View Single Post
  #17  
Old 06-11-2009, 11:57
Cowsheep Cowsheep is offline
Registered User
 
Join Date: Oct 2009
Location: Near OEP;)
Posts: 352
Thanks: 0
Thanked 13 Times in 4 Posts
Cowsheep is on a distinguished road
I have just a lot of interest in cracks and how they are made.

I have written it in bad way, rtlgetlastwin32error is imported from ntdll.dll, but securom uses the result in order to check if it is a dump or not ("RtlGetLastWin32Error: here again we need to return 1, in case there are errors we tell there aren’t any", like getcurrentprocessid. (or is complete owning here wrong ,too?)

Automating fixing the jmp bridges is a must, there are simple too many for doing it manually.

Respect to you for coding own tools, i cant do that, must use public tools and plugins.
Thats the difference between a script kiddie like me and the oldschool leet you belong to
Reply With Quote