Signature API

Purpose

Signature API resolves a function name or byte pattern inside a loaded module and returns the matched address.

Headers

C:

#include <pl/c/Signature.h>

C++:

#include <pl/cpp/Signature.hpp>

Signatures

PLAPI uintptr_t pl_resolve_signature(const char *signature,
                                     const char *moduleName);

C++:

namespace pl::signature {
uintptr_t resolveSignature(const std::string &signature,
                           const std::string &moduleName);
std::unordered_map<std::string, uintptr_t>
resolveSignatures(const std::vector<std::string> &signatures,
                  const std::string &moduleName);
}

pl_resolve_signature

Purpose

Resolves signature as a function name or byte pattern.

Parameters

Parameter	Description
signature	Function name or byte pattern; must not be NULL
moduleName	Module name or path fragment; must not be NULL

Return Value

Matched address. Returns 0 on failure.

Pattern Format

48 8B ?? ?? 89
488B????89

Wildcards:

Pattern	Description
?	Whole byte wildcard
??	Whole byte wildcard
A?	Low nibble wildcard
?F	High nibble wildcard

C Example

#include <pl/c/Signature.h>

uintptr_t addr = pl_resolve_signature("SomeSymbol", "libminecraftpe.so");
if (addr == 0) {
  addr = pl_resolve_signature("48 8B ?? ?? 89", "libminecraftpe.so");
}

C++ Batch Example

#include <pl/cpp/Signature.hpp>

auto results = pl::signature::resolveSignatures(
    {"SymbolA", "48 8B ?? ?? 89"},
    "libminecraftpe.so");

uintptr_t symbolA = results["SymbolA"];

Notes

• moduleName should match the target library name.
• Empty or invalid patterns return 0.
• Prefer resolveSignatures when resolving multiple patterns.