Raised This Month: $32 Target: $400
 8% 

I know nothing about sigscanning and I want to learn about it


Post New Thread Reply   
 
Thread Tools Display Modes
Author Message
fakuivan
Senior Member
Join Date: Nov 2015
Old 12-18-2015 , 01:34   I know nothing about sigscanning and I want to learn about it
Reply With Quote #1

Hi there!

|read the title|

I've read this article and some bailopan devlogs and I still can't figure out what rules the signature has to follow or where do I get the signatures from (w or linux?), I've seen things like "\?55\x52", "*\x52" and "\x55\x52 ?x" I've heared that this article is pretty outdated and that is not helping me either. Can anyone help me with this?

btw this is the function that I want to call

CTFPlayer::PickupWeaponFromOther

The signature is not workig since the HardBreak Update

from the linux server module:

Code:
00e047a0 <_ZN9CTFPlayer21PickupWeaponFromOtherEPK16CTFDroppedWeapon>:
  e047a0:	55                   	push   %ebp
  e047a1:	89 e5                	mov    %esp,%ebp
  e047a3:	57                   	push   %edi
  e047a4:	56                   	push   %esi
  e047a5:	53                   	push   %ebx
  e047a6:	83 ec 6c             	sub    $0x6c,%esp
  e047a9:	c6 45 c4 00          	movb   $0x0,-0x3c(%ebp)
  e047ad:	8b 75 0c             	mov    0xc(%ebp),%esi
  e047b0:	8b 5d 08             	mov    0x8(%ebp),%ebx
  e047b3:	89 f7                	mov    %esi,%edi
  e047b5:	81 c7 94 04 00 00    	add    $0x494,%edi
  e047bb:	74 09                	je     e047c6 <_ZN9CTFPlayer21PickupWeaponFromOtherEPK16CTFDroppedWeapon+0x26>
  e047bd:	80 be e8 04 00 00 00 	cmpb   $0x0,0x4e8(%esi)
  e047c4:	75 12                	jne    e047d8 <_ZN9CTFPlayer21PickupWeaponFromOtherEPK16CTFDroppedWeapon+0x38>
  e047c6:	0f b6 45 c4          	movzbl -0x3c(%ebp),%eax
  e047ca:	83 c4 6c             	add    $0x6c,%esp
  e047cd:	5b                   	pop    %ebx
  e047ce:	5e                   	pop    %esi
  e047cf:	5f                   	pop    %edi
  e047d0:	5d                   	pop    %ebp
  e047d1:	c3                   	ret    
  e047d2:	8d b6 00 00 00 00    	lea    0x0(%esi),%esi
  e047d8:	8b 93 44 20 00 00    	mov    0x2044(%ebx),%edx
  e047de:	89 3c 24             	mov    %edi,(%esp)
  e047e1:	89 55 bc             	mov    %edx,-0x44(%ebp)
  e047e4:	e8 87 41 8c ff       	call   6c8970 <_ZNK13CEconItemView13GetStaticDataEv>
  e047e9:	8b 4d bc             	mov    -0x44(%ebp),%ecx
  e047ec:	89 04 24             	mov    %eax,(%esp)
  e047ef:	89 4c 24 04          	mov    %ecx,0x4(%esp)
  e047f3:	e8 d8 be 9c ff       	call   7d06d0 <_ZNK17CTFItemDefinition14GetLoadoutSlotEi>
  e047f8:	89 1c 24             	mov    %ebx,(%esp)
  e047fb:	89 44 24 04          	mov    %eax,0x4(%esp)
