No-CD patch from scratch

[TippeX]

ntdll is NOT pushed on the stack

a pointer to the string '[Heap Handle != NULL]' is pushed
and then DbgPrint is called, printing debug strings to debug output...

i think you're well out of your league here..

if not, then why the hell are you debugging nt api's....?
the protection isn't in ntdll....

i'd suggest you try simpler targets and then work your way up to tages... you're definately showing signs of being lost and guessing (and being wrong...)...

that, and you're tracing effectively a call to ExitProcess.... or didn't you figure that out?