[L4D2 How to update old signatures - Page 4

crasx · 07-10-2013 , 15:47 Re: [L4D2 How to update old signatures

Quote:

Originally Posted by Silvers

PHP Code:


			
        "GetPlayerByCharacter"

        {

            "library"    "server"

            "windows"    "\x55\x2A\x2A\x8B\x2A\x2A\x83\x2A\x2A\x83\x2A\x2A\x75\x2A\x33\x2A\x8B\x2A\x5D\xC3"

            "linux"        "@_ZN13CTerrorPlayer20GetPlayerByCharacterE21SurvivorCharacterType"

            /* 55 ? ? 8B ? ? 83 ? ? 83 ? ? 75 ? 33 ? 8B ? 5D C3 */

            /* Search, some xref points towards, forgot now but easy */

            /* Old: 8B 44 24 ? 83 EC 08 83 F8 ? 75 06 33 C0 83 C4 08 */

        }



        "DefibrillatorOnStartAction"

        {

            "library"    "server"

            "windows"    "\x55\x8B\x2A\x0F\x2A\x2A\x53\x56\x57\x8B\x2A\x2A\x6A"

            "linux"        "@_ZN18CItemDefibrillator13OnStartActionEN17CBaseBackpackItem22BackpackItemActionTypeEP13CTerrorPlayerP11CBaseEntityf"

            /* 55 8B ? 0F ? ? 53 56 57 8B ? ? 6A  */

            /* Search: "defibrillator_begin" */

            /* Old: D9 EE 53 56 57 8B 7C 24 14 6A 00 51 D9 1C 24 68 ? ? ? ? */

        }



        "DefibrillatorOnActionComplete"

        {

            "library"    "server"

            "windows"    "\x55\x8B\x2A\x8B\x2A\x2A\x56\x6A\x2A\x68\x2A\x2A\x2A\x2A\x68\x2A\x2A\x2A\x2A\x6A\x2A\x50\xE8\x2A\x2A\x2A\x2A\x8B"

            "linux"        "@_ZN18CItemDefibrillator16OnActionCompleteEP13CTerrorPlayerP11CBaseEntity"

            /* 55 8B ? 8B ? ? 56 6A ? 68 ? ? ? ? 68 ? ? ? ? 6A ? 50 E8 ? ? ? ? 8B */

            /* Search: "defibrillator_used" */

            /* Old: 8B 44 24 08 56 6A 00 68 ? ? ? ? 68 ? ? ? ? */

        }



        "CSurvivorDeathModel::Create"

        {

            "library"    "server"

            "windows"    "\x56\x6A\x2A\x8D\x2A\x2A\x2A\x2A\x2A\x52\x8D"

            "linux"        "@_ZN19CSurvivorDeathModel6CreateEP13CTerrorPlayer"

            /* 56 6A ? 8D ? ? ? ? ? 52 8D */

            /* 56 6A ? 8D ? ? ? ? ? 52 8D ? ? ? ? ? 50 68 ? ? ? ? E8 ? ? ? ? 8B ? 83 ? ? 85 ? 0F 84 ? ? ? ? */

            /* Search: "survivor_death_model" */

            /* Old: 57 8B 7C 24 08 85 FF 75 04 33 C0 5F C3 8B 87 2C 01 00 00 C1 E8 */

        }



        "CBaseEntity::SetAbsOrigin"

        {

            "library"    "server"

            "windows"    "\x55\x8B\x2A\x83\x2A\x2A\xA1\x2A\x2A\x2A\x2A\x33\x2A\x89\x2A\x2A\x56\x57\x8B\x2A\x2A\x8B\x2A\xE8\x2A\x2A\x2A\x2A\xF3\x2A\x2A\x2A\x0F\x2A\x2A\x2A\x2A\x2A\x2A\x9F\xF6\x2A\x2A\x7A\x2A\xF3\x2A\x2A\x2A\x2A\x0F\x2A\x2A\x2A\x2A\x2A\x2A\x9F\xF6\x2A\x2A\x7A\x2A\xF3\x2A\x2A\x2A\x2A\x0F\x2A\x2A\x2A\x2A\x2A\x2A\x9F\xF6\x2A\x2A\x0F\x2A\x2A\x2A\x2A\x2A\x6A"

            "linux"        "@_ZN11CBaseEntity12SetAbsOriginERK6Vector"

            /* 55 8B ? 83 ? ? A1 ? ? ? ? 33 ? 89 ? ? 56 57 8B ? ? 8B ? E8 ? ? ? ? F3 ? ? ? 0F ? ? ? ? ? ? 9F F6 ? ? 7A ? F3 ? ? ? ? 0F ? ? ? ? ? ? 9F F6 ? ? 7A ? F3 ? ? ? ? 0F ? ? ? ? ? ? 9F F6 ? ? 0F ? ? ? ? ? 6A */

            /* Search: "(PHYSICS) %s was moved above a prop", the second call below calls CBaseEntity::SetAbsOrigin */

            /* Old: 83 EC ? 56 57 8B F1 E8 ? ? ? ? D9 86 ? 02 00 00 */

        }

    }

The first and last may be wrong but probably are correct. Not tested anything (I don't use this ext). Fingers crossed lol.

Re: https://forums.alliedmods.net/showpo...&postcount=138

These are similar signatures, however I think my deathmodel create is the correct one. You hooked into a jump when you needed to hook the function.

I am curious about how you choose random bytes
For example: 55 8B ? 8B ? ?
The original is

PHP Code:


			
push ebp //55

mov ebp, esp //8B EC

mov eax, [ebp+arg_4] //8B 45 0C

I would make this 55 8B EC 8B 45 ? because 0C (arg4) is the only offset being used, I don't think the bytecodes for esp/ebp change. Correct me if I am wrong but that may help you shorten signatures

sedano132 · 08-13-2013 , 06:16 Re: [L4D2 How to update old signatures

Hi all. Sorry for my intrusion but i have seen this thread with a familiar issue......
I am completely new to signature and before i loose my time in something that i do not know i ask you if this solution can be usefull to solve this:
After last server update i am not able to use anymore this plugin
https://forums.alliedmods.net/showth...127518&page=25
and the error log say this:
L 08/13/2013 - 12:05:25: SourceMod error session started
L 08/13/2013 - 12:05:25: Info (map "c1m4_atrium") (file "errors_20130813.log")
L 08/13/2013 - 12:05:25: [SM] Plugin encountered error 25: Call was aborted
L 08/13/2013 - 12:05:25: [SM] Native "SetFailState" reported: Unable to find the 'CTerrorPlayer_Fling' signature, check the file version!
L 08/13/2013 - 12:05:25: [SM] Displaying call stack trace for plugin "l4d2_berserk_mode.smx":
L 08/13/2013 - 12:05:25: [SM] [0] Line 601, /home/groups/sourcemod/upload_tmp/phpQL8T0F.sp::OnPluginStart()

That is seems a issue of signature.
Can i use something like the solution of this thread to revive that plugins?
I realy appreciate your help because alone i am not able.
Thanks anyway.

Electr000999 · *Last edited by Electr000999; 08-13-2013 at 06:55.*

sedano132, Replace you gamedata\l4d2_bm_sig.txt

sedano132 · *Last edited by sedano132; 08-13-2013 at 10:34.*

OMG!!
I hope realy that this work!
I go fast to try it!

Update:
I love you Electr000999
Thanks,thanks,thanks