Raised This Month: $7 Target: $400
 1% 

Signature Request Thread


Post New Thread Reply   
 
Thread Tools Display Modes
Psyk0tik
Veteran Member
Join Date: May 2012
Location: Homeless
Old 04-28-2018 , 18:31   Re: Signature Request Thread
Reply With Quote #311

Could someone please provide me the L4D1 Windows and Linux signatures for the following:

CTerrorPlayer_OnStaggered
CTerrorPlayer_SetHealthBuffer
CTerrorPlayer_OnRevived



Thanks in advanced!

EDIT:

PHP Code:
"Games"
{
    
"left4dead"
    
{
        
"Signatures"
        
{
            
"CTerrorPlayer_SetHealthBuffer"
            
{
                
"library"    "server"
                "linux"        "@_ZN13CTerrorPlayer15SetHealthBufferEf"
                "windows"    "\x83\x2A\x2A\x53\x8B\x2A\x55\x89\x2A\x2A\x2A\xE8\x2A\x2A\x2A\x2A\x8B"
            
}

            
"CTerrorPlayer_OnRevived"
            
{
                
"library"    "server"
                "linux"        "@_ZN13CTerrorPlayer9OnRevivedEv"
                "windows"    "\x83\x2A\x2A\x53\x55\x56\x57\x8B\x2A\x8B\x2A\x8B\x2A\x2A\x2A\x2A\x2A\xFF\x2A\x84\x2A\x0F\x2A\x2A\x2A\x2A\x2A\x8B"
            
}

            
"CTerrorPlayer_OnStaggered"
            
{
                
"library"    "server"
                "linux"        "@_ZN13CTerrorPlayer11OnStaggeredEP11CBaseEntityPK6Vector_part_711"
                "windows"    "\x83\x2A\x2A\x56\x8B\x2A\xE8\x2A\x2A\x2A\x2A\x84\x2A\x0F\x2A\x2A\x2A\x2A\x2A\x8B\x2A\x8B\x2A\x2A\x2A\x2A\x2A\x8B\x2A\xFF\x2A\x84\x2A\x0F\x2A\x2A\x2A\x2A\x2A\x53\x55\x57\x6A\x2A\x8B\x2A\xE8\x2A\x2A\x2A\x2A\x8B"
            
}
        }
    }

    
"left4dead2"
    
{
        
"Signatures"
        
{
            
"CTerrorPlayer_SetHealthBuffer"
            
{
                
"library"    "server"
                "linux"        "@_ZN13CTerrorPlayer15SetHealthBufferEf"
                "windows"    "\x55\x8B\xEC\xF3\x0F\x10\x45\x08\x0F\x57\xC9\x0F\x2F\xC1\x56"
            
}

            
"CTerrorPlayer_OnRevived"
            
{
                
"library"    "server"
                "linux"        "@_ZN13CTerrorPlayer9OnRevivedEv"
                "windows"    "\x2A\x2A\x2A\x2A\x2A\x2A\x53\x56\x8B\xF1\x8B\x06\x8B\x90\x2A\x2A\x2A\x2A\x57\xff\xd2\x84\xc0\x0f\x84\x2A\x2A\x2A\x2A\x8B\xCE"
            
}

            
"CTerrorPlayer_OnStaggered"
            
{
                
"library"    "server"
                "linux"        "@_ZN13CTerrorPlayer11OnStaggeredEP11CBaseEntityPK6Vector"
                "windows"    "\x53\x8B\xDC\x83\xEC\x2A\x83\xE4\xF0\x83\xC4\x04\x55\x8B\x6B\x04\x89\x6C\x24\x04\x8B\xEC\x83\xEC\x2A\x56\x57\x8B\xF1\xE8\x2A\x2A\x2A\x2A\x84\xC0\x0F\x85\x6E\x08"
            
}
        }
    }

__________________

Last edited by Psyk0tik; 05-01-2018 at 01:07.
Psyk0tik is offline
bovril
Member
Join Date: Jan 2011
Old 06-30-2018 , 04:28   Re: Signature Request Thread
Reply With Quote #312

Could somebody please provide the linux signature for CBaseObject::FindSnapToBuildPos

thanks

EDIT:

For TF2

Last edited by bovril; 06-30-2018 at 16:59.
bovril is offline
Spirit_12
Veteran Member
Join Date: Dec 2012
Location: Toronto, CA
Old 06-30-2018 , 15:08   Re: Signature Request Thread
Reply With Quote #313

Quote:
Originally Posted by bovril View Post
Could somebody please provide the linux signature for CBaseObject::FindSnapToBuildPos

thanks
Game?
__________________
Spirit_12 is offline
bovril
Member
Join Date: Jan 2011
Old 06-30-2018 , 17:00   Re: Signature Request Thread
Reply With Quote #314

Quote:
Originally Posted by Spirit_12 View Post
Game?
Sorry about that, for TF2 (edited op too)
bovril is offline
HarryPotter
Veteran Member
Join Date: Sep 2017
Location: Taiwan, Asia
Old 07-02-2018 , 16:13   Re: Signature Request Thread
Reply With Quote #315

