I'm use this WtW patren
CShell Entry Point : 0x3110000 <== this is result my Logg
CShell .code Size : 0x511000 <== this is result my Logg
CShell .code Offset : 0x1000 <== this is result my Logg
n i make this wtw logger.
look at this:
#define CShell 0x3110000 <==== it's Right for CF indonesia
#define ScanSize 0x511000
DWORD WTW_Offset = FindPattern(CShell, ScanSize, "\x68\x00\x00\x00\x00\x8D\x4C\x24\x2D\x6A\x00\x51\ xC6\x44\x24\x34\x00\xE8\x00\x00\x00\x00\x8B\x0D\x0 0\x00\x00\x00", "x????xxxxxxxxxxxxx????xx????");
WTW_Offset = *(DWORD*)(WTW_Offset + 0x1);
Writelog("#define WTW_Offset \t\t0x%.8X",WTW_Offset);
}
But not work n not Write offset in Notepad logg
i try edit patren.
look at this
DWORD WTW_Offset = FindPattern((DWORD)GetModuleHandleA("CShell.dll"), 0x511000, (PBYTE) "\x68\x00\x00\x00\x00\x8D\x4C\x24\x2D\x6A\x00\x51\ xC6\x44\x24\x34\x00\xE8\x00\x00\x00\x00\x8B\x0D\x0 0\x00\x00\x00", "x????xxxxxxxxxxxxx????xx????");
WTW_Offset = *(DWORD*)(WTW_Offset + 0x1);
Writelog("#define WTW_Offset \t\t0x%.8X",WTW_Offset);
}
But same problem.
someone Help me?
i will write your name in my base
Credit patren by MPGH.net
Last edited by Astr3Lune; 08-20-2013 at 08:15 AM.