2 LTC Sig-Scans
Ok, not writing much, just say what it is doing and give it you
first scan:
[php]Module: Engine
Bytes: \xE9\x00\x00\x00\x00\xCC\xCC\xCC\xCC\xCC\xCC\xCC\x CC\xCC\xCC\xCC\xA1\x00\x00\x00\x00
Mask: x????xxxxxxxxxxxx????
PTC Address:
LTC + 0x0(just use the scaned addy)
Creditz: I Dont Know xD[/php]
second scan:
[php]Module: CShell
Bytes: \xA1\x00\x00\x00\x37\x8B\x88\x00\x00\x00\x00\x68\x 00\x00\x00\x37\xFF\xD1\x59\xC2\x10\x00
Mask: x???xxx????x???xxxxxxx
Example:
if(LTClient)//if the address is founded
LTClient = *(DWORD*)(LTClient +1);//Read the Adres in that bytes:
//ASM:
//A1 ?? ?? ?? 37
//after A1 the bytes (?? ?? ?? 37) are the address, with *(DWORD*) u read it
//BYTE: 1Byte(8Bit);WORD: 2Bytes(16Bit);DWORD: 4Bytes(32Bit);QWORD: 8Bytes(64Bit)
//example:
//the bytes are A1 50 E5 76 37
//the the Address is 0x3776E550
//the rest u can learn ur self
PTC-Address:
LTC + 0x208
Creditz: hmm its not easy to say i think me, just searched a command(ShowPerfomanceStatistics) and sig scanned that xD, will working with every other command(if everytime this command is deleted by NEXON)
[/php]
with BYTE as 1 Byte im not sure
with the second scan u also can use the little class which Crash released(HERE)
enjoy if u want xD
first scan:
[php]Module: Engine
Bytes: \xE9\x00\x00\x00\x00\xCC\xCC\xCC\xCC\xCC\xCC\xCC\x CC\xCC\xCC\xCC\xA1\x00\x00\x00\x00
Mask: x????xxxxxxxxxxxx????
PTC Address:
LTC + 0x0(just use the scaned addy)
Creditz: I Dont Know xD[/php]
second scan:
[php]Module: CShell
Bytes: \xA1\x00\x00\x00\x37\x8B\x88\x00\x00\x00\x00\x68\x 00\x00\x00\x37\xFF\xD1\x59\xC2\x10\x00
Mask: x???xxx????x???xxxxxxx
Example:
if(LTClient)//if the address is founded
LTClient = *(DWORD*)(LTClient +1);//Read the Adres in that bytes:
//ASM:
//A1 ?? ?? ?? 37
//after A1 the bytes (?? ?? ?? 37) are the address, with *(DWORD*) u read it
//BYTE: 1Byte(8Bit);WORD: 2Bytes(16Bit);DWORD: 4Bytes(32Bit);QWORD: 8Bytes(64Bit)
//example:
//the bytes are A1 50 E5 76 37
//the the Address is 0x3776E550
//the rest u can learn ur self
PTC-Address:
LTC + 0x208
Creditz: hmm its not easy to say i think me, just searched a command(ShowPerfomanceStatistics) and sig scanned that xD, will working with every other command(if everytime this command is deleted by NEXON)
[/php]
with BYTE as 1 Byte im not sure
with the second scan u also can use the little class which Crash released(HERE)
enjoy if u want xD




