Pattern for Playerstats

[kotentopf]

Hey,
can everyone help me to make a working pattern for the PlayerStats (THIS thread)?
I tried it for my self but if i get an adress i always get this one :

GetInfo->Succes 74198DE4 (copied by my hack Log)

else i get no adress.

So please help me to find out or if you fell great today u can tell us the pattern
but help is better to learn^^

P.S.:
tested the sig in olly debug and i found the correct adress in EU and NA but ingame its founding not this address-.-

[Gordon`]

how about to post your signature "that only works with ollydbg" to see wheres the problem?

i remember i gave you the pointer to the class and where to find it. i assumed u were able to create a working signature.

[kotentopf]

i know what u mean(i think)

searching the MOV EAX by string and subtract the address with EAX but i tried this... no result for me, or did i anything wrong?

here my Bytes:
\x60\x08\x78\x37\x30\xF0\x62\x09\xF8\x8F\x7D\x00\x 6C\x80\x6A\x37\xC8\x39\x92\x00

and my Mask:
???x????x?xxxxxx???x

i dont know now if i changed that sorry but u can find in olly the address

sorry wrong Mask

this is the right one:
???x?????xxxxx???x

[Gordon`]

8B 0D ?? ?? ?? ?? 8B 11 8B 92 80 => olly format
\x8B\x0D\x00\x00\x00\x00\x8B\x11\x8B\x92\x80 xx????xxxxx => for findpattern

result = findpattern(..., pattern, mask);
result = *(DWORD*)(result+2); //or memcpy(&result, (void*)(result+2), 4);

[kotentopf]

Result for this Pattern:

EU:
GetInfo->Succes 74178DE4

NA:
GetInfo->Succes 74138DE4

My start address is CShell.dll
my scan size is 0xFFFFFFFF

is that ok or must i set it smaller?

[Stephen]

It doesnt need to be smaller...

[Evolution92]

So how exactly would you use a signature? Not make it, but use it.

Example (This was an already posted signature):

DWORD NoReload = FindPattern((DWORD)GetModuleHandle("CShell.dll"), 0x91F000,   (PBYTE) "\x0F\x84\x00\x00\x00\x00\x8B\x96\x00\x00\x00\x00\x89\x96\x00\x00\x00\x00", "xx????xx????xx????");
NoReload = *(DWORD*)(NoReload+2); // Then add this?

if(Menu.mOpt[5].nopt > 0)
	Memoria((LPVOID) NoReload, "\x90\x90\x90\x90\x90\x90", 6);
else
	Memoria((LPVOID) NoReload, "\x0F\x84\xB1\x01\x00\x00", 6);

It dc's me when i start the game so obviously its not right. Any help? Lol.

[Crash]

So how exactly would you use a signature? Not make it, but use it.

Example (This was an already posted signature):

DWORD NoReload = FindPattern((DWORD)GetModuleHandle("CShell.dll"), 0x91F000,   (PBYTE) "\x0F\x84\x00\x00\x00\x00\x8B\x96\x00\x00\x00\x00\x89\x96\x00\x00\x00\x00", "xx????xx????xx????");
NoReload = *(DWORD*)(NoReload+2); // Then add this?

if(Menu.mOpt[5].nopt > 0)
	Memoria((LPVOID) NoReload, "\x90\x90\x90\x90\x90\x90", 6);
else
	Memoria((LPVOID) NoReload, "\x0F\x84\xB1\x01\x00\x00", 6);

It dc's me when i start the game so obviously its not right. Any help? Lol.

Uhh why did you do something else to the address...
Just the FindPattern will work.

[Evolution92]

Uhh why did you do something else to the address...
Just the FindPattern will work.

Oh well I tried both ways and it still dc's (It works when I put the addy in manually but not with the signature).

[Crash]

Oh well I tried both ways and it still dc's (It works when I put the addy in manually but not with the signature).

Okay well check that the address that the FindPattern is returning is correct.

[Evolution92]

Okay well check that the address that the FindPattern is returning is correct.

Ok thanks.