Sigs Scan's

[Define.Void]

Bom vou contar porque estou aqui!

Estou criando um logger mais ele ta simples de mais e precisava se alguém pudesse me passar algumas sign scan's, claro que não esqueceria de por nos créditos!

dwGlassWalls
dwLTClientDLL
dwGameStatus
dwDeviceGame
dwPlayerManager
dwCameraUpdate
dwDIPEngine
dwLTClientEXE
dwDrawPrimitive
dwSendToServer
dwPlayerStatus

Eu tenho o PlayerManager e DIPEngine só que quando peguei o endereços e fui comparar com os de outro logger aqui são muito diferentes!

Bom se alguém puder passar algumas dessas ou todos ficaria muito feliz e grato!

Resposta status
Aguardando...

[FR1GHT]

Baixa o logger do gellin, nele tu acha algumas

[[MPGH]Flengo]

cGameClientShell *pGameClientShell = *(cGameClientShell**)ADDR_GCS;

cPlayerManager *pPlayerManager = (cPlayerManager*)pGameClientShell->GetPlayerManager();

DWORD ADDR_PLAYERSTATUS = pPlayerManager + 0x30;

The rest you can find through public addresses or Gellin's logger.

[Define.Void]

Ve se o PlayerManager está correto

#define PATT_PlayerManager "\x8B\x0D\x00\x00\x00\x00\x8B\xB9\x00\x00\x00\x00\ x85\xFF\x75\x0C\x5F\x5B\x33\xC0"
#define MASK_PlayerManager "xx????xx????xxxxxxxx"


@Flengo sabe alguns tópicos onde posso encontrar sigs scan's ?

[_Debug_]

Ve se o PlayerManager está correto

#define PATT_PlayerManager "\x8B\x0D\x00\x00\x00\x00\x8B\xB9\x00\x00\x00\x00\ x85\xFF\x75\x0C\x5F\x5B\x33\xC0"
#define MASK_PlayerManager "xx????xx????xxxxxxxx"


@Flengo sabe alguns tópicos onde posso encontrar sigs scan's ?

Existe um monte de tópico na área de Coding Sources de CANA só procurar. Aqui alguns:

https://www.mpgh.net/forum/207-combat...-9-2012-a.html
https://www.mpgh.net/forum/207-combat...addresses.html
https://www.mpgh.net/forum/207-combat...-s2s-more.html
https://www.mpgh.net/forum/207-combat...sig-scans.html
https://www.mpgh.net/forum/397-combat...e-sigscan.html

PlayerStatus:

this->dwPlayerState = Main->Tools->FindPattern(this->dwCShellEntryPoint, this->dwCShellCodeSize, (BYTE*) "\x56\x8B\xF1\xE8\x00\x00\x00\x00\xC7\x06\x00\x00\x00\x00\x89\x35\x00\x00\x00\x00\x8B\xC6\x5E\xC3", "xxxx????xx????xx????xxxx");
this->dwPlayerState = *(DWORD*)*(DWORD*)(this->dwPlayerState + 16) + 0xB8;

Nesse menu no USSR's pode encontrar várias sings scans também:
https://www.mpgh.net/forum/207-combat...-d3d-menu.html

[Define.Void]

#define LTClientEXE	0x4860B0
#define EspName1	        0x371FD611
#define EspName2	        0x3725C5E0
#define NoReload	                0x37506E98
#define WeaponRange1	        0x375070D9
#define WeaponRange2	        0x37507459
#define RapidFire1		0x374FE017
#define RapidFire2		0x37507BCE
#define RapidFire3		0x375036D7
#define RapidFire4		0x37507BD5
#define SuperBullets		0x37501766
#define CameraUpdate		0x374B3362
#define PlayerByIndex		0x372CB5E3
#define RemoteKill1	        0x37507201
#define RemoteKill2	        0x37507202
#define RemoteKill3	        0x37507581
#define RemoteKill4	        0x37507582
#define GetConsoleInt	        0x373C4350
#define GetFontHand	        0x373AFA90
#define LTBase		        0x3780AD40
#define PlayersStatus		0x4489C433
#define LocalPlayer		0x6A0841
#define GCS		        0x37850528
#define DIPEngine		0x664C78
#define PlayerManager		0x3759CCDE
#define MTBWCRET		0x373A8917
#define LTClient		        0x3780AD58
#define WeaponMgr		0x3785726C
#define LOCALPTR		0x3789109C
#define BUILDFONT		0x375E55A0
#define FILLFONT		        0x375E6230
#define FONTECX		        0x37851D34
#define LTCOMMON		0x37857090
#define FORCEFPS		0x3780AB48
#define OFF_FPS			0x16E4C
#define W2S		        0x491690
#define INTERSECT		0x470C70
#define D3D		        0x9138F8
#define DRAWPRIM		0x807998
#define CursorCenter	        0x7F1C6C
#define CLIENTFX		        0x66F34

Alguns endereços do meu logger sairam diferentes.

