View Single Post
  #2  
Old 11-03-2004, 08:08
doug
 
Posts: n/a
.rdklft (aka .cms_t) Securom Code
.wpdf (aka .cms_d) Securom Data
.idata Securom's Import Table
everything else is part of the game.

If you are working on something that's already been cracked and you still see code getting executed in .cms_t, then it's either
- api triggers: fade-kind of checks
- code splitter: code blocks from .text that were moved into gaps in .cms_t

either way you don't have to worry about it too much... just find where it leads back in .text.
Reply With Quote