|
hi
i have seen one hardlock protected program that call getmodulehandle and test oep with original oep and if equal, mean that envelope is not present.
however because your target envelped , i do not think that program test itself with crc or in a same way. you must dump it correctly. i removed hardlock envelpe from more than 20 program and always did it with olly and all of them worked correctly.
|