  e047ff:	e8 6c 4f a0 ff       	call   809770 <_ZN9CTFPlayer23GetEntityForLoadoutSlotEi>
  e04804:	85 c0                	test   %eax,%eax
  e04806:	74 be                	je     e047c6 <_ZN9CTFPlayer21PickupWeaponFromOtherEPK16CTFDroppedWeapon+0x26>
  e04808:	c7 44 24 0c 00 00 00 	movl   $0x0,0xc(%esp)
  e0480f:	00 
  e04810:	c7 44 24 08 20 6f 12 	movl   $0x1126f20,0x8(%esp)
  e04817:	01 
  e04818:	c7 44 24 04 3c 8d 18 	movl   $0x1188d3c,0x4(%esp)
  e0481f:	01 
  e04820:	89 04 24             	mov    %eax,(%esp)
  e04823:	e8 fc ff ff ff       	call   e04824 <_ZN9CTFPlayer21PickupWeaponFromOtherEPK16CTFDroppedWeapon+0x84>
  e04828:	85 c0                	test   %eax,%eax
  e0482a:	89 45 c0             	mov    %eax,-0x40(%ebp)
  e0482d:	74 97                	je     e047c6 <_ZN9CTFPlayer21PickupWeaponFromOtherEPK16CTFDroppedWeapon+0x26>
  e0482f:	89 3c 24             	mov    %edi,(%esp)
  e04832:	e8 39 41 8c ff       	call   6c8970 <_ZNK13CEconItemView13GetStaticDataEv>
  e04837:	8b 55 bc             	mov    -0x44(%ebp),%edx
  e0483a:	89 54 24 04          	mov    %edx,0x4(%esp)
  e0483e:	8b 80 d0 00 00 00    	mov    0xd0(%eax),%eax
  e04844:	89 04 24             	mov    %eax,(%esp)
  e04847:	e8 f4 93 a4 ff       	call   84dc40 <_Z26TranslateWeaponEntForClassPKci>
  e0484c:	89 c2                	mov    %eax,%edx
  e0484e:	8b 03                	mov    (%ebx),%eax
  e04850:	c7 44 24 10 01 00 00 	movl   $0x1,0x10(%esp)
  e04857:	00 
  e04858:	89 7c 24 0c          	mov    %edi,0xc(%esp)
  e0485c:	c7 44 24 08 00 00 00 	movl   $0x0,0x8(%esp)
  e04863:	00 
  e04864:	89 54 24 04          	mov    %edx,0x4(%esp)
  e04868:	89 1c 24             	mov    %ebx,(%esp)
  e0486b:	ff 90 7c 07 00 00    	call   *0x77c(%eax)
  e04871:	85 c0                	test   %eax,%eax
  e04873:	0f 84 4d ff ff ff    	je     e047c6 <_ZN9CTFPlayer21PickupWeaponFromOtherEPK16CTFDroppedWeapon+0x26>
  e04879:	c7 44 24 0c 00 00 00 	movl   $0x0,0xc(%esp)
  e04880:	00 
  e04881:	c7 44 24 08 20 6f 12 	movl   $0x1126f20,0x8(%esp)
  e04888:	01 
  e04889:	c7 44 24 04 3c 8d 18 	movl   $0x1188d3c,0x4(%esp)
  e04890:	01 
  e04891:	89 04 24             	mov    %eax,(%esp)
  e04894:	e8 fc ff ff ff       	call   e04895 <_ZN9CTFPlayer21PickupWeaponFromOtherEPK16CTFDroppedWeapon+0xf5>
  e04899:	85 c0                	test   %eax,%eax
  e0489b:	89 c7                	mov    %eax,%edi
  e0489d:	0f 84 23 ff ff ff    	je     e047c6 <_ZN9CTFPlayer21PickupWeaponFromOtherEPK16CTFDroppedWeapon+0x26>
  e048a3:	c7 44 24 0c 00 00 00 	movl   $0x0,0xc(%esp)
  e048aa:	00 
  e048ab:	c7 44 24 08 8c a2 24 	movl   $0x124a28c,0x8(%esp)
  e048b2:	01 
  e048b3:	c7 44 24 04 3c 8d 18 	movl   $0x1188d3c,0x4(%esp)
  e048ba:	01 
