Originally Posted by
derh.acker
Try putting Sleep(10); after GetModuleHandleA("CShell.dll"); .
You didn't conside that CShell uses Themida and it takes time until it is unpacked.
Put the FindPattern into a loop which ends when the pattern is found with Sleep(10); at the end.
FindPattern isn't detected, there is something else XTrap detects. It is easy to find out what.
Maybe you should search for the string, then for the PUSH and search the pattern because this opcode could also be before the opcode for setting the reload time in CShell and then you got the wrong one. The region should begin after the PUSH.
Yes,I was thinking how the patterns get the address if the normal CShell is Packed.
Then i think,if i rename my unpack CShell it will get it?
But,Then i think if a patch surge i have to unpack it again and there is no auto update then.
Look This:
Code:
1013E778 68 6C083010 PUSH _CShell.1030086C ; ASCII "ReloadAnimRatio"
1013E77D D998 A4260000//Here are the Signatures for ---> FSTP DWORD PTR DS:[EAX+26A4]
1013E783 55 PUSH EBP
Then My Code is:
Code:
void Base()
{
DWORD CShell;
while(!(CShell = (DWORD)GetModuleHandle(L"CShell.dll")))
Sleep(10);
DWORD pWeaponMgr = *(DWORD*)(CShell + WeaponMgr);
DWORD pReload = (FindPattern((DWORD)GetModuleHandle(L"CShell.dll"), 0x20000, (PBYTE)"\xD9\x98\xA4\x26\x00\x00","xxxx??"));
Sleep(10);
if(NoReload)
{
if(pWeaponMgr)
{
for(int i=0; i<601; i++)
{
DWORD Weapon = *(DWORD*)(pWeaponMgr+4*i);
if(Weapon != NULL)
*(float*)(Weapon + pReload) = 35;
}
}
}
}
But when i do GetModuleHandleA i Get Xtrap,But when i use a Extern _stdcall like:
GetModuleHandle(L"CShell"); No problem with XTrap.
Too i have to Define on Globals:
Code:
//Globals
DWORD FindPattern(DWORD dwAddress,DWORD dwLen,BYTE *bMask,char * szMask);
bool bCompare(const BYTE* pData, const BYTE* bMask, const char* szMask);
To get no errors when i debug it.
Regards,
Edit:
I Get the Patterns work but i give me a super lag,
Look my source:
Code:
#include "stdafx.h"
#include <windows.h>
#include <stdio.h>
#include "Pattern.h"
#define Ptr 0xAAC3D0
#define NoRecoil1 0x051C
#define NoRecoil2 0x0684
#define NoRecoil3 0x1938
#define NoRecoil4 0x1B14
#define NoRecoil5 0x1FA0
#define NoRecoil6 0x2108
#define NoRecoil7 0x2270
#define NoRecoil8 0x2790
bool reload = true;
bool NoRecoil = true;
void Base()
{
dwStartAddress = 0x400000;
do {
dwStartAddress = (DWORD)GetModuleHandle(L"CShell.dll");
Sleep(10);
}
while(!dwStartAddress);
dwSize = 0x500000;
DWORD CShell = (DWORD)GetModuleHandleW(L"CShell.dll");
DWORD pWeaponMgr = *(DWORD*)(CShell + Ptr);
DWORD FastAmmo = FindPattern((PBYTE)"\xD9\x98\xA4\x26\x00\x00","xxxx??",2,true);
if(NoRecoil)
{
if (pWeaponMgr)
{
for(int i=0; i<601; i++)
{
if((*(DWORD*)((*(DWORD*)(CShell+Ptr))+(4*i)) ) != NULL)
{
DWORD pNoRecoil = *(DWORD*)(pWeaponMgr + (4*i));
for(int y=0; y<9; y++)
{
if(pNoRecoil)
{
*(float*)(pNoRecoil + (NoRecoil1 + (4*y))) = 0.0f;
*(float*)(pNoRecoil + (NoRecoil2 + (4*y))) = 0.0f;
*(float*)(pNoRecoil + (NoRecoil3 + (4*y))) = 0.0f;
*(float*)(pNoRecoil + (NoRecoil4 + (4*y))) = 0.0f;
*(float*)(pNoRecoil + (NoRecoil5 + (4*y))) = 0.0f;
*(float*)(pNoRecoil + (NoRecoil6 + (4*y))) = 0.0f;
*(float*)(pNoRecoil + (NoRecoil7 + (4*y))) = 0.0f;
}
}
}
}
}
}
if(reload)
{
if (pWeaponMgr)
{
for(int i=0; i<601; i++)
{
DWORD pWeapon = *(DWORD*)(pWeaponMgr+4*i);
if(pWeapon != NULL)
*(float*)((*(DWORD*)((*(DWORD*)(CShell+Ptr))+(4*i))) + FastAmmo) = 100;
}
}
}
}
int Wait()
{
Base();
return true;
}
BOOL WINAPI DllMain(HMODULE hDll, DWORD dwReason, LPVOID lpReserved)
{
if (dwReason == DLL_PROCESS_ATTACH)
{
DisableThreadLibraryCalls(hDll);
SetTimer(0,99,80,(TIMERPROC)Base);
}
return TRUE;
}
.
. Or maybe some 1 here have a solution?
. Thanx for code again.
