no, xpsupport is the same, look at md5sum results is THE SAME FILE. xpsupport.dll is te dbghelp.dll from original windows.... please wait for joe or empire verification
.
No result in olly, no results in IDA. żis the same md5? please upload the binary
. no more posts.
Look in your uploaded image:
repeat: xpsuport.dll is the original dbghelp.dll... from windows.
Quote:
Open up xpsupport.dll
Goto offset 0006A462
Scroll down a bit, with strings showing, why is llsass there?
|
in the offset the string is lsass and lsass.exe ORIGINAL PROCESS. LEARN yor "EXTRA L"
http://www.flipcode.com/archives/Adv..._Unicode.shtml
or in this page:
http://docs.wxwidgets.org/2.8/wx_unicode.html
L evil jajajaja, I do not express myself in English because I am Spanish. But your level of programming, do not get into more conversations.