  e048bb:	89 04 24             	mov    %eax,(%esp)
  e048be:	e8 fc ff ff ff       	call   e048bf <_ZN9CTFPlayer21PickupWeaponFromOtherEPK16CTFDroppedWeapon+0x11f>
  e048c3:	85 c0                	test   %eax,%eax
  e048c5:	89 c2                	mov    %eax,%edx
  e048c7:	74 2f                	je     e048f8 <_ZN9CTFPlayer21PickupWeaponFromOtherEPK16CTFDroppedWeapon+0x158>
  e048c9:	8b 00                	mov    (%eax),%eax
  e048cb:	8b 80 94 03 00 00    	mov    0x394(%eax),%eax
  e048d1:	89 45 c4             	mov    %eax,-0x3c(%ebp)
  e048d4:	8b 83 44 20 00 00    	mov    0x2044(%ebx),%eax
  e048da:	89 55 ac             	mov    %edx,-0x54(%ebp)
  e048dd:	89 04 24             	mov    %eax,(%esp)
  e048e0:	e8 5b f8 96 ff       	call   774140 <_Z18GetPlayerClassDataj>
  e048e5:	8b 55 ac             	mov    -0x54(%ebp),%edx
  e048e8:	8b 80 c8 02 00 00    	mov    0x2c8(%eax),%eax
  e048ee:	89 14 24             	mov    %edx,(%esp)
  e048f1:	89 44 24 04          	mov    %eax,0x4(%esp)
  e048f5:	ff 55 c4             	call   *-0x3c(%ebp)
  e048f8:	8d 45 c8             	lea    -0x38(%ebp),%eax
  e048fb:	89 1c 24             	mov    %ebx,(%esp)
  e048fe:	89 44 24 08          	mov    %eax,0x8(%esp)
  e04902:	8b 45 c0             	mov    -0x40(%ebp),%eax
  e04905:	8d 4d d4             	lea    -0x2c(%ebp),%ecx
  e04908:	89 4c 24 0c          	mov    %ecx,0xc(%esp)
  e0490c:	89 44 24 04          	mov    %eax,0x4(%esp)
  e04910:	e8 db 47 ff ff       	call   df90f0 <_ZN9CTFPlayer34CalculateAmmoPackPositionAndAnglesEP13CTFWeaponBaseR6VectorR6QAngle>
  e04915:	8b 03                	mov    (%ebx),%eax
  e04917:	89 1c 24             	mov    %ebx,(%esp)
  e0491a:	ff 90 58 02 00 00    	call   *0x258(%eax)
  e04920:	89 1c 24             	mov    %ebx,(%esp)
  e04923:	89 44 24 04          	mov    %eax,0x4(%esp)
  e04927:	e8 34 cc ee ff       	call   cf1560 <_Z18PointInRespawnRoomP11CBaseEntityRK6Vector>
  e0492c:	84 c0                	test   %al,%al
  e0492e:	0f 85 6c 01 00 00    	jne    e04aa0 <_ZN9CTFPlayer21PickupWeaponFromOtherEPK16CTFDroppedWeapon+0x300>
  e04934:	8b 4d c0             	mov    -0x40(%ebp),%ecx
  e04937:	8b 01                	mov    (%ecx),%eax
  e04939:	89 0c 24             	mov    %ecx,(%esp)
  e0493c:	ff 90 74 03 00 00    	call   *0x374(%eax)
  e04942:	8b 55 c0             	mov    -0x40(%ebp),%edx
  e04945:	89 45 c4             	mov    %eax,-0x3c(%ebp)
  e04948:	8b 02                	mov    (%edx),%eax
  e0494a:	89 14 24             	mov    %edx,(%esp)
  e0494d:	ff 90 fc 04 00 00    	call   *0x4fc(%eax)
  e04953:	8b 55 c4             	mov    -0x3c(%ebp),%edx
  e04956:	8d 4d d4             	lea    -0x2c(%ebp),%ecx
  e04959:	89 44 24 0c          	mov    %eax,0xc(%esp)
  e0495d:	8d 45 c8             	lea    -0x38(%ebp),%eax
