Roll Back

This commit is contained in:
Anonymous275
2020-11-14 23:50:15 +02:00
parent 179b46d17b
commit c517a48fa6
9 changed files with 42 additions and 52 deletions
-14
View File
@@ -23,20 +23,6 @@ void DAS(){
f.close();
#endif
}
void DASM(){
#ifndef DEBUG
int i = 0;
std::ifstream f(GetEN(), std::ios::binary);
f.seekg(0, std::ios_base::end);
std::streampos fileSize = f.tellg();
if(IsDebuggerPresent() || fileSize > 0x4C4B40){
i++;
DAboard();
}
if(i)DAboard();
f.close();
#endif
}
DWORD getParentPID(DWORD pid){
HANDLE h = CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, 0);
PROCESSENTRY32 pe = {0};
+30 -22
View File
@@ -4,44 +4,52 @@
#include "Network/network.h"
#include "Security/Enc.h"
#include <windows.h>
#include <Logger.h>
#include "Logger.h"
#include <psapi.h>
#include <string>
#include <thread>
DWORD getParentPID(DWORD pid);
HANDLE getProcess(DWORD pid, LPSTR fname, DWORD sz);
void Kill(){
static bool Run = false;
if(!Run)Run = true;
else return;
while(Run){
std::this_thread::sleep_for(std::chrono::milliseconds(200));
ClosePublic();
std::this_thread::sleep_for(std::chrono::seconds(2));
NetReset();
#ifdef DEBUG
debug("NetReset Check!");
debug(Sec("Attention! NetReset Check!"));
#endif
}
}
void FindDLL(const std::string& Name) {
static std::string PName = LocalEnc(Name.substr(0,Name.rfind(Sec("\\"))));
static bool Running = false;
if(Running)return;
void FindDLL(char* args[]){
static auto argv = args;
HANDLE hProcess = GetCurrentProcess();
HMODULE hMods[1024];
DWORD cbNeeded;
unsigned int i;
TCHAR szModName[MAX_PATH];
if (K32EnumProcessModules(hProcess, hMods, sizeof(hMods), &cbNeeded)) {
for (i = 1; i < (cbNeeded / sizeof(HMODULE)); i++) {
if (K32GetModuleFileNameExA(hProcess, hMods[i], szModName, sizeof(szModName) / sizeof(TCHAR))) {
std::string MName(szModName);
MName = MName.substr(0, MName.rfind(Sec("\\")));
if (MName == LocalDec(PName)) {
Running = true;
std::thread t1(Kill);
t1.detach();
std::string Parent(MAX_PATH,0);
DWORD ppid = getParentPID(GetCurrentProcessId());
HANDLE Process = getProcess(ppid, &Parent[0], MAX_PATH);
if(Process == nullptr){
HMODULE hMods[1024];
DWORD cbNeeded;
unsigned int i;
if(K32EnumProcessModules(hProcess, hMods, sizeof(hMods), &cbNeeded)){
for ( i = 1; i < (cbNeeded / sizeof(HMODULE)); i++ ){
TCHAR szModName[MAX_PATH];
if (K32GetModuleFileNameExA(hProcess, hMods[i], szModName, sizeof(szModName) / sizeof(TCHAR))){
std::string Name(szModName),PName(argv[0]);
Name = Name.substr(0,Name.rfind(Sec("\\")));
PName = PName.substr(0,PName.rfind(Sec("\\")));
if(Name == PName){
std::thread t1(Kill);
t1.detach();
}
}
ZeroMemory(szModName,MAX_PATH);
}
ZeroMemory(szModName, MAX_PATH);
}
}
CloseHandle(hProcess);