Raised This Month: $85 Target: $400
 21% 

Orpheu: Searching for functions in libraries


Post New Thread Reply   
 
Thread Tools Display Modes
Arkshine
AMX Mod X Plugin Approver
Join Date: Oct 2005
Old 02-28-2010 , 10:57   Re: Orpheu: Searching for functions in libraries
Reply With Quote #11

Quote:
Search it by yourself and stop asking.
__________________
Working on : CS Weapon Mod (72%) , MonsterAI (PAUSED),

Arkshine is offline
AntiBots
Veteran Member
Join Date: May 2008
Location: La Plata, Bs As, Argenti
Old 03-07-2010 , 06:59   Re: Orpheu: Searching for functions in libraries
Reply With Quote #12

I have IDA Pro Advance 5.6 if someone want to decompiler something
__________________
AntiBots is offline
Send a message via ICQ to AntiBots Send a message via MSN to AntiBots Send a message via Skype™ to AntiBots
Seta00
The Seta00 user has crashed.
Join Date: Jan 2010
Location: Brazil
Old 05-08-2010 , 18:42   Re: Orpheu: Searching for functions in libraries
Reply With Quote #13

Quote:
Originally Posted by AntiBots View Post
I have IDA Pro Advance 5.6 if someone want to decompiler something
Yeah, you and everyone else who knows how to use ThePirateBay...
Code:
The application has been completely decompiled.
By the way, I've got Host_ServerShutdown, anyone can confirm this is valid?
Attached Files
File Type: zip Host_ShutdownServer.zip (291 Bytes, 108 views)

Last edited by Seta00; 05-08-2010 at 18:54.
Seta00 is offline
Arkshine
AMX Mod X Plugin Approver
Join Date: Oct 2005
Old 05-08-2010 , 19:22   Re: Orpheu: Searching for functions in libraries
Reply With Quote #14

if nothing is returned, you don't need to specify it, you should remove it.
__________________
Working on : CS Weapon Mod (72%) , MonsterAI (PAUSED),

Arkshine is offline
Lt.RAT
Member
Join Date: Sep 2008
Location: Russia Yekaterinburg
Old 05-08-2010 , 19:23   Re: Orpheu: Searching for functions in libraries
Reply With Quote #15

Quote:
Originally Posted by Seta00 View Post
By the way, I've got Host_ServerShutdown, anyone can confirm this is valid?
Quote:
Know there is a thing. This offset is guaranteed to be always the same each time the library loads but that can easily not be true if the library gets updated. That's the reason that motivated the creation of a technique called signature scanning.

Signature scanning basically means: instead of provide an offset, provide a set of bytes that you can find at that offset (that represent the function). That set of bytes can easily have its location changed but as long as it exists as a block you can still search for it.
If you want to use it somewhere, you should provide signature. Also, not sure about your offset.

Also, as i understand, if we have args and ret with void type, we should remove it from our file.

ADD: oh ye, there is no tutorial about writing signatures atm

Last edited by Lt.RAT; 05-08-2010 at 19:26.
Lt.RAT is offline
Send a message via ICQ to Lt.RAT
Arkshine
AMX Mod X Plugin Approver
Join Date: Oct 2005
Old 05-08-2010 , 20:55   Re: Orpheu: Searching for functions in libraries
Reply With Quote #16

For me, Host_ShutdownServer is : 0x50050

and the sig would be :

Code:
{
    "name"        : "Host_ShutdownServer",
    "library"     : "engine",
    "identifiers" :
    [
        {
            "os"    : "windows",
            "mod"   : "cstrike",
            "value" : [0x55,0x8B,0xEC,0xA1,"*","*","*","*",0x85,0xC0,0x0F,"*","*","*","*","*",0x56,"*","*","*","*",0x6A,0x01]
        },
        {
            "os"    : "linux",
            "mod"   : "cstrike",
            "value" : "Host_ShutdownServer"
        }
    ]
}
If I'm motivated I will do a tutorial, it's not that hard.
__________________
Working on : CS Weapon Mod (72%) , MonsterAI (PAUSED),

Arkshine is offline
Seta00
The Seta00 user has crashed.
Join Date: Jan 2010
Location: Brazil
Old 05-09-2010 , 09:30   Re: Orpheu: Searching for functions in libraries
Reply With Quote #17

Quote:
Originally Posted by Arkshine View Post
For me, Host_ShutdownServer is : 0x50050

and the sig would be :

