Trial.h

//#include "Trial.h"

typedef
BOOL
(WINAPI*
tQueryFullProcessImageNameA)(
    HANDLE hProcess,
    DWORD dwFlags,
    //LPSTR lpExeName,
    PDWORD lpdwSize
    );
tQueryFullProcessImageNameA nQueryFullProcessImageNameA = NULL;

inline int JunkCode (int X, int Y)
{
	char MadeBy[]="Jangan coba-coba hack :v";
    int C=-50 ,D=5,A=66,G=1442;
    A=Y*X;
    C=X^5^A;
    for (int i=1; i<=A; i++)
    {
        G=(Y*6)*G +(A-C);
    }
    if (C > X)
    {
        C=0+C+D;
    }
    MadeBy[23]=C;
    D= C-A-G-D+0x1542;
    return D+A;
}

VOID AntiOllyDbg()
{
	CreateThread(NULL,NULL,(LPTHREAD_START_ROUTINE)JunkCode,NULL,NULL,NULL);
	HWND dwOllyDbg = FindWindow(TEXT("OLLYDBG"),NULL);
	if( dwOllyDbg )
	{
		JunkCode(5,10);
		ExitProcess(0);
	}
}

//--[Protect]--//
VOID AntiIdaPro()
{
	JunkCode(5,10);
	HWND dwOllyDbg = FindWindow(TEXT("idaq"),NULL);
	if( dwOllyDbg )
	{
		ExitProcess(0);
	}
	JunkCode(5,10);
	HWND dwOllyDbg2 = FindWindow(TEXT("D3D9_test"),NULL);
	if( dwOllyDbg2 )
	{
		ExitProcess(1);
	}
	JunkCode(5,10);
	HWND dwOllyDbg3 = FindWindow(TEXT("Enigma32g"),NULL);
	if( dwOllyDbg3 )
	{
		ExitProcess(0);
	}
	JunkCode(5,10);
	HWND dwOllyDbg4 = FindWindow(TEXT("CheatEngine"),NULL);
	if( dwOllyDbg4 =0 )
	{
		ExitProcess(1);
	}
}
#include "XorStr.h"
//--[Protect]--//
VOID AntiEnigma()
{
	HWND dwOllyDbg = FindWindow(TEXT("Enigma"),NULL);
	if( dwOllyDbg=0 )
	{
		ExitProcess(1);
	}
}
//--[Anti Dump]--//
VOID AntiDumping()
{
	__asm
	{
		MOV EAX,FS:[0x30]
        MOV EAX,[EAX+0x0C]
        MOV EAX,[EAX+0x0C]
        MOV DWORD PTR[EAX+0x20],0x100000
	}
}

bool CheckCheatEngine()
{
	HMODULE hKernel32 = LoadLibraryA(/*Kernel32.dll*/XorStr<0xFB,13,0xC171482C>("\xB0\x99\x8F\x90\x9A\x6C\x32\x30\x2D\x60\x69\x6A"+0xC171482C).s);
	DWORD AddrQueryFullProcessImageNameA = (DWORD)GetProcAddress(hKernel32, /*QueryFullProcessImageNameA*/XorStr<0xB9,27,0x753EC98A>("\xE8\xCF\xDE\xCE\xC4\xF8\xCA\xAC\xAD\x92\xB1\xAB\xA6\xA3\xB4\xBB\x80\xA7\xAA\xAB\xA8\x80\xAE\xBD\xB4\x93"+0x753EC98A).s);
	if (AddrQueryFullProcessImageNameA){
		nQueryFullProcessImageNameA = (tQueryFullProcessImageNameA)AddrQueryFullProcessImageNameA;

		DWORD aProcesses[1024];
		DWORD cbNeeded;
		DWORD cProcesses;
		unsigned int i;

		if (!EnumProcesses(aProcesses, sizeof(aProcesses), &cbNeeded))
			return 1;

		cProcesses = cbNeeded / sizeof(DWORD);

		ifstream checkfile;
		for ( i = 0; i < cProcesses; i++ )
		{
			HANDLE hProcess = OpenProcess(PROCESS_VM_READ | PROCESS_QUERY_INFORMATION, 0, aProcesses[i]);
			if(hProcess != INVALID_HANDLE_VALUE){
				CHAR szProcess[MAX_PATH];
				DWORD dwMaxSize = MAX_PATH;
				//if(nQueryFullProcessImageNameA(hProcess, 0, szProcess, &dwMaxSize)){
					string processpath = string(szProcess).substr(0, string(szProcess).find_last_of(/*\\/*/XorStr<0x6A,3,0xFB4046D1>("\x36\x44"+0xFB4046D1).s));
					string lua53 = processpath;
					lua53 += /*\\lua53-32.dll*/XorStr<0x7B,14,0xBFFE020C>("\x27\x10\x08\x1F\x4A\xB3\xAC\xB1\xB1\xAA\xE1\xEA\xEB"+0xBFFE020C).s;
					//checkfile.open(lua53, ios::in);
					if(checkfile.is_open() == true){
						return true;
						break;
					}
					checkfile.close();
					lua53 = processpath;
					lua53 += /*\\lua53-64.dll*/XorStr<0x14,14,0xF64B6A08>("\x48\x79\x63\x76\x2D\x2A\x37\x2D\x28\x33\x7A\x73\x4C"+0xF64B6A08).s;
					//checkfile.open(lua53, ios::in);
					if(checkfile.is_open() == true){
						return true;
						break;
					}
					checkfile.close();
				//}
			}

		}
	}
    return false;
}


void Protection()
{
	CreateThread(NULL,NULL,(LPTHREAD_START_ROUTINE)JunkCode,NULL,NULL,NULL);
	AntiOllyDbg();		// Protect AntiIdaPro
	AntiIdaPro();		// Protect IDA PRO Hex
	AntiEnigma();		// Protect Enigma
	AntiDumping();		// Protect Dump
	//ProtectActive();	// Protect Trial
	CheckCheatEngine();
}