Name Tags Patterns

Ae Galera andei debugando a CShell.dll e resolvi postar alguns patterns nao vo postar todos pq senao...

esses ai sao do name tags 1 e name tags 2
Créditos: @ChaosMagician por me Ajudar

Code:

#define PATT_NAME_TAGS1	  "\x75\x05\xBB\x00\x00\x00\x00\x8B\x17\x8B\x92\x00\x00\x00\x00\x85\xDB\x0F\x95\xC0\x0F\xB6\xC8\x51\x8B\xCF\xFF\xD2\x85\xDB\x0F\x84\x00\x00\x00\x00"

#define MASK_NAME_TAGS1   "xxx????xxxx????xxxxxxxxxxxxxxxxx????"

#define PATT_NAME_TAGS2	  "\x75\x05\xBB\x00\x00\x00\x00\xA1\x00\x00\x00\x00\x8D\x54\x24\x18\xC7\x44\x24\x00\x00\x00\x00\x00\x8B\x88\x00\x00\x00\x00\x52\xFF\xD1\x8B\x56\x24\x83\xC4\x04\x3B\x54\x24\x18\x75\x5D"

#define MASK_NAME_TAGS2   "xxx????x????xxxxxxx?????xx????xxxxxxxxxxxxxxx"

Originally Posted by luizimloko

Ae Galera andei debugando a CShell.dll e resolvi postar alguns patterns nao vo postar todos pq senao...

esses ai sao do name tags 1 e name tags 2
Créditos: @ChaosMagician por me Ajudar

Code:

#define PATT_NAME_TAGS1	  "\x75\x05\xBB\x00\x00\x00\x00\x8B\x17\x8B\x92\x00\x00\x00\x00\x85\xDB\x0F\x95\xC0\x0F\xB6\xC8\x51\x8B\xCF\xFF\xD2\x85\xDB\x0F\x84\x00\x00\x00\x00"

#define MASK_NAME_TAGS1   "xxx????xxxx????xxxxxxxxxxxxxxxxx????"

#define PATT_NAME_TAGS2	  "\x75\x05\xBB\x00\x00\x00\x00\xA1\x00\x00\x00\x00\x8D\x54\x24\x18\xC7\x44\x24\x00\x00\x00\x00\x00\x8B\x88\x00\x00\x00\x00\x52\xFF\xD1\x8B\x56\x24\x83\xC4\x04\x3B\x54\x24\x18\x75\x5D"

#define MASK_NAME_TAGS2   "xxx????x????xxxxxxx?????xx????xxxxxxxxxxxxxxx"

Caco de código para um byte só não acha?

Mais scans e código fonte de um Address Logger aqui: Address Logger By: Gellin

Originally Posted by 50-CeNt-

Caco de código para um byte só não acha?

kkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkk larga de ser lixo mlk se vc nao sabe pra que serve fica caladin

Originally Posted by luizimloko

kkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkk larga de ser lixo mlk se vc nao sabe pra que serve fica caladin

Só to falando do tamanho do byte se ker falar q me odeia fala n fica trollando todos os meus posts e fala de uma vez e nem preciso perguntar aonde conseguiu esse codigo no teu logger

Originally Posted by 50-CeNt-

Só to falando do tamanho do byte se ker falar q me odeia fala n fica trollando todos os meus posts e fala de uma vez e nem preciso perguntar aonde conseguiu esse codigo no teu logger

Gellin Jelly pra que preciso esconder ?
mais esse ai eu que procurei

//////////////////////////////////
é eu te odeio pq vc e negro
zoa

Originally Posted by luizimloko

Gellin Jelly pra que preciso esconder ?
mais esse ai eu que procurei

//////////////////////////////////
é eu te odeio pq vc e negro
zoa

Sei q é zoação mais eu n so negro para falar a vdd bem branco msm e o teu logger ja ta postado pelo SOaD

Originally Posted by 50-CeNt-

Sei q é zoação mais eu n so negro para falar a vdd bem branco msm e o teu logger ja ta postado pelo SOaD

nao é m e u l o g u e r baixa ele e ve se tem pattern de nametags la --'

Originally Posted by luizimloko

nao é m e u l o g u e r baixa ele e ve se tem pattern de nametags la --'

Calma eu sei q n é teu logger é do gellin mas acho q ele só acha os endereços normais tipo ltclientdll ou alguns outros!