  e04960:	89 4c 24 08          	mov    %ecx,0x8(%esp)
  e04964:	89 44 24 04          	mov    %eax,0x4(%esp)
  e04968:	83 c2 5c             	add    $0x5c,%edx
  e0496b:	89 1c 24             	mov    %ebx,(%esp)
  e0496e:	89 54 24 10          	mov    %edx,0x10(%esp)
  e04972:	e8 d9 13 97 ff       	call   775d50 <_ZN16CTFDroppedWeapon6CreateEP9CTFPlayerRK6VectorRK6QAnglePKcPK13CEconItemView>
  e04977:	85 c0                	test   %eax,%eax
  e04979:	74 23                	je     e0499e <_ZN9CTFPlayer21PickupWeaponFromOtherEPK16CTFDroppedWeapon+0x1fe>
  e0497b:	8b 55 c0             	mov    -0x40(%ebp),%edx
  e0497e:	c7 44 24 10 00 00 00 	movl   $0x0,0x10(%esp)
  e04985:	00 
  e04986:	c7 44 24 0c 01 00 00 	movl   $0x1,0xc(%esp)
  e0498d:	00 
  e0498e:	89 5c 24 04          	mov    %ebx,0x4(%esp)
  e04992:	89 04 24             	mov    %eax,(%esp)
  e04995:	89 54 24 08          	mov    %edx,0x8(%esp)
  e04999:	e8 d2 0a 97 ff       	call   775470 <_ZN16CTFDroppedWeapon17InitDroppedWeaponEP9CTFPlayerP13CTFWeaponBasebb>
  e0499e:	8b 45 c0             	mov    -0x40(%ebp),%eax
  e049a1:	89 1c 24             	mov    %ebx,(%esp)
  e049a4:	89 44 24 04          	mov    %eax,0x4(%esp)
  e049a8:	e8 03 8b be ff       	call   9ed4b0 <_ZN20CBaseCombatCharacter13Weapon_DetachEP17CBaseCombatWeapon>
  e049ad:	8b 45 c0             	mov    -0x40(%ebp),%eax
  e049b0:	89 04 24             	mov    %eax,(%esp)
  e049b3:	e8 f8 db 07 00       	call   e825b0 <_Z11UTIL_RemoveP11CBaseEntity>
  e049b8:	8b 93 44 0e 00 00    	mov    0xe44(%ebx),%edx
  e049be:	c7 45 c4 00 00 00 00 	movl   $0x0,-0x3c(%ebp)
  e049c5:	8b 0d 30 dd 5a 01    	mov    0x15add30,%ecx
  e049cb:	83 fa ff             	cmp    $0xffffffff,%edx
  e049ce:	74 18                	je     e049e8 <_ZN9CTFPlayer21PickupWeaponFromOtherEPK16CTFDroppedWeapon+0x248>
  e049d0:	89 d0                	mov    %edx,%eax
  e049d2:	c1 ea 0c             	shr    $0xc,%edx
  e049d5:	25 ff 0f 00 00       	and    $0xfff,%eax
  e049da:	c1 e0 04             	shl    $0x4,%eax
  e049dd:	01 c8                	add    %ecx,%eax
  e049df:	39 50 08             	cmp    %edx,0x8(%eax)
  e049e2:	0f 84 90 01 00 00    	je     e04b78 <_ZN9CTFPlayer21PickupWeaponFromOtherEPK16CTFDroppedWeapon+0x3d8>
  e049e8:	80 bf 84 05 00 00 01 	cmpb   $0x1,0x584(%edi)
  e049ef:	74 23                	je     e04a14 <_ZN9CTFPlayer21PickupWeaponFromOtherEPK16CTFDroppedWeapon+0x274>
  e049f1:	80 7f 5c 00          	cmpb   $0x0,0x5c(%edi)
  e049f5:	0f 85 8d 01 00 00    	jne    e04b88 <_ZN9CTFPlayer21PickupWeaponFromOtherEPK16CTFDroppedWeapon+0x3e8>
  e049fb:	8b 57 20             	mov    0x20(%edi),%edx
  e049fe:	85 d2                	test   %edx,%edx
