|LordPE Anti Dumping
||March 11 2006
.model flat, stdcall
option casemap :none ; case sensitive
; MASM32 antiLordPE example
; coded by ap0x
; Reversing Labs: http://ap0x.headcoders.net
; This example was taken from Pavol Cerven`s book Crackproof your Software.
; This example increments size of image of our process by 0x3000. By doing this
; we confuse LordPE and it can not dump. There is a way to overcome this LordPE`s
; problem. You can always use Correct size of image option and make a process dump.
MOV EAX,DWORD PTR FS:[30h]
ADD DWORD PTR[EAX+20h],3000h
CMP DWORD PTR[EDX+08],-1
ADD DWORD PTR[EDX+50h],3000h
There are 31,307 total registered users.