[Help] byte patterns for my addy logger

byte patterns for my addy logger

please help give me some byte patterns to create an addy logger
just list all you know

---------- Post added at 06:13 PM ---------- Previous post was at 05:48 PM ----------

this doesn't seem to work
Wallhack = FindPattern((DWORD)GetModuleHandleA(EncCrossfire), 0x2D7000, (PBYTE)"\xB8\x00\x00\x00\x00\xE8\x00\x00\x00\x00\x 8B\x06\x8B\x50\x18", "x????x????xxxxx");
if(Wallhack)
Wallhack = *(PDWORD)(Wallhack+0x01);

Actually, i don't think you need the EncCrossfire... You just set the StartAddress to 0...

Originally Posted by rabir007

Actually, i don't think you need the EncCrossfire... You just set the StartAddress to 0...

Wrong, The Start Adress must CShell!
And i think, the Pattern are wrong!

Originally Posted by CFHackerExtreme

Wrong, The Start Adress must CShell!
And i think, the Pattern are wrong!

the WallHack is Crossfire.exe addy, not CShell...

Originally Posted by rabir007

the WallHack is Crossfire.exe addy, not CShell...

Sry, i mean crossfire

Originally Posted by CFHackerExtreme

Sry, i mean crossfire

but in hack

Code:

*(float*)(0) = 0.0f;

In the memory, it means CrossFire + 0 = 0.0f;

Originally Posted by kjbmarr

please help give me some byte patterns to create an addy logger
just list all you know

---------- Post added at 06:13 PM ---------- Previous post was at 05:48 PM ----------

this doesn't seem to work
Wallhack = FindPattern((DWORD)GetModuleHandleA(EncCrossfire), 0x2D7000, (PBYTE)"\xB8\x00\x00\x00\x00\xE8\x00\x00\x00\x00\x 8B\x06\x8B\x50\x18", "x????x????xxxxx");
if(Wallhack)
Wallhack = *(PDWORD)(Wallhack+0x01);

you can search for bytes in IDA Pro or OllyDbg, copy an array of a selected addy
then wait until there is an update, research the new addy with the same asm code as the old

note : you DONT have to search for the OLD addy after an update,or it will be wrong
then compare the 2 array.

x : static byte
? : not static byte

first byte is static ( with x )
\x00\x00\x00\x00 bytes aren't statics (with ? )
last 3 bytes are static ( with x )

Pattern looks fine in CE

Code:

B8????????E8????????8B068B5018
0045B7CD - b8 20 74 6e 00             - mov eax,ltgetiltmemory+bb720
0045B7D2 - e8 f9 a3 06 00             - call 004c5bd0
0045B7D7 - 8b 06                      - mov eax,[esi]
0045B7D9 - 8b 50 18                   - mov edx,[eax+18]

ltgetiltmemory+bb720 being crossfire.exe+2E7420

anybody who can give some byte patterns?

Originally Posted by kjbmarr

this doesn't seem to work
Wallhack = FindPattern((DWORD)GetModuleHandleA(EncCrossfire), 0x2D7000, (PBYTE)"\xB8\x00\x00\x00\x00\xE8\x00\x00\x00\x00\x 8B\x06\x8B\x50\x18", "x????x????xxxxx");
if(Wallhack)
Wallhack = *(PDWORD)(Wallhack+0x01);

hmm.. pareho lang tayo ng pattern

Code:

DWORD WallHack = CrossfireFindPattern((PBYTE)"\xB8\x00\x00\x00\x00\xE8\x00\x00\x00\x00\x8B\x06\x8B\x50\x18", "x????x????xxxxx",1,true);

log("#define WallHack 0x%X",WallHack+0xA4);

Originally Posted by DOOP

hmm.. pareho lang tayo ng pattern
Code:
DWORD WallHack = CrossfireFindPattern((PBYTE)"\xB8\x00\x00\x00\x00\ xE8\x00\x00\x00\x00\x8B\x06\x8B\x50\x18", "x????x????xxxxx",1,true);

log("#define WallHack 0x%X",WallHack+0xA4);

is the wallhack addy 0x462FED?

Originally Posted by kjbmarr

is the wallhack addy 0x462FED?

0x709C64
posible naman na mali ang log. same pattern naman

Originally Posted by DOOP

0x709C64
posible naman na mali ang log. same pattern naman

working paba ung wallhack sa CFPH ?

Originally Posted by DOOP

0x709C64
posible naman na mali ang log. same pattern naman

salamat napagana ko na! nagmatch sa hex mo

give me other byte patterns pls

Originally Posted by kjbmarr

salamat napagana ko na! nagmatch sa hex mo

give me other byte patterns pls

what's so hard to make your own one in olly ? It take's less that 5 min .....

Helpbyte patterns for my addy logger

Similar Threads

Tags for this Thread