Raised This Month: $12 Target: $400
 3% 

Signature Request Thread


Post New Thread Reply   
 
Thread Tools Display Modes
arthurdead
Senior Member
Join Date: Jul 2013
Old 08-05-2016 , 14:08   Re: Signature Request Thread
Reply With Quote #271

Quote:
Originally Posted by Chdata View Post
I haven't had problems with their return values yet.

Is finding windows sigs that hard?

I wanted to use them to avoid offset maintenance during updates.
sigs are your enemy they break every update
offsets dont break every update
Spoiler


also powerlord wont using offsets fix that because it will call the CTFWeaponBase functions which look for econ stuff ? i havent checked but they should look for econ stuff

Last edited by arthurdead; 08-05-2016 at 14:09.
arthurdead is offline
Potato Uno
Veteran Member
Join Date: Jan 2014
Location: Atlanta, Georgia
Old 08-05-2016 , 14:13   Re: Signature Request Thread
Reply With Quote #272

Quote:
Originally Posted by arthurdead View Post
sigs are your enemy they break every update
I don't know what you are talking about. I have like 20 signatures in my gamedata file and they haven't broke for months. The TF2 meet your match update and tough break updates together haven't broken a single signature on my end.

In fact, signatures can sometimes break less than offsets, especially if Valve decides to randomly add or remove functions from the vtable but never changes the body of the function itself.

The only major advantage offsets have is they are incredibly easy to find thanks to Asherkin's tool.

For stuff like CBase*, the signatures will hardly change. However, the problem at that level (and yes, I have looked at the binary) you will have a hard time making a UNIQUE signature (2 of the functions listed are really short and have stuff that will change every time the game is recompiled). So you're better off using the offsets.

Last edited by Potato Uno; 08-05-2016 at 14:16.
Potato Uno is offline
arthurdead
Senior Member
Join Date: Jul 2013
Old 08-05-2016 , 14:31   Re: Signature Request Thread
Reply With Quote #273

Quote:
Originally Posted by Potato Uno View Post
I don't know what you are talking about. I have like 20 signatures in my gamedata file and they haven't broke for months.

In fact, signatures can sometimes break less than offsets, especially if Valve decides to randomly add or remove functions from the vtable but never changes the body of the function itself.

The only major advantage offsets have is they are incredibly easy to find thanks to Asherkin's tool.
i was joking also offsets help in classes with overrided functions which is major for me

Last edited by arthurdead; 08-05-2016 at 18:55. Reason: i meant somenthing else
arthurdead is offline
donrevan
AlliedModders Donor
Join Date: Jul 2010
Old 08-07-2016 , 18:57   Re: Signature Request Thread
Reply With Quote #274

Quote:
Originally Posted by Chdata View Post
I haven't had problems with their return values yet.

Is finding windows sigs that hard?

I wanted to use them to avoid offset maintenance during updates.
If you know the windows offset the easiest way to get the signature is to find the virtual function table (RTTI makes this easy, there are plugins for IDA that do all the work for you) and then count the functions in the vftable until you reach the offset - you got the function! Now you can either manually create the signature or use a script like magesig.idc to do it for you.

Last edited by donrevan; 08-07-2016 at 18:59.
donrevan is offline
dilalmon
AlliedModders Donor
Join Date: Apr 2013
Old 08-15-2016 , 17:55   Re: Signature Request Thread
Reply With Quote #275

Could anyone help me get "LookupAttachment" signature for Windows?
dilalmon is offline
psychonic

BAFFLED
Join Date: May 2008
Old 08-15-2016 , 18:07   Re: Signature Request Thread
Reply With Quote #276

Quote:
Originally Posted by dilalmon View Post
Could anyone help me get "LookupAttachment" signature for Windows?
You'll need to specify what game.
psychonic is offline
dilalmon
AlliedModders Donor
Join Date: Apr 2013
Old 08-15-2016 , 18:52   Re: Signature Request Thread
Reply With Quote #277

Quote:
Originally Posted by psychonic View Post
You'll need to specify what game.
I always forget to do this. Sorry.
It's CS:GO.

I tried doing this myself and it doesn't seem like I did it right.

I looked it up in IDA, found the function (1019B8E0), masked ones that would change, but I failed miserably.
Here's what I got as a reminder of my failure:

Quote:
\x55\x8B\xEC\x57\x8B\xF9\x83\xBF\x2A\x2A\x2A\ x2A\x00\x75\x23\xA1\x2A\x2A\x2A\x2A\x56\x8B\x 30\x8B\x07\xFF\x50\x18\x8B\x0D\x2A\x2A\x2A\x2 A\x50\xFF\x56\x04\x5E\x85\xC0\x74\x07\x8B\xCF \xE8\x2A\x2A\x2A\x2A\x8B\x8F\x2A\x2A\x2A\x2A\ x5F\x85\xC9\x74\x12\x83\x39\x00\x74\x0D\x8B\x 55\x08\xE8\x2A\x2A\x2A\x2A\x40\x5D\xC2\x04\x0 0\x33\xC0\x5D\xC2\x04\x00

Last edited by dilalmon; 08-15-2016 at 18:52.
dilalmon is offline
Potato Uno
Veteran Member
Join Date: Jan 2014
Location: Atlanta, Georgia
Old 08-15-2016 , 19:46   Re: Signature Request Thread
Reply With Quote #278

Use makesig.idc once you locate the function in windows.

But if you want to make it manually, you need to wildcard dwords, jumps to specific sections of the code, function call memory addresses, and other things that would change every recompile of the game.

Last edited by Potato Uno; 08-15-2016 at 19:49.
Potato Uno is offline
dilalmon
AlliedModders Donor
Join Date: Apr 2013
Old 08-15-2016 , 22:23   Re: Signature Request Thread
Reply With Quote #279

Quote:
Originally Posted by Potato Uno View Post
Use makesig.idc once you locate the function in windows.

But if you want to make it manually, you need to wildcard dwords, jumps to specific sections of the code, function call memory addresses, and other things that would change every recompile of the game.
I tried using it (https://github.com/alliedmodders/sou...ts/makesig.idc), but it says syntax error near "auto".

EDIT: Looks like my IDA was an older version.

I got the signature from it, but it is still not working:

Quote:
\x55\x8B\xEC\x57\x8B\xF9\x83\xBF\x98\x04\x00\ x00\x00\x75\x2A\xA1\x2A\x2A\x2A\x2A\x56\x8B\x 30\x8B\x07\xFF\x50\x18\x8B\x0D\x2A\x2A\x2A\x2 A\x50\xFF\x56\x04\x5E\x85\xC0\x74\x2A\x8B\xCF \xE8\x2A\x2A\x2A\x2A\x8B\x8F\x98\x04\x00\x00\ x5F\x85\xC9\x74\x2A\x83\x39\x00\x74\x2A\x8B\x 55\x08\xE8\x2A\x2A\x2A\x2A

Last edited by dilalmon; 08-15-2016 at 22:55.
dilalmon is offline
Dr!fter
The Salt Boss
Join Date: Mar 2007
Old 08-16-2016 , 19:58   Re: Signature Request Thread
Reply With Quote #280

what exactly does, "not working" mean.
Dr!fter is offline
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -4. The time now is 11:48.


Powered by vBulletin®
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
Theme made by Freecode