• 1 Vote(s) - 5 Average
  • 1
  • 2
  • 3
  • 4
  • 5
[Release] Byte Spy v. 1.0 (Signature finder // Memory Scanner)
#1
[Image: bytespykh9.gif]

This tool is designed primarily to help find memory addresses after a game updates or for previous versions. It accomplishes this by searching the emory for the hex values, or byte signatures associated with an address that you currently have.

For example, if you have a hack such as 'unlimited health' and its address is 0x00451178, if you look at that address in a debugger(or something similar) and you will see a series of hex values starting at that address such as '8B 5D 08'. That is a byte sig for that address in memory(though we will generally want to use a larger sig for accuracy).
It represents the following code MOV EBX,DWORD PTR SS:[EBP+8] which may be repeated somewhere else in the program so we want to look at the next line, there we may find something like: BE EA 34 66 00 - - MOV ESI, 006634EA. Notice that an address is used there, sice the games code has changed, this address will not always be the same so we use something called a 'mask'.
We use the letter 'x' to represent a static value(values that we know won't change) and the symbol '?' to represent values that may have changed. So the mask to find this byte sig would be 'xxxx????'. 4'x' to represent 8B 5D 08 BE followed by 4 '?' to represent the address EA 34 66 00.
(addresses in asm are stored as bytes reverse of the actual address).
So in order to look for this byte sig with this tool you will want to enter the followig values:

Address:
0x00451178
Range:
0x2000
Mask:
xxxx????
Bytes
8B5D08BEEA346600

NOTE: We do not include any spaces between bytes in this box, we also dont need 'h' or '0x'.


Then just start the game you wish to scan, find its process with the dropdown tool and hit the search button. If the tool is succesful in finding the byte signature it will show the address in the box on the lower left, otherwise it will display "no matches found".

Kryptech


Attached Files
.rar   Byte Spy1.0.rar (Size: 133.96 KB / Downloads: 130)
  Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  Byte scaning ( CI ) E-losev 1 1,995 07-28-2013, 10:12
Last Post: SgtLegend
  Help how to write protect memory? reavenz 5 3,889 12-15-2012, 01:52
Last Post: Gam3rr0rZ
  xuid finder for mw3(4d1) raminr63 4 3,893 09-17-2012, 17:02
Last Post: SuperNovaAO
  [Request] rotceh_dnih signature rotceh_dnih 24 9,835 08-20-2012, 18:53
Last Post: Lemon
  Help all the Hack by memory inject are invalid arx-4 1 51,280 02-02-2012, 09:14
Last Post: surtek
Photo Preview It'sMods Store Signature 3v0lu710n 10 5,419 12-27-2011, 13:59
Last Post: Rendflex
  Google troll-scanner Arteq 4 3,282 11-28-2011, 17:55
Last Post: Rendflex
  [Tutorial] Basic MW2 Memory Hacking: Part 2 Yamato 2 4,779 10-10-2011, 12:37
Last Post: marsjee
  @skata3000's new signature Pozzuh 8 3,686 10-03-2011, 06:58
Last Post: Lemon
  LOOK AT MY BIG ASS SIGNATURE JariZ 0 1,629 09-24-2011, 14:32
Last Post: JariZ

Forum Jump:


Users browsing this thread: 1 Guest(s)