[Theon32]

Originally Posted by nosoop Decided to test my skill in disassembly. Have some updated gamedata. For anyone that wants to follow along or update it for next time, assuming Valve didn't completely overhaul the halloween taunt logic since then: Load up the server binary in IDA. Open up the Strings subview and look up the IsHalloweenTaunt string. Find cross-references to the string, then head over to one of those subroutines. Switch to graph view so you have a sense of what you're looking at. In the Linux binary, since you have signatures, you'll be in CTFPlayer::ModifyOrAppendCriteria(). There's a call to rand right before to decide if the Halloween taunt is applied. I ended up patching the near JA instruction with a near JO (from 0F 87 to 0F 80). Add one to the instruction offset and set the payload in the gamedata file to 128 (0x80). Use the symbol for the signature. Same thing in the Windows binary, except no symbols. Structure is about the same, though; find those floating point operations right before. I patched the short JBE with a short JNO. Grab the offset. Use makesig for the signature. Here's an image for reference. The forum image proxy doesn't seem too fond of it, so it's linked. There's probably a more resilient signature that doesn't involve offsets deep into the function (since this will absolutely break if ModifyOrAppendCriteria changes), but that's an exercise for the next person.

Still works in 2019! Thanks man!

[sapphonie]

Updated for 2022 afaik

"Offset_ThrillerTaunt"
{
    "linux"         "2605"    // A2D
    "windows"       "3101"    // C1D
}

[PC Gamer]

Does anyone have a working version of this plugin? Current version crashes my server. Also, tf_forced_holiday 8 doesn't prevent the thriller taunt.

[Sreaper]

Originally Posted by PC Gamer Does anyone have a working version of this plugin? Current version crashes my server. Also, tf_forced_holiday 8 doesn't prevent the thriller taunt.

Might be your gamedata. The one on my server seems to be different than what's in the OP.

Metamod:Source version 1.12.0-dev+1147 SourceMod Version: 1.11.0.6826

"Games"
{
	"tf"
	{
		"Signatures"
		{
			"ThrillerTaunt"
			{
				"library"		"server"
				"linux"		"@_ZN9CTFPlayer22ModifyOrAppendCriteriaER14AI_CriteriaSet"
				"windows"		"\x53\x8B\xDC\x83\xEC\x08\x83\xE4\xF0\x83\xC4\x04\x55\x8B\x6B\x04\x89\x6C\x24\x04\x8B\xEC\x81\xEC\x28\x01\x00\x00\x56\x57\x8B\x7B\x08"
			}
		}
		"Addresses"
		{
			"ThrillerTaunt"
			{
				"signature"	"ThrillerTaunt"
			}
		}
		"Offsets"
		{
			"Offset_ThrillerTaunt"
			{
				"linux"		"2605"
				"windows"		"3092"
			}
			"Payload_ThrillerTaunt"
			{
				"linux"		"128"		// NEAR JO
				"windows"		"113"		// SHORT JNO
			}
		}
	}
}

[PC Gamer]

Originally Posted by Sreaper Might be your gamedata. The one on my server seems to be different than what's in the OP.

Odd.. Server crashes to desktop on startup when I use this gamedata. I still appreciate the response.

[Br0k3nPh1LL1p]

new offset for linux is 2621 (A3D) as of the 01-Dec-22 update

[nosoop]

I'll be submitting gamedata updates on the TF2Sanitizer repository; in the future keep an eye out for pull requests there.
It hasn't been merged at this time, but the current gamedata is available in this PR.

[PC Gamer]

Thanks nosoop!

[Mikusch]

I have made a SourceScramble manager config that mirrors this plugin's functionality: https://github.com/Mikusch/SourceScramble-Patches

If you're only looking to block the thriller taunt, I recommend switching to this.