well for asprotect it would be possible. it uses it's own IAT, and so i hooked it only for this file, ASProtect thought it isn't modified and let me change what i want.
Quote:
|
Originally Posted by lordor
but maybe sometime the app use thd createfile to open other file,and do other thing,that will cause problem.
I think the convenient way is to nop the checking code.
|
of course there must be a 100% working filter which only affects the loaded file.
i don't want to hook the complete system, i think this would be a bit too hard, and like taos said, not good for system performance.
Quote:
|
Originally Posted by diablo2oo2
which protectors can be patched so?
|
i was able to modify nearly all files which had a self-check this way. Protector? ASProtect for example.
Quote:
|
Originally Posted by taos
you can add a new section in the original app,change the entrypoint and then make an application hook to createfile and you don't need to hook ALL the processes in the system, but bufff again. :-)
|
where's the bufff in this case?
