Instructions:
Right click -> View -> Module "CSHELL"
Right click -> search for -> all referenced text strings(I think)
Wait...
Search in new window Olly provides -> CursorCenter
Double click the found string
It will bring you back to the disassembler -> go up 2 lines
NEW ADDRESS!
Spoon feed and proof:
LT: cshell.dll+2E4B4C
+1F8
![]()