  e04a00:	74 0b                	je     e04a0d <_ZN9CTFPlayer21PickupWeaponFromOtherEPK16CTFDroppedWeapon+0x26d>
  e04a02:	8b 02                	mov    (%edx),%eax
  e04a04:	f6 c4 01             	test   $0x1,%ah
  e04a07:	0f 84 eb 00 00 00    	je     e04af8 <_ZN9CTFPlayer21PickupWeaponFromOtherEPK16CTFDroppedWeapon+0x358>
  e04a0d:	c6 87 84 05 00 00 01 	movb   $0x1,0x584(%edi)
  e04a14:	8b 07                	mov    (%edi),%eax
  e04a16:	89 5c 24 04          	mov    %ebx,0x4(%esp)
  e04a1a:	89 3c 24             	mov    %edi,(%esp)
  e04a1d:	ff 90 68 03 00 00    	call   *0x368(%eax)
  e04a23:	8b 4d c4             	mov    -0x3c(%ebp),%ecx
  e04a26:	8b 03                	mov    (%ebx),%eax
  e04a28:	89 1c 24             	mov    %ebx,(%esp)
  e04a2b:	89 4c 24 04          	mov    %ecx,0x4(%esp)
  e04a2f:	ff 90 64 05 00 00    	call   *0x564(%eax)
  e04a35:	89 7c 24 08          	mov    %edi,0x8(%esp)
  e04a39:	89 5c 24 04          	mov    %ebx,0x4(%esp)
  e04a3d:	89 34 24             	mov    %esi,(%esp)
  e04a40:	e8 ab 0e 97 ff       	call   7758f0 <_ZNK16CTFDroppedWeapon18InitPickedUpWeaponEP9CTFPlayerP13CTFWeaponBase>
  e04a45:	8b 03                	mov    (%ebx),%eax
  e04a47:	89 7c 24 04          	mov    %edi,0x4(%esp)
  e04a4b:	89 1c 24             	mov    %ebx,(%esp)
  e04a4e:	ff 90 30 04 00 00    	call   *0x430(%eax)
  e04a54:	84 c0                	test   %al,%al
  e04a56:	74 30                	je     e04a88 <_ZN9CTFPlayer21PickupWeaponFromOtherEPK16CTFDroppedWeapon+0x2e8>
  e04a58:	a1 50 a9 66 01       	mov    0x166a950,%eax
  e04a5d:	c6 45 c4 01          	movb   $0x1,-0x3c(%ebp)
  e04a61:	f3 0f 10 05 7c 81 0c 	movss  0x10c817c,%xmm0
  e04a68:	01 
  e04a69:	f3 0f 58 40 0c       	addss  0xc(%eax),%xmm0
  e04a6e:	0f b6 45 c4          	movzbl -0x3c(%ebp),%eax
  e04a72:	f3 0f 11 83 d0 22 00 	movss  %xmm0,0x22d0(%ebx)
  e04a79:	00 
  e04a7a:	83 c4 6c             	add    $0x6c,%esp
  e04a7d:	5b                   	pop    %ebx
  e04a7e:	5e                   	pop    %esi
  e04a7f:	5f                   	pop    %edi
  e04a80:	5d                   	pop    %ebp
  e04a81:	c3                   	ret    
  e04a82:	8d b6 00 00 00 00    	lea    0x0(%esi),%esi
  e04a88:	89 7c 24 04          	mov    %edi,0x4(%esp)
  e04a8c:	89 1c 24             	mov    %ebx,(%esp)
  e04a8f:	e8 bc 2a 83 ff       	call   637550 <_ZN20CBaseCombatCharacter22SwitchToNextBestWeaponEP17CBaseCombatWeapon>
  e04a94:	eb c2                	jmp    e04a58 <_ZN9CTFPlayer21PickupWeaponFromOtherEPK16CTFDroppedWeapon+0x2b8>
  e04a96:	8d 76 00             	lea    0x0(%esi),%esi
  e04a99:	8d bc 27 00 00 00 00 	lea    0x0(%edi,%eiz,1),%edi
  e04aa0:	80 65 e6 0f          	andb   $0xf,-0x1a(%ebp)
  e04aa4:	c6 45 e7 00          	movb   $0x0,-0x19(%ebp)
  e04aa8:	8d 45 e0             	lea    -0x20(%ebp),%eax
