|
hardfloat: The signature for kindle_browser extension checking for downloads on a colorsoft version 5.18.0.1 is:
unsigned char patch1_find[] = { 0x0c, 0x36, 0x0c, 0x34, 0x00, 0x28, 0xea, 0xd0, 0x01, 0x24, 0x00, 0xe0, 0x00, 0x24 };
unsigned char patch1_replace[] = { 0x0c, 0x36, 0x0c, 0x34, 0x00, 0x28, 0xea, 0xd0, 0x01, 0x24, 0x00, 0xe0, 0x01, 0x24 };
The code in this version moves either 0 or 1 into r4, as seen in bytes above. The patch above, just moves 1 into r4 either case.
The patch I used on mine was a little further down where r4 content is moved to r0. Instead of mov r0, r4 (0x20 0x46) made a change to just store 1 in the return value register directly with movs r0, #1 (0x01 0x20).
I don't yet know about the code signature for the protocols change on this version.
|