[your-name-here]

Six years later and this thread is still going. WOW

[kadet.89]

Can someone please make a signature for this (TF2) ?
VPhysicsInitNormal
The only clue I managed to find:

PHP Code:

clue: CItem::Materialize(void) "Item.Materialize" -> CItem::CreateItemVPhysicsObject(void) -> VPhysicsInitNormal 


But it gives me this wrong signature:

PHP Code:

            "VPhysicsInitNormal"
            {
                "library"               "server"
                //"windows"               "\x55\x8B\xEC\x53\x8B\xD9\x83\x7B\x18\x00\x0F\x84\xB8\x00\x00\x00\xF6\x83\x14\x01\x00\x00\x01\x0F\x85\xAB\x00\x00\x00\x8B\x03\x56\xFF\x90\x70\x02\x00\x00\xFF\x75\x08\x8D\x8B\x5C\x01\x00"
                "windows"               "\x55\x8B\xEC\x53\x8B\xD9\x83\x2A\x2A\x2A\x0F\x2A\x2A\x2A\x2A\x2A\xF6\x2A\x2A\x2A\x2A\x2A\x2A\x0F\x2A\x2A\x2A\x2A\x2A\x8B\x03\x56\xFF\x2A\x2A\x2A\x2A\x2A\xFF\x2A\x2A\x8D\x2A\x2A\x2A\x2A\x2A\xE8"
                "linux"                 "@_ZN11CBaseEntity18VPhysicsInitNormalE11SolidType_tibP7solid_t"
            } 


[spidershift]

I'm looking for CCSPlayer::FireBullet(...) in CS:GO and this is what I came up with. However, this windows signature isn't working. Since I'm trying to learn how to acquire signatures, can someone confirm if this is correct?

PHP Code:

"Games"
{
    "cstrike"
    {
        "Signatures"
        {
            "FireBullet"
            {
                "library" "server"
                "windows" "\x66\x0F\xC5\xC0\x2A\x66\x25\x2A\x2A\x66\x2D\x2A\x00\x66\x3D\x2A\x2A\x0F\x87\xE9\x00\x00\x00\xF2\x0F\x10\x0D\xD8\x64\x79\x10\xF3\x0F\x59\xC8"
                "linux"   "@_ZN9CCSPlayer10FireBulletE6"
            }
        }
    }
} 


[GoD-Tony]

Originally Posted by kadet.89 Can someone please make a signature for this (TF2) ? VPhysicsInitNormal

CBaseEntity::VPhysicsInitNormal
\x55\x8B\xEC\x53\x8B\xD9\x83\x7B\x18\x00\x0F\x84\x2A\x2A\x2A\x2A\xF6\x83\x14\x01\x00\x00\x01

Originally Posted by spidershift I'm looking for CCSPlayer::FireBullet(...) in CS:GO

CCSPlayer::FireBullet
\x53\x8B\xDC\x83\xEC\x08\x83\xE4\xF0\x83\xC4\x04\x55\x8B\x6B\x04\x89\x6C\x24\x04\x8B\xEC\x81\xEC\x2A\x05\x00\x00\x66\x0F\x6E\x43\x24

[spidershift]

Thanks for the quick reply. I tried that signature but it doesn't work. I've tested with CCSPlayer:eafen(...) to ensure my detours are working. I also realize I accidentally put "cstrike" in the game data instead of "csgo", so I'm not sure if you looked up CS:GO or CS:S, but I was actually unable to find that sequence of bytes in the most recent CS:GO binary. I apologize for all this confusion, I'm still trying to figure most of this out myself.

[GoD-Tony]

Originally Posted by spidershift Thanks for the quick reply. I tried that signature but it doesn't work.

I edited my post a few minutes before your reply since I forgot to wildcard some bytes. Try it again?

[spidershift]

Thanks, much appreciated. I tried your updated sequence of bytes and did find a unique result in my most recent windows binary. The detour did not work however, but I'm fairly certain this is an error in my code. Would you happen to know the return type of CCSPlayer::FireBullet(...)? Is it not void?

EDIT: Here is the error I'm getting...

Run-Time Check Failure #0 - The value of ESP was not properly saved across a function call. This is usually a result of calling a function declared with one calling convention with a function pointer declared with a different calling convention.

Also, how did you go about finding this function? I can find the static FX_FireBullets(...) since it has quite a few unique strings inside it. It should also be the only function calling CCSPlayer::FireBullet(...), correct? I'm unable to find that call even though it should be right before the second "bullets" string found in the function.

[psychonic]

For CS:GO on Windows, you're in for an extra bit of hurt for any non-virtual and non-public functions as many of them have been optimized by link-time code generation (LTCG), leading to non-standard calling conventions.

[spidershift]

So are you saying that I'll most likely be unable to detour CCSPlayer::FireBullet() on windows? I believe it's a public function, isn't it?

Also, I have successfully detoured FX_FireBullets(...), but it crashes whenever I try to execute the call:

PHP Code:

DETOUR_STATIC_CALL(DetourFXFireBullets)(a1, a2, Vector(0, 0, 0), QAngle(0, 0, 0), a5, a6, a7, a8, a9, a10, a11, a12); 


Also, if I comment out the DETOUR_STATIC_CALL, it appears as if the original FX_FireBullets(...) is still being called (but the static detour is being called as well because I see the chat text logged by the forward). I was expecting no bullets to be registering when I commented that out, but it seems that the detour still calls the original function.

[Powerlord]

...since SDKHooks already has a FireBulletsPost hook, couldn't you just look at what it's doing?