Pra que reclamar do tamanho do byte? Ele é assim justamente pra ser encontrado uma única vez e vc não achar endereços indesejados

Mais Bytes graças ao Gellin

Code:

#define PATT_MTBWC			  "\x68\x00\x00\x00\x00\x2B\xC2\x8D\x8C\x24\x00\x00\x00\x00\x51\x40\x50\x8D\x54\x24\x00\x52\x55\x55"
#define MASK_MTBWC			  "x????xxxxx????xxxxxx?xx"

#define PATT_LTCLIENT		  "\x8B\x0D\x00\x00\x00\x00\xD9\x54\x24\x00\x53\xD9\x54\x24\x00\x8D\x5C\x24\x00\xD9\x5C\x24\x00\x53\xD9\xE8\x50"
#define MASK_LTCLIENT         "xx????xxx?xxxx?xxx?xxx?xxx"

#define PATT_WEPMGR			  "\xA1\x00\x00\x00\x00\xD9\x80\x00\x00\x00\x00\x51\x8B\x0D\x00\x00\x00\x00\xD9\x1C\x24\x6A\x00"
#define MASK_WEPMGR			  "x????xx????xxx????xxxx"

#define PATT_LOCALPTR		  "\x8B\x0D\x00\x00\x00\x00\x0F\xB7\x96\x00\x00\x00\x00\x8B\x1\x8B\x80\x00\x00\x00\x00\x52\xFF\xD0\x85\xC0"
#define MASK_LOCALPTR		  "xx????xxx????xxxx????xxxx"

#define PATT_BUILDFONT		  "\x8B\x44\x24\x00\x56\x8B\xF1\x8B\x4C\x24\x00\x8B\x16\x8B\x92\x00\x00\x00\x00\x89\x86\x00\x00\x00\x00\x8B\x44\x24\x00\x50\x51\x8B\xCE\xFF\xD2\x85\xC0"
#define MASK_BUILDFONT		  "xxx?xxxxxx?xxxx????xx????xxx?xxxxxxx"

#define PATT_FILLFONT		  "\x89\x50\x00\xC2\x00\x00\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\x6A\x00\x68\x00\x00\x00\x00\x64\xA1\x00\x00\x00\x00\x50\x51\x53\x55\x56\x57"
#define MASK_FILLFONT		  "xx?x??xxxxxxxxxxxx?x????xx????xxxxx"

#define PATT_FONTECX		  "\xA1\x00\x00\x00\x00\xD9\x7C\x24\x00\xD9\x80\x00\x00\x00\x00\x8B\x4E\x00\xDC\x0D\x00\x00\x00\x00\x0F\xB7\x44\x24\x00\xD9\xC9\x8B\x11\xDC\x5\x00\x00\x00\x00\x0D\x00\x00\x00\x00\x89\x44\x24\x00\x8B\x42\x00"
#define MASK_FONTECX		  "x????xxx?xx????xx?xx????xxxx?xxxxxx????x????xxx?xx"
	
#define PATT_GETFONTHAND	  "\x8B\x44\x24\x00\x56\x8B\xF1\x8B\x8E\x00\x00\x00\x00\x2B\x8E\x00\x00\x00\x00\xC1\xF9\x00\x3B\xC1\x72\x00\x80\x7C\x24\x00\x00\x74\x00\xA1\x00\x00\x00\x00\x8B\x10"
#define MASK_GETFONTHAND	  "xxx?xxxxx????xx????xx?xxx?xxx??x?x????x"

