: It hooks into system functions like ASU_MISValidateSignatureAndCopyInfo() . If an app's signature is invalid, it generates the necessary signing information on the fly to bypass system checks.