CLS for Razor Archiver(cls-rz)

[ravencrow]

Originally Posted by 78372

You are talking about creating a decoy dll, right?

Nopes, decoy DLL won't work in its case cause it doesn't use loadlibrary

[78372]

Originally Posted by ravencrow

Nopes, decoy DLL won't work in its case cause it doesn't use loadlibrary

Sure? Because rz somehow loads a windows dll afaik

[ravencrow]

Originally Posted by 78372

Sure? Because rz somehow loads a windows dll afaik

When we use decoy DLL, we exploit the fact that loadlibrary first looks for the DLL in the directory where the exe is and then looks up in windows index, but in razor's case it different.

[Razor12911]

Originally Posted by ravencrow

When we use decoy DLL, we exploit the fact that loadlibrary first looks for the DLL in the directory where the exe is and then looks up in windows index, but in razor's case it different.

I tested this a few days ago and it works and I don't think it matters whether implicit or explicit method of linking a library was used, might be wrong but method works.

[ravencrow]

Originally Posted by Razor12911

I tested this a few days ago and it works and I don't think it matters whether implicit or explicit method of linking a library was used, might be wrong but method works.

Would be nice if it worked, will save the trouble of using asm to patch it, did you try it for the library which exports CreatefileW? (Or whichever one it uses)