|
It is not that difficult. telock uses self-tracing through DR-registers in SEH frame. If you know how to bypass it correctly - no more problems. It scans IAT using GetProcAddress - you put bpm GetProcAddress x and that's it - study the code around it, get clear iat, go to OEP - dump it. You are done.
|