[Help] Need Byte Pattern

Need Byte Pattern

I need byte pattern for addy bypass client error 28_3
Some one can help ?

Have Fun!...
http://www.mpgh.net/forum/242-crossf...ss-28_3-a.html

Originally Posted by dreek1

Have Fun!...
http://www.mpgh.net/forum/242-crossf...ss-28_3-a.html

i have to try search that byte pattern, but nothing showed

Originally Posted by ComboDance

i have to try search that byte pattern, but nothing showed

do you need this?

DWORD ByPass = FindPattern((DWORD)GetModuleHandleA("CShell.dll"), 0xFC7000, (PBYTE)"\xC3\xCC\xCC\x8B\x44\x24\x04\x81\xEC\x00\x 00\x00\x00", "xxxxxxxxx????");
if(ByPass != NULL)
{
Writelog("#define ByPass 0x%X",ByPass - 0x180 - CShell + 0x198);
}

if not , sory

Originally Posted by Astr3Lune

do you need this?

DWORD ByPass = FindPattern((DWORD)GetModuleHandleA("CShell.dll"), 0xFC7000, (PBYTE)"\xC3\xCC\xCC\x8B\x44\x24\x04\x81\xEC\x00\x 00\x00\x00", "xxxxxxxxx????");
if(ByPass != NULL)
{
Writelog("#define ByPass 0x%X",ByPass - 0x180 - CShell + 0x198);
}

if not , sory

i don't know why my cshell not showed address addy

, i try C.E and ollydbg but not showed

Pattern and mask for bypass28_3

Code:

\xE8\x00\x00\x00\x00\x8B\xF0\x83\xC4\x04\x85\xF6\x0F\x84\x00\x00\x00\x00\xD9\x86\x00\x00\x00\x00

Code:

x????xxxxxxxxx????xx????

Binnary string

Code:

E8 ?? ?? ?? ?? 8B F0 83 C4 04 85 F6 0F 84 ?? ?? ?? ?? D9 86 ?? ?? ?? ??

Well .. in CFAL we used like this:

Code:

103A4175   . E8 B6B0E8FF    CALL csheelll.1022F230
103A417A   . 8BF0           MOV ESI,EAX
103A417C   . 83C4 04        ADD ESP,4
103A417F   . 85F6           TEST ESI,ESI
103A4181   . 0F84 E2010000  JE csheelll.103A4369
103A4187   . D986 3C0C0000  FLD DWORD PTR DS:[ESI+C3C]


0x3A4175

Pattern from Cf Eu: (C#)

Code:

public static unsafe uint FindBypass(uint CShell) { uint ByPass = FindPattern((int)CShell, 0xFFFFFF, @"\xE8\xF6\x06\xE9\xFF\x8B\xF0\x83\xC4\x04\x85\xF6\x0F\x84\xE2\x01\x00\x00\xD9\x86\x3C\x0C\x00\x00\x0F\xB6\x86\x6C\x08\x00\x00\xD9\x5C\x24\x08\x89\x44\x24\x04\xD9\x86\x40\x0C\x00\x00\x57", "x????xxxx?xxxx????xx????xxx????xxx?xxx?xx????x"); return ByPass - CShell; }

HelpNeed Byte Pattern

Similar Threads

Tags for this Thread