Questions tagged [game-hacking]
The game-hacking tag has no usage guidance.
62
questions
1
vote
0
answers
11
views
Help MMO Tcp Packet
I'm trying re-send the packets that an MMO sends to the server just to learn more about packets. The game uses TCP.
I sent the same message in the game chat "oi"
to analyze the packages sent ...
- 11
0
votes
0
answers
44
views
Wrong access .data segment
Preface
I'm a PHP programmer, in my spare time I've been doing reverse work. Achieved good progress in the analysis game. But there was a big problem on my way. And now, more than ever, i need the ...
- 1
0
votes
1
answer
88
views
How can I override a x86 instruction in c++?
I am trying to replace a jmp instruction with a ret in c++. How can I do that?
- 11
-1
votes
1
answer
129
views
How to call and what means: _DWORD *__thiscall
I have one question maybe you can help, I always find this functions in IDA:
void __thiscall sub_79340(_BYTE *this, int a2, int a3, int a4)
And I use them like this:
// talkChannel
typedef DWORD(...
- 131
1
vote
1
answer
62
views
Calling function with string as parameter
I'm trying to call a function in a game that makes my character sending a message.
I already called a few functions in this game but this one has a tricky parameter.
The function signature should be ...
- 131
0
votes
0
answers
94
views
Warframe Network Communication
Warframe is a MMO that has both servers and peer to peer networking, I am looking into the server side of things. What I am wanting to achieve is client communication to a emulated server.
So far I am ...
- 1
0
votes
0
answers
57
views
How to gain access to obfuscated files stored within an app's OBB file?
So, for the last few days, I've been working on this problem. I've been trying to gain access to an Android app's code, and have managed to narrow it down (probably) to the app's .OBB file. I can open ...
- 1
0
votes
1
answer
54
views
How do I gain access to files that an Android app stores in its persistent internal storage directory?
I was playing a game that had hidden achievements and wanted to find the conditions necessary to unlock these achievements. To do this, I've tried to get the source code of the game, to find the ...
- 1
0
votes
0
answers
88
views
Game Hacking Prevention - General Question
So I'm in a middle of developing an online video game for Windows and was wondering, how does games' hacking is even possible?
I mean, assuming I calculate the HP and the location of every player in ...
- 1
1
vote
2
answers
106
views
Does Microsoft's C++ compiler add functions?
I'm working on reverse engineering a classic game (early 2000s) and am fortunate enough to have debug symbols for a different platform other than PC for reference.
I've noticed that the same functions ...
- 11
0
votes
0
answers
53
views
What are hackers hacking in GTA 5's unofficial multiplayer?
I know about changing values in RAM, but how do they create a vehicle or other object in the game? After all, they need to create something, and not just change some value in RAM?
Do they hack the ...
- 1
1
vote
1
answer
90
views
How could I find a call of a function thats only referenced inside a vftable?
So I have this function which I'm trying to figure out the arguments to.
However, all the xrefs of it point to a VFTable.
How would I find a call for this function?
- 11
0
votes
1
answer
122
views
How do I find a function and find out what it does using reverse engineering?
I am attempting to find a function in a specific game. Is there any way that, using the assembly code I get from decompiling the game in either IDA or x64dbg, I can locate a function I am specifically ...
- 37
2
votes
1
answer
176
views
Finding function from pattern
I have been trying to reverse engineer a game for a while now. I have a pattern already for the function I want to find:
\x89\x54\x24\x10\x4C\x89\x44\x24\x18\x4C
\x89\x4C\x24\x20\x48\x83\xEC\x28\x48\...
- 37
1
vote
1
answer
86
views
Is there a way to find the implementation of methods with MethodImplOptions.InternalCall attribute?
Background:
The Unity engine provides a number of PlayerPrefs.SetXxx functions that can be used to save user data. However, it will automatically append a hash to the name of what you saved. For ...
- 11
0
votes
1
answer
129
views
Stuck in finding the algorithm of a save game file CRC/checksum
A sample message-CRC pair looks like this:
00000005 00000000 12121212 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 2F8376FE
...
0
votes
1
answer
186
views
Windows User Identification / HWID Limiting
I've been playing a game that has an HWID limit and a bunch of other limitations, such as:
a) Cannot be ran in a VM
b) Cannot be ran using Sandboxie and other Sandbox environments
c) Limits 3 ...
