IDA + Engine.exe Dump
Ok , I recently got Engine.exe dumped and deleted the .dmp file extension and rebuilt using LORDPE . Now when I load it into IDA Pro , I search for SendToServer through the text option and it just takes forever ! is there anyway to search for it faster or is there another method of finding the updated SendToServer Address ?
Much help is appreciated and you can add my msn @ crashinfinity @ hotmail.com !
Use olly. Open engine.exe directly, wait until engine module is decrypted and dump it via plugin. Then do a stringsearch in olly.