Cheat Engine

[Dark Byte]

Let's say you want to do what everyone has always dreamed about. Logging the next 10 PeekMessage api calls, there's just no api that's more interesting right ?

The function declaration of that routine is:

[Demolish]

can i hook winsock that way? send,recv functions?

[Dark Byte]

sure.
It's probably easier to use the packet editor plugin though or base of something off that source. ( sourceis in 5.6.1, but should be portable/compatible with ce 6)

Anyhow, if you want to use this method keep in mind that the function you want to watch is "ws2_32.send" / "ws2_32.recv" instead of just "send/recv"

Or if you want to actually hook it instead of debugging, I recommend using the "generateAPIHookScript" routine (this routine takes strings only as addresses)

[Demolish]

so the structure is:

[Dark Byte]

well, you could decrease esp by the amount of bytes the parameters take, fill in those bytes and adjust eip to the function you want to call, or you could just change eip to a routine you wrote yourself

Or you could just start off from scratch without debugging on a routine you hooked

Here is a method of hooking api's that I prefer. I use this method in almost all the hooking mechanisms inside ce from speedhack to memory alloc hooking:

[Demolish]

but Your script is like a filter of parameters, I want to know how to call the original function with my own parameters whenever I want(if it is possible)

[Dark Byte]

then you just replace

[Demolish]

so I have to fill:

[Dark Byte]

No, you can just leave those alone. Those are the callers parameters
You have to input new parameters on new stack positions

so push the last parameter first
then the one before it
etc...
and then call the api you want to call

so instead of push [ebp+18] you'd do , push myaddress or push #100 or whatever you want to give as parameter

---
and as I've said before this is a lot easier done in combination of dll injection. You just have to export one pointer and your hook routine, and when your hook routine wants to call the original function it would just need to call that pointer with the correct function type definition.
Makes keeping track of stuff and memory allocations more easy as well

[Demolish]

I've tried to do what you said, and I wrote code that doesn't works:

[GH*master]

Thanks for this tutorial, Dark Byte. Very impressive

[Dark Byte]

you're using lua code inside auto assembler code
instead of "writeString(message,"blablablaa"); " use

[Demolish]

So, the code works, but it's not exactly that what I wanted, I'd like to call MessageBox from Cheat Engine, but I want Cheat Engine to show message box when I click "Execute now" button. Sorry for the problems

[atom0s]

Use showMessage(msg) then.

Example:

[Demolish]