Sicheats (h4x0r) trainers now contain DRM but why?

[Traziz]

Here is something you can easily do in olly.

Open up xpsupport.dll

Goto offset 0006A462

Scroll down a bit, with strings showing, why is llsass there?

[cocodrilo]

no, xpsupport is the same, look at md5sum results is THE SAME FILE. xpsupport.dll is te dbghelp.dll from original windows.... please wait for joe or empire verification .

No result in olly, no results in IDA. ¿is the same md5? please upload the binary . no more posts.

Look in your uploaded image:



repeat: xpsuport.dll is the original dbghelp.dll... from windows.

Open up xpsupport.dll

Goto offset 0006A462

Scroll down a bit, with strings showing, why is llsass there?

in the offset the string is lsass and lsass.exe ORIGINAL PROCESS. LEARN yor "EXTRA L" http://www.flipcode.com/archives/Adv..._Unicode.shtml

or in this page:

http://docs.wxwidgets.org/2.8/wx_unicode.html

L evil jajajaja, I do not express myself in English because I am Spanish. But your level of programming, do not get into more conversations.