName); 
       if (pAddr) { 
           if (WriteProcessMemory (hProcess, 
                            (LPVOID)pAddr, 
                            (LPVOID)pRet, 
                            sizeof (pRet), 
                            &dwRet )) { 
              if (dwRet) { 
                 bRet = TRUE; 
              } 
           } 
       } 
       FreeLibrary (hLib); 
   } 
   return bRet; 
}

Change Gunz to your gunz name like if you use BR it will be "The Duel".


Google it
Thanks.

[frenchfatcat]

aye... nice one

easy but cheers

:-)

[Tra3200]

Oh yea Nice....Hahah

[Katsuro]

This Works?

No. It doesn't work. He released it because its broken. >_>;;

[belette321]

It supose to work

[belette321]

I love you too :D

[belette321]

VC++ or DevCPP. You need to know that this is usally without other functions like Api hook block or banned windows name ...

Thanks.

[BRAZIL-PAULINHO]

O.oo Niiiiiiice






::

[belette321]

VC++ or DevCPP ....

[BRAZIL-PAULINHO]

Hmm i have VC++ here but What i have to do with the code?

[belette321]

Add it to existant limited anti-cheat.

[BRAZIL-PAULINHO]

Ok Thanks :D

[belette321]

Your wellcome.

[BRAZIL-PAULINHO]

Do You Know any anticheat that i can use?

[kochon]

Damn.. C++ is weird. To me, C# seems a lot more logical.. i dunno. But hey it's a preference :P.

Thanks, I'm saving this for later.