I'm wondering if it's possible to unlock protected functions by modifing wow.exe, instead of injecting .dll into it. Something akin Unlocking WoW-API Functions in 3.3.5a using Disassembler, although a universal bypass, instead of having to patch every single function you want to call.
I was able to patch GetCVar this way (for AVR), and I would also like to patch all protected lua functions (like BeginWalk or InitiateJumpOrAscend). Any ideas?