Code:
{
    "name"        : "Host_ShutdownServer",
    "library"     : "engine",
    "identifiers" :
    [
        {
            "os"    : "windows",
            "mod"   : "cstrike",
            "value" : [0x55,0x8B,0xEC,0xA1,"*","*","*","*",0x85,0xC0,0x0F,"*","*","*","*","*",0x56,"*","*","*","*",0x6A,0x01]
        },
        {
            "os"    : "linux",
            "mod"   : "cstrike",
            "value" : "Host_ShutdownServer"
        }
    ]
}
If I'm motivated I will do a tutorial, it's not that hard.
Thanks. Guess hacking Orpheu's source won't help me to use it
Seta00 is offline
atomen
Veteran Member
Join Date: Oct 2006
Location: Stockholm, Sweden
Old 07-27-2010 , 13:13   Re: Orpheu: Searching for functions in libraries
Reply With Quote #18

It might be better for me to do this in a separate topic but I'll let that rest for now.

Detecting shoot event properly requires a bit to much code for my taste therefore
I've been looking for an alternative (orpheu). Now I need some help.

I've found the shoot event offset (EV_HLDM_FireBullets) function name in windows.
PHP Code:
Source Code Location"cl_cll.proj / ev_hldm.cpp (Ln 353)"
Library Locationmp.dll ("cstrike/dlls")
Function 
namesub_19024C0
Hex Location
0x24C0 (correct me please
Now my question is; do I have enough data to provide myself with an orpheu function, and if so, I would be very pleased with some assistance.

EDIT: If someone wants the EV_HLDM_FireBullets declaration header:
PHP Code:
void EV_HLDM_FireBullets(int idxfloat *forwardfloat *rightfloat *upint cShotsfloat *vecSrcfloat *vecDirShootingfloat flDistanceint iBulletTypeint iTracerFreqint *tracerCountfloat flSpreadXfloat flSpreadY
EDIT 2: In my bold attempt creating a JSON file for the firebullets function I've might come up with something usable. Inspect and give judgement!
PHP Code:
{
    
"name" "EV_HLDM_FireBullets",
    
"library" "mod",
    
"arguments" :
    [
        {
            
"type" "int"
        
},
        {
            
"type" "float *"
        
},
        {
            
"type" "float *"
        
},
        {
            
"type" "float *"
        
},
        {
            
"type" "int"
        
},
        {
            
"type" "float *"
        
},
        {
            
"type" "float *"
        
},
        {
            
"type" "float"
        
},
        {
            
"type" "int"
        
},
        {
            
"type" "int"
        
},
        {
            
"type" "int *"
        
},
        {
            
"type" "float"
        
},
        {
            
"type" "float"
        
}
    ],
    
"identifiers" :
    [
        {
            
"os" "windows",
            
"mod" "cstrike",
            
"value" 0x24C0
        
},
    ]

__________________

Last edited by atomen; 07-27-2010 at 13:31. Reason: I like, I like it a lot
atomen is offline
Send a message via MSN to atomen
Arkshine
AMX Mod X Plugin Approver
Join Date: Oct 2005
Old 07-27-2010 , 13:56   Re: Orpheu: Searching for functions in libraries
Reply With Quote #19

Forget, you can't hook it because Orpheu doesn't support some type like int * or float *.

By the way, there is already an accurate method to hook properly shot event. Look at the VEN tutorial. It hooks the events. The example est for CS but it's just a matter to change the event name you can find on your server.
__________________
Working on : CS Weapon Mod (72%) , MonsterAI (PAUSED),

Arkshine is offline
atomen
Veteran Member
Join Date: Oct 2006
Location: Stockholm, Sweden
Old 07-27-2010 , 14:14   Re: Orpheu: Searching for functions in libraries
Reply With Quote #20

I see. Though with further research I've discovered this function:
PHP Code:
Vector CBaseEntity::FireBulletsPlayer ULONG cShotsVector vecSrcVector vecDirShootingVector vecSpreadfloat flDistanceint iBulletTypeint iTracerFreqint iDamageentvars_t *pevAttackerint shared_rand 
It is located in "dlls/combat.cpp". Is it possible to hook this function with Orpheu?

And yes, I am aware of VEN's tutorial.

EDIT: About my previous post, is it possible to hook the function without the parameters, if that is the problem? Just to use the event
__________________

Last edited by atomen; 07-27-2010 at 14:18.
atomen is offline
Send a message via MSN to atomen
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -4. The time now is 04:46.


Powered by vBulletin®
Copyright ©2000 - 2018, vBulletin Solutions, Inc.
Theme made by Freecode