AcProtect anti-dump tip

[Michel]

It seems to me not so easy to scan the prog in order to find the calls : E8 isn't a "reserved byte", so it's a kind of little piece of dissassembler you must write. I don't say it's impossible, but according to my knowledje, it's easier to left a small extra section.
Now, if you have precise idea about some simple algo able to identify the calls, yes, why not try ? That should be the king way...
If someone knows the tool what Lownoise speak about, I would like try it too...
Thanks