#define PATT_GETCONSOLEINT	  "\xA1\x00\x00\x00\x00\x85\xC0\x74\x00\x8B\x4C\x24\x00\x8B\x90\x00\x00\x00\x00\x51\xFF\xD2\x83\xC4\x00\x85\xC0\x74\x00"
#define MASK_GETCONSOLEINT	  "x????xxx?xxx?xx????xxxxx?xxx"

#define PATT_GCS			  "\x8B\x0D\x00\x00\x00\x00\x8B\x01\x8B\x90\x00\x00\x00\x00\xFF\xD2\x8B\xD8\x85\xDB\x0F\x84\x00\x00\x00\x00\x8B\x86\x00\x00\x00\x00\x8B\x0D\x00\x00\x00\x00\x50\x33\xFF"
#define MASK_GCS			  "xx????xxxx????xxxxxxxx????xx????xx????xx"

#define PATT_LTCOMMON		  "\x8B\x0D\x00\x00\x00\x00\x8B\x11\x6A\x00\x6A\x00\x6A\x00\x50\x8B\x42\x00\xFF\xD0\x8B\xB6\x00\x00\x00\x00\x85\xF6\x74\x00" 
#define MASK_LTCOMMON		  "xx????xxx?x?x?xxx?xxxx????xxx"

#define PATT_SUPERBULLETS	  "\x8B\x90\x00\x00\x00\x00\x56\xFF\xD2\x8B\xC8\xE8\x00\x00\x00\x00\x85\xC0\x5F\x0F\x94\xC0\x5E\xC3"
#define MASK_SUPERBULLETS	  "xx????xxxxxx????xxxxxxx"

#define PATT_FPSOFFSET		  "\xEB\x00\xDD\xD8\x8B\x0D\x00\x00\x00\x00\x8B\x11\x8B\x42\x00\xFF\xD0\xD9\x1D\x00\x00\x00\x00\x39\xAE\x00\x00\x00\x00\x0F\x84\x00\x00\x00\x00\x8B\x86\x00"
#define MASK_FPSOFFSET		  "x?xxxx????xxxx?xxxx????xx????xx????xx"

#define PATT_REMOTEKILL1      "\x52\xD9\x5C\x24\x00\xD9\x40\x00\x8D\x44\x24\x00\xD9\x5C\x24\x00\x50\xD9\x44\x24\x00\xD9\x5C\x24\x00\xD9\x44\x24\x00\xD9\x5C\x24\x00\xD9\x44\x24\x00\xD9\x5C\x24\x00"
#define MASK_REMOTEKILL1	  "xxxx?xx?xxx?xxx?xxxx?xxx?xxx?xxx?xxx?xxx"

#define PATT_WEAPONRANGE	  "\x8B\x80\x00\x00\x00\x00\x89\x44\x24\x00\x8B\x82\x00\x00\x00\x00\xFF\xD0\x3B\xC3\x74\x00\xD9\x80\x00\x00\x00\x00\xDA\x4C\x24\x00\xDA\x44\x24\x00"
#define MASK_WEAPONRANGE	  "xx????xxx?xx????xxxxx?xx????xxx?xxx"

#define PATT_RAPIDFIRE1       "\x74\x00\x8B\x06\x8B\x50\x00\x8B\xCE\xFF\xD2\x8B\xC7\x5F\x5E\xC2\x00\x00\xCC\xCC\xCC"
#define MASK_RAPIDFIRE1		  "x?xxxx?xxxxxxxxx??xx"

#define PATT_RAPIDFIRE2		  "\x80\xBE\x00\x00\x00\x00\x00\x74\x00\x8B\x86\x00\x00\x00\x00\x8B\xD\x00\x00\x00\x00\x8B\x78\x00\xE8\x00\x00\x00\x00\x85\xC0"
#define MASK_RAPIDFIRE2		  "xx?????x?xx????xx????xx?x????x"

