[after_57]

I need to convert the signature from windows to linux

"Signatures"
{
"WantsLagCompensationOnEntitySig"
{
"library" "server"
"windows" "\x55\x8b\xec\x83\xec\x10\x56\x57\x8b\xf9\x8b \x0d\x2A\x2A\x2A\x2A\x81\xf9"

[Dragokas]

Which game?

[after_57]

csgo

[Dragokas]

Hard to find. Xref has "weapon_knife", but none sub on Linux looks similar.

[XalaFiv837]

have you tried to use https://asherkin.github.io/vtable/ ?

[Psyk0tik]

Originally Posted by XalaFiv837 have you tried to use https://asherkin.github.io/vtable/ ?

CSGO's Linux binaries don't have symbols anymore so that site won't help.

Originally Posted by after_57 I need to convert the signature from windows to linux "Signatures" { "WantsLagCompensationOnEntitySig" { "library" "server" "windows" "\x55\x8b\xec\x83\xec\x10\x56\x57\x8b\xf9\x8b \x0d\x2A\x2A\x2A\x2A\x81\xf9"

I think I found it.

PHP Code:

/**
 * CBasePlayer::WantsLagCompensationOnEntity(CBaseEntity const*, CUserCmd const*, CBitVec<2048> const*)
 *
 * How to find:
 * 1. Search for the "FriendlyFire" string.
 * 2. The string can only be found in "BotChatterInterface::FriendlyFire".
 * 3. In the "BotChatterInterface::FriendlyFire" function, the "mp_friendlyfire" convar is referenced twice at the top.
 * 4. One of the functions that references the "mp_friendlyfire" convar should be this function.
 * 5. This function references the "mp_friendlyfire" convar twice at the top.
 **/
"CBasePlayer::WantsLagCompensationOnEntity"
{
    "library"    "server"
    "linux"        "\x2A\x2A\x2A\x2A\x2A\x2A\xA1\x2A\x2A\x2A\x2A\x89\x2A\x2A\x89\x2A\x2A\x8B\x2A\x2A\x89\x2A\x2A\x8B\x2A\x2A\x3D\x2A\x2A\x2A\x2A\x0F\x84\x2A\x2A\x2A\x2A\x8B\x2A\x89\x2A\x2A\xFF\x2A\x2A\x85\x2A\x0F"
            /* ? ? ? ? ? ? A1 ? ? ? ? 89 ? ? 89 ? ? 8B ? ? 89 ? ? 8B ? ? 3D ? ? ? ? 0F 84 ? ? ? ? 8B ? 89 ? ? FF ? ? 85 ? 0F */
    "windows"    "\x2A\x2A\x2A\x2A\x2A\x2A\x56\x57\x8B\x2A\x8B\x0D\x2A\x2A\x2A\x2A\x81\xF9\x2A\x2A\x2A\x2A\x75\x2A\xA1"
            /* ? ? ? ? ? ? 56 57 8B ? 8B 0D ? ? ? ? 81 F9 ? ? ? ? 75 ? A1 */
} 


[MCDRIVE]

How have you found sigs?

There is a how to some where?

[Dragokas]

Nice catch, Crasher!

But, which function pointing to ConVar in "FriendlyFire"'s string sub?

PHP Code:

int __cdecl sub_CC7C60(int a1, int a2)
{
  int result; // eax
  int v3; // ebx
  int v4; // eax
  int v5; // edx
  float v6; // xmm1_4
  float v7; // [esp+1Ch] [ebp-6Ch]
  int v8; // [esp+3Ch] [ebp-4Ch]
  float v9; // [esp+3Ch] [ebp-4Ch]
  char v10[4]; // [esp+4Ch] [ebp-3Ch] BYREF
  int v11; // [esp+50h] [ebp-38h]
  int v12; // [esp+54h] [ebp-34h]
  int v13; // [esp+58h] [ebp-30h]
  __int16 v14; // [esp+60h] [ebp-28h]
  __int16 v15; // [esp+62h] [ebp-26h]

