Cheat Engine Forum Index Cheat Engine
The Official Site of Cheat Engine
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 


Finding function help

 
Post new topic   Reply to topic    Cheat Engine Forum Index -> General Gamehacking
View previous topic :: View next topic  
Author Message
TomCrow
How do I cheat?
Reputation: 0

Joined: 11 Dec 2014
Posts: 2

PostPosted: Thu Dec 11, 2014 2:15 pm    Post subject: Finding function help Reply with quote

Hello, i was trying to find function of game, what is "making" the data for buffer for send via socket.. Iam newbie at these things, but i know how packets works.. i made bot using only packets for this game, but now im trying for dll hack.. I made detour hook and few things, that were working, but i still want to find out how to hook the real game sendig function (if u understand)...
Image of what i found is in the attachment.
But what is calling the function in mooclick.mfx i wasnt able to find.. Any tips, tutorials, texts what could help me? Sorry for my english also. Thanks Smile



chmat_send.png
 Description:
 Filesize:  49.58 KB
 Viewed:  8137 Time(s)

chmat_send.png


Back to top
View user's profile Send private message
atom0s
Moderator
Reputation: 205

Joined: 25 Jan 2006
Posts: 8587
Location: 127.0.0.1

PostPosted: Thu Dec 11, 2014 9:15 pm    Post subject: Reply with quote

Set a breakpoint at the top of the function:
mov eax, [esp+08]

Then look at the bottom right window, it'll show the stack trace of what called that function and the return address to follow back to what called it.

You can right-click inside that area to change how the stack looks to see the full stack and so on.

_________________
- Retired.
Back to top
View user's profile Send private message Visit poster's website
TomCrow
How do I cheat?
Reputation: 0

Joined: 11 Dec 2014
Posts: 2

PostPosted: Fri Dec 12, 2014 11:33 am    Post subject: Reply with quote

thaanks:) i did it and these are the return addresses.. maybe only 2 of them point to "normal" code.. most of them point to ?? free memory.. and few are access violation with strange long FFFFF starting addresses..


vvvvv.png
 Description:
 Filesize:  14.01 KB
 Viewed:  8071 Time(s)

vvvvv.png


Back to top
View user's profile Send private message
atom0s
Moderator
Reputation: 205

Joined: 25 Jan 2006
Posts: 8587
Location: 127.0.0.1

PostPosted: Fri Dec 12, 2014 3:35 pm    Post subject: Reply with quote

The first one 00296859 would be where you would start looking. You should be able to double click it and go to that address in the disassembler automatically. Sometimes CE bugs out and wont work though so you may have to do it manually.

Then you can do the same thing, trace back in that new function to what called it etc. to keep getting back to the base function you are looking for.

Another thing you can do is walk the instructions using the 'Step-Over' option and follow the returns back to where the original call was.

_________________
- Retired.
Back to top
View user's profile Send private message Visit poster's website
Display posts from previous:   
Post new topic   Reply to topic    Cheat Engine Forum Index -> General Gamehacking All times are GMT - 6 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group

CE Wiki   IRC (#CEF)   Twitter
Third party websites