Questions tagged [game-hacking]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
24 views

struggle with Decrypt Byte Array with a key of unity game using il2cpp

So i'm trying to reverse an unity game using il2cpp to get the assets of it. After some reverse stuff i found that the asset's (especially here the png image) byte array get encrypted with a key and i ...
NoName's user avatar
  • 23
0 votes
0 answers
24 views

How to draw invisible entities (glow) with DX11?

I'm trying to understand how GLOW hacks work. In some games like CSGO you can just overwrite the memory address to 1 and glow chams are enabled. So you can see people through the walls like in this ...
kuhi's user avatar
  • 161
0 votes
0 answers
23 views

can the source code for video slot machine be pulled using dev tools?

i want to obtain pre built source code and logic for video slots , and then rename my own sprites / skins, ect and essentially create a reskin of said game . can anyone tell me how this can be ...
William Wheeler's user avatar
0 votes
0 answers
57 views

Need SOME help decrypt xxtea encrypted Lua file from cocos2D game LIBRARY

iam trying from a while to figure out the key this cocos2dx game but couldn't figure it out if someone could abit help with the way to find these keys you check the the file from here https://github....
SHADOWDIANA's user avatar
0 votes
0 answers
69 views

Is game hacking all about memory manipulation?

I wanted to know if game hacking is all about manipulating memory ? and If we need anything more than, this topics for game hacking ? memory manipulation Reverse engineering Windows internals C++ ...
Mahdi's user avatar
  • 1
0 votes
1 answer
192 views

Figuring a CRC to edit a PS1 save file

So I've set myself the goal of editing Crash Bash saves for the PS1. I'm using RetroArch + PCSX, so I'm editing memory card .srm files binary contents directly. Uploaded a zip with some save games, in ...
Xavier Arias Botargues's user avatar
0 votes
1 answer
86 views

Creating the SkiFree 2 dream... An introduction [closed]

I am no programmer but I like to do it for my own purpose and entertainment. As in earlier posts I said: Excuse me, I am just liking to use the SkiFree source code for my very own purpose. The purpose ...
Picaboo3's user avatar
2 votes
2 answers
192 views

How can I extract *.c file hidden in an executable file (SkiFree)

I am a person interested of old games (MS DOS and 16 bit Windows only) and programming. In 2020, I saw an article about hacking SkiFree somewhere on the internet and soon as I followed the ...
Picaboo3's user avatar
1 vote
0 answers
43 views

Retrieve functionality to button - game patching

I'm patching an old game, and I want the retrieve the toggle fullscreen functionality it's supposed to have. In the menu, in the display tab, there is a disabled option of fullscreen mode that you can ...
Yair Derry's user avatar
1 vote
0 answers
64 views

Process stuck on the entry point

I'm trying to patch an old game (1998-ish) that runs on windows 95 and windows XP to make it compatible with windows 11. The current problem with it is that when running the exe file nothing seems to ...
Yair Derry's user avatar
0 votes
0 answers
263 views

Reverse engineering a game server

It was announced recently that the UGC servers for Mirror's Edge Catalyst servers are going to shut down on December 8th, 2023 for all platforms. I want to reverse engineer the game server and build a ...
Loomeh's user avatar
  • 11
0 votes
0 answers
125 views

i would like to know how to reverse engineer a steam pc game thats limited to a 30min demo ill explain

I Have a steam game its a demo not very big company or anything you are limited to only 30 min of game play then at the end of the 30 min your session ends and you are brought to a screen encouraging ...
New2wheels-Pray4Me's user avatar
3 votes
0 answers
79 views

x32dbg version causes crash on breakpoint

i'm a newbie to this whole shindig, and have started with https://gamehacking.academy. i'm finding this fun, but am getting stuck here: when i try to apply a breakpoint using x32dbg, as in https://...
Axolotl Kumar's user avatar
2 votes
1 answer
226 views

What are the prerequisite knowledge needed to start solving crackmes?

I started by reading a book on C language and then moved on to "Programming From Ground Up," which teaches basic programming in x86. School just ended, I'm working on cracking a game called ...
buffednerdkid's user avatar
2 votes
0 answers
192 views

Find decryption key of coco2d lua

I am trying to find the encryption key for a lua file from a .so file But I am new in this field. I visit websites and found that key is inside xxteaDecrypt function I found two xxteaDecrypt function. ...
Ritesh's user avatar
  • 21
1 vote
1 answer
513 views

HELP Decrypting Lua files

i'm trying to mod a game named : DDTank Mobile, which is on both Android & IOS. This game runs on cocos2d engine, the thing is the lua files are encrypted. I read somewhere to look for 'sign' at ...
TroPicz MoDzy's user avatar
4 votes
0 answers
89 views

Decrypt Keybindings for EVE Online

I've had this idea for a while for a tool I'd like to make to assist people in getting used to keybinds in EVE Online. Not sure how useful it'd actually be, but seems like a fun project nonetheless. I'...
Dealman's user avatar
  • 41
2 votes
0 answers
43 views

I am trying to develop a second version of SkiFree using OllyDbg. How can I add a new enemy or obstacle without the source code?

