Module: Orpheu (v2.6.3) - Page 143

**Arkshine** · 12-06-2015 , 06:54 Re: Module: Orpheu (v2.6.3)

About dev, there is no change log yet : https://forums.alliedmods.net/showpo...3&postcount=17
About SV_DropClient, you will need to show output of the following command: orpheu config

souvikdas95 · 12-06-2015 , 07:01 Re: Module: Orpheu (v2.6.3)

Quote:

Originally Posted by Arkshine

About dev, there is no change log yet : https://forums.alliedmods.net/showpo...3&postcount=17
About SV_DropClient, you will need to show output of the following command: orpheu config

Console Output:

Code:

L 12/06/2015 - 17:29:28: [ORPHEU] Function "SV_DropClient" not found
L 12/06/2015 - 17:29:28: [AMXX] Displaying debug trace (plugin "AgZ_Main_relax.amxx", version "4.61")
L 12/06/2015 - 17:29:28: [AMXX] Run time error 10: native error (native "OrpheuGetFunction")
L 12/06/2015 - 17:29:28: [AMXX]    [0] AgZ_Main_relax.sma::plugin_init (line 53)
Executing AMX Mod X Configuration File 
couldn't exec listip.cfg
couldn't exec banned.cfg
[Amity] Server has been Configured Successfully!! 

Orpheu configuration started.

	Parsing mods configuration started.

		Current mod : "cstrike"

		Parsing mod file "cstrike"
			Found.

	Parsing mods configuration ended.

	Parsing libraries configuration started.

		Parsing file "monstermod"
			Added library monstermod identified by cvar monster_spawn
		Parsing file "podbot"
			Added library podbot identified by cvar pb_version

	Parsing libraries configuration ended.

	Parsing type aliases started.

		Parsing folder "CBaseEntity"
File "CFuncRotating" incorrectly formatted
			Adding alias"CBaseEntity *"
		Parsing folder "CGameRules"
			Adding alias"CGameRules *"
		Parsing folder "charPointer"
			Adding alias"char *"
		Parsing folder "CMBaseMonster"
			Adding alias"CMBaseMonster *"
		Parsing folder "long"
			Adding alias"long"
		Parsing folder "VectorPointer"
			Adding alias"Vector *"


	Parsing type aliases ended.

Orpheu configuration ended.

Orpheu libraries search started.

	Adding library metamod (0x71F10000)
	Adding library semiclip_mm (0x72930000)
	Adding library amxmodx_mm (0x70580000)
	Adding library fakemeta_amxx (0x71EB0000)
	Adding library regex_amxx (0x72740000)
	Adding library nvault_amxx (0x72900000)
	Adding library hamsandwich_amxx (0x70F10000)
	Adding library cstrike_amxx (0x70ED0000)
	Adding library csx_amxx (0x70E10000)
	Adding library orpheu_amxx (0x704F0000)
	Adding library engine_amxx (0x704C0000)
	Adding library fun_amxx (0x719F0000)
	Adding library geoip_amxx (0x70480000)

Orpheu libraries search ended.

Orpheu functions search started.

	Parsing functions started.

