libinputsystem.so/inputsystem.dll not being dumped

[Zickles]

Is there a reason why libinputsystem.so/inputsystem.dll offsets are not dumped? Im trying to get on button press from mouse or keyboard through ingame memory but I cannot figure out how to use libinputsystem

[a2x]

Are you talking about the linux branch? If so, that's still outdated and won't work.

[Zickles]

That makes sense, Is there a "guide" or somewhere I can look for how I could get the sigs for all of linux offsets?

[a2x]

Not really. It basically just comes down to using a disassembler like IDA or Binary Ninja. There are lots of similarities like string constants, so in the past I just opened the linux and windows binaries side by side to help find stuff in the linux binaries.

[Zickles]

Thanks, currently I have been looking at the client.dll but I am unable to find dwEntityList or any of the DWORD ones, could you explain how you find those ones?

[a2x]

For that in particular, you can just XREF these strings at the bottom:

And if you rebase to 0x0 (Edit -> Segments -> Rebase Program in IDA), you can just press G in IDA and paste any offset you want. Then you can look at XREFs to it for ways of finding it again.

[a2x]

Or just convert any of the patterns in the offsets.rs file to their IDA style equivalent, and use a sig scanning plugin.

[Zickles]

While that was very helpful is there a more full proof way of finding they offsets and sigs as when looking at the linux .so disassembled around the same spot I'm unable to find any of the offsets like that, Thank you for all the help

[a2x]

In this case, looking at the disassembler is probably easiest. There are of course times where it's easier to use something like Cheat Engine to find values in memory like health, which can be used to find the local player controller pointer for example. But for finding all of the offsets that this repo "dumps", what I posted above will likely be your best bet.

What in particular are you unable to find? If you provide me with the .so file I can try take a look.

[Zickles]

I am mainly just trying to find all the offsets from the offsets.rs file so all the dw* offsets, here is the libclient.so, the name is random generated so you can virus check it and stuff.

[a2x]

All I can suggest is to just try and do what I've previously mentioned. It basically just comes down to reversing knowledge which isn't something that I can help you with.

From the libclient.so you attached:

GameEntitySystem - 4C 8D 2D ? ? ? ? 49 8B 5D ? 4C 63 A3

GlobalVars - 4C 8D 25 ? ? ? ? 44 8B 5F

LocalPlayerController - 4C 89 25 ? ? ? ? E8 ? ? ? ? 48 8B 45

I don't have any more time I can spend looking at this right now either, sorry.