fifa17-python: commit working FUT backend deployment (client/server split)

Freeze the running offline FUT backend into version control as fifa17-recon/docker/fifa17-python/ - declarative and rebuildable from a fresh checkout: * OPENFUT_BIND / OPENFUT_ADVERTISE client/server split in the responders (lsx, blaze, roster, utas, pow) + entrypoint.sh; OPENFUT_ADVERTISE is required for remote mode (compose and entrypoint fail without it) * docker-compose.yml reproducing the frozen baseline container exactly (env, ports incl. the 8085->8080 POW-content remap, /state bind, restart) * .env.example / .env for site config - the LAN IP is never hardcoded in source * tools/ + data/ staged from openfut-fut-backend:python-baseline-2026-08-10, verified byte-identical to the running container at freeze time * client_arm.sh (the 105 client-side arming counterpart) * Dockerfile bakes /app/SHA256SUMS.txt so any image is self-identifying * docs/BASELINE-python-2026-08-10.md: frozen image/container/hash record, restore instructions and rebuild-equivalence procedure Secrets (redir key/cert, .env) and runtime state (docker/state) stay gitignored. The live container is untouched pending the .105 launcher audit.
2026-08-10 23:54:04 +00:00
parent edab23f04a
commit 70a64e3709
242 changed files with 175860 additions and 0 deletions
@@ -0,0 +1,99 @@
+#!/usr/bin/env python3
+"""Watch for a (re)launched FIFA17.exe and auto-apply both ProtoSSL cert patches
+the moment its unpacked code is mapped. Idempotent; keeps watching across relaunches."""
+import glob, time, struct, sys
+
+# Watch for a (re)launched FIFA17.exe and auto-apply ProtoSSL cert + FUT store patches
+import glob, time, os
+
+GATE2=0x1461361b0; GATE2_ORIG=bytes.fromhex("48895c"); GATE2_PATCH=bytes.fromhex("31c0c3")
+GATE1=0x146132548; GATE1_ORIG=bytes.fromhex("0f8576010000"); GATE1_PATCH=bytes.fromhex("90"*6)
+
+RET_TRUE = bytes.fromhex("b801000000c3")
+NOP2 = bytes.fromhex("9090")
+IMG_BASE = 0x180000000
+
+STORE_PATCHES = {
+    0x1800f7fb0: RET_TRUE,
+    0x1800fb850: RET_TRUE,
+    0x180100500: RET_TRUE,
+    0x180013cf0: RET_TRUE,
+    0x180017543: bytes.fromhex("eb3f"),
+    0x180017487: NOP2,
+    0x180017490: NOP2,
+    0x1800175aa: NOP2,
+}
+
+LOG=os.environ.get("OPENFUT_AUTOPATCH_LOG", f"/tmp/openfut-autopatch-{os.getuid()}.log")
+
+def log(m):
+    line=f"[{time.strftime('%H:%M:%S')}] {m}"
+    print(line,flush=True); open(LOG,"a").write(line+"\n")
+
+def find_pids():
+    out=[]
+    for d in glob.glob('/proc/[0-9]*'):
+        try:
+            if open(d+'/comm').read().strip()=='FIFA17.exe': out.append(int(d.split('/')[-1]))
+        except: pass
+    return out
+
+def cardsdll_base(pid):
+    try:
+        for line in open(f'/proc/{pid}/maps'):
+            if 'CardsDLL' in line: return int(line.split('-')[0], 16)
+    except: pass
+    return None
+
+def rd(pid,va,n):
+    with open(f'/proc/{pid}/mem','rb') as f:
+        f.seek(va); return f.read(n)
+def wr(pid,va,b):
+    with open(f'/proc/{pid}/mem','r+b') as f:
+        f.seek(va); f.write(b)
+
+patched=set()
+store_patched=set()
+
+launcher_pid = None
+if "--launcher-pid" in sys.argv:
+    try: launcher_pid = int(sys.argv[sys.argv.index("--launcher-pid") + 1])
+    except (ValueError, IndexError): raise SystemExit("invalid --launcher-pid")
+
+log("=== AUTOPATCH watching for FIFA17.exe ===")
+while True:
+    if launcher_pid and not os.path.exists(f"/proc/{launcher_pid}"):
+        log(f"launcher pid {launcher_pid} exited; stopping autopatch")
+        break
+    for pid in find_pids():
+        if pid not in patched:
+            try:
+                g2=rd(pid,GATE2,3); g1=rd(pid,GATE1,6)
+            except Exception:
+                continue  # code not mapped yet
+            if g2==GATE2_PATCH and g1==GATE1_PATCH:
+                log(f"pid {pid}: cert gates already patched"); patched.add(pid)
+            elif g2==GATE2_ORIG and g1==GATE1_ORIG:
+                try:
+                    wr(pid,GATE2,GATE2_PATCH); wr(pid,GATE1,GATE1_PATCH)
+                    log(f"pid {pid}: PATCHED cert gates")
+                    patched.add(pid)
+                except Exception as e:
+                    log(f"pid {pid}: cert patch write failed: {e}")
+
+        # Continuously enforce store patches every tick
+        cbase = cardsdll_base(pid)
+        if cbase is not None:
+            try:
+                for va, data in STORE_PATCHES.items():
+                    live = cbase + (va - IMG_BASE)
+                    if rd(pid, live, len(data)) != data:
+                        wr(pid, live, data)
+                        log(f"pid {pid}: ENFORCED store patch @ {live:#x}")
+                if pid not in store_patched:
+                    log(f"pid {pid}: PATCHED store gates in CardsDLL @ {cbase:#x}")
+                    store_patched.add(pid)
+            except Exception as e:
+                log(f"pid {pid}: store patch write failed: {e}")
+
+    time.sleep(1)