#include typedef BOOL ( WINAPI * IsDebuggerPresent_t ) ( ) ; BOOL WINAPI FakeIsDebuggerPresent ( ) { return FALSE ; } void HookIAT ( ) { DWORD * pIAT = ( DWORD * ) 0x10035068 ; DWORD oldProtect ; VirtualProtect ( pIAT , sizeof ( DWORD ) , PAGE_EXECUTE_READWRITE , & oldProtect ) ; * pIAT = ( DWORD ) FakeIsDebuggerPresent ; VirtualProtect ( pIAT , sizeof ( DWORD ) , oldProtect , & oldProtect ) ; } BOOL APIENTRY DllMain ( HMODULE hModule , DWORD ul_reason_for_call , LPVOID lpReserved ) { if ( ul_reason_for_call == DLL_PROCESS_ATTACH ) { HookIAT ( ) ; } return TRUE ; }