[Release] Found An Anti-Cheat Engine & Some Debuggers

[A v a r a]

Hello Tantra Fellow!

I found this over the internet and I wondered if we could implement this in Tantra Online. Need your inputs and I hope we can brainstorm on this matter as I am willing to learn C# or C++ but not limited to Anti Cheat System

import os
import thread
import time
 
def procesoss():
    try:
        while 1 == 1:   
            Black_List = ["inyector.exe","cheatengine-x86_64.exe","ollydbg.exe","skype.exe"] # here the programs to block, you can see the full name in cmd and put "tasklist"
            for p in os.popen("tasklist"):
                procesos = p.lower()
                for sema in Black_List:
                    if procesos.find(sema) != -1:
                        p = procesos.split()
                        os.popen("taskkill /im %s /f" % p[0])
            time.sleep(3) # wait 3 second to check again
    except:
        time.sleep(3) # wait 3 second to check again
 
thread.start_new_thread(procesoss, ())

Ciao!

[MentaL]

[dTantra]

Well first off, this only checks for the names of the exe, meaning if you rename the exe this wont detect it anymore.

[A v a r a]

Well first off, this only checks for the names of the exe, meaning if you rename the exe this wont detect it anymore.

Yeah I thought so. This is so very basic but I don't know yet if its applicable.

[dTantra]

Yeah I thought so. This is so very basic but I don't know yet if its applicable.

Also, that language is python, meaning you would have to create a separate program for that code to run in.

[A v a r a]

Also, that language is python, meaning you would have to create a separate program for that code to run in.

Yeah I thought so too but this one is convertible to C++ or no?

[dTantra]

Yeah I thought so too but this one is convertible to C++ or no?

Well yea anything can pretty much...

DWORD findProcessByName(string name)
{
	int i, len;
	bool found = false;
	DWORD pid  = PROC_NOT_FOUND;
	string low_name, low_vname;


	low_name = name;
	std::transform(low_name.begin(), low_name.end(), low_name.begin(), ::tolower);


	vecpro.clear();
	EnumProcs((PROCENUMPROC) ProcEnumToVector, 0);


	len = vecpro.size();


	for (i=0; (i < len) && (!found); i++)
	{
		low_vname = vecpro.at(i).name;
		std::transform(low_vname.begin(), low_vname.end(), low_vname.begin(), ::tolower);
		found = (low_vname == low_name);
		if (found) pid = vecpro.at(i).pid;
	}


	vecpro.clear();


	return pid;
}

[A v a r a]

Well yea anything can pretty much...

DWORD findProcessByName(string name)
{
    int i, len;
    bool found = false;
    DWORD pid  = PROC_NOT_FOUND;
    string low_name, low_vname;


    low_name = name;
    std::transform(low_name.begin(), low_name.end(), low_name.begin(), ::tolower);


    vecpro.clear();
    EnumProcs((PROCENUMPROC) ProcEnumToVector, 0);


    len = vecpro.size();


    for (i=0; (i < len) && (!found); i++)
    {
        low_vname = vecpro.at(i).name;
        std::transform(low_vname.begin(), low_vname.end(), low_vname.begin(), ::tolower);
        found = (low_vname == low_name);
        if (found) pid = vecpro.at(i).pid;
    }


    vecpro.clear();


    return pid;
}

Nice! I really hope someone could post a tutorial on how to implement this simple code.

[aLca]

Heyo, u guy's should take a look at the WarZ / Infestation RLS section, there are tons of stuff, basicly right this, for what u're looking for. (Found this Thread just per g00gl3^^)

[A v a r a]

Heyo, u guy's should take a look at the WarZ / Infestation RLS section, there are tons of stuff, basicly right this, for what u're looking for. (Found this Thread just per g00gl3^^)

Thanks and I am actually looking up on that section though I am not a poster therr but indeed I am real fan of some files that could compatible for Tantra and can be use to prevent cheating/hacking at least.

[aLca]

Hehe, few basic stuff is there atleast - what should be a a start somehow. And, ofc. Protect your .exe with a Packer like VMProtect (Needs also a small C/C++ acknowledge to get the best Profit out of it), Themida, molebox, etc.

[A v a r a]

Hehe, few basic stuff is there atleast - what should be a a start somehow. And, ofc. Protect your .exe with a Packer like VMProtect (Needs also a small C/C++ acknowledge to get the best Profit out of it), Themida, molebox, etc.

