Pattern Scan S2S

Adress : 0x47A7F0

Signature

Code:

\x6A\xFF\x68\x00\x00\x00\x00\x64\xA1\x00\x00\x00\x00\x50\x83\xEC\x2C\x53\x56\x57\xA1\x00\x00\x00\x00\
x33\xC4\x50\x8D\x44\x24\x3C\x64\xA3\x00\x00\x00\x00\x8B\x74\x24\x4C\x33\xDB

Mask

Code:

xxx????xx????xxxxxxxx????xxxxxxxxx????xxxxxx

Base Adress

Code:

0x461000

Scan Size

Code:

0x432000

http://i.imgur.com/ChgaxGP.png

Well the sigscan isnt that awesome^^
There are some cool references to that address in CShell, so you will get some short and nice sigs with a lil offset.
They should be more "secure" after a patch

But thanks for the share anyways :P

Thought i might add a sigscan i made for player status (works for NA and EU)

Code:

PlayerStatus = (**(DWORD**)(FindPattern(dwCShellEntryPoint, dwCShellCodeSize, (PBYTE)"\xA1\x00\x00\x00\x00\x85\xC0\x74\x2A\x80\xB8\x84\x00\x00\x00\x00\x74\x18\xC6\x82\x71\x01\x00\x00\x00\x8B\x14\x24\x52\x81\xC1\x00\x00\x00\x00\xE8\x00\x00\x00\x00\x59\xC3\x8A\x82\x71\x01\x00\x00\x88\x04\x24\x8B\x14\x24\x52\x81\xC1\x00\x00\x00\x00\xE8\x00\x00\x00\x00\x59\xC3", "x????xxxxxxxxxxxxxxxxxxxxxxxxxx????x????xxxxxxxxxxxxxxxxx????x????xx") + 0x1) + 0xB8);

Originally Posted by Timboy67678

Thought i might add a sigscan i made for player status (works for NA and EU)

Code:

PlayerStatus = (**(DWORD**)(FindPattern(dwCShellEntryPoint, dwCShellCodeSize, (PBYTE)"\xA1\x00\x00\x00\x00\x85\xC0\x74\x2A\x80\xB8\x84\x00\x00\x00\x00\x74\x18\xC6\x82\x71\x01\x00\x00\x00\x8B\x14\x24\x52\x81\xC1\x00\x00\x00\x00\xE8\x00\x00\x00\x00\x59\xC3\x8A\x82\x71\x01\x00\x00\x88\x04\x24\x8B\x14\x24\x52\x81\xC1\x00\x00\x00\x00\xE8\x00\x00\x00\x00\x59\xC3", "x????xxxxxxxxxxxxxxxxxxxxxxxxxx????x????xxxxxxxxxxxxxxxxx????x????xx") + 0x1) + 0xB8);

my work in CABR CANA AND RU

You are great coder

Thanks, good catch.

Niceeeeeeeee one

I really don't see the point in even releasing s2s addy. Anyone that can even use it can easily obtain it themselves. Besides its not like anyone is going to release anything anytime soon.

Originally Posted by Skaterforeva1

I really don't see the point in even releasing s2s addy. Anyone that can even use it can easily obtain it themselves. Besides its not like anyone is going to release anything anytime soon.

very easy to find the S2S Function ;-)

Originally Posted by Timboy67678

very easy to find the S2S Function ;-)

I hope that you dont think that this exactly is the address

Originally Posted by Ch40zz-C0d3r

I hope that you dont think that this exactly is the address

nooooo the address is the start of the subroutine this is found in, im not that silly

Originally Posted by Timboy67678

nooooo the address is the start of the subroutine this is found in, im not that silly

Ok good

Pattern Scan S2S

Post a Reply

Similar Threads

Tags for this Thread