  result = (*(int (__cdecl **)(int *))(dword_1740360 + 64))(&dword_1740360);
  if ( result )
  {
    v3 = sub_470740(112);
    *(_DWORD *)(v3 + 4) = 0;
    *(_DWORD *)(v3 + 8) = 0;
    *(_DWORD *)v3 = a1;
    v4 = dword_17399BC;
    v5 = *(_DWORD *)(dword_17399BC + 16);
    *(_DWORD *)(v3 + 40) = 0;
    *(_DWORD *)(v3 + 12) = 13;
    *(_DWORD *)(v3 + 16) = -1;
    *(_DWORD *)(v3 + 20) = 0;
    *(_DWORD *)(v3 + 28) = v5;
    *(_DWORD *)(v3 + 24) = 0;
    *(_DWORD *)(v3 + 32) = *(_DWORD *)(v4 + 16);
    v6 = *(float *)(v4 + 16);
    *(_BYTE *)(v3 + 44) = 0;
    *(_DWORD *)(v3 + 48) = 0;
    *(_DWORD *)(v3 + 104) = -1;
    *(_DWORD *)(v3 + 108) = 0;
    *(_DWORD *)(v3 + 100) = 0;
    *(float *)(v3 + 36) = v6 + 1.0;
    sub_E1C730(v10);
    if ( a2 )
      sub_E1CCA0(v10, "damagetype", a2, 1065353216);
    v8 = sub_CC1FD0(dword_183640C, "FriendlyFire");
    sub_E1C970(v8 + 92);
    sub_E1CB80(v8 + 92, v10);
    sub_CC2520(v3, v8);
    v9 = *(float *)(dword_17399BC + 16);
    v7 = RandomFloat(1050253722, 1056964608);
    *(float *)(v3 + 32) = v7 + v9;
    sub_CC2E90(a1, v3, 0);
    sub_576F60(v10);
    result = v13;
    v14 = -1;
    if ( v13 >= 0 )
    {
      if ( v11 )
      {
        (*(void (__cdecl **)(_DWORD, int))(*g_pMemAlloc + 8))(g_pMemAlloc, v11);
        result = v13;
        v11 = 0;
      }
      v12 = 0;
      v15 = -1;
      if ( result >= 0 )
        result = v11;
    }
  }
  return result;
} 


[Psyk0tik]

Originally Posted by Dragokas Nice catch, Crasher! But, which function pointing to ConVar in "FriendlyFire"'s string sub? …

It should be the "dword_1740360" at the top. That points to "mp_friendlyfire" and is referenced by several functions.

I used old CSGO binaries with symbols to compare to the latest binaries.

[after_57]

Originally Posted by Psyk0tik CSGO's Linux binaries don't have symbols anymore so that site won't help. I think I found it. PHP Code: /**  * CBasePlayer::WantsLagCompensationOnEntity(CBaseEntity const*, CUserCmd const*, CBitVec<2048> const*)  *  * How to find:  * 1. Search for the "FriendlyFire" string.  * 2. The string can only be found in "BotChatterInterface::FriendlyFire".  * 3. In the "BotChatterInterface::FriendlyFire" function, the "mp_friendlyfire" convar is referenced twice at the top.  * 4. One of the functions that references the "mp_friendlyfire" convar should be this function.  * 5. This function references the "mp_friendlyfire" convar twice at the top.  **/ "CBasePlayer::WantsLagCompensationOnEntity" {     "library"    "server"     "linux"        "\x2A\x2A\x2A\x2A\x2A\x2A\xA1\x2A\x2A\x2A\x2A\x89\x2A\x2A\x89\x2A\x2A\x8B\x2A\x2A\x89\x2A\x2A\x8B\x2A\x2A\x3D\x2A\x2A\x2A\x2A\x0F\x84\x2A\x2A\x2A\x2A\x8B\x2A\x89\x2A\x2A\xFF\x2A\x2A\x85\x2A\x0F"             /* ? ? ? ? ? ? A1 ? ? ? ? 89 ? ? 89 ? ? 8B ? ? 89 ? ? 8B ? ? 3D ? ? ? ? 0F 84 ? ? ? ? 8B ? 89 ? ? FF ? ? 85 ? 0F */     "windows"    "\x2A\x2A\x2A\x2A\x2A\x2A\x56\x57\x8B\x2A\x8B\x0D\x2A\x2A\x2A\x2A\x81\xF9\x2A\x2A\x2A\x2A\x75\x2A\xA1"             /* ? ? ? ? ? ? 56 57 8B ? 8B 0D ? ? ? ? 81 F9 ? ? ? ? 75 ? A1 */ }

Exception reported: 'Gamedata\KnifeRegistryFix.txt' needs updated (WantsLagCompensationOnEntity)


it's giving this error