[mlov420]

I'm not sure how to go about finding offsets after each update. I did some searching through the forums but it seems that Valve has recently made changes making them more difficult to obtain.

Would any of you be able to provide either a detailed explanation of how someone would go about getting them, or provide a list of the most current ones.

I'm really just looking for one for the following:

"csgo"
	{
		"Offsets"
		{
			"IsValidObserverTarget"
			{
				"windows"	"426"
				"linux"   "427"
			}
		}
	}

I don't mind doing a little bit of work to find it and help update the plugin that belongs to (admin all spec), but if someone has the info available it would be much appreciated.

[Deathknife]

PHP Code:

    "csgo"
    {
        "Offsets"
        {
            "IsValidObserverTarget"
            {
                "windows"    "427"
                "linux"        "428"
            }
        }
    } 


After an update, add 1 or 2 to the offset and try. It usually works.

[blacklagoon]

Originally Posted by mlov420 I'm not sure how to go about finding offsets after each update. I did some searching through the forums but it seems that Valve has recently made changes making them more difficult to obtain. Would any of you be able to provide either a detailed explanation of how someone would go about getting them, or provide a list of the most current ones. I'm really just looking for one for the following: "csgo" { "Offsets" { "IsValidObserverTarget" { "windows" "426" "linux" "427" } } } I don't mind doing a little bit of work to find it and help update the plugin that belongs to (admin all spec), but if someone has the info available it would be much appreciated.

To retrieve them you need IDA, bindiff installed as a plugin, and the idc script to drop vtable.
First open the new server.so in ida and wait for it to disassemble. then hit ctrl+6 and do a difference with an old server.so binary containing all symbols, when it's finished you should have a "Matched functions" tab. go on it and do an alt + t to search your function.
you should see his new name as sub_* something from here it's the same way as before and you should be able to dump the vtable offsets.

[mlov420]

Originally Posted by Deathknife PHP Code:     "csgo"     {         "Offsets"         {             "IsValidObserverTarget"             {                 "windows"    "427"                 "linux"        "428"             }         }     }  After an update, add 1 or 2 to the offset and try. It usually works.

I actually tried those 2 believe it or not, they didn't work. I will give a try to the next couple increments though.

To retrieve them you need IDA, bindiff installed as a plugin, and the idc script to drop vtable. First open the new server.so in ida and wait for it to disassemble. then hit ctrl+6 and do a difference with an old server.so binary containing all symbols, when it's finished you should have a "Matched functions" tab. go on it and do an alt + t to search your function. you should see his new name as sub_* something from here it's the same way as before and you should be able to dump the vtable offsets.

Thank you for that information.

[micapat]

Originally Posted by blacklagoon To retrieve them you need IDA, bindiff installed as a plugin, and the idc script to drop vtable. First open the new server.so in ida and wait for it to disassemble. then hit ctrl+6 and do a difference with an old server.so binary containing all symbols, when it's finished you should have a "Matched functions" tab. go on it and do an alt + t to search your function. you should see his new name as sub_* something from here it's the same way as before and you should be able to dump the vtable offsets.

Does it work with the free IDA version?
Do you still have an old CS:GO server.so with all the symbols?

[blacklagoon]

Originally Posted by micapat Does it work with the free IDA version? Do you still have an old CS:GO server.so with all the symbols?

i don't think it does though.
Yes i do here you go

ida is telling me that your function offset for linux is 428 so windows will be 427 edit (my binary is from before this july update on that pc)

[mlov420]

I tried a couple increments and one of them worked. Here is the current working offset for that

"csgo"
	{
		"Offsets"
		{
			"IsValidObserverTarget"
			{
				"windows"	"428"
				"linux"   "429"
			}
		}
	}

Thank you to everyone who chimed in with any help, it's much appreciated.

[micapat]

Originally Posted by blacklagoon i don't think it does though. Yes i do here you go ida is telling me that your function offset for linux is 428 so windows will be 427 edit (my binary is from before this july update on that pc)

Thanks!

Indeed, IDA free doesn't work. Time to find an upgraded version