  e04aab:	c7 45 e0 00 00 00 00 	movl   $0x0,-0x20(%ebp)
  e04ab2:	89 44 24 04          	mov    %eax,0x4(%esp)
  e04ab6:	81 65 e4 00 00 f0 ff 	andl   $0xfff00000,-0x1c(%ebp)
  e04abd:	89 1c 24             	mov    %ebx,(%esp)
  e04ac0:	e8 4b c2 d9 ff       	call   ba0d10 <_ZN11CBasePlayer10GetSteamIDEP8CSteamID>
  e04ac5:	8b 55 c0             	mov    -0x40(%ebp),%edx
  e04ac8:	8b 02                	mov    (%edx),%eax
  e04aca:	89 14 24             	mov    %edx,(%esp)
  e04acd:	ff 90 74 03 00 00    	call   *0x374(%eax)
  e04ad3:	8d 50 5c             	lea    0x5c(%eax),%edx
  e04ad6:	8b 40 5c             	mov    0x5c(%eax),%eax
  e04ad9:	89 14 24             	mov    %edx,(%esp)
  e04adc:	ff 50 2c             	call   *0x2c(%eax)
  e04adf:	3b 45 e0             	cmp    -0x20(%ebp),%eax
  e04ae2:	0f 84 b6 fe ff ff    	je     e0499e <_ZN9CTFPlayer21PickupWeaponFromOtherEPK16CTFDroppedWeapon+0x1fe>
  e04ae8:	85 c0                	test   %eax,%eax
  e04aea:	0f 84 ae fe ff ff    	je     e0499e <_ZN9CTFPlayer21PickupWeaponFromOtherEPK16CTFDroppedWeapon+0x1fe>
  e04af0:	e9 3f fe ff ff       	jmp    e04934 <_ZN9CTFPlayer21PickupWeaponFromOtherEPK16CTFDroppedWeapon+0x194>
  e04af5:	8d 76 00             	lea    0x0(%esi),%esi
  e04af8:	83 c8 01             	or     $0x1,%eax
  e04afb:	89 02                	mov    %eax,(%edx)
  e04afd:	89 14 24             	mov    %edx,(%esp)
  e04b00:	89 55 ac             	mov    %edx,-0x54(%ebp)
  e04b03:	e8 08 87 c9 ff       	call   a9d210 <_ZN10CBaseEdict17GetChangeAccessorEv>
  e04b08:	8b 0d 3c a9 66 01    	mov    0x166a93c,%ecx
  e04b0e:	89 45 b0             	mov    %eax,-0x50(%ebp)
  e04b11:	8b 55 ac             	mov    -0x54(%ebp),%edx
  e04b14:	89 4d c0             	mov    %ecx,-0x40(%ebp)
  e04b17:	0f b7 09             	movzwl (%ecx),%ecx
  e04b1a:	66 39 48 02          	cmp    %cx,0x2(%eax)
  e04b1e:	74 71                	je     e04b91 <_ZN9CTFPlayer21PickupWeaponFromOtherEPK16CTFDroppedWeapon+0x3f1>
  e04b20:	8b 45 c0             	mov    -0x40(%ebp),%eax
  e04b23:	0f b7 88 a2 0f 00 00 	movzwl 0xfa2(%eax),%ecx
  e04b2a:	8b 45 b0             	mov    -0x50(%ebp),%eax
  e04b2d:	66 83 f9 64          	cmp    $0x64,%cx
  e04b31:	0f 84 ed 00 00 00    	je     e04c24 <_ZN9CTFPlayer21PickupWeaponFromOtherEPK16CTFDroppedWeapon+0x484>
  e04b37:	66 89 08             	mov    %cx,(%eax)
  e04b3a:	8b 55 b0             	mov    -0x50(%ebp),%edx
  e04b3d:	a1 3c a9 66 01       	mov    0x166a93c,%eax
  e04b42:	66 83 80 a2 0f 00 00 	addw   $0x1,0xfa2(%eax)
  e04b49:	01 
  e04b4a:	0f b7 00             	movzwl (%eax),%eax
  e04b4d:	66 89 42 02          	mov    %ax,0x2(%edx)
  e04b51:	0f b7 02             	movzwl (%edx),%eax
  e04b54:	8b 15 3c a9 66 01    	mov    0x166a93c,%edx
