Warden dump

[Beaving]

Scanning module from 13th June 12.

[DrGonzo]

Awesome that confirmed a few things on my end.

For those of you wanting to play along at home, open battle.net.dll, find FlushInformationCache and set a bp on its only reference.

Use Beaving's list here ([Diablo 3][[1.0.2.9749] Retail Patch 2 - Info Dump Thread) , set a hardware BP on read/access for one of the addresses and sit tight to find the scanning function.

[Beaving]

Pattern for the scanning function is 6A 00 57 53 56 51 ff 15.
Keep in mind that Warden is only loaded when logged in and modules are dynamically and are overwritten on different locations here and then.