 |
Cheat Engine The Official Site of Cheat Engine
|
View previous topic :: View next topic |
Author |
Message |
johnnygg Advanced Cheater
Reputation: 0
Joined: 20 Jan 2010 Posts: 51
|
Posted: Tue Mar 09, 2010 10:24 pm Post subject: hook hop |
|
|
hi all I'm back!
so, I can't find any bypasses, and no one wants to write a tutorial or even list any sources about where I can start to learn about how to make my own bypass.....SOOOOO
I wanted to ask about "hook hopping".
Someone mentioned it earlier as a solution to use API's (like sendmsg() and postmsg()) that might be hooked by a game's anti-hack protection.
My question is the following:
1. Is a 'hook hop' just another way of saying 'bypass'?
2. If not, what is a hook hop, and where can I learn more about them?
|
|
Back to top |
|
 |
Guy Expert Cheater
Reputation: 0
Joined: 30 May 2009 Posts: 187
|
Posted: Sun Mar 14, 2010 5:24 pm Post subject: |
|
|
They work by replacing the code which was hooked, then merely "hopping" over the hook, e.g.
SendMessageA's first 5 bytes may be:
Code: |
MOV EDI, EDI
PUSH EBP
MOV EBP, ESP
|
After a hook is added, the above x86 code may resemble:
Rather than calling SendMessageA directly, the following could be done:
Code: |
MOV EDI, EDI
PUSH EBP
MOV EBP, ESP
JMP SendMessageA + 5
|
Note the "SendMessage + 5"; the overwritten code is merely jumped over, avoiding the hook entirely.
Regardless, this does no good when kernel mode hooks are in place; thankfully, with KPP on Windows 7, those will soon become a thing of the past.
|
|
Back to top |
|
 |
johnnygg Advanced Cheater
Reputation: 0
Joined: 20 Jan 2010 Posts: 51
|
Posted: Mon Mar 22, 2010 8:59 pm Post subject: |
|
|
thank you
|
|
Back to top |
|
 |
|
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum You cannot attach files in this forum You can download files in this forum
|
|