Yeah, i noticed that 1 for getlasterror means error_invalid_handle and 0 is needed for error_success.
Returning 1 is meant as replacement for the whole function where getlasterror is part of it. (Look at page 26 of "incomplete failing"
in order to see what i mean)
I cant locate that one in my dump, in Bioshock (same sr version) some antidumps are Xorred, maybe here too?
Tracing takes too much time, crash happens in a function that is executed almost 1000 times before successfully. (Like another one, where crash happened also so late, fixing the one with the ADVAPI32.dll checksum solved that crash.)
The funniest thing of that tut is
"Here you have binary copy of the patch you can paste in binary format:" with the fixed antidumps from the call table.
This can never works, since pid, window version, etc. are part of it.
About 200 hours i have worked on it already.
Do you know good tuts for coding asm?
The ones here by dabhand are about understanding asm, that i can do already.