Thread: IntegrityDisable
View Single Post
  #1  
Old 06-12-2023, 19:12
CodeCracker CodeCracker is offline
VIP
  
Join Date: Jun 2011
Posts: 905
Rept. Given: 68
Rept. Rcvd 661 Times in 278 Posts
Thanks Given: 64
Thanks Rcvd at 3,820 Times in 717 Posts
CodeCracker Reputation: 500-699 CodeCracker Reputation: 500-699 CodeCracker Reputation: 500-699 CodeCracker Reputation: 500-699 CodeCracker Reputation: 500-699 CodeCracker Reputation: 500-699
IntegrityDisable
IntegrityDisable:
will bypass CreateFileA/CreateFileW integrity checks by Api hooking;
original exe file contents will be kept under the .dat file
Optionally you can choose "Fix Dll can move" to uncheck "Dll can move" this from DllCharacteristics (Optional Header).
Entry point of program is changed, old entry point is called by "call ebx" instruction
Source code (MASM) included.
Hooks will not work in Windows XP and only on Windows 7 or latter OS.

Download link:
https://workupload.com/file/mrqU2zCFAAE
Reply With Quote
The Following 3 Users Gave Reputation+1 to CodeCracker For This Useful Post:
MarcElBichon (06-12-2023), tonyweb (06-13-2023), user1 (07-14-2023)
The Following 9 Users Say Thank You to CodeCracker For This Useful Post:
Doit (06-14-2023), h8er (06-29-2023), niculaita (06-13-2023), tonyweb (06-13-2023), Top10 (06-13-2023), user1 (07-14-2023), Vosiyons (06-13-2023), wilson bibe (06-13-2023), Zeokat (06-13-2023)