Quote:
Originally posted by DyNy28+Jun 12 2007, 01:16--></span><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (DyNy28 @ Jun 12 2007, 01:16)</td></tr><tr><td id='QUOTE'> <!--QuoteBegin--anantasia@Jun 11 2007, 18:30
Gratz for Lvl 2 :D
|
Thank you!!!!
Ive been proud that im now Level 2!!
And i hope i can help even more people, and that there helping me to :-)
do you have allready maby the DMA defeat of the Arrow Read anastacia?
Greets,
DyNy [/b][/quote]
Yah, I know what address to inject but due to memory protection in code page. You can't easily to write your own code and execute.
My guide was post since 4351 announce. Here is link for info.
[Only registered and activated users can see links. Click Here To Register...]
For patch 4351
You must inject at address 407DB7 and read eax for arrow.
But you can't write anycode on 585XXX anymore. So you must rearrange your code/data to another area. I suggest using cheat engine and press Ctrl + R to view what available region that you can found address to write your own code.
Then write your code in CE and looking obcode to write your own inject code.
407DB7:
Jmp NewCode // (5 bytes code)
Nop // (1 byte code)
Nop // (1 byte code)
Return here:
NewCode:
mov eax,[ebp-04] // existing code (3 bytes code)
mov ax,[eax+46] // existing code (4 bytes code)
mov ArrowCount,eax
jmp returnhere
ArrowCount dd 00000000 // define Double Word variable