| View previous topic :: View next topic |
| Author |
Message |
TomCrow How do I cheat?
Reputation: 0
Joined: 11 Dec 2014 Posts: 2
|
Posted: Thu Dec 11, 2014 2:15 pm Post subject: Finding function help |
|
|
Hello, i was trying to find function of game, what is "making" the data for buffer for send via socket.. Iam newbie at these things, but i know how packets works.. i made bot using only packets for this game, but now im trying for dll hack.. I made detour hook and few things, that were working, but i still want to find out how to hook the real game sendig function (if u understand)...
Image of what i found is in the attachment.
But what is calling the function in mooclick.mfx i wasnt able to find.. Any tips, tutorials, texts what could help me? Sorry for my english also. Thanks  |
|
| Back to top |
|
 |
atom0s Moderator
Reputation: 205
Joined: 25 Jan 2006 Posts: 8587 Location: 127.0.0.1
|
Posted: Thu Dec 11, 2014 9:15 pm Post subject: |
|
|
Set a breakpoint at the top of the function:
mov eax, [esp+08]
Then look at the bottom right window, it'll show the stack trace of what called that function and the return address to follow back to what called it.
You can right-click inside that area to change how the stack looks to see the full stack and so on. _________________
- Retired. |
|
| Back to top |
|
 |
TomCrow How do I cheat?
Reputation: 0
Joined: 11 Dec 2014 Posts: 2
|
Posted: Fri Dec 12, 2014 11:33 am Post subject: |
|
|
| thaanks:) i did it and these are the return addresses.. maybe only 2 of them point to "normal" code.. most of them point to ?? free memory.. and few are access violation with strange long FFFFF starting addresses.. |
|
| Back to top |
|
 |
atom0s Moderator
Reputation: 205
Joined: 25 Jan 2006 Posts: 8587 Location: 127.0.0.1
|
Posted: Fri Dec 12, 2014 3:35 pm Post subject: |
|
|
The first one 00296859 would be where you would start looking. You should be able to double click it and go to that address in the disassembler automatically. Sometimes CE bugs out and wont work though so you may have to do it manually.
Then you can do the same thing, trace back in that new function to what called it etc. to keep getting back to the base function you are looking for.
Another thing you can do is walk the instructions using the 'Step-Over' option and follow the returns back to where the original call was. _________________
- Retired. |
|
| Back to top |
|
 |
|