Addy Logger

i cant get the right CShell addy but Engine Address is right

Log

Code:

Engine Entry Point : 	0x400000
Engine .code Size : 	0x255000
Engine .code Offset : 	0x1000

CShell Entry Point : 	0x4570000
CShell .code Size : 	0x370000
CShell .code Offset : 	0x1000

#define DIP1 		0x004B5452 ->004B5452
#define DIP2 		0x004B3C4D ->004B3C4D
#define ES 		0x0045762F ->0045762F
#define PS 		0x004C761F ->004C761F

#define WallHack 	0x6D49E489 ->6D49E4
#define BPlayerInfo 	0xF051EE3 ->C7E380
#define WeaponMgr 	0x5255468 ->CE54B0
#define FallDamageMgr 	0xD9052554 ->CE5490

pattern

Code:

DWORD DIP1 = FindPattern(dwEngineEntryPoint, dwEngineCodeSize, (PBYTE)"\x8B\x08\x8B\x91\x00\x00\x00\x00\x57\x6A\x00\x53\x6A\x00\x6A\x00\x6A\x04\x50\xFF\xD2\x5F\x5E\x5D\x5B", "xxxx????xxxxxxxxxxxxxxxxx");

DWORD DIP2 = FindPattern(dwEngineEntryPoint, dwEngineCodeSize, (PBYTE)"\x8B\x10\x8B\x92\x00\x00\x00\x00\x51\x8B\x4C\x24\x20\x55\x51\x6A\x00\x6A\x04\x50\xFF\xD2\x8B\x43\x08\x8B\x8C\x24\x00\x00\x00\x00", "xxxx????xxxxxxxxxxxxxxxxxxxx????");

DWORD ES = FindPattern(dwEngineEntryPoint, dwEngineCodeSize, (PBYTE)"\x8B\x08\x8B\x91\x00\x00\x00\x00\x50\xFF\xD2\x85\xC0\x8D\x4C\x24\x08\x0F\x94\xC3\xE8\x00\x00\x00\x00\x8A\xC3", "xxxx????xxxxxxxxxxxxx????xx");

DWORD PS = FindPattern(dwEngineEntryPoint, dwEngineCodeSize, (PBYTE)"\x8B\x51\x44\x6A\x00\x6A\x00\x6A\x00\x50\xFF\xD2\xB8\x00\x00\x00\x00\xE8\x00\x00\x00\x00\xC7\x05\x00\x00\x00\x00\x00\x00\x00\x00", "xxxxxxxxxxxxx????x????xx????????");

DWORD WallHack = FindPattern(dwEngineEntryPoint, dwEngineCodeSize, (PBYTE)"\x0F\xB6\x89\xE4\x49\x6D\x00\x8B\x10\x8B\x92\x00\x00\x00\x00", "xxxxxxxxxxx????");

DWORD BPI = FindPattern(dwCShellEntryPoint, dwCShellCodeSize, (PBYTE)"\xA3\x00\x00\x00\x00\x0F\x84\x00\x00\x00\x00\x8B\x54\x24\x30\x3B\xD3\x75\x04", "x????xx????xxxxxxxx");

DWORD WeaponMgr = FindPattern(dwCShellEntryPoint, dwCShellCodeSize, (PBYTE)"\x8B\x0D\x00\x00\x00\x00\x85\xC9\x74\x0E\xA1\x00\x00\x00\x00", "xx????xxxxx????");

DWORD FallDamageMgr = FindPattern(dwCShellEntryPoint, dwCShellCodeSize, (PBYTE)"\xA1\x00\x00\x00\x00\xD9\x58\x04\x83\xC4\x04\x8B\x4C\x24\x2C", "x????xxxxxxxxxx");

Code:

		if(DIP1 != NULL)
		Writelog("#define DIP1 \t\t0x%.8X",DIP1);

		if(DIP2 != NULL)
		Writelog("#define DIP2 \t\t0x%.8X",DIP2);

		if(ES != NULL)
		Writelog("#define ES \t\t0x%.8X",ES);

		if(PS != NULL)
		Writelog("#define PS \t\t0x%.8X\n",PS);
		Sleep(50);

		if(WallHack != NULL)
		{
			WallHack = *(PDWORD)(WallHack+2);
			Writelog("#define WallHack \t0x%X",WallHack);
		}

		if(BPI != NULL)
		{
			BPI = *(PDWORD)(BPI+2);
			Writelog("#define BPlayerInfo \t0x%X",BPI);
		}

		if(WeaponMgr != NULL)
		{
			WeaponMgr = *(PDWORD)(WeaponMgr+2);
			Writelog("#define WeaponMgr \t0x%X",WeaponMgr);
		}

		if(FallDamageMgr != NULL)
		{
			FallDamageMgr = *(PDWORD)(FallDamageMgr+2);
			Writelog("#define FallDamageMgr \t0x%X",FallDamageMgr);
		}

Add me i'll help u
kerozhany@yahoo.com
kerozhany@hotmail.com
Skype: KerozHany

Originally Posted by KerozHany

Add me i'll help u
kerozhany@yahoo.com
kerozhany@hotmail.com
Skype: KerozHany

wew! old style mode.....lets talk here what you know and share what you learn...doing privately is a selfish way brother.

Originally Posted by KerozHany

Add me i'll help u

i have gmail only

Try this @UTAN

Code:

DWORD WeaponMgr = FindPattern(dwCShellEntryPoint, 0xFFFFFF, (PBYTE)"\x8B\x0D\x00\x00\x00\x00\x85\xC9\x74\x0E\xA1\x00\x00\x00\x00", "xx????xxxxx????");
if( WeaponMgr ) { WeaponMgr = *(PDWORD)(WeaponMgr+2); }// you will get the right pointer

thanks i'll try

EDIT: @ramo same result

@UTAN
the pattern u used is wrong "i have just noticed that".
this is the right one.

Code:

"\x8B\x0D\x00\x00\x00\x00\x85\xC9\x8B\x5A\x04" "xx????xxxxx"

#define WeaponMgr 0x52D5468

Maybe pattern scan is wrong

---------- Post added at 07:30 PM ---------- Previous post was at 07:12 PM ----------

#define WeaponMgr 0x52D54B0 the 3 number is wrong

@UTAN when u write the log, do this

Code:

Writelog("#define WeaponMgr \t0x%X",WeaponMgr - CShell);

and for wall hack is

Code:

Writelog("#define WallHack \t0x%X",WallHack + 0xA4);

@ramo @EMP[]
thanks
my Scan Pattern is incorrect

there new sig maker?

Code:

#define DIP1 		0x004B5452
#define DIP2 		0x004B3C4D
#define ES 		0x0045762F
#define PS 		0x004C761F

#define WallHack 	0x8B00071D <-wrong
#define BPlayerInfo 	0xAAD1FE3 <-wrong
#define WeaponMgr 	0xCE54B0
#define FallDamageMgr 	0xD4AD2654 <-wrong

Addy Logger

Post a Reply

Similar Threads

Tags for this Thread