[kiki33hun]

Okay, i want some help.


I am probaly

public plugin_precache()
{
    new teszt = OrpheuGetFunctionAddress(OrpheuGetFunction("SV_CountPlayers"))
    
    new address 
    OrpheuMemoryGetAtAddress(teszt, "SV_CountPlayers", address);
    log_to_file("kiki.log", "ERTEKE: %d", teszt);
}

and log:
L 09/24/2012 - 14:16:45: [ORPHEU] Invalid memory structure "SV_CountPlayers"
L 09/24/2012 - 14:16:45: [AMXX] Displaying debug trace (plugin "teszt.amxx")
L 09/24/2012 - 14:16:45: [AMXX] Run time error 10: native error (native "OrpheuMemoryGetAtAddress")
L 09/24/2012 - 14:16:45: [AMXX] [0] teszt.sma::plugin_precache (line 24)

[Arkshine]

You should create a new thread in scripting help because your problem has nothing to do with this tutorial.

[teh ORiON]

Hi,

I have a variable I want to change in memory (engine lib), im not sure how to make the signature for this. (dword_256D924). How should it look?

The function

Thanks.

[Arkshine]

You would need to retrieve its address from a function where it's used.

[teh ORiON]

Originally Posted by Arkshine You would need to retrieve its address from a function where it's used.

It is used in that function, "sub_1D5B210", as shown in the image. It's used in several other functions as well, however it's never passed as a parameter or return.

[Arkshine]

You can either make a signature of this function sub_1D5B210, retrieving its address, then adding some bytes as displacement to point to the address of this var, or making a signature direcly on the address of this var. You follow me ?

[teh ORiON]

Originally Posted by Arkshine You can either make a signature of this function sub_1D5B210, retrieving its address, then adding some bytes as displacement to point to the address of this var, or making a signature direcly on the address of this var. You follow me ?

Yes, sort of. So in this case,

"8B 0D 24 D9 56 02 mov, ecx, dword_256D924"

Would the byte sig then be 24 D9 56 02 and displaced -2 to point directly, or am I not understanding it correctly?

[Arkshine]

Better to start to 8B, then you would +2.

Your sig should start like : 8B ? ? ? ? ? etc..

[teh ORiON]

Originally Posted by Arkshine Better to start to 8B, then you would +2. Your sig should start like : 8B ? ? ? ? ? etc..

Ok so now I have:

Signature

[
    {
        "name" : "mod_numknown",
        "library" : "engine",
        "type" : "long",
        "memoryType" : "data",
        "identifiers" : 
        [
            {
                "os" : "windows",
                "mod" : "tfc",
                "value" : [0x8B,"*","*","*","*","*",0x85,0xC9,0x7E,"*",0xB8,"*","*","*","*"],
		"displacement" : 2
            }
        ]
    }
]

Im getting a value, but it doesn't seem like it's the correct value. This should be correct right?

[Arkshine]

Tell me what you want to retrieve exactly, I will have a better view of the issue, because dword_xxxx or sub_xxxx doesn't help much.