		Parsing file "Con_Printf" started
				Argument type "char *" validated
				Argument type "char *" validated
				Searching for signature "[0x55][0x8b][0xec][0xb8][*](...)" ... FOUND
		Parsing file "Con_Printf" ended
		Parsing file "EndRoundMessage" started
				Argument type "char *" validated
				Argument type "int" validated
				Searching for signature "[0x53][0x8b][0x44][*][*](...)" ... FOUND
		Parsing file "EndRoundMessage" ended
		Parsing file "InstallGameRules" started
				Return type "CHalfLifeMultiplay *" validated
				Searching for signature "[0x68][*][*][*][*](...)" ... FOUND
		Parsing file "InstallGameRules" ended
		Parsing file "NET_QueuePacket" started
				Argument type "int" validated
				Searching for signature "[0x55][0x8b][0xec][0x81][0xec](...)" ... FOUND
		Parsing file "NET_QueuePacket" ended
		Parsing file "SV_CheckProtocol" started
				Argument type "char *" validated
				Searching for signature "[0x56][0x6a][*][0x68][*](...)" ... FOUND
		Parsing file "SV_CheckProtocol" ended
		Parsing file "SV_ConnectClient" started
				Searching for signature "[0x55][0x8b][0xec][0x81][*](...)" ... FOUND
		Parsing file "SV_ConnectClient" ended
		Parsing file "SV_DropClient" started
				Argument type "int" validated
				Argument type "int" validated
				Argument type "char *" validated
				Searching for signature "[0x55][0x8b][*][0x81][*](...)" ... NOT FOUND
		Parsing file "SV_DropClient" ended
		Parsing file "SV_Rcon" started
				Argument type "pointer" validated
				Searching for signature "[0x55][0x8b][0xec][0x81][*](...)" ... FOUND
		Parsing file "SV_Rcon" ended
		Parsing folder "CHalfLifeMultiplay" started
			Parsing file "CheckWinConditions" started
				Return type "bool" validated
				Searching for signature "[0x83][0xec][0x38][0x53][0x55](...)" ... FOUND
			Parsing file "CheckWinConditions" ended
			Parsing file "UpdateTeamScores" started
				Searching for signature "[0xa1][*][*][*][*](...)" ... NOT FOUND
				Searching for signature "[0xa1][*][*][*][*](...)" ... FOUND
			Parsing file "UpdateTeamScores" ended
		Parsing folder "CHalfLifeMultiplay" ended
	Parsing functions ended.


Orpheu functions search ended.

Orpheu virtual functions search started.

	Parsing virtual functions started.


	Parsing virtual functions ended.

Orpheu virtual functions search ended.

Orpheu memory structures search started.

	Parsing memory structures started.

		Parsing memory file "CGameRulesOffsets"
			Processing memory structure "m_fTeamCount"
				Added memory search structure "m_fTeamCount"
			Processing memory structure "m_fRoundCount"
				Added memory search structure "m_fRoundCount"
			Processing memory structure "m_iRoundTimeSecs"
				Added memory search structure "m_iRoundTimeSecs"
			Processing memory structure "m_iAccountTerrorist"
				Added memory search structure "m_iAccountTerrorist"
			Processing memory structure "m_iAccountCT"
				Added memory search structure "m_iAccountCT"
			Processing memory structure "m_iNumSpawnableTerrorist"
				Added memory search structure "m_iNumSpawnableTerrorist"
			Processing memory structure "m_iNumSpawnableCT"
				Added memory search structure "m_iNumSpawnableCT"
			Processing memory structure "m_iHostagesRescued"
				Added memory search structure "m_iHostagesRescued"
			Processing memory structure "m_iRoundWinStatus"
				Added memory search structure "m_iRoundWinStatus"
			Processing memory structure "m_iNumCTWins"
				Added memory search structure "m_iNumCTWins"
			Processing memory structure "m_iNumTerroristWins"
				Added memory search structure "m_iNumTerroristWins"
			Processing memory structure "m_bTargetBombed"
				Added memory search structure "m_bTargetBombed"
			Processing memory structure "m_bBombDefused"
				Added memory search structure "m_bBombDefused"
			Processing memory structure "m_bMapHasBombTarget"
				Added memory search structure "m_bMapHasBombTarget"
			Processing memory structure "m_bMapHasBombZone"
				Added memory search structure "m_bMapHasBombZone"
			Processing memory structure "m_bMapHasRescueZone"
				Added memory search structure "m_bMapHasRescueZone"
			Processing memory structure "m_bMapHasEscapeZone"
				Added memory search structure "m_bMapHasEscapeZone"
			Processing memory structure "m_iMapHasVIPSafetyZone"
				Added memory search structure "m_iMapHasVIPSafetyZone"
			Processing memory structure "m_bRoundTerminating"
				Added memory search structure "m_bRoundTerminating"
			Processing memory structure "m_flRequiredEscapeRatio"
				Added memory search structure "m_flRequiredEscapeRatio"
			Processing memory structure "m_iNumEscapers"
				Added memory search structure "m_iNumEscapers"
			Processing memory structure "m_iHaveEscaped"
				Added memory search structure "m_iHaveEscaped"
			Processing memory structure "m_pVIP"
				Added memory search structure "m_pVIP"
		Parsing memory file "engineInt"
			Processing memory structure "engineInt"
				Added memory search structure "engineInt"