Quote:
Originally Posted by cravenge View Post
PHP Code:
"Games"
{
    
"left4dead"
    
{
        
"Offsets"
        
{
            
"OnTakeDamage_StaggeringInfected" /* CBaseAbility_OnOwnerTakeDamage */
            
{
                
"windows"    ""
                "linux"    "207"
            
}
        }
        
        
"Signatures"
        
{
            
"ForceBreakRock"
            
{
                
"library"    "server"
                "linux"    "@_ZN9CTankRock8DetonateEv"
                "windows"    ""
            
}
            
"WarpStuckSurvivor"
            
{
                
"library"    "server"
                "linux"    "@_ZN13CTerrorPlayer26WarpToValidPositionIfStuckEv"
                "windows"    ""
            
}
        }
     }
     
    
"left4dead2"
    
{
        
"Offsets"
        
{
            
"OnTakeDamage_StaggeringInfected" /* CBaseAbility_OnOwnerTakeDamage */
            
{
                
"windows"    ""
                "linux"    "222"
            
}
            
"OnJockeyLeap" /* CLeap_OnTouch */
            
{
                
"windows"    ""
                "linux"    "512"
            
}
        }
        
        
"Signatures"
        
{
            
"ForceBreakRock"
            
{
                
"library"    "server"
                "linux"    "@_ZN9CTankRock8DetonateEv"
                "windows"    ""
            
}
            
"WarpStuckSurvivor"
            
{
                
"library"    "server"
                "linux"    "@_ZN13CTerrorPlayer26WarpToValidPositionIfStuckEv"
                "windows"    ""
            
}
        }
     }

PHP Code:
    "left4dead"
    
{
        
"Signatures"
        
{
            
"ForceBreakRock"
            
{
                
"library"    "server"
                "linux"    "@_ZN9CTankRock8DetonateEv"
                "windows"    "\x83\xEC\x30\x53\x55\x56\x8B\xF1\x80\xBE\xD4\x08\x00\x00\x00"
            
}
            
"WarpStuckSurvivor"
            
{
                
"library"    "server"
                "linux"    "@_ZN13CTerrorPlayer26WarpToValidPositionIfStuckEv"
                "windows"  "\x55\x8B\xEC\x83\xE4\xC0\x81\xEC\xB0\x00\x00\x00\x53\x55\x56\x8B\xF1"
            
}
        }
    } 

Last edited by HarryPotter; 07-02-2018 at 16:17.
HarryPotter is offline
Neuro Toxin
Veteran Member
Join Date: Oct 2013
Location: { closing the void; }
Old 07-25-2018 , 17:40   Re: Signature Request Thread
Reply With Quote #316

Game: CSGO

Im looking to hook the function that receives the pure file information. Dont have a clue of the function name.

It's parameters would include filename and hash.
__________________
Neuro Toxin is offline
psychonic

BAFFLED
Join Date: May 2008
Old 07-25-2018 , 20:20   Re: Signature Request Thread
Reply With Quote #317

Quote:
Originally Posted by Neuro Toxin View Post
Game: CSGO

Im looking to hook the function that receives the pure file information. Dont have a clue of the function name.

It's parameters would include filename and hash.
For what it's worth, the function you're probably looking for is CPureFileTracker::DoesFileMatch.

Last edited by psychonic; 07-25-2018 at 20:21. Reason: [noparse] :D
psychonic is offline
Neuro Toxin
Veteran Member
Join Date: Oct 2013
Location: { closing the void; }
Old 07-25-2018 , 21:19   Re: Signature Request Thread
Reply With Quote #318

That sounds about right. Do you happen to know its parameters as I want filename and hash
__________________
Neuro Toxin is offline
hmmmmm
Great Tester of Whatever
Join Date: Mar 2017
Location: ...
Old 07-26-2018 , 06:23   Re: Signature Request Thread
Reply With Quote #319

CPureFileTracker:oesFileMatch(char const*,char const*,int,FileHash_t *,USERID_s)
Library: Engine
Windows: \x55\x8B\xEC\x8B\x0D\x2A\x2A\x2A\x2A\x81\xEC\ x94\x05\x00\x00
Linux: \x55\x89\xE5\x57\x56\x53\x81\xEC\xFC\x05\x00\ x00

It isn't a virtual function so you'll need a detour library to hook it.
Also IDA marks it as a __userpurge on Windows so there may be some funky calling convention being used.
hmmmmm is offline
Neuro Toxin
Veteran Member
Join Date: Oct 2013
Location: { closing the void; }
Old 07-26-2018 , 17:52   Re: Signature Request Thread
Reply With Quote #320

Thanks hmmmmm!!!!!!!!!!!!

The FileHash_t pointer scares me. I wonder if i can pull the hash as a string somehow.

https://forums.alliedmods.net/showthread.php?t=309454
__________________

Last edited by Neuro Toxin; 07-26-2018 at 17:57.
Neuro Toxin is offline
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -4. The time now is 23:05.


Powered by vBulletin®
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
Theme made by Freecode