Raised This Month: $235 Target: $400
 58% 

[CS:GO] VTable


Post New Thread Reply   
 
Thread Tools Display Modes
Author Message
gubka
Veteran Member
Join Date: Jan 2012
Location: Dublin
Old 07-06-2018 , 23:22   [CS:GO] VTable
Reply With Quote #1

Hello everyone, according to https://forums.alliedmods.net/showthread.php?t=191171 post i tried to find the vtable offsets, can anyone explain me more detaily how to get vtable offsets/sigranuts in the server.so for CS:GO, i had one of the old .so and all functions have a names there, but the newest .so dont have a proper names to find the offsets. Thanks a million
__________________
Nikita Ushakov

[CS:GO] Zombie Plague | [CS:GO] Zombie Escape | YouTube Channel
(Do not send private messages. Use the forum)
gubka is offline
Send a message via ICQ to gubka Send a message via Skype™ to gubka
blacklagoon
Senior Member
Join Date: Jun 2012
Old 07-07-2018 , 21:16   Re: [CS:GO] VTable
Reply With Quote #2

There's a plugin named bindiff for IDA, it will basically do a difference of the binaries, and show you what matched old functions symbols in a new tab.
Then you basically can do how Dr!fter does it.

Last edited by blacklagoon; 07-07-2018 at 21:26.
blacklagoon is offline
gubka
Veteran Member
Join Date: Jan 2012
Location: Dublin
Old 07-07-2018 , 23:50   Re: [CS:GO] VTable
Reply With Quote #3

Quote:
Originally Posted by blacklagoon View Post
There's a plugin named bindiff for IDA, it will basically do a difference of the binaries, and show you what matched old functions symbols in a new tab.
Then you basically can do how Dr!fter does it.
Oh thanks a million, i will try ofc
__________________
Nikita Ushakov

[CS:GO] Zombie Plague | [CS:GO] Zombie Escape | YouTube Channel
(Do not send private messages. Use the forum)
gubka is offline
Send a message via ICQ to gubka Send a message via Skype™ to gubka
blacklagoon
Senior Member
Join Date: Jun 2012
Old 07-08-2018 , 02:15   Re: [CS:GO] VTable
Reply With Quote #4

OH, and forgot Class Informer is a must too, it helps a lot to retrieve vtables.
blacklagoon is offline
gubka
Veteran Member
Join Date: Jan 2012
Location: Dublin
Old 07-12-2018 , 20:18   Re: [CS:GO] VTable
Reply With Quote #5

Quote:
Originally Posted by blacklagoon View Post
OH, and forgot Class Informer is a must too, it helps a lot to retrieve vtables.
Thanks and signatures must be extract in same way?
__________________
Nikita Ushakov

[CS:GO] Zombie Plague | [CS:GO] Zombie Escape | YouTube Channel
(Do not send private messages. Use the forum)
gubka is offline
Send a message via ICQ to gubka Send a message via Skype™ to gubka
hmmmmm
Senior Member
Join Date: Mar 2017
Location: ...
Old 07-13-2018 , 03:11   Re: [CS:GO] VTable
Reply With Quote #6

Class Informer isn't needed in IDA 7 since IDA can identify vtables for you (assuming you have the pro version).

As for signatures, I recommend you use a script to generate the sig for you. SM has a good one called makesig.idc. However, if you're using that script with IDA 7 you'll need to run a find+replace on it to replace all instances of "dtype" to "dtype" for it to work.

Last edited by hmmmmm; 07-13-2018 at 03:14.
hmmmmm is offline
gubka
Veteran Member
Join Date: Jan 2012
Location: Dublin
Old 07-13-2018 , 07:45   Re: [CS:GO] VTable
Reply With Quote #7

Thanks a million for help)
__________________
Nikita Ushakov

[CS:GO] Zombie Plague | [CS:GO] Zombie Escape | YouTube Channel
(Do not send private messages. Use the forum)
gubka is offline
Send a message via ICQ to gubka Send a message via Skype™ to gubka
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -4. The time now is 00:31.


Powered by vBulletin®
Copyright ©2000 - 2018, vBulletin Solutions, Inc.
Theme made by Freecode