Hi everyone! Exe using this for a long time but do not understand how Silva has done so in an already patched exe can change resources. Can anyone tell?
Replace "isDebuggerPresent" with a hex editor to LoadLibraryA. Replace the rest of the name with 0x00(not spaces or anything else).Then follow the tutorial
http://lf-empire.de/forum/showthread.php?tid=2521, ignore the IDDKing part. use
Code:
CALL DWORD PTR DS:[447068]
as the loadlibrary function.
Thank you Silva!!!
I respect you!!!