[souvikdas95]

I fixed it...

[0x55,0x8B,0xEC,0x56,0x57,0x8B,0x7D,"*",0x85,0 xFF,0x75,"*",0x68,"*","*","*","*",0xE8,"*","* ","*","*",0x83,0xC4,"*",0x33,0xC0,0x5F,0x5E,0 x5D,0xC3]

[Arkshine]

See you can do it when you actually try, which is the purpose of this section.

[souvikdas95]

Originally Posted by Arkshine See you can do it when you actually try, which is the purpose of this section.

Please teach me how you put "*" ... I did not understand that part...

[Arkshine]

Simple rule :

- Always keep the first byte
- Put * for everything else.

Do that until you get an unique signature under IDA.

It should be more easy/fast to make signatures and also reliable ; though signature might gets longer, but that's not an issue itself.

[souvikdas95]

can we hook a function from any metamod plugin using orpheu? I mean till now what I have observed is people have been posting about only functions that are registered within swds.dll ..... what if i want to hook something in a metamod plugin eg. SB Guardian

[Arkshine]

You can. At least using latest orpheu version, it should auto register any metamod libraries. From that, just a matter to use it's name in config file. You should be able to see a list using "orpheu config" command, at the top.

[souvikdas95]

how do i get the value for windows version of the signature - svs_ptr? I couldn't find it when i searched for it in swds.dll

[Arkshine]

You have to use tricky way, like finding a function where it's used, then retrieving it from there by checking bytes.

[souvikdas95]

I put a code to return the value of argument on SV_ParseVoiceData function and got a 9 digit number. Does it have any relationship with svs_ptr?

[Arkshine]

Don't do random things if you have not idea what you're doing.
If you retrieve svs from SV_ParseVoiceData, you have to retrieve it's address (4 bytes) which is used a the top of function. That's why I said you have to count bytes.