I am a programmer and reverse engineer. I am interested in reverse engineering SkiFree since it is free to use. However I have been wondering how to add a new enemy or obstacle since I do not have the ...
Picaboo3's user avatar
0 votes
1 answer
221 views

I am reverse engineering SkiFree, where is the code for the Abominable Snowman's movement?

I have been trying to reverse engineer the classic game SkiFree just to know how the Yeti moves but I found nothing. http://ski.ihoc.net/ski32.exe I used many tools but they do not show the encrypted ...
Picaboo3's user avatar
1 vote
0 answers
143 views

Extracting contents of unknown file format

I would love some help on working with this file format. I have this archived file from this abandonware game that I like to mess around with, and I have tried all sorts to try and expand it to ...
Harry's user avatar
  • 19
2 votes
0 answers
50 views

Redirect exception handler?

I'm working on a localization project and have a few trampoline hooks to translate some text in an online game. Periodically throughout gameplay, there are checks that run in the background to ensure ...
isuckatreversing's user avatar
1 vote
0 answers
40 views

Is it possible for different dynamic memory addresses to share the same offset value?

I am currently using cheat engine to hack a game. I used the pointer scanner to find some pointers to the pistol ammo memory location. I then went to look for pointers to the shotgun ammo memory ...
Jason Crosby's user avatar
0 votes
1 answer
129 views

Reversing Games like Manfred dis

I've looked at as many resources on Manfred and Manfred's work I've watched the DEFCON 25 Live talk about what he hacked. Here I've also looked, listened and read the dark net diaries Part One - ...
Silence's user avatar
3 votes
0 answers
965 views

Find constant variables with float values using Ghidra

I dumped an il2cpp.so with il2cppDumper and in the dump.cs I found that the variables I wanted to change its values are somewhat constant float. this is the snippet: // Namespace: public class ...
hanan's user avatar
  • 309
2 votes
0 answers
247 views

How this data can be referenced in Ghidra?

I reverse engineered libil2cpp.so using ghidra. I found these lines of code in a function in the decompiler view: UnityEngine.PlayerPrefs$$GetInt(*(undefined4 *)(*(int *)(Class$ItemPref + 0x5c) + 8),5,...
hanan's user avatar
  • 309
1 vote
1 answer
330 views

Assign a constant value to an ARM register

I was reversing an libil2cpp.so and decompiled it using ghidra and as of now my assembly language knowledge is very limited and studied it long time btw I had an assembly code like this: ...
hanan's user avatar
  • 309
4 votes
2 answers
602 views

How to reverse a game and inject a dll in client program?

I am trying to make a bot for a game. But when I open the game in debugger like Ollydbg or in x64dbg the game simply closes and also it doesn't appears in the Attach to the process list in File menu ...
Lftbrito's user avatar
2 votes
0 answers
92 views

Help MMO Tcp Packet

I'm trying re-send the packets that an MMO sends to the server just to learn more about packets. The game uses TCP. I sent the same message in the game chat "oi" to analyze the packages sent ...
Rck_'s user avatar
  • 21
1 vote
0 answers
65 views

Wrong access .data segment

Preface I'm a PHP programmer, in my spare time I've been doing reverse work. Achieved good progress in the analysis game. But there was a big problem on my way. And now, more than ever, i need the ...
 Blezigen 's user avatar
1 vote
1 answer
272 views

How can I override a x86 instruction in c++?

I am trying to replace a jmp instruction with a ret in c++. How can I do that?
Mlemix's user avatar
  • 21
-1 votes
1 answer
828 views

How to call and what means: _DWORD *__thiscall

I have one question maybe you can help, I always find this functions in IDA: void __thiscall sub_79340(_BYTE *this, int a2, int a3, int a4) And I use them like this: // talkChannel typedef DWORD(...
kuhi's user avatar
  • 161
1 vote
1 answer
258 views

Calling function with string as parameter

I'm trying to call a function in a game that makes my character sending a message. I already called a few functions in this game but this one has a tricky parameter. The function signature should be ...
kuhi's user avatar
  • 161
1 vote
0 answers
289 views

Warframe Network Communication

Warframe is a MMO that has both servers and peer to peer networking, I am looking into the server side of things. What I am wanting to achieve is client communication to a emulated server. So far I am ...
BB TheB's user avatar
  • 11
0 votes
1 answer
563 views

How do I gain access to files that an Android app stores in its persistent internal storage directory?

