Finding Bytes

[Aqollo]

I'm looking for some help if someone could briefly explain how to get bytes for no reload, and no recoil. I found a dumped engine and cshell... I looked around in the threads about finding addresses they don't say much, besides dumping.

[whit]

IDA hex view ..FTW

[Amatowarrior]

it's usually right by the address. If not, go with whit /yea

[Aqollo]

For some reason I can't find any of the addresses:

Looking at the base modules none of the offsets can be found in any of them...



Here are the addresses I'm using:

RELOAD 0x374B1824
RECOIL1 0x37465A60
RECOIL2 0x37234EB9
RECOIL3 0x37465A74
RECOIL4 0x37465A77

I got these addresses from one of the threads on the forums , so no credits go to me for them.

I don't know if were suppose to dump cshell or.. if the offsets are in it..

[Amatowarrior]

Click F9 twice, then search. If not, then right click>search for>all referenced text strings

[Aqollo]

Fixed. Thanks to you all.

[Aqollo]

I have gotten it to work, and fixed. Does anyone know where to look for the glass wall offset ? Since it begins with a 5:

Glass Walls Offset:

5725AA

I don't think its in Chsell :l or atleast I can't find it, in there.

[Amatowarrior]

I have gotten it to work, and fixed. Does anyone know where to look for the glass wall offset ? Since it begins with a 5:

Glass Walls Offset:

5725AA

I don't think its in Chsell :l or atleast I can't find it, in there.

I never tried the Glass Wall, I think that it's in Engine other then CShell

[Mr.Magicman]

You havent dumped CShell and offsets that are in the 6 digit region is always in a .exe.

And there is a window called Hex Dump below the disasembly window which you can use

[Aqollo]

You havent dumped CShell and offsets that are in the 6 digit region is always in a .exe.

And there is a window called Hex Dump below the disasembly window which you can use

Cheers, and thanks for the help all 3 of you have helped. :l