AlliedModders - [Solved] Signature of small functions

AlliedModders (https://forums.alliedmods.net/index.php)

- General (https://forums.alliedmods.net/forumdisplay.php?f=58)

- - Solved Signature of small functions (https://forums.alliedmods.net/showthread.php?t=312809)

quasemago

12-16-2018 12:53

Signature of small functions

I'm trying to generate a unique signature for two small functions.

Gamedata with old symbols:

PHP Code:


		
			
"Games"

{

    "csgo"

    {

        "Signatures"

        {

            "operator new()"

            {

                "library"    "server"

                "linux"    "@_Znwj"

            }



            "operator delete()"

            {

                "library"    "server"

                "linux"    "@_ZdlPv"

            }

        }

    }

}

Analyzing sdk I could see that these functions call MemAlloc internally, but I could not find any related functions in binarie.
- https://github.com/alliedmodders/hl2...emalloc.h#L177

psychonic

12-17-2018 19:07

Re: Signature of small functions

What are you trying to accomplish?

quasemago

12-21-2018 19:10

Re: Signature of small functions

Quote:

Originally Posted by psychonic (Post 2629667)

What are you trying to accomplish?

Trying remove particle system from ParticleSystemDictionary tree, because csgo does not clear the cache at the end of the map. (The code worked correctly before csgo lost the symbols)

I also need the signature of another small function: "CParticleSystemDefinition::GetName"

There is another topic that deals with the same subject in more detail (so I do not need to explain): https://forums.alliedmods.net/showthread.php?t=247897

Dr!fter

12-24-2018 06:49

Re: Signature of small functions

You have two options to get the function you want. Get a sig to a function that calls the one you want then get the address of the function from there. Or just get more bytes that are not within the function. Option one is better but hardest to do, option 2 risks sig breaking often.

quasemago

01-13-2019 01:31

Re: Signature of small functions

@Solved with help of the _Phoenix_.

Bacardi

01-13-2019 13:46

Re: Signature of small functions

quasemago

01-14-2019 09:00

Re: Signature of small functions

Quote:

Originally Posted by Bacardi (Post 2634558)

Secret revealed :gyar:

PHP Code:


		
			
"Games"  

{ 

    "csgo"  

    { 

        "Signatures"  

        { 

            "operator new()"  

            {

                "library"    "server"  

                "linux"    "\x55\x89\xE5\x83\xEC\x18\xA1\x2A\x2A\x2A\x2A\x8B\x4D\x08\x8B\x10\x89\x04\x24\x89\x4C\x24\x04\xFF\x12"  

            }

            "operator delete()"  

            {

                "library"    "server"  

                "linux"    "\x55\x89\xE5\x83\xEC\x18\xA1\x2A\x2A\x2A\x2A\x8B\x4D\x08\x8B\x10\x89\x04\x24\x89\x4C\x24\x04\xFF\x52\x08\xC9\xC3\x83\xC2\x01\x89\x04\x24"  

            }

        } 

    } 

}

All times are GMT -4. The time now is 08:56.