  e04b5a:	8d 04 80             	lea    (%eax,%eax,4),%eax
  e04b5d:	8d 04 c2             	lea    (%edx,%eax,8),%eax
  e04b60:	66 c7 40 02 84 05    	movw   $0x584,0x2(%eax)
  e04b66:	66 c7 40 28 01 00    	movw   $0x1,0x28(%eax)
  e04b6c:	e9 9c fe ff ff       	jmp    e04a0d <_ZN9CTFPlayer21PickupWeaponFromOtherEPK16CTFDroppedWeapon+0x26d>
  e04b71:	8d b4 26 00 00 00 00 	lea    0x0(%esi,%eiz,1),%esi
  e04b78:	8b 40 04             	mov    0x4(%eax),%eax
  e04b7b:	89 45 c4             	mov    %eax,-0x3c(%ebp)
  e04b7e:	e9 65 fe ff ff       	jmp    e049e8 <_ZN9CTFPlayer21PickupWeaponFromOtherEPK16CTFDroppedWeapon+0x248>
  e04b83:	90                   	nop
  e04b84:	8d 74 26 00          	lea    0x0(%esi,%eiz,1),%esi
  e04b88:	80 4f 60 01          	orb    $0x1,0x60(%edi)
  e04b8c:	e9 7c fe ff ff       	jmp    e04a0d <_ZN9CTFPlayer21PickupWeaponFromOtherEPK16CTFDroppedWeapon+0x26d>
  e04b91:	0f b7 00             	movzwl (%eax),%eax
  e04b94:	8b 4d c0             	mov    -0x40(%ebp),%ecx
  e04b97:	8d 04 80             	lea    (%eax,%eax,4),%eax
  e04b9a:	8d 0c c1             	lea    (%ecx,%eax,8),%ecx
  e04b9d:	89 4d b8             	mov    %ecx,-0x48(%ebp)
  e04ba0:	83 c1 02             	add    $0x2,%ecx
  e04ba3:	0f b7 41 26          	movzwl 0x26(%ecx),%eax
  e04ba7:	89 4d bc             	mov    %ecx,-0x44(%ebp)
  e04baa:	66 85 c0             	test   %ax,%ax
  e04bad:	66 89 45 c0          	mov    %ax,-0x40(%ebp)
  e04bb1:	74 54                	je     e04c07 <_ZN9CTFPlayer21PickupWeaponFromOtherEPK16CTFDroppedWeapon+0x467>
  e04bb3:	8b 4d b8             	mov    -0x48(%ebp),%ecx
  e04bb6:	b8 84 05 00 00       	mov    $0x584,%eax
  e04bbb:	66 3b 41 02          	cmp    0x2(%ecx),%ax
  e04bbf:	0f 84 48 fe ff ff    	je     e04a0d <_ZN9CTFPlayer21PickupWeaponFromOtherEPK16CTFDroppedWeapon+0x26d>
  e04bc5:	0f b7 45 c0          	movzwl -0x40(%ebp),%eax
  e04bc9:	89 55 b4             	mov    %edx,-0x4c(%ebp)
  e04bcc:	8b 4d bc             	mov    -0x44(%ebp),%ecx
  e04bcf:	83 e8 01             	sub    $0x1,%eax
  e04bd2:	0f b7 c0             	movzwl %ax,%eax
  e04bd5:	01 c0                	add    %eax,%eax
  e04bd7:	89 45 b8             	mov    %eax,-0x48(%ebp)
  e04bda:	31 c0                	xor    %eax,%eax
  e04bdc:	8b 55 b8             	mov    -0x48(%ebp),%edx
  e04bdf:	89 5d b8             	mov    %ebx,-0x48(%ebp)
  e04be2:	eb 12                	jmp    e04bf6 <_ZN9CTFPlayer21PickupWeaponFromOtherEPK16CTFDroppedWeapon+0x456>
  e04be4:	8d 74 26 00          	lea    0x0(%esi,%eiz,1),%esi
  e04be8:	83 c0 02             	add    $0x2,%eax
  e04beb:	bb 84 05 00 00       	mov    $0x584,%ebx
  e04bf0:	66 3b 1c 01          	cmp    (%ecx,%eax,1),%bx