	Parsing memory structures ended.

SV_DropClient:

Code:

{
    "name" : "SV_DropClient",
    "library" : "engine",
    "arguments" :
    [
        {
            "type" : "int"
        },
        {
            "type" : "int"
        },
        {
            "type" : "char *"
        }
    ],
    "identifiers":
    [
        {
            "os" : "windows",
            "mod" : "cstrike",
            "value" : [0x55,0x8B,"*",0x81,"*","*","*","*","*",0x8B,0x4D,"*",0x53,0x56,0x8D,0x45,"*",0x57,0x50,0x51,0x8D,0x95]
        },
        {
            "os"    : "linux",
            "mod"   : "cstrike",
            "value" : "SV_DropClient"
        }
    ]
}

UpdateTeamScore:

Code:

{
    "name"        : "UpdateTeamScores",
    "class"       : "CHalfLifeMultiplay",
    "library"     : "mod",
    "identifiers" : 
    [
        {
            "os"    : "windows",
            "mod"   : "cstrike",
            "value" : [0xA1,"*","*","*","*",0x56,0x6A,0x00,0x6A,0x00,0x50,0x8B,0xF1,0x6A,0x02,0xFF,0x15,"*","*","*","*",0x68,"*","*","*","*",0xFF,0x15,"*","*","*","*",0x0F]
        },
        {
            "os"    : "windows",
            "mod"   : "cstrike",
            "value" : [0xA1,"*","*","*","*",0x56,0x6A,"*",0x6A,"*",0x50,0x6A,"*",0x8B,"*",0xFF,"*","*","*","*","*",0x68,"*","*","*","*",0xFF,"*","*","*","*","*",0x0F,"*","*","*",0x51]
        },
        {
            "os"    : "linux",
            "mod"   : "cstrike",
            "value" : "UpdateTeamScores__18CHalfLifeMultiplay"
        },
        {
            "os"    : "linux",
            "mod"   : "cstrike",
            "value" : "_ZN18CHalfLifeMultiplay16UpdateTeamScoresEv"
        }
    ]
}

addicted2sex · 12-06-2015 , 08:09 Re: Module: Orpheu (v2.6.3)

Quote:

Originally Posted by Arkshine

About dev, there is no change log yet : https://forums.alliedmods.net/showpo...3&postcount=17
About SV_DropClient, you will need to show output of the following command: orpheu config

We were experiencing the same problem with hooking that function in our anticheat project. Apparently problem occured only in AMXX 1.8.3 (no problems with 1.8.2). Digging into the source code of AMXX dev build I've saw that you've added some native, which needs and hooks SV_DropClient() on AMXX MetaAttach (if I remember right). When AMXX hooks SV_DropClient and keeps it patched, other modules cant hook it (find it).

**Arkshine** · 12-07-2015 , 17:47 Re: Module: Orpheu (v2.6.3)

@souvikdas95:
For SV_DropClient, you can try

Code:

[0x55,0x8B,"?",0x81,"?","?","?","?","?",0x8B,0x4D,"?","?",0x56,0x8D,"?","?",0x57,0x50,0x51,0x8D]

@addicted2sex: Yes, this used for use with client_disconnected() (replacement for client_disconnect). SV_DropClient is detoured in MetaAttach, which results Orpheu not finding the right address (since config file are parsed at OnPluginsLoaded (mapchange). I plan to modify AMXX and likely Cstrike module too, to enable detours after OnPluginsLoaded from modules have been called.

