Yes indeed, I take a part that contains the address.
I convert them to a byte array and "nop" the ones that can be diferent.
When CF starts up the scanner scan's all the bytes in cshell.dll. If it is 100% the same (0x90 is alway's correct ) as the bytes I insert.
Then it return the address at the place I marked
I convert them to a byte array and "nop" the ones that can be diferent.
When CF starts up the scanner scan's all the bytes in cshell.dll. If it is 100% the same (0x90 is alway's correct ) as the bytes I insert.
Then it return the address at the place I marked
Originally Posted by Brimir
