Checking .exe name

[espanish]

This code will be useful for you protected your dll for leechers.

The code will check if the .dll was loaded in a .exe with the name of GunZ.exe, you can change the name if you want.

In your hooks function paste this :

char szModule[ 256 ];
	GetModuleFileName( GetModuleHandle( NULL ), szModule, 256 );

	string mPath = string( szModule );

	if( _stricmp( (char*)mPath.substr( mPath.find_last_of( '\\' ) + 1 ).c_str(), "GunZ.exe" ) ){
		MessageBoxTimeoutA( NULL, "Invalid runnable name.", "YouR GunZ", MB_ICONHAND, NULL, 3000 );

		((ULONG(__stdcall*)( HANDLE, ULONG ))GetProcAddress( LoadLibrary( "ntdll.dll" ), "ZwTerminateProcess" ))( GetCurrentProcess(), 0 );

		return;
	}

You will need to include the iostream, string library, and declara the name space std.

#include <iostream>
#include <string>

using namespace std;

If you get a error in function MessageBoxTimeoutA, in the top of your source type this :

WINUSERAPI
int
WINAPI
MessageBoxTimeoutA(
    __in_opt HWND hWnd,
    __in_opt LPCSTR lpText,
    __in_opt LPCSTR lpCaption,
    __in UINT uType,
	__in WORD wlanguageid,
	__in DWORD dwMilisseconds);

If you got some error, please post here i will help ...
... and I'm sorry by my bad english.

Credits :
Me

 

[Hideasu]

MD5 check is the best way to prevent the dll of being used into another client.
MD5 check Gunz.exe and voila!

 

[espanish]

Yes, i will not post MD5 because is most used.

I Will post SHA-1 later.

I Post this because is a different method.

 

[Joe9099]

So what if i rename the name of the Executable via HEX in the dll?...

 

[Hideasu]

Ain't there are files encrypter somewhere like PE comptact, themidia, enigma etc, they are made for that's.

 

[espanish]

Yes, i have a Themida config, any antivirus don't get

 

[Mr_Troy]

Why so hard? Just use if(!GetModuleHandle("Gunz.exe')) KILLGUNZ();

it's less code, but does about the same.