View Single Post
K.K.Lv
Veteran Member
Join Date: Aug 2008
Location: GameFolder
Old 04-20-2012 , 05:12   Re: Orpheu: How to make signatures (of bytes)
Reply With Quote #44

OK , I will try to explain it clear.

try to hook function is "SV_SendServerinfo"
and I found the windows version line here
Code:
.text:01D968E0 55                                            push    ebp
.text:01D968E1 8B EC                                         mov     ebp, esp
.text:01D968E3 81 EC 04 08 00 00                             sub     esp, 804h
.text:01D968E9 D9 05 28 56 E5 01                             fld     flt_1E55628
.text:01D968EF D8 1D AC E0 E2 01                             fcomp   ds:flt_1E2E0AC
.text:01D968F5 53                                            push    ebx
.text:01D968F6 56                                            push    esi
.text:01D968F7 8B 75 08                                      mov     esi, [ebp+arg_0]
.text:01D968FA 57                                            push    edi
.text:01D968FB DF E0                                         fnstsw  ax
.text:01D968FD F6 C4 44                                      test    ah, 44h
.text:01D96900 7A 09                                         jp      short loc_1D9690B
.text:01D96902 83 3D C8 62 13 02 01                          cmp     dword_21362C8, 1
.text:01D96909 7E 41                                         jle     short loc_1D9694C
correct me if I'm wrong.

and my signature is
Code:
{
    "name" : "SV_SendServerinfo",
    "library" : "engine",
    "identifiers":
    [
        {
            "os" : "windows",
            "mod" : "cstrike",
            "value" : [0x55, 0x8B, 0xEC, 0x81, 0xEC, 0x04, 0x08, "*", "*", 0xD9, 0x05, 0x28, 0x56, 0xE5, 0x01, 0xD8]
        },
        {
            "os"    : "linux",
            "mod"   : "cstrike",
            "value" : "SV_SendServerinfo"
        }
    ]
}
signature name is "SV_SendServerinfo"

folder is "cstrike\addons\amxmodx\configs\orpheu\functi ons"

and the problem is "signature is not found"
__________________
QQ:116268742
K.K.Lv is offline
Send a message via MSN to K.K.Lv