[eyal282]

I'm searching for the signature where pummeling ends ( charger is killed or staggered ) and the signature where hunting begins. How can I locate them and translate into a file?

[xerox8521]

Try this for Pummel End:

PHP Code:

\x55\x8B\xEC\x8B\x15\x2A\x2A\x2A\x2A\x53\x56\x8B\xF1\x8B\x86\x78\x3E\x00\x00 


What exactly do you mean with "hunting begins" when the hunter successfully pounced a survivor ?

[eyal282]

Originally Posted by xerox8521 Try this for Pummel End: PHP Code: \x55\x8B\xEC\x8B\x15\x2A\x2A\x2A\x2A\x53\x56\x8B\xF1\x8B\x86\x78\x3E\x00\x00  What exactly do you mean with "hunting begins" when the hunter successfully pounced a survivor ?

[xerox8521]

Try this for CTerrorPlayer::OnPouncedUpon:

PHP Code:

\x53\x8B\xDC\x83\xEC\x08\x83\xE4\xF0\x83\xC4\x04\x55\x8B\x6B\x04\x89\x6C\x24\x04\x8B\xEC\x83\xEC\x48\x56\x57\x8B\xF9\x8B\x87\xD4\x2B\x00\x00 


[eyal282]

Originally Posted by xerox8521 Try this for CTerrorPlayer::OnPouncedUpon: PHP Code: \x53\x8B\xDC\x83\xEC\x08\x83\xE4\xF0\x83\xC4\x04\x55\x8B\x6B\x04\x89\x6C\x24\x04\x8B\xEC\x83\xEC\x48\x56\x57\x8B\xF9\x8B\x87\xD4\x2B\x00\x00

Now if you don't mind, how to get it myself?

Also, can you give me both Linux and Windows, just in case?

If I tried in the same block of code both OnPummelEnd and OnPouncedUpon, would it work? Trying to allow hunter to steal from a charger.

Also, how do I even use OnPouncedEven in SDKCall?

Also, anything I can do to grab a smoking signature but a signature that once called, the survivor CANNOT get himself released.

[xerox8521]

well you need to grab both the server binary file for windows and linux. Then you open up the linux one using IDA Pro.
You then search for the function you need in the linux server file.

Next you look for a string inside the function for example with OnPummelEnd (https://i.imgur.com/1U3DuUK.png) then click on the string (the yellow highlighted text in the screenshot).

Press X and look how many references it has. (https://i.imgur.com/V8YceX0.png).
This case only 1 reference (only one function has it) this means its a unique string (which makes it fairly easy to find on windows).

Now open the windows server.dll in IDA and press Shift + F12 to generate a list of strings.
Once the list is generated you press ALT + T and enter the unique string (this case "charger_pummel_end").

Next click on the string and press X just like in the linux file it should show you 1 reference. Click on the function and then you found the function.

Now creating the Signature i used the makesig.idc file (https://github.com/alliedmodders/sou...s/ida_scripts/)

Now click on "File" then "Script File" (or ALT+F7) and then run the makesig.idc file. It should give you a unique signature (https://i.imgur.com/oZxJO1D.png).

Im not an expert in this but this way usually works for functions which have a string in it. Finding functions without strings can get tedious and honestly haven't done it yet.

Hope its understandable


Linux symbol: PummelEnd: _ZN13CTerrorPlayer13OnPummelEndedEbPS_ | PouncedUpon: _ZN13CTerrorPlayer13OnPouncedUponEPS_

[eyal282]

Originally Posted by xerox8521 well you need to grab both the server binary file for windows and linux. Then you open up the linux one using IDA Pro. You then search for the function you need in the linux server file. Next you look for a string inside the function for example with OnPummelEnd (https://i.imgur.com/1U3DuUK.png) then click on the string (the yellow highlighted text in the screenshot). Press X and look how many references it has. (https://i.imgur.com/V8YceX0.png). This case only 1 reference (only one function has it) this means its a unique string (which makes it fairly easy to find on windows). Now open the windows server.dll in IDA and press Shift + F12 to generate a list of strings. Once the list is generated you press ALT + T and enter the unique string (this case "charger_pummel_end"). Next click on the string and press X just like in the linux file it should show you 1 reference. Click on the function and then you found the function. Now creating the Signature i used the makesig.idc file (https://github.com/alliedmodders/sou...s/ida_scripts/) Now click on "File" then "Script File" (or ALT+F7) and then run the makesig.idc file. It should give you a unique signature (https://i.imgur.com/oZxJO1D.png). Im not an expert in this but this way usually works for functions which have a string in it. Finding functions without strings can get tedious and honestly haven't done it yet. Hope its understandable Linux symbol: PummelEnd: _ZN13CTerrorPlayer13OnPummelEndedEbPS_ | PouncedUpon: _ZN13CTerrorPlayer13OnPouncedUponEPS_

I'm Linux. What is the folder to locate the binary files? What are they named? File extension type?

[eyal282]

Can someone answer my question here? Post number 7.

https://forums.alliedmods.net/showthread.php?t=303253

[Psyk0tik]

The binary files you're looking for are located in either Left 4 Dead 2/bin or Left 4 Dead 2/left4dead2/bin.

Source: https://forums.alliedmods.net/showthread.php?t=274626

[eyal282]

Originally Posted by Crasher_3637 The binary files you're looking for are located in either Left 4 Dead 2/bin or Left 4 Dead 2/left4dead2/bin. Source: https://forums.alliedmods.net/showthread.php?t=274626

What's the name supposed to be of the .so file?