I was playing a game that had hidden achievements and wanted to find the conditions necessary to unlock these achievements. To do this, I've tried to get the source code of the game, to find the ...
Michael's user avatar
0 votes
0 answers
150 views

Game Hacking Prevention - General Question

So I'm in a middle of developing an online video game for Windows and was wondering, how does games' hacking is even possible? I mean, assuming I calculate the HP and the location of every player in ...
NewGuy's user avatar
  • 1
1 vote
2 answers
415 views

Does Microsoft's C++ compiler add functions?

I'm working on reverse engineering a classic game (early 2000s) and am fortunate enough to have debug symbols for a different platform other than PC for reference. I've noticed that the same functions ...
user18776's user avatar
1 vote
1 answer
121 views

How could I find a call of a function thats only referenced inside a vftable?

So I have this function which I'm trying to figure out the arguments to. However, all the xrefs of it point to a VFTable. How would I find a call for this function?
Mlemix's user avatar
  • 21
0 votes
1 answer
696 views

How do I find a function and find out what it does using reverse engineering?

I am attempting to find a function in a specific game. Is there any way that, using the assembly code I get from decompiling the game in either IDA or x64dbg, I can locate a function I am specifically ...
CoolNite's user avatar
2 votes
1 answer
774 views

Finding function from pattern

I have been trying to reverse engineer a game for a while now. I have a pattern already for the function I want to find: \x89\x54\x24\x10\x4C\x89\x44\x24\x18\x4C \x89\x4C\x24\x20\x48\x83\xEC\x28\x48\...
CoolNite's user avatar
1 vote
1 answer
979 views

Is there a way to find the implementation of methods with MethodImplOptions.InternalCall attribute?

Background: The Unity engine provides a number of PlayerPrefs.SetXxx functions that can be used to save user data. However, it will automatically append a hash to the name of what you saved. For ...
user239216's user avatar
0 votes
1 answer
264 views

Stuck in finding the algorithm of a save game file CRC/checksum

A sample message-CRC pair looks like this: 00000005 00000000 12121212 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 2F8376FE ...
Andreu Navarro's user avatar
0 votes
1 answer
806 views

Windows User Identification / HWID Limiting

I've been playing a game that has an HWID limit and a bunch of other limitations, such as: a) Cannot be ran in a VM b) Cannot be ran using Sandboxie and other Sandbox environments c) Limits 3 ...
layer07's user avatar
0 votes
1 answer
113 views

How to make sense of the pointer in reversed function call?

I have the code below, derived from the reversed function in the original application: gladius::world::World::create(*(gladius::world::World**)(*(char*)(this + 0x5e8) + 0x50)); The create function ...
Irbis77's user avatar
  • 328
0 votes
1 answer
88 views

Modify main function for C++ game file

I am trying to modify the main function for a specific decompiled .exe. More specifically, I want to remove the reference to GUI from that .exe file, so that GUI doesn't get initialised on the startup ...
Irbis77's user avatar
  • 328
1 vote
0 answers
132 views

Unknown binary format (.scp) - No Header

I hope everyone is doing well. I've recently been trying to decode the structure of some files that contain a lot Unicode-8 IIRC characters, with a mix of binary. When I put it into IDA, I can't seem ...
Kevin's user avatar
  • 11
0 votes
1 answer
633 views

How can I get the correct offset from that instruction?

I have the following instructions: The registers' values in the First instruction are: RAX=0000000033307EE0 RCX=0000000000000000 The registers' values in the Second instruction are: RAX=...
Lion King's user avatar
  • 269
0 votes
0 answers
328 views

How can I get a value from a memory address that changes almost every millisecond?

After a lot of time, I found an address in the memory that has the target value but there is something unusual in that address! that address changes every millisecond. ScreenShot: I did a hardware ...
Lion King's user avatar
  • 269
2 votes
1 answer
287 views

Retrieve user data as if it were the game making the request

Don't think the title really summed it up but here goes. There's a game built in Unreal Engine 4 that displays your (and other users) in-game statistics e.g a leaderboards page. I can determine some ...
John's user avatar
  • 21
1 vote
0 answers
113 views

Reverse Engineering SNES adapter

A good "Hello world" for everybody here I've bought a Mayflash PC052 adapter to convert an original SNES-mini controller (CLV-202) to a USB port on PC or PS4... The thing is, this CLV-202 ...
Thiago's user avatar
  • 11
2 votes
0 answers
235 views

How can I extract working files (in the form of graphics) from these MZP executables?

There's a 1999 PC/Mac game that I'm hoping to extract assets from. All game data appears to be stored in various files with the extension .rsc. I've been able to extract all the game's audio from the ...
lemniscate's user avatar