Just verifying

[animepkmn]

I may have found the bytes on norecoil, noreload. I'm just not sure if they are correct. I couldn't manage to get the bytes on ollydbg for some reason, the addresses started with 7's and not 3's like i've seen in other videos.

NoRecoil = 0x3745AF6C
Bytes = 0D9h

NoReload = 0x374B0C21
Bytes = 0Fh

I'm not sure how to get the bytes off IDA but it seemed like this was it. Please check!
Also, how can i put odd number the bytes into \x, such as the noreload (if it's correct)? I know that norecoil would be \x0D\x9h or something relatively close.

Thanks.

[salavat17]

the Bytes are not correct
NoRecoil Bytes : \xD9\x44\x24\x14
NoReload Bytes: \x0F\x84\xB1\x01\x00\x00
and thx me

[animepkmn]

the Bytes are not correct
NoRecoil Bytes : \xD9\x44\x24\x14
NoReload Bytes: \x0F\x84\xB1\x01\x00\x00
and thx me

Thanks.

But how am i supposed to get the bytes manually? I will be fine once i learn this C:

[Ch40zz-C0d3r]

<_<
Rightclick -> View -> And chnage module to CShell...

[animepkmn]

<_<
Rightclick -> View -> And chnage module to CShell...

On what program?

Sorry, im just starting to learn.
EDIT: I can't find CShell on the list..?

[juggalo200]

-_- eather Ollydbg or IDA


i use ollydbg

[animepkmn]

I can't find Module 'CShell' when i rclck> view.. Any ideas?

[Ch40zz-C0d3r]

Well, you should Load CShell, File->Open
If that doesnt work, then you've got a problem some people had, IDK how to fix it, but Olly didnt show ANY of the new loaded modules.

[animepkmn]

Ill try that then.
EDIT: No work ):, perhaps giving me your ollydbg?

[matypatty]

use ida and switch to hex view

[animepkmn]

use ida and switch to hex view

Yeah that works, i see the bytes and checked them. But how can i get the exact bytes?