View Single Post
DarthMan
Veteran Member
Join Date: Aug 2011
Old 08-22-2018 , 13:28   Re: Orpheu Signatures Collection
Reply With Quote #63

Quote:
Originally Posted by HamletEagle View Post
SV_RejectConnection doesn't have any string so you can't find it directly. If you look where it's used you see it's being called from SV_CheckProtocol and we are lucky, this function has 3 strings, should be easy to find.
https://github.com/dreamstalker/rehl...main.cpp#L1756

Now search for:"This server is using a newer protocol" in "Strings window" and you will find SV_CheckProtocol. The simply double click on the function that contains the string we searched for:
PHP Code:
sub_1D8A660(a1aThisServerIsUs_048a2); 
The call should look something like this.

If you look here: https://github.com/dreamstalker/rehl...main.cpp#L1679 and in the decompiled output you will notice the functions are looking similar, meaning we found SV_RejectConnection(sub_1D8A660).
Then just take the bytes and make a signature.
I tested, I can confirm that when the client is dropped from the server, it crashes. It says "Failed to connect to game server".

55 8B ? 81 ? ? ? ? ? 8B ? ? 56 8D ? ? 57 50 51 8D ? ? ? ? ? points to the sub you sent to me.

What I basically want to find is when that LAN message appears.

Last edited by DarthMan; 08-22-2018 at 13:34.
DarthMan is offline