Cheat Engine Forum Index Cheat Engine
The Official Site of Cheat Engine
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 


How anti-cheat protect process from dll injection?

 
Post new topic   Reply to topic    Cheat Engine Forum Index -> General Gamehacking
View previous topic :: View next topic  
Author Message
spyware293
Newbie cheater
Reputation: 0

Joined: 28 Jun 2012
Posts: 13
PostPosted: Tue Nov 15, 2016 5:15 am    Post subject: How anti-cheat protect process from dll injection? Reply with quote
How to find out what method an anticheat use to block dll injection?

The anticheat make openprocess() not working. I know how to bypass it by manually mapping the dll to the process.

I just want to know how to patch the anti cheat to disable the protection. I've tried to put breakpoints on anticheat's intermodular calls. Only kernel32.virtualalloc being called when i inject the dll.
Back to top
View user's profile Send private message Yahoo Messenger
STN
I post too much
Reputation: 43

Joined: 09 Nov 2005
Posts: 2676
PostPosted: Tue Nov 15, 2016 5:16 am    Post subject: Reply with quote
Which anticheat is it?
_________________
Cheat Requests/Tables- Fearless Cheat Engine
https://fearlessrevolution.com
Back to top
View user's profile Send private message
spyware293
Newbie cheater
Reputation: 0

Joined: 28 Jun 2012
Posts: 13
PostPosted: Tue Nov 15, 2016 5:40 am    Post subject: Reply with quote
STN wrote:
Which anticheat is it?

It's custom-made anticheat coded with delphi and madcodehook library.

I can remove the anticheat completely but i need its decryption method to login on specific servers(encrypted server).

Here's the unpacked version of the anti-cheat donothidebehinduniformresourcelocatorshortenersjustpostthewholeurlhereinstead.gurgle/A72gTP

edit: I can't post url and upload the binary yet
Back to top
View user's profile Send private message Yahoo Messenger
H4x0rBattie
Advanced Cheater
Reputation: 0

Joined: 10 Nov 2016
Posts: 60
PostPosted: Sun Nov 27, 2016 6:05 am    Post subject: Reply with quote
Curious to know it as well. Does it prevent you from creating a thread?
_________________
UNKNOWN-123

DSE/PatchGuard bypass at runtime for Windows 10 22H2 - Windows 11 25H2
Back to top
View user's profile Send private message
atom0s
Moderator
Reputation: 205

Joined: 25 Jan 2006
Posts: 8587
Location: 127.0.0.1
PostPosted: Sun Nov 27, 2016 1:45 pm    Post subject: Reply with quote
If it uses madCHook you can look at the string references and find what API they are hooking easily. This will help greatly in finding what you would need to bypass.

Overall though it depends on the type of injection you are doing to determine how its being blocked.
_________________
- Retired.
Back to top
View user's profile Send private message Visit poster's website
Display posts from previous:   
Post new topic   Reply to topic    Cheat Engine Forum Index -> General Gamehacking All times are GMT - 6 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group

CE Wiki   IRC (#CEF)   Twitter
Third party websites