#define PATT_RAPIDFIRE3		  "\x7E\x00\x8B\x96\x00\x00\x00\x00\x3B\x82\x00\x00\x00\x00\x7D\x00\xC6\x44\x24\x00\x00\xEB\x00\x84\xC9\x74\x00\x80\xBE\x00"
#define MASK_RAPIDFIRE3		  "x?xx????xx????x?xxx??x?xxx?xx"

#define PATT_RAPIDFIRE4		  "\x74\x00\x8B\x86\x00\x00\x00\x00\x8B\xD\x00\x00\x00\x00\x8B\x78\x00\xE8\x00\x00\x00\x00\x85\xC0\x74\x00"
#define MASK_RAPIDFIRE4		  "x?xx????xx????xx?x????xxx"

#define PATT_RAPIDFIRE5		  "\x8B\x86\x00\x00\x00\x00\x5F\x5E\x5D\x5B\x83\xC4\x00\xC2\x00\x00\x83\xFF\x00\x75\x00\x8B\xCE"
#define MASK_RAPIDFIRE5		  "xx????xxxxxx?x??xx?x?x"

#define PATT_ITL***BASE		  "\x68\x00\x00\x00\x00\x68\x00\x00\x00\x00\xB9\x00\x00\x00\x00\xE8\x00\x00\x00\x00\x68\x00\x00\x00\x00\xE8\x00\x00\x00\x00\x59\xC3\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xB9\x00\x00\x00\x00\xE8\x00\x00\x00\x00\x68\x00\x00\x00\x00\xE8\x00\x00\x00\x00\x59\xC3\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\x6A\x00\x68\x00\x00\x00\x00\x68\x00\x00\x00\x00\xB9\x00\x00\x00\x00\xE8\x00\x00\x00\x00\x68\x00\x00\x00\x00\xE8\x00\x00\x00\x00\x59\xC3\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xD9\xE8\xE8\x00\x00\x00\x00\xDC\xD\x00\x00\x00\x00\xD9\x1D\x00" 
#define MASK_ITL***BASE		  "x????x????x????x????x????x????xxxxxxxxxxxxxxxxx????x????x????x????xxxxxxxxxxxxx?x????x????x????x????x????x????xxxxxxxxxxxxxxxxxxx????xx????xx"

#define PATT_FORCEFPS		  "\x50\xE8\x00\x00\x00\x00\x83\xC4\x00\xC7\x05\x00\x00\x00\x00\x00\x00\x00\x00\xC7\x05\x00\x00\x00\x00\x00\x00\x00\x00\xC7\x05\x00\x00\x00\x00\x00\x00\x00\x00\xC3\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xB9\x00\x00\x00\x00\xE9\x00\x00\x00\x00\xCC\xCC\xCC\xCC\xCC\xCC\xB9\x00\x00\x00\x00\xE9\x00\x00\x00\x00\xCC\xCC\xCC\xCC\xCC\xCC\xB9\x00" 
#define MASK_FORCEFPS		  "xx????xx?xx????????xx????????xx????????xxxxxxxxxxxxxxxxx????x????xxxxxxx????x????xxxxxxx"

#define PATT_D3DDEVICE		  "\x8B\xD\x00\x00\x00\x00\x89\x4D\x00\x33\xD2\x52\x8B\x45\x00\x50\x8B\x4D\x00\x8B\x11\x8B\x45\x00\x8B\x8\x8B\x12\x51\x8B\x82\x00\x00\x00\x00\xFF\xD0\xEB\x00\x8B\xE5\x5D\xC3\xCC\xCC" 
#define MASK_D3DDEVICE		  "xx????xx?xxxxx?xxx?xxxx?xxxxxxx????xxx?xxxxx"

#define PATT_WORLDTOSCREEN    "\x56\x8D\x81\x00\x00\x00\x00\x50\x8D\xB1\x00\x00\x00\x00\x56\x8D\x91\x00\x00\x00\x00\x52\x81\xC1\x00" 
#define MASK_WORLDTOSCREEN	  "xxx????xxx????xxx????xxx"

