BlackShot Addresses *IMPORTANT*

Caezer99 · 2013-11-16T08:44:07.000Z

Okay, so today I tried dumping BlackShot.exe and tried searching around for DrawIndexedPrimitive Engine call for DIP mid function hook. I ended up finding a few interesting addresses in BlackShot.exe Here are some: 0x8CEED4 - nProtect GameGuard 0x8CEEE8 - nProtect GameGuard - Not Running Error 0x8CEF08 - GameMon Check Error 0x8CE424 - BlackShot/Data/ check address 0x8CE340 - BlackShot/Data/ check address This might be useful. I haven't tested them yet. I will try it soon.

here you need this function this is not mind

Code:

void function_list_dump( ) { dwGameGuardClassBase = GetGameGuard( ); do { GGMethodTable = *(PDWORD*)dwGameGuardClassBase; Sleep(10); } while( !GGMethodTable ); while( *(PDWORD)((DWORD)dwGameGuardClassBase + 4) == NULL ) Sleep(10); do { GGMethodTable2 = **(PDWORD**)((DWORD)dwGameGuardClassBase + 4); } while( !GGMethodTable2 ); #ifdef LOG_GG pLog->log("\n-------------\nGG Method Table 1\nsize = %d", dwGetMethodCount(GGMethodTable)); PrintMethodLocations( GGMethodTable ); pLog->log("\n-------------\nGG Method Table 2\nsize = %d", dwGetMethodCount(GGMethodTable2)); PrintMethodLocations( GGMethodTable2 ); ExitProcess(0); #endif }

GetGameGuard? Another GG function that's wrapped

Code:

typedef PVOID (__cdecl* tGetGameGuard)( );
tGetGameGuard GetGameGuard = (tGetGameGuard)GGPTR;

GGPTR? Location of this function

Code:

mov     eax, offset off_D25874
retn

I just print the functions like this:

Code:

void PrintMethodLocations( PDWORD pdwVMT )
{
	DWORD dwIndex = 0;

	for ( dwIndex = 0; pdwVMT[ dwIndex ]; dwIndex++ )
	{
		if ( IsBadCodePtr( ( FARPROC ) pdwVMT[ dwIndex ] ) )
		{
			break;
		}

		pLog->log("%i [ 0x%x ]", dwIndex, pdwVMT[dwIndex]);
	}
 }

This is not mind code you need to change a addresses all credit by shadow

BlackShot Addresses IMPORTANT

Post a Reply

Similar Threads

Tags for this Thread