Reverse Engineering Stack Exchange is a question and answer site for researchers and developers who explore the principles of a system through analysis of its structure, function, and operation. It only takes a minute to sign up.
Sign up to join this community
I've played with using software like cheat engine to modify memory, null out code and even inject some code of my own. However finding the right spot to modify is always a difficulty. I'd like to be able to identify the code that is run when I click my mouse on an object (eventually to simulate the entire process). Is there a tool or method for doing this that anyone could suggest?
I've used ollydb and cheat engine a fair bit in the past.
On windows you can
find winproc function, search click messages within it and add breakpoint/trace from there...
On different OS
trace mouse handlers ...
If OpenGL is used
The Object selection is often done by it directly during rendering. You can trace calls to those functions used.
If any framework is used
learn what function for mouse it has and trace its calls ...
An effective method in these cases (although not necessarily straightforward) is to use differential debugging.
The core principle is to run the application twice and record traces of the functions being executed, or even basic blocks if you need to get so granular.
The idea boils down to:
The second time you go directly for what you are interested in, press that button!
Now you can filter the noise out of the second trace by looking for hits that appear exclusively in the second (and not in the first)
This is not a perfect method but it works pretty well to narrow the search in several scenarios.
Shameless plug: Here a link to my blog where I discuss a similar (in nature) problem. There is even some old code to get you started.