#define PATT_DRAWPRIM		  "\x8B\x50\x00\x8B\x12\x56\x8B\x70\x00\x89\xC\x96\x8B\x48\x00\xFF\x1\x5E\x8B\x40\x00\xFF\x0\xC3\x8B\xC1\xC3\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xC3\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xA1\x00\x00\x00\x00\xC3\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xA1\x00\x00\x00\x00\xC3\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xA1\x00\x00\x00\x00\xC3\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xA1\x00\x00\x00\x00\xC3\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xA1\x00\x00\x00\x00\xC3\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xA1\x00\x00\x00\x00\xC3\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xA1\x00"
#define MASK_DRAWPRIM		  "xx?xxxxx?xxxxx?xxxxx?xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx????xxxxxxxxxxxx????xxxxxxxxxxxx????xxxxxxxxxxxx????xxxxxxxxxxxx????xxxxxxxxxxxx????xxxxxxxxxxxx"

#define PATT_INTERSECT		  "\x8B\x54\x24\x00\x8B\x0D\x00\x00\x00\x00\x8B\x01\x8B\x40\x00\x52\x8B\x54\x24\x00\x52\xFF\xD0\xC3\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\x8B\x54\x24\x00\xD9\x44\x24\x00"
#define MASK_INTERSECT		  "xxx?xx????xxxx?xxxx?xxxxxxxxxxxxxxx?xxx"

#define PATT_CURSORCENTER	  "\x39\x3D\x00\x00\x00\x00\x74\x00\x57\xFF\x15\x00\x00\x00\x00\x89\x3D\x00\x00\x00\x00\x68\x00\x00\x00\x00\xE8\x00\x00\x00\x00\x83\xC4\x00\xE8\x00"
#define MASK_CURSORCENTER	  "xx????x?xxx????xx????x????x????xx?x"

#define PATT_CONSOLEUNWRAPPED "\xC7\x5\x00\x00\x00\x00\x00\x00\x00\x00\xC7\x5\x00\x00\x00\x00\x00\x00\x00\x00\xE8\x00\x00\x00\x00\x83\xC4\x00\x68\x00\x00\x00\x00\xB9\x00\x00\x00\x00\xE8\x00\x00\x00\x00\xC3\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\x68\x00\x00\x00\x00\xE8\x00\x00\x00\x00\x59\xC3\xCC\xCC\xCC\xCC\x8B\x44\x24\x00"
#define MASK_CONSOLEUNWRAPPED "xx????????xx????????x????xx?x????x????x????xxxxxxxxxxxxx????x????xxxxxxxxx"

#define PATT_CLIENTFX		  "\xD9\xEE\x8B\xC1\xD9\x58\x00\xC3\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xB0\x00\xC2\x00\x00\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xB8\x00\x00\x00\x00\xC3\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\x8B\x44\x24\x00\xA3\x00"
#define MASK_CLIENTFX		  "xxxxxx?xxxxxxxxxx?x??xxxxxxxxxxxx????xxxxxxxxxxxxxx?x"

Mais uma vez Crédito por ter feito tudo: Gellin

@S0aD

Créditos pelo tópico :

//zoa

Originally Posted by ChaosMagician

@S0aD

Créditos pelo tópico :

//zoa

Odeio quando fazem isso:

"Crédito por ter criado o tópico: Eu"

Originally Posted by 50-CeNt-

Sei q é zoação mais eu n so negro para falar a vdd bem branco msm e o teu logger ja ta postado pelo SOaD

KKKKKKKKKKKKKKKKKKKK TA BEM INFORMADO

Pra quem não conhece essa LacyPro ta ai:

E eu aposto meu saco como esse injetor é leechado tambem.

Name Tags Patterns

Post a Reply

Similar Threads

Tags for this Thread