Exetools  

Go Back   Exetools > General > Community Tools

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 06-12-2023, 19:12
CodeCracker CodeCracker is offline
VIP
 
Join Date: Jun 2011
Posts: 483
Rept. Given: 27
Rept. Rcvd 423 Times in 145 Posts
Thanks Given: 21
Thanks Rcvd at 1,994 Times in 376 Posts
CodeCracker Reputation: 400-499 CodeCracker Reputation: 400-499 CodeCracker Reputation: 400-499 CodeCracker Reputation: 400-499 CodeCracker Reputation: 400-499
IntegrityDisable

IntegrityDisable:
will bypass CreateFileA/CreateFileW integrity checks by Api hooking;
original exe file contents will be kept under the .dat file
Optionally you can choose "Fix Dll can move" to uncheck "Dll can move" this from DllCharacteristics (Optional Header).
Entry point of program is changed, old entry point is called by "call ebx" instruction
Source code (MASM) included.
Hooks will not work in Windows XP and only on Windows 7 or latter OS.

Download link:
https://workupload.com/file/mrqU2zCFAAE
Reply With Quote
The Following 3 Users Gave Reputation+1 to CodeCracker For This Useful Post:
MarcElBichon (06-12-2023), tonyweb (06-13-2023), user1 (07-14-2023)
The Following 9 Users Say Thank You to CodeCracker For This Useful Post:
Doit (06-14-2023), h8er (06-29-2023), niculaita (06-13-2023), tonyweb (06-13-2023), Top10 (06-13-2023), user1 (07-14-2023), Vosiyons (06-13-2023), wilson bibe (06-13-2023), Zeokat (06-13-2023)
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



All times are GMT +8. The time now is 13:51.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( 1998 - 2024 )