On side note, it appears we are confusing * and ? in signatures. * = Any byte and nothing ; ? = Any byte.
On the above example, after AMXX detoured SV_DropClient, Orpheu should not have found an address. It's because signature was using "*" resulting bytes ignored and matching another piece of code.
Probably all signatures should actually use "?" instead, since based on occurrences found by IDA.

souvikdas95 · 12-12-2015 , 15:06 Re: Module: Orpheu (v2.6.3)

Quote:

Originally Posted by Arkshine

@souvikdas95:
For SV_DropClient, you can try

Code:

[0x55,0x8B,"?",0x81,"?","?","?","?","?",0x8B,0x4D,"?","?",0x56,0x8D,"?","?",0x57,0x50,0x51,0x8D]

@addicted2sex: Yes, this used for use with client_disconnected() (replacement for client_disconnect). SV_DropClient is detoured in MetaAttach, which results Orpheu not finding the right address (since config file are parsed at OnPluginsLoaded (mapchange). I plan to modify AMXX and likely Cstrike module too, to enable detours after OnPluginsLoaded from modules have been called.

On side note, it appears we are confusing * and ? in signatures. * = Any byte and nothing ; ? = Any byte.
On the above example, after AMXX detoured SV_DropClient, Orpheu should not have found an address. It's because signature was using "*" resulting bytes ignored and matching another piece of code.
Probably all signatures should actually use "?" instead, since based on occurrences found by IDA.

Still the same message.

Code:

		Parsing file "SV_DropClient" started
				Argument type "int" validated
				Argument type "int" validated
				Argument type "char *" validated
				Searching for signature "[0x55][0x8b][?][0x81][?](...)" ... NOT FOUND
		Parsing file "SV_DropClient" ended

**Arkshine** · 12-12-2015 , 15:23 Re: Module: Orpheu (v2.6.3)

Code:

Parsing file "SV_DropClient" started
                Argument type "int" validated
                Argument type "int" validated
                Argument type "char *" validated
                Searching for signature "[0x55][0x8b][?][0x81][?](...)" ... FOUND

Code:

[0x55,0x8B,"?",0x81,"?","?","?","?","?",0x8B,0x4D,"?","?",0x56,0x8D,"?","?",0x57,0x50,0x51,0x8D]

Don't know, works fine for me.

souvikdas95 · 12-12-2015 , 15:37 Re: Module: Orpheu (v2.6.3)

Quote:

Originally Posted by Arkshine

Code:

Parsing file "SV_DropClient" started
                Argument type "int" validated
                Argument type "int" validated
                Argument type "char *" validated
                Searching for signature "[0x55][0x8b][?][0x81][?](...)" ... FOUND

Code:

[0x55,0x8B,"?",0x81,"?","?","?","?","?",0x8B,0x4D,"?","?",0x56,0x8D,"?","?",0x57,0x50,0x51,0x8D]

Don't know, works fine for me.

which amxx build? Check my orpheu folder:

**Arkshine** · 12-12-2015 , 16:09 Re: Module: Orpheu (v2.6.3)

Then you're using an old engine version, but I don't think I have that anymore.

PartialCloning · 12-13-2015 , 00:54 Re: Module: Orpheu (v2.6.3)

Does anyone have the signature for UTIL_HudMessage?

addicted2sex · 12-14-2015 , 19:16 Re: Module: Orpheu (v2.6.3)

Quote:

Originally Posted by PartialCloning

Does anyone have the signature for UTIL_HudMessage?

You can catch hud messages by catching game messages:

MESSAGE_BEGIN with msgtype SVC_TEMPENTITY (23)
WRITE_BYTE(TE_TEXTMESSAGE); // TE_TEXTMESSAGE - 29
...
WRITE_STRING(message)