ABEL Loader Maker can make asprotect loader. it patch when he find the window
of the app.
another little trick i use to make asprotect loaders:
i code a loader which wait till a value is written to memory, after the
crc check
so it look like this in asm
Code:
invoke CreateProcess,addr filename, NULL, NULL, NULL, NULL, NULL,
NULL, NULL, ADDR Startup, ADDR processinfo
.IF eax == NULL
invoke MessageBox, NULL,SADD ("Can't create process"),ADDR filename, MB_ICONEXCLAMATION
.ELSE
@readagain:
invoke ReadProcessMemory, processinfo.hProcess,04BB014h,addr ReadByte, 4, NULL
.if dword ptr[ReadByte]==00401270h ;test value ...is crc check over?
;now patch....
invoke WriteProcessMemory, processinfo.hProcess, 0043CFC7h, ADDR NewBytes,SIZEOF NewBytes, NULL
invoke WriteProcessMemory, processinfo.hProcess, 00490a9ch, ADDR NewBytes2,SIZEOF NewBytes2, NULL
.else
jmp @readagain
.endif
.ENDIF