I am using Enigma Protector but it has some compatbility issue with Windows 8.1 and regards with some Anti-Virus as a Malware. Anyways, do you have a link for VMProtect and a tut on how to protect files using VMP?

[aLca]

Enigma is "nice" somehome - but i guess it isn't that much better then VMProtect. But yea sure, i'll Upload the "SDK" and the Programm.

Here a small Example how it works;

Add this where ur other declarations are;

#if USE_VMPROTECT
  #include "..\..\..\External\VMProtect\VMProtectSDK.h"
  #define VMPROTECT_BeginMutation(XX) VMProtectBeginMutation(XX)
  #define VMPROTECT_BeginVirtualization(XX) VMProtectBeginVirtualization(XX)
  #define VMPROTECT_End() __asm {nop} VMProtectEnd()
  #define VMPROTECT_DecryptStringA(XX) VMProtectDecryptStringA(XX)
#else
  #define VMPROTECT_BeginMutation(XX)
  #define VMPROTECT_BeginVirtualization(XX)
  #define VMPROTECT_End()
  #define VMPROTECT_DecryptStringA(XX) XX
#endif

To Protect some Code;

ClientGameLogic* ClientGameLogic::GetInstance()
{
    VMPROTECT_BeginMutation("ClientGameLogic::GetInstance");

    r3d_assert(g_pClientLogic);
    return g_pClientLogic;

    VMPROTECT_End(); 
}

Or another way is "Virtualization"

void ClientGameLogic::CreateInstance()
{
    VMPROTECT_BeginVirtualization("ClientGameLogic::CreateInstance"); // not Usefull for Critical stuff like Rendering, etc...

    r3d_assert(g_pClientLogic == NULL);
    g_pClientLogic = new ClientGameLogic();

    VMPROTECT_End();
}

And place "VMProtectSDK32.dll" into the main folder.

Download Programm + SDK(winrar5 is essential to unpack) Password: apocalypsend.biz

If u need help, feel free to ask.

[A v a r a]

Enigma is "nice" somehome - but i guess it isn't that much better then VMProtect. But yea sure, i'll Upload the "SDK" and the Programm.

Here a small Example how it works;

Add this where ur other declarations are;

#if USE_VMPROTECT
  #include "..\..\..\External\VMProtect\VMProtectSDK.h"
  #define VMPROTECT_BeginMutation(XX) VMProtectBeginMutation(XX)
  #define VMPROTECT_BeginVirtualization(XX) VMProtectBeginVirtualization(XX)
  #define VMPROTECT_End() __asm {nop} VMProtectEnd()
  #define VMPROTECT_DecryptStringA(XX) VMProtectDecryptStringA(XX)
#else
  #define VMPROTECT_BeginMutation(XX)
  #define VMPROTECT_BeginVirtualization(XX)
  #define VMPROTECT_End()
  #define VMPROTECT_DecryptStringA(XX) XX
#endif

To Protect some Code;

ClientGameLogic* ClientGameLogic::GetInstance()
{
    VMPROTECT_BeginMutation("ClientGameLogic::GetInstance");

    r3d_assert(g_pClientLogic);
    return g_pClientLogic;

    VMPROTECT_End(); 
}

Or another way is "Virtualization"

void ClientGameLogic::CreateInstance()
{
    VMPROTECT_BeginVirtualization("ClientGameLogic::CreateInstance"); // not Usefull for Critical stuff like Rendering, etc...

    r3d_assert(g_pClientLogic == NULL);
    g_pClientLogic = new ClientGameLogic();

    VMPROTECT_End();
}

And place "VMProtectSDK32.dll" into the main folder.

Download Programm + SDK(winrar5 is essential to unpack) Password: apocalypsend.biz

If u need help, feel free to ask.

Thanks a lot. Is the process of protecting similar to Enigma too?

- - - Updated - - -

I downloaded it but it seems the file is in unknown format or damaged.

[aLca]

U need winrar5 or similar to Unpack. :) And yes, fire up VMProtect, load your .exe, and normaly the rest should be self explaining - and - i guess it will take some time to find the "best" Protection and also no performance loss, etc.

[A v a r a]

U need winrar5 or similar to Unpack. :) And yes, fire up VMProtect, load your .exe, and normaly the rest should be self explaining - and - i guess it will take some time to find the "best" Protection and also no performance loss, etc.

For some reason the installation just wont start. I am using Windows 7 Ultimate 64 bit