3

I am trying to find the function that sends packets to the server in a game client. I have read many tuts about finding the SEND function. But they are not helpful in finding in my case.

So i started as follows:

  1. I first attached the game client in ollydbg.Then found all the executable modules.
  2. Then opened the client.exe. Further i searched for all intermodular calls.
  3. Then I searched for the SEND function. I got Five SendMessage() functions.

From this step I don't understand what to do further.

1 Answer 1

9

While in the CPU/Disassembly window, press Ctrl+G (for "Goto"). Type "send" and press the OK button. This should bring you to the address of the send() function in WS2_32.dll and you can set a breakpoint on this address.

7
  • I have found this in ollydbg: 65477994 . FF15 304ADA65 CALL DWORD PTR DS:[<&WS2_32.#19>] ; \send This is triggered every time when i send a chat packet.What next??
    – Nil
    Sep 27, 2013 at 8:31
  • 3
    There is no "what's next' according to your original question. You asked for finding the function that sends packets to the server, this is your answer and it seems to be valid according to your feedback. You'll need to provide more details what you want to achieve. This is also better to do in a new question.
    – ixje
    Sep 27, 2013 at 10:38
  • Basically my primary goal is to get the data from packets that a game sends to its a server.Next i want to decrypt it-my secondary goal.
    – Nil
    Sep 27, 2013 at 11:08
  • @user2692230 that actually is a different question but let me help you out proxocket is an anwesome base/skeleton to get you started. There is a more verbose description on that project found in this blog.
    – Till
    Sep 27, 2013 at 12:21
  • But that prog only captures packets.I want to decrypt the packets.
    – Nil
    Sep 27, 2013 at 12:50

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.