https://img813.imageshack.us/img813/7113/67615054.png
when i drop the _Cshell! what is Next?
Printable View
https://img813.imageshack.us/img813/7113/67615054.png
when i drop the _Cshell! what is Next?
Instructions:
Right click -> View -> Module "CSHELL"
Right click -> search for -> all referenced text strings(I think)
Wait...
Search in new window Olly provides -> CursorCenter
Double click the found string
It will bring you back to the disassembler -> go up 2 lines
NEW ADDRESS!
Spoon feed and proof:
LT: cshell.dll+2E4B4C
+1F8
https://img207.imageshack.us/img207/8398/35125199.png
thank pro ! i found them!
Won't you mind request closing this? Cause you solved it now...
/requestclose
Man!!/rage/rage/rage
it's easy to find LTC :P