  e04bf4:	74 3f                	je     e04c35 <_ZN9CTFPlayer21PickupWeaponFromOtherEPK16CTFDroppedWeapon+0x495>
  e04bf6:	39 d0                	cmp    %edx,%eax
  e04bf8:	75 ee                	jne    e04be8 <_ZN9CTFPlayer21PickupWeaponFromOtherEPK16CTFDroppedWeapon+0x448>
  e04bfa:	66 83 7d c0 13       	cmpw   $0x13,-0x40(%ebp)
  e04bff:	8b 55 b4             	mov    -0x4c(%ebp),%edx
  e04c02:	8b 5d b8             	mov    -0x48(%ebp),%ebx
  e04c05:	74 36                	je     e04c3d <_ZN9CTFPlayer21PickupWeaponFromOtherEPK16CTFDroppedWeapon+0x49d>
  e04c07:	0f b7 45 c0          	movzwl -0x40(%ebp),%eax
  e04c0b:	8b 55 bc             	mov    -0x44(%ebp),%edx
  e04c0e:	66 c7 04 42 84 05    	movw   $0x584,(%edx,%eax,2)
  e04c14:	0f b7 45 c0          	movzwl -0x40(%ebp),%eax
  e04c18:	83 c0 01             	add    $0x1,%eax
  e04c1b:	66 89 42 26          	mov    %ax,0x26(%edx)
  e04c1f:	e9 e9 fd ff ff       	jmp    e04a0d <_ZN9CTFPlayer21PickupWeaponFromOtherEPK16CTFDroppedWeapon+0x26d>
  e04c24:	66 c7 40 02 00 00    	movw   $0x0,0x2(%eax)
  e04c2a:	81 0a 00 01 00 00    	orl    $0x100,(%edx)
  e04c30:	e9 d8 fd ff ff       	jmp    e04a0d <_ZN9CTFPlayer21PickupWeaponFromOtherEPK16CTFDroppedWeapon+0x26d>
  e04c35:	8b 5d b8             	mov    -0x48(%ebp),%ebx
  e04c38:	e9 d0 fd ff ff       	jmp    e04a0d <_ZN9CTFPlayer21PickupWeaponFromOtherEPK16CTFDroppedWeapon+0x26d>
  e04c3d:	8b 45 b0             	mov    -0x50(%ebp),%eax
  e04c40:	66 c7 40 02 00 00    	movw   $0x0,0x2(%eax)
  e04c46:	81 0a 00 01 00 00    	orl    $0x100,(%edx)
  e04c4c:	e9 bc fd ff ff       	jmp    e04a0d <_ZN9CTFPlayer21PickupWeaponFromOtherEPK16CTFDroppedWeapon+0x26d>
  e04c51:	90                   	nop
  e04c52:	8d b4 26 00 00 00 00 	lea    0x0(%esi,%eiz,1),%esi
  e04c59:	8d bc 27 00 00 00 00 	lea    0x0(%edi,%eiz,1),%edi
fakuivan is offline
pheadxdll
AlliedModders Donor
Join Date: Jun 2008
Old 12-18-2015 , 04:23   Re: I know nothing about sigscanning and I want to learn about it
Reply With Quote #2

If you need a working signature, you can grab it from here. As for the rules on what to wildcard- anything that is likely to change at runtime or when the binary is recompiled. The wiki link you posted explains this.. you'll learn the rules with a better understanding of assembly. For example, the first few bytes that make up the function prologue are almost never wildcarded as they won't change unless the function parameters are changed. And if that happens, you've got bigger problems.
__________________

Last edited by pheadxdll; 12-18-2015 at 04:29.
pheadxdll is offline
Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -4. The time now is 20:51.


Powered by vBulletin®
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
Theme made by Freecode