NameTag Pattern Issue..

Hey guys

well recently i have been having trouble with my nametag 1 and 2 pattern and they always dont come out right..
here are my patterns which I used makesig plugin for olly.

Code:

#define PATT_NAMETAG1         "\x75\x05\xBB\x00\x00\x00\x00\xA1\x00\x00\x00\x00\x8D\x54\x24\x1C\xC7\x44\x24\x00\x00\x00\x00\x00\x8B\x88\x00\x00\x00\x00\x52\xFF\xD1"
#define MASK_NAMETAG1         "xxx????x????xxxxxxx?????xx????xxx"

#define PATT_NAMETAG2         "\x75\x05\xBB\x00\x00\x00\x00\x8B\x17\x8B\x92\x00\x00\x00\x00\x85\xDB\x0F\x95\xC0\x0F\xB6\xC8\x51\x8B\xCF\xFF\xD2"
#define MASK_NAMETAG2         "xxx????xxxx????xxxxxxxxxxxxx"

Here are the addresses that come out when i run ca...they are always off...

Code:

#define ADDR_NAMETAG1		0x37234BDC
#define ADDR_NAMETAG2		0x37234C62

if anyone could tell me how i could fix this problem that would be great

What do you mean, they are always off?

Originally Posted by arun823

What do you mean, they are always off?

Its not correct address idk why lol

Originally Posted by WizdomNKush

Its not correct address idk why lol

You have the wrong sig scan...

Correct:

Code:

Main->Variables->dwNametag1 = Main->Tools->FindPattern(Main->Variables->dwCShellEntryPoint, Main->Variables->dwCShellCodeSize,(BYTE*)"\x75\x00\xbb\x00\x00\x00\x00\xa1\x00\x00\x00\x00\x8d\x54\x24\x1c","x?x????x????xxxx"); Main->Variables->dwNametag2 = Main->Tools->FindPattern(Main->Variables->dwCShellEntryPoint, Main->Variables->dwCShellCodeSize,(BYTE*)"\x75\x00\xbb\x00\x00\x00\x00\x8b\x17\x8b\x92\x94\x00\x00\x00\x85\xdb","x?x????xxxx????xx");

Originally Posted by arun823

You have the wrong sig scan...

Correct:

Code:

Main->Variables->dwNametag1 = Main->Tools->FindPattern(Main->Variables->dwCShellEntryPoint, Main->Variables->dwCShellCodeSize,(BYTE*)"\x75\x00\xbb\x00\x00\x00\x00\xa1\x00\x00\x00\x00\x8d\x54\x24\x1c","x?x????x????xxxx"); Main->Variables->dwNametag2 = Main->Tools->FindPattern(Main->Variables->dwCShellEntryPoint, Main->Variables->dwCShellCodeSize,(BYTE*)"\x75\x00\xbb\x00\x00\x00\x00\x8b\x17\x8b\x92\x94\x00\x00\x00\x85\xdb","x?x????xxxx????xx");

thanks!!

close @Flengo

NameTag Pattern Issue..

Post a Reply

Similar Threads

Tags for this Thread