The Cow Anti Cheat

[zasmqniq]

hmm theunknownguy my friend you are crazy good coder i see but i dont know how to do that thats why i am asking ^^

 

[theunknownguy]

hmm theunknownguy my friend you are crazy good coder i see but i dont know how to do that thats why i am asking ^^

Google is your best friend... search on it.

 

[[INDG]FeN$x]

Theunknownguy you never finish projects... you just like me... wonder why?...

 

[Bason4ik]

two FeN$x???)))

 

[[INDG]FeN$x]

Theunknownguy you could implement the IAT scanner, its lame but it will work as an extra security to your anti cheat:

CheckByIAT Proc pITD:DWord
	Local pINT:DWord
	Local pIAT:DWord
	Local TotalAPIsFound:Dword
	Assume Eax:Ptr IMAGE_IMPORT_DESCRIPTOR
	Assume Edx:Ptr IMAGE_IMPORT_BY_NAME
	Assume Ebx:Ptr MAP_MODULEINFO
	.Repeat
	  Mov Eax, pITD
	  Mov Eax, [Eax].OriginalFirstThunk
	  Mov Edx, [Eax].FirstThunk
	  .If (Eax == 0)
	    Jmp @End
	  .EndIf
	  Mov pINT, Eax
	  Mov pIAT, Edx
	  Lea Esi, Offset APIDetectList
	  .Repeat
	    Mov Eax, pINT
	    .If (DWord Ptr [Eax] == 0)
	      .Break
	    .EndIf
	    Mov Edx, [Eax]
		Add Edx, pModule
		Push Edx
    	Invoke szCmp, [Edx].Name1, Esi
    	Pop Edx
    	.If (Eax != 0)
      		Add TotalAPIsFound, 1
    	.EndIf
    	Add Esi, AlignString
	    Add pIAT, DWord 														
	    Add pINT, DWord
	  .Until (Eax == -1) 												
	  Add pITD, SizeOf IMAGE_IMPORT_DESCRIPTOR
	  Mov Eax, pITD
	.Until ([Eax].OriginalFirstThunk == 0) 
	Mov Eax, 1
	@End:
	Assume Eax:Nothing
	Assume Edx:Nothing
	Ret
CheckByIAT EndP

two FeN$x???)))

Theunknownguy is just my alter ego

 

[mauka]

never will understand why need block autoclickers..

How-ever there is good script blocker called UCP - Anticheat

 

[Mulegend]

Je, fenix never finish your "works"... only use all ppl like testers for after sell this sh!t

 

[kinder32]

Please, some mirror, i need this.

 

[Regz]

Please, some mirror, i need this.

Me too, can somebody reupload source codes?

 

[gnomiux]

Thread cleaned. Keep on topic people and remember - no flaming :

 

[1313]

Link is dead. Mirror please

 

[LedZeppelin]

just stumbled into this thread, good stuff!

anyone still have the file could please re-upload? thanks.

 

[thevjfla]

¿new links?