Exemplo: Comparem os meus endereços com o do @Coder.Anonymous
https://www.mpgh.net/forum/397-combat...ger-1-0-a.html

@Coder.DiasII
https://www.mpgh.net/forum/397-combat...1-04-13-a.html

[_Debug_]

#define LTClientEXE	0x4860B0
#define EspName1	        0x371FD611
#define EspName2	        0x3725C5E0
#define NoReload	                0x37506E98
#define WeaponRange1	        0x375070D9
#define WeaponRange2	        0x37507459
#define RapidFire1		0x374FE017
#define RapidFire2		0x37507BCE
#define RapidFire3		0x375036D7
#define RapidFire4		0x37507BD5
#define SuperBullets		0x37501766
#define CameraUpdate		0x374B3362
#define PlayerByIndex		0x372CB5E3
#define RemoteKill1	        0x37507201
#define RemoteKill2	        0x37507202
#define RemoteKill3	        0x37507581
#define RemoteKill4	        0x37507582
#define GetConsoleInt	        0x373C4350
#define GetFontHand	        0x373AFA90
#define LTBase		        0x3780AD40
#define PlayersStatus		0x4489C433
#define LocalPlayer		0x6A0841
#define GCS		        0x37850528
#define DIPEngine		0x664C78
#define PlayerManager		0x3759CCDE
#define MTBWCRET		0x373A8917
#define LTClient		        0x3780AD58
#define WeaponMgr		0x3785726C
#define LOCALPTR		0x3789109C
#define BUILDFONT		0x375E55A0
#define FILLFONT		        0x375E6230
#define FONTECX		        0x37851D34
#define LTCOMMON		0x37857090
#define FORCEFPS		0x3780AB48
#define OFF_FPS			0x16E4C
#define W2S		        0x491690
#define INTERSECT		0x470C70
#define D3D		        0x9138F8
#define DRAWPRIM		0x807998
#define CursorCenter	        0x7F1C6C
#define CLIENTFX		        0x66F34

Alguns endereços do meu logger sairam diferentes.

Exemplo: Comparem os meus endereços com o do @Coder.Anonymous
https://www.mpgh.net/forum/397-combat...ger-1-0-a.html

@Coder.DiasII
https://www.mpgh.net/forum/397-combat...1-04-13-a.html

As vezes é necessário completar os endereços, um exemplo da sing scan do LTClientDLL:

dwLTClientDLL = Tools->FindPattern(dwCShellEntryPoint, dwCShellCodeSize, (BYTE*)"\x8B\x0D\x00\x00\x00\x00\xD9\x54\x24\x00\x53\xD9\x54\x24\x00\x8D\x5C\x24\x00\xD9\x5C\x24\x00\x53\xD9\xE8\x50","xx????xxx?xxxx?xxx?xxx?xxx");
dwLTClientDLL = (DWORD)*(DWORD*)(dwLTClientDLL + 0x2 );

Nessa sing scan ele adicionar mais 0x2 ao endereço, mas para isso é preciso entender de bytes para saber quanto deve ser colocado.

[FR1GHT]

As vezes é necessário completar os endereços, um exemplo da sing scan do LTClientDLL:

dwLTClientDLL = Tools->FindPattern(dwCShellEntryPoint, dwCShellCodeSize, (BYTE*)"\x8B\x0D\x00\x00\x00\x00\xD9\x54\x24\x00\x53\xD9\x54\x24\x00\x8D\x5C\x24\x00\xD9\x5C\x24\x00\x53\xD9\xE8\x50","xx????xxx?xxxx?xxx?xxx?xxx");
dwLTClientDLL = (DWORD)*(DWORD*)(dwLTClientDLL + 0x2 );

Nessa sing scan ele adicionar mais 0x2 ao endereço, mas para isso é preciso entender de bytes para saber quanto deve ser colocado.

Entender de ASM em geral é uma boa para isso

[Define.Void]

Duvidas Resolvidas!
thanks @_Debug_ @Flengo

[[MPGH]Flengo]

No problem

/Solved
/Closed