Right so im releasing a functions labeler (idc) for Ghosts, Basically when you run this in IDA with any ghosts TU loaded up it should grab the offsets. I have tested on TU10, TU9 and TU8 and it grabs the offsets perfectly, in Future Tu's such as TU18 it may start to become a bit dodgy as binary's often change. If you wonder the point of it, its the easiest way of updating offsets for those who dont really know what to do If you want a offset to be added to this either do it your self using notepad or tell me to add and ill update it regularly.. Currently Grabs : 42 Offsets. How to use : 1. open up ida with ghosts loaded 2. goto FILE>SCRIPTFILE then locate this idc, (alternately in ida just press "ALT F7") 3. wait for it to complete 4. offsets shall be found in the output window Picture of ida after idc script ran : Spoiler Download : Spoiler http://www.mediafire.com/download/44hcl6b367j7jxo/ParseFunctionLabelerV2.1.idc Virus Scan (just incase) : Spoiler https://www.virustotal.com/en/file/6cda592bd267017a1344927d89ecc153f9b5cb2f565f1f48ea16f45601cf73eb/analysis/1394396512/ If you dont know how what ida is or ask me futher how to use, i will be quite blunt as tbh its quite easy to use
i am Parse if you ask parse what his name on here is, then you'll get your proof Also yes I'm IDA on TTG
