HelpJust verifying

Posts 111 of 11 · Page 1 of 1
Just verifying
I may have found the bytes on norecoil, noreload. I'm just not sure if they are correct. I couldn't manage to get the bytes on ollydbg for some reason, the addresses started with 7's and not 3's like i've seen in other videos.

NoRecoil = 0x3745AF6C
Bytes = 0D9h

NoReload = 0x374B0C21
Bytes = 0Fh

I'm not sure how to get the bytes off IDA but it seemed like this was it. Please check!
Also, how can i put odd number the bytes into \x, such as the noreload (if it's correct)? I know that norecoil would be \x0D\x9h or something relatively close.

Thanks.
the Bytes are not correct
NoRecoil Bytes : \xD9\x44\x24\x14
NoReload Bytes: \x0F\x84\xB1\x01\x00\x00
and thx me
Quote Originally Posted by salavat17 View Post
the Bytes are not correct
NoRecoil Bytes : \xD9\x44\x24\x14
NoReload Bytes: \x0F\x84\xB1\x01\x00\x00
and thx me
Thanks.

But how am i supposed to get the bytes manually? I will be fine once i learn this C:
<_<
Rightclick -> View -> And chnage module to CShell...
Quote Originally Posted by Ch40zz-C0d3r View Post
<_<
Rightclick -> View -> And chnage module to CShell...
On what program?

Sorry, im just starting to learn.
EDIT: I can't find CShell on the list..?
-_- eather Ollydbg or IDA


i use ollydbg
I can't find Module 'CShell' when i rclck> view.. Any ideas?
Well, you should Load CShell, File->Open
If that doesnt work, then you've got a problem some people had, IDK how to fix it, but Olly didnt show ANY of the new loaded modules.
Ill try that then.
EDIT: No work ):, perhaps giving me your ollydbg?
use ida and switch to hex view
Quote Originally Posted by matypatty View Post
use ida and switch to hex view
Yeah that works, i see the bytes and checked them. But how can i get the exact bytes?
Posts 111 of 11 · Page 1 of 1

Post a Reply

Similar Threads

Tags for this Thread

None

Need help?