ITempEntsSystem signature =)

c0ldfyr3 · **Author**

Code:

#define DispatchEffect_Sig "\x83\xEC\x20\x56\x8D\x4C\x24\x04\xE8\xB3\x3F\xFC\xFF\x8B\x74\x24"
#define DispatchEffect_SigBytes			16
#define DispatchEffect_Offset	x29

#define SIGFIND( var, type, sig, sigbytes ) \
	var = (type)g_SigMngr.ResolveSig(laddr, sig, sigbytes); \
	META_CONPRINTF("[ZOMBIE] %p\n", var); \
	if (!var) { \
		snprintf(error, maxlen, "Could not find all sigs!\n%s:%d\n", __FILE__, __LINE__); \
		return false; \
	}
void *vDisptachEffect = NULL;
SIGFIND( vDisptachEffect,	void *,	DispatchEffect_Sig, DispatchEffect_SigBytes );
memcpy(&m_TempEnts, ((char*)vDisptachEffect + DispatchEffect_Offset), sizeof(char*));
int *ptr = *( (int **)(m_TempEnts) );
m_TempEnts = (ITempEntsSystem *)ptr;
if ( !m_TempEnts )
{
	snprintf(error, maxlen, "Could not find all sigs!\n%s:%d\n", __FILE__, __LINE__);
	return false;
}
vDisptachEffect = NULL;

Mani · 04-25-2006 , 11:29

Do you have any idea if the signature is portable across all Source based mods ?

Mani

c0ldfyr3 · 04-25-2006 , 13:03

I used DispatchSpawn for the referance function, so very possibly. I dont have anything except DOD:S installed, ill go check with that right now.

EDIT: That doesn't work for DOD:S so im going to wait for IDA to finish running on the server.dll and find a sig with wild cards. The one above didn't yet have wild cards inserted.

c0ldfyr3 · 04-25-2006 , 13:44

Code:

#define DispatchEffect_Sig							"\x83\xEC\x20\x56\x8D\x4C\x24\x04\xE8\x2A\x2A\xFC\xFF\x8B\x74\x24"

That should work for *all* mods, try it and let me know. Notice the 2 * \x2A, thats the wild cards =)

CoolPeter · 06-04-2006 , 04:46

I tried that with SeLfkiLLs sigscan method, but it crashs all the time.
Can someone help me with that?

Code:

DispatchEffect_Sig.Init("DispatchEffect",
	(unsigned char*)"\x83\xEC\x20\x56\x8D\x4C\x24\x04\xE8\xB3\x3F\xFC\xFF\x8B\x74\x24",
	"xxxxxxxxx??xxxxx",
	16);

if(DispatchEffect_Sig.is_set) {
	memcpy(&te, ((char*)DispatchEffect_Sig.addr + 29), sizeof(char*));
	int *ptr = *((int **)(te));
	te = (ITempEntsSystem *)ptr;
}

Edit:

Ok, i got it... changed 29 to 0x29 or 41

c0ldfyr3 · 07-03-2006 , 10:07 Re: ITempEntsSystem signature =)

This sig broke in the latest DOD:S update, im working on fixing it, just waiting for IDA to finish on the new dll.

c0ldfyr3 · *Last edited by c0ldfyr3; 04-02-2007 at 04:21.*

Code:

#define DispatchEffect_Sig "\x83\xEC\x20\x56\x8D\x4C\x24\x04\xE8\x2A\x2A\x2A \xFF\x8B\x74\x24"

Haven't checked if the offset is still the same yet.