Pattern for Playerstats

Hey,
can everyone help me to make a working pattern for the PlayerStats (THIS thread)?
I tried it for my self but if i get an adress i always get this one :

GetInfo->Succes 74198DE4 (copied by my hack Log)

else i get no adress.

So please help me to find out or if you fell great today u can tell us the pattern

but help is better to learn^^

P.S.:
tested the sig in olly debug and i found the correct adress in EU and NA but ingame its founding not this address-.-

how about to post your signature "that only works with ollydbg" to see wheres the problem?

i remember i gave you the pointer to the class and where to find it. i assumed u were able to create a working signature.

i know what u mean(i think)

searching the MOV EAX by string and subtract the address with EAX but i tried this... no result for me, or did i anything wrong?

here my Bytes:
\x60\x08\x78\x37\x30\xF0\x62\x09\xF8\x8F\x7D\x00\x 6C\x80\x6A\x37\xC8\x39\x92\x00

and my Mask:
???x????x?xxxxxx???x

i dont know now if i changed that sorry but u can find in olly the address

sorry wrong Mask

this is the right one:
???x?????xxxxx???x

Code:

8B 0D ?? ?? ?? ?? 8B 11 8B 92 80 => olly format
\x8B\x0D\x00\x00\x00\x00\x8B\x11\x8B\x92\x80 xx????xxxxx => for findpattern

result = findpattern(..., pattern, mask);
result = *(DWORD*)(result+2); //or memcpy(&result, (void*)(result+2), 4);

Result for this Pattern:

EU:
GetInfo->Succes 74178DE4

NA:
GetInfo->Succes 74138DE4

My start address is CShell.dll
my scan size is 0xFFFFFFFF

is that ok or must i set it smaller?

It doesnt need to be smaller...

So how exactly would you use a signature? Not make it, but use it.

Example (This was an already posted signature):

Code:

DWORD NoReload = FindPattern((DWORD)GetModuleHandle("CShell.dll"), 0x91F000,   (PBYTE) "\x0F\x84\x00\x00\x00\x00\x8B\x96\x00\x00\x00\x00\x89\x96\x00\x00\x00\x00", "xx????xx????xx????");
NoReload = *(DWORD*)(NoReload+2); // Then add this?

if(Menu.mOpt[5].nopt > 0)
	Memoria((LPVOID) NoReload, "\x90\x90\x90\x90\x90\x90", 6);
else
	Memoria((LPVOID) NoReload, "\x0F\x84\xB1\x01\x00\x00", 6);

It dc's me when i start the game so obviously its not right. Any help? Lol.

Originally Posted by Evolution92

So how exactly would you use a signature? Not make it, but use it.

Example (This was an already posted signature):

Code:

DWORD NoReload = FindPattern((DWORD)GetModuleHandle("CShell.dll"), 0x91F000,   (PBYTE) "\x0F\x84\x00\x00\x00\x00\x8B\x96\x00\x00\x00\x00\x89\x96\x00\x00\x00\x00", "xx????xx????xx????");
NoReload = *(DWORD*)(NoReload+2); // Then add this?

if(Menu.mOpt[5].nopt > 0)
	Memoria((LPVOID) NoReload, "\x90\x90\x90\x90\x90\x90", 6);
else
	Memoria((LPVOID) NoReload, "\x0F\x84\xB1\x01\x00\x00", 6);

It dc's me when i start the game so obviously its not right. Any help? Lol.

Uhh why did you do something else to the address...
Just the FindPattern will work.

Originally Posted by Crash

Uhh why did you do something else to the address...
Just the FindPattern will work.

Oh well I tried both ways and it still dc's (It works when I put the addy in manually but not with the signature).

Originally Posted by Evolution92

Oh well I tried both ways and it still dc's (It works when I put the addy in manually but not with the signature).

Okay well check that the address that the FindPattern is returning is correct.

Originally Posted by Crash

Okay well check that the address that the FindPattern is returning is correct.

Ok thanks.

Pattern for Playerstats

Post a Reply

Similar Threads

Tags for this Thread