[Tutorial] Anti Cheat

[ATIDOT3]

PROCESS NAME CHECK

Hellllloooooooo.

So !

We are going to make a simple anti cheat..

It's SIMPLE so don't be rude.
it's look like doidloko's methode.

First open Warz.sln.

Look for:

int win::ProcessSuspended()

at the first line of the WinMain.cpp file add this:

#include <windows.h>
#include <tlhelp32.h>

After this:

int win::ProcessSuspended()
{
  if(!bSuspended)
    return FALSE;


  MSG msg;
  while(PeekMessage(&msg, NULL,0,0,PM_NOREMOVE))
  {
    if(!GetMessage (&msg, NULL, 0, 0)) 
      return 1;


    TranslateMessage(&msg);
    DispatchMessage(&msg);
  }


  return TRUE;
}

PAST THIS

This function is going to check every prosess with the name "ProcName".
Yes we'll check inside the process for the Menu title change.

void GetProcId(char* ProcName)
{
    PROCESSENTRY32   pe32;
    HANDLE         hSnapshot = NULL;


    pe32.dwSize = sizeof( PROCESSENTRY32 );
    hSnapshot = CreateToolhelp32Snapshot( TH32CS_SNAPPROCESS, 0 );


    if( Process32First( hSnapshot, &pe32 ) )
    {
        do{
            if( strcmp( pe32.szExeFile, ProcName ) == 0 )
            {
                Sleep(5000); 
                ExitProcess(0);
            }
        }while( Process32Next( hSnapshot, &pe32 ) );
    }


    if( hSnapshot != INVALID_HANDLE_VALUE )
        CloseHandle( hSnapshot );


    ProcId = pe32.th32ProcessID;
}

void ClasseCheckPross()
{
        // Check the prosess name for me in this example is cheatengine.
        // You can add a lot of name for the inject dll - cheat emulator ect....
    GetProcId("cheatengine-x86_64.exe");
}

And finally after:

game::PreInit();

add

ClasseCheckPross();

So with this methode and the doidloko's methode together, the cheat can't be started before the game because of his process name, and not during the game because of the name window.

Bye.

Atidote.

[MentaL]

[Yuri-BR]

good work =D

[iKasu]

And then i change the .exe name and patch this...

[ATIDOT3]

i've sayed it's a simple anti-hack so ..... =)

it's just a complement function for check nothing else.

[Yuri-BR]

And then i change the .exe name and patch this...

at least he tried to help others, something that a person between " " not makes

[ATIDOT3]

No but i'll delete the thread like that anyone will know i check the process name maybe ?

[Syxn]

Nice tutorial but don't think a staff member would delete it only would close this.

[ATIDOT3]

i'm not going to delete ^^, it was ironique

but thank's ^^

[PrinceRay]

nice release

for cheat engine, file not found because you open Cheat Engine Launcher :junglejane:
Open Renamed File : dzqdq.exe

[renildomarcio]

I was studying the cheat engine and see that the staff changes the name of his title.
Most things have not changed it.

Code grab direct source of Cheat Engine

if launch32bit then  begin
    if fileexists(selfpath+'cheatengine-i386.exe') then
      ShellExecute(0, 'open', pchar(selfpath+'cheatengine-i386.exe'), pchar(param), pchar(selfpath), sw_show)
    else
      MessageBox(0, 'cheatengine-i386.exe could not be found. Please disable/uninstall your anti virus and reinstall Cheat Engine to fix this','Cheat Engine launch error',MB_OK or MB_ICONERROR);
  end
  else
  begin
    if FileExists(selfpath+'cheatengine-x86_64.exe') then
      ShellExecute(0, 'open', pchar(selfpath+'cheatengine-x86_64.exe'), pchar(param), pchar(selfpath), sw_show)
    else
      MessageBox(0, 'cheatengine-x86_64.exe could not be found. Please disable/uninstall your anti virus and reinstall Cheat Engine to fix this','Cheat Engine launch error',MB_OK or MB_ICONERROR);
  end;


end.

[ATIDOT3]

Yep.

And i don't thing but also you can encrypt you're .exe or use VMprotect.

Better security for the hexedit.

[renildomarcio]

Yep.

And i don't thing but also you can encrypt you're .exe or use VMprotect.

Better security for the hexedit.

as vmProtect uses.?

[ATIDOT3]

Yep vmprotect lock the pure hexedit of you're .exe

Corrige me if i'm wrong but i don't think.

"Vmprotect lock the pure hexedit" i mean for the basic function like mine or wondow title check ect...

[Lewis Caddick]

I have tried to use this and rewritten it so many times, but it just comes back everytime with 'ProcID' undeclared identifier.

[Lewis Caddick]

i think the person who posted this need to look the code over i think there is a mistake as i always come back with ProcId undeclared identifier

[ATIDOT3]

come one guy, just make it ^^.

DWORD ProcId = 0;

[Lewis Caddick]

come one guy, just make it ^^.

DWORD ProcId = 0;

so where would i write this part.

[ATIDOT3]

HANDLE hSnapshot = NULL;
here

past "here"

[ItzFdr]

Good Job!

[budaihu]

Please help me! How to fix?

[Lewis Caddick]

Please help me! How to fix?

please go over the code and make sure you haven't missed any semi colons, always double check.

[budaihu]

I haven't got windows.h and tlhelp32.h! Please upload and help! Thx!

[budaihu]

How to fix this?

[Lewis Caddick]

How to fix this?

the only way i got around all that was to type the code out by hand and not copy and pasting it.

[javaz97]

do you have update ?

v2
v3
...

- - - Updated - - -

and thank you....atidote