|
No we haven't "played" together as you put it, the term mate is intended to keep things friendly and good humoured.
SMC - self modifying code. i.e. the apps code changes in memory during run-time as it is decrypted.
The IAT is important otherwise any reconstructed dump will not run as no import table is available for your imports. PE format needs to be right for your dumped code.
It certainly sounds like you haven't sorted all the redirected calls to the securom code. Your dump is already initialised to this set-up and this is deliberate to stop simple memory dumping.
I understand if english is not your first language....it seems good enough though.
No matter, as it sounds like you'll sort it out yourself one day
__________________
Munch......munch.....munch
|