- 1
0
votes
1
answer
88
views
How to make sense of the pointer in reversed function call?
I have the code below, derived from the reversed function in the original application:
gladius::world::World::create(*(gladius::world::World**)(*(char*)(this + 0x5e8) + 0x50));
The create function ...
- 146
0
votes
0
answers
69
views
Need help reverse engineering an 1995 Arcade game with jackie chan in it for modding purposes, (Motorola 68k)
I am looking for a way to decrypt these files and attempt to balance the game, because the top tiers are top and the low tiers are low, also there might be two hidden characters that I would like to ...
- 1
0
votes
1
answer
79
views
Modify main function for C++ game file
I am trying to modify the main function for a specific decompiled .exe. More specifically, I want to remove the reference to GUI from that .exe file, so that GUI doesn't get initialised on the startup ...
- 146
1
vote
0
answers
75
views
Unknown binary format (.scp) - No Header
I hope everyone is doing well. I've recently been trying to decode the structure of some files that contain a lot Unicode-8 IIRC characters, with a mix of binary. When I put it into IDA, I can't seem ...
- 11
0
votes
1
answer
121
views
How can I get the correct offset from that instruction?
I have the following instructions:
The registers' values in the First instruction are:
RAX=0000000033307EE0
RCX=0000000000000000
The registers' values in the Second instruction are:
RAX=...
- 125
0
votes
0
answers
118
views
How can I get a value from a memory address that changes almost every millisecond?
After a lot of time, I found an address in the memory that has the target value but there is something unusual in that address! that address changes every millisecond.
ScreenShot:
I did a hardware ...
- 125
1
vote
1
answer
124
views
Retrieve user data as if it were the game making the request
Don't think the title really summed it up but here goes.
There's a game built in Unreal Engine 4 that displays your (and other users) in-game statistics e.g a leaderboards page.
I can determine some ...
- 11
1
vote
0
answers
61
views
Reverse Engineering SNES adapter
A good "Hello world" for everybody here
I've bought a Mayflash PC052 adapter to convert an original SNES-mini controller (CLV-202) to a USB port on PC or PS4...
The thing is, this CLV-202 ...
- 11
2
votes
0
answers
117
views
How can I extract working files (in the form of graphics) from these MZP executables?
There's a 1999 PC/Mac game that I'm hoping to extract assets from. All game data appears to be stored in various files with the extension .rsc. I've been able to extract all the game's audio from the ...
- 21
0
votes
1
answer
141
views
How do I find missing/undefined vtable functions in IDA64?
I'm reverse engineering a game and came across some function calls like the ones shown below, how do I find where these functions are located / decompile them?
(*(BaseClient->int640 + 304))(...
- 11
2
votes
0
answers
134
views
Reverse engineering PS2 Naruto 3D Model Format
As a personal project, I've been trying to reverse engineer the model for a Naruto PS2 game, but to no success in trying to visualize vertex data and faces with Model Ressearcher, and the .OBJ ...
0
votes
1
answer
187
views
Need starter-help on reverse-engineering a game algorithm
I've got a dataset of about 1700 attacks in this game. A subset of the data is provided here. It consists of 9 columns:
modifier
Astr
Aspd
Adex
Adef
Dstr
Dspd
Ddex
Ddef
The modifier is in a range of ...
- 1
0
votes
0
answers
81
views
finding a not-so-straightforward game's function
I am working on Mad Max game [ APEX engine ]
I do my best to explain the situation.
so my target executes function like this:
there are commands like " call [eax+XX] " or " call RX &...
- 11
2
votes
1
answer
137
views
Reverse Engineering API's of Browser games
I like the idea of Reverse Engineering API's and creating bots/scripts for Browser games. However, I am a beginner in the Computer Science field. I recently started my Computer Science Degree and ...
- 21
1
vote
0
answers
77
views
Restoring online functionality of an obsucure Korean PS2 horror game
Last year I posted for help in order to reverse-engineer and translate a Korean exclusive Horror game for the Playstation 2 called Mystic Nights. Here is the Original Post.
Thanks to the kind folks ...
- 43
0
votes
2
answers
2k
views
Modifying UnityPlayer.dll with dnSpy or other
I've been looking into reverse engineering a game developped with Unity 2017.4.10, to find a way to get a freely controlled camera. I found the values that interest me in Managed/Assembly-CSharp.dll ...
