05-11-2009, 02:16 PM
Silva, I think I know why 1477 can't do the patch:
It was previously a call to this loadlibrary procedure, so the way to jumping back is 'retn'. 1477 may use a 'jmp' so the exe is crashed.
Quote:7.Jump back to the rest of the code (the line after the Entry Point, 004456E5).
It was previously a call to this loadlibrary procedure, so the way to jumping back is 'retn'. 1477 may use a 'jmp' so the exe is crashed.