Updated Addies 05-20-2011

[whit]

Use IDA Pro for Make Sigs of Engine

Do you have a sig plugin for ida ?

[Alessandro10]

Do you have a sig plugin for ida ?

Nopes.. i Search Manually..(HexView-A)

[NewCories]

Do you have a sig plugin for ida ?

I have :P
________'

[whit]

Nopes.. i Search Manually..(HexView-A)

Fagget.....

[NewCories]

Nopes.. i Search Manually..(HexView-A)

I can open the Engine in OllyDbg =P

[Alessandro10]

Fagget.....

Works Perfectly.

[NewCories]

Works Perfectly?

Pass the sig of GameStatus and D3D Pointer

[Alessandro10]

@whit pass for you..

[NewCories]

@whit pass for you..

But you not have?
@|_Alessandro10_BR_|

[Alessandro10]

But you not have?
@|_Alessandro10_BR_|

Yes, but is Private.

[NewCories]

Yes, but is Private.

Stop with this, you not is Contributor?

[hack4me]

NewCories... The D3D pointer scan is out there. Look for it. Also check old bases. You will find it. Gamestatus can be sigged, but there are a lot of false positives. They keep changing a few bytes in Gamestatus which has mad sig scanning it a pain.

[NewCories]

NewCories... The D3D pointer scan is out there. Look for it. Also check old bases. You will find it. Gamestatus can be sigged, but there are a lot of false positives. They keep changing a few bytes in Gamestatus which has mad sig scanning it a pain.

Thanks @hack4me , i gonna use the IDA PRO + sigmaker for capture the sigs *-*

[NOOB]

NewCories... The D3D pointer scan is out there. Look for it. Also check old bases. You will find it. Gamestatus can be sigged, but there are a lot of false positives. They keep changing a few bytes in Gamestatus which has mad sig scanning it a pain.

There's a section by the addy that NEVER changes and you can search that stack and add/subtract to get the addy. Easy scan.

[Departure]

^^ what he said...