Easy as hell o_0
Originally Posted by Password77
Look at the bytes and commands.
the mov is constant, will not chnage, also the push 0 and push eax is ok. the call bytes will be changed, means E8 ?? ?? ?? ??
Just Make a sig of this function.
And BTW: The address you posted was spread by a noob -.-
What it is really:
And that you will understand why the addres you posted WILL NEVER be clientinfomgr ->
Last patch address. Will never moved in code to 372 LOL
And this through a sigscan, I never had cshell