At least with manually mapped dlls, you cannot do this. Correct me if I am wrong but before transferring context to the real entry point vmprotect validated the protections of each section.I unprotect the whole MDL wih PAGE_EXECUTE_READWRITE
Search found 2 matches
- Mon Apr 10, 2017 11:31 pm
- Forum: Technical questions
- Topic: Manual Mapped Driver Crashes
- Replies: 2
- Views: 5329
Re: Manual Mapped Driver Crashes
- Mon Sep 19, 2016 5:39 am
- Forum: Technical questions
- Topic: Some PE modification questions.
- Replies: 1
- Views: 4824
Some PE modification questions.
I am trying to make a dll very secure from attacks, either dumping it from memory or from stealing through transport. I already have methods to do this, but it seems that vmprotect keeps getting in my way. I have been using the ultimate demo for testing and will be buying the professional edition ve...