- 3
1
vote
1
answer
96
views
How do you recommend going for applying minor changes in an executable through a dll?
My choice of words in the title might be poor, I apologize: english is not my primary language and I have no idea how to word it better.
I have a game executable to which I applied several changes, ...
- 31
-1
votes
2
answers
132
views
How would I start to decode this? Asking for help from a friend (Alien Hominid Invasion)
I have literally no idea how to start to decode this kind of a file, but I really want these fonts and a decoder would be huge for the community, so any help would be great. Linked below is a google ...
0
votes
1
answer
68
views
Cant recognise where is my targeted function executed
Im trying to recognise where is my targeted function int64 __fastcall sub_1400CE4F0(__int64 a1, const char *a2)executed. When stepping through this function, after return it's redirecting me here:
if (...
- 13
0
votes
0
answers
79
views
Trying to edit the source code of AOC monitor
So long story short the AOC monitor comes with a G-Menu gui that lets you customize different monitor features. One specific one I am interested in is the "Dial Point" setting. Where it ...
- 1
0
votes
2
answers
147
views
How to extract .nsh file?
I am trying to edit the graphics on a game and have a .nsh file where post-process effect data is contained. I cannot seem to find a program to extract/read its contents.
Googling it, I see something ...
0
votes
0
answers
102
views
How to find and edit the source of a string in a DX11 game's exe/files (debug build of the game available)
I want to find and edit the values for the motion blur effect in Naruto: Ultimate Ninja Storm 3 on PC (Windows, DX11) to be more in line with the PS3 version (and the other Storm games on PC as well). ...
1
vote
0
answers
209
views
Help with decoding japanese text from binary
I'm building a fan website for a japanese mobile game. I'd like to have access to game data like character stats and ability names. I'll start by saying that this is the first time I have done ...
- 11
1
vote
0
answers
37
views
how to change the read destination of the data in the game
I would like to know how to change the read destination of the data in the game.
I now want to modify the player data and fonts in a psx baseball game.
However, the player data in the target game(...
0
votes
1
answer
66
views
Get string from function and pass it to another program
I want to make a small tool that analyzes text from console in online game and I'm stuck at reading a string from a function and sending it to another program. I managed to find function that takes ...
0
votes
0
answers
156
views
Reversing WSASend finding functions that called it
I'm trying to make my first DLL calling game functions
What I need is tracing functions that call WSASend, so it will be easy for me to get all functions address to call them from my DLL.
What I ...
- 131
0
votes
1
answer
481
views
Resource hacker and Resource tuner don't change taskbar and window icons
I wanted to change a icon of a programs. I tried both Resource Tuner and Resource Hacker programs. When i opened the program there were multiple icons sizes, but when i tried to replace one icon, it ...
3
votes
1
answer
803
views
Decrypting some possibly XXTEA encrypted lua/game files
I am trying to extract assets from a Chinese game, I downloaded the apk file and unzipped it. I looked through the files and they are encrypted in some ways, the PNGs and LUAs are unviewable.
The ...
- 31
0
votes
0
answers
2k
views
How to capture specific data packets sent in an online game?
I am playing an online MMORPG game, based on player versus player idea. In this game, characters have skills. I want to capture the sent packet, when a specific skill is pressed on keyboard or etc. ...
- 101
0
votes
1
answer
296
views
What is the usual way to determine if a Game uses KernelMode or UserMode Anti cheat?
How does one find out if a game uses KernelMode anti cheat or UserMode?
For example the Game Black Desert Online uses Xigncode.
If i google a bit about Xigncode i immediately find out that:
"...
- 113
0
votes
0
answers
2k
views
Deconstructing Unity games
Note: I only want to edit/mod the games not trying to steal things etc.
I'm trying to deconstruct some Unity games from both PC and Android platforms and already extracted assets with uTinyRipper ...
- 1
0
votes
1
answer
2k
views
How do I reverse engineer a game using dnSpy?
I've been reading some about reverse engineering and decided to try to learn as I go, which has proven somewhat difficult. Sorry about the generic title, I'll try and give enough info so it can be ...
- 3
1
vote
2
answers
274
views
J2ME games obfuscator - Spyro and Tekken 5
While reversing some J2ME games like Spyro or Tekken 5 Mobile I have encountered a weird obfuscation where all fields, methods and classes have names like A, a, B, b, Aa, Bb etc.
It's really hard to ...
- 135