Check if main.exe start only with MU.exe

[crosdev]

I try to do a redirect main.exe start only with MU.exe .i try to change JMP to JNZ with ollydbg but in my main.exe doesn`t exist MU.exe for change JMP to JNZ

i have client source and i decide to do this verification inside source

somebody do you have a ideea ?
i try this, but this function check if process is active,no check if process run from another .exe

DWORD GetProcId(char* ProcName)
{
    PROCESSENTRY32   pe32;
    HANDLE         hSnapshot = NULL;
    pe32.dwSize = sizeof( PROCESSENTRY32 );
    hSnapshot = CreateToolhelp32Snapshot( TH32CS_SNAPPROCESS, 0 );


    if( Process32First( hSnapshot, &pe32 ) )
    {
        do{
            if( strcmp( pe32.szExeFile, ProcName ) == 0 )
            {
                return pe32.th32ProcessID;
            }
        }while( Process32Next( hSnapshot, &pe32 ) );
    }


    if( hSnapshot != INVALID_HANDLE_VALUE )
        CloseHandle( hSnapshot );
    return 0;


}

if(!GetProcId("MU.exe"))
    {
    CreateThread(NULL,NULL,LPTHREAD_START_ROUTINE(Msg_Launcher),NULL,0,0);
        ExitProcess(1);
    }
    else
    {
.................
    }

[MentaL]

[KarLi]

upload your main with all the .DLLS and files here + mu.exe

[XGLADEADOR]

Hi crosdev, do this:
Open your main.exe, on assembler section, right click> Search For > All referenced Text Strings
Open the new window, go up to the top highlight it, press CTL+L, search for "MU.EXE"(uncheck case sensitive), press ctl+l to the last, must be the third result, press enter, up five(5) lines and change JMP SHORT ... for JNZ ...

[crosdev]

I solved alone this trick in c++ ! Thank you so much !
I add this future in My Guard(next update)!
It is better that I thought . Thank you very much, can you help me next time! I vote you in top 2014 KarLi ;)
Best regardXGLADEADOR , KarLi !

Topic Close!