Found this in one of my sources from a while ago, it worked fine when they were checking .asi files.
But by time I found better ways to bypass it.
What this does?
They used to check the loaded .flt/.asi's exports if they returned the right value, and this was a simple '1'.
So yeah.
Credits:
• Ayoub
But by time I found better ways to bypass it.
What this does?
They used to check the loaded .flt/.asi's exports if they returned the right value, and this was a simple '1'.
So yeah.
Code:
extern "C" __declspec(dllexport) signed int __stdcall RIB_Main(int providerIdx, int reserved, int (__stdcall* alloc_provider_handle)(int), void (__stdcall* register_interface)(int, DWORD, signed int, int*), void (__stdcall* unregister_interface)(int, const char*, int, int))
{
return 1;
}
• Ayoub