Questions tagged [game-hacking]
The game-hacking tag has no usage guidance.
80
questions
0
votes
1
answer
75
views
Creating the SkiFree 2 dream... An introduction [closed]
I am no programmer but I like to do it for my own purpose and entertainment. As in earlier posts I said:
Excuse me, I am just liking to use the SkiFree source code for my very own purpose. The purpose ...
- 31
2
votes
2
answers
139
views
How can I extract *.c file hidden in an executable file (SkiFree)
I am a person interested of old games (MS DOS and 16 bit Windows only) and programming. In 2020, I saw an article about hacking SkiFree somewhere on the internet and soon as I followed the ...
- 31
-1
votes
0
answers
75
views
Decompiling SkiFree (An attempt) [duplicate]
Excuse me, I am just liking to use the SkiFree source code for my very own purpose. The purpose is basically adding my own enemies and stuff to it (with it's own functions) rather than replacing the ...
- 31
1
vote
0
answers
25
views
Retrieve functionality to button - game patching
I'm patching an old game, and I want the retrieve the toggle fullscreen functionality it's supposed to have.
In the menu, in the display tab, there is a disabled option of fullscreen mode that you can ...
- 21
1
vote
0
answers
49
views
Process stuck on the entry point
I'm trying to patch an old game (1998-ish) that runs on windows 95 and windows XP to make it compatible with windows 11.
The current problem with it is that when running the exe file nothing seems to ...
- 21
0
votes
0
answers
95
views
Reverse engineering a game server
It was announced recently that the UGC servers for Mirror's Edge Catalyst servers are going to shut down on December 8th, 2023 for all platforms. I want to reverse engineer the game server and build a ...
- 11
0
votes
0
answers
81
views
i would like to know how to reverse engineer a steam pc game thats limited to a 30min demo ill explain
I Have a steam game its a demo not very big company or anything you are limited to only 30 min of game play then at the end of the 30 min your session ends and you are brought to a screen encouraging ...
3
votes
0
answers
56
views
x32dbg version causes crash on breakpoint
i'm a newbie to this whole shindig, and have started with https://gamehacking.academy. i'm finding this fun, but am getting stuck here: when i try to apply a breakpoint using x32dbg, as in https://...
2
votes
1
answer
137
views
What are the prerequisite knowledge needed to start solving crackmes?
I started by reading a book on C language and then moved on to "Programming From Ground Up," which teaches basic programming in x86.
School just ended, I'm working on cracking a game called ...
2
votes
0
answers
151
views
Find decryption key of coco2d lua
I am trying to find the encryption key for a lua file from a .so file
But I am new in this field. I visit websites and found that key is inside xxteaDecrypt function I found two xxteaDecrypt function.
...
- 21
1
vote
1
answer
364
views
HELP Decrypting Lua files
i'm trying to mod a game named : DDTank Mobile, which is on both Android & IOS.
This game runs on cocos2d engine, the thing is the lua files are encrypted.
I read somewhere to look for 'sign' at ...
4
votes
0
answers
81
views
Decrypt Keybindings for EVE Online
I've had this idea for a while for a tool I'd like to make to assist people in getting used to keybinds in EVE Online. Not sure how useful it'd actually be, but seems like a fun project nonetheless.
I'...
- 41
2
votes
0
answers
37
views
I am trying to develop a second version of SkiFree using OllyDbg. How can I add a new enemy or obstacle without the source code?
I am a programmer and reverse engineer. I am interested in reverse engineering SkiFree since it is free to use.
However I have been wondering how to add a new enemy or obstacle since I do not have the ...
- 31
0
votes
1
answer
158
views
I am reverse engineering SkiFree, where is the code for the Abominable Snowman's movement?
I have been trying to reverse engineer the classic game SkiFree just to know how the Yeti moves but I found nothing.
http://ski.ihoc.net/ski32.exe
I used many tools but they do not show the encrypted ...
- 19
1
vote
0
answers
123
views
Extracting contents of unknown file format
I would love some help on working with this file format.
I have this archived file from this abandonware game that I like to mess around with, and I have tried all sorts to try and expand it to ...
- 19
2
votes
0
answers
41
views
Redirect exception handler?
I'm working on a localization project and have a few trampoline hooks to translate some text in an online game. Periodically throughout gameplay, there are checks that run in the background to ensure ...
1
vote
0
answers
40
views
Is it possible for different dynamic memory addresses to share the same offset value?
I am currently using cheat engine to hack a game. I used the pointer scanner to find some pointers to the pistol ammo memory location. I then went to look for pointers to the shotgun ammo memory ...
- 131
0
votes
1
answer
96
views
Reversing Games like Manfred dis
I've looked at as many resources on Manfred and Manfred's work
I've watched the DEFCON 25 Live talk about what he hacked.
Here
I've also looked, listened and read the dark net diaries Part One -
...
- 3
3
votes
0
answers
583
views
Find constant variables with float values using Ghidra
I dumped an il2cpp.so with il2cppDumper and in the dump.cs I found that the variables I wanted to change its values are somewhat constant float. this is the snippet:
// Namespace:
public class ...
- 299
2
votes
0
answers
161
views
How this data can be referenced in Ghidra?
I reverse engineered libil2cpp.so using ghidra. I found these lines of code in a function in the decompiler view:
UnityEngine.PlayerPrefs$$GetInt(*(undefined4 *)(*(int *)(Class$ItemPref + 0x5c) + 8),5,...
- 299
1
vote
1
answer
242
views
Assign a constant value to an ARM register
I was reversing an libil2cpp.so and decompiled it using ghidra and as of now my assembly language knowledge is very limited and studied it long time btw I had an assembly code like this:
...
- 299
4
votes
2
answers
458
views
How to reverse a game and inject a dll in client program?
I am trying to make a bot for a game. But when I open the game in debugger like Ollydbg or in x64dbg the game simply closes and also it doesn't appears in the Attach to the process list in File menu ...
- 41
2
votes
0
answers
77
views
Help MMO Tcp Packet
I'm trying re-send the packets that an MMO sends to the server just to learn more about packets. The game uses TCP.
I sent the same message in the game chat "oi"
to analyze the packages sent ...
- 21
1
vote
0
answers
63
views
Wrong access .data segment
Preface
I'm a PHP programmer, in my spare time I've been doing reverse work. Achieved good progress in the analysis game. But there was a big problem on my way. And now, more than ever, i need the ...
- 11
1
vote
1
answer
232
views
How can I override a x86 instruction in c++?
I am trying to replace a jmp instruction with a ret in c++. How can I do that?
- 21
-1
votes
1
answer
577
views
How to call and what means: _DWORD *__thiscall
I have one question maybe you can help, I always find this functions in IDA:
void __thiscall sub_79340(_BYTE *this, int a2, int a3, int a4)
And I use them like this:
// talkChannel
typedef DWORD(...
- 161
1
vote
1
answer
169
views
Calling function with string as parameter
I'm trying to call a function in a game that makes my character sending a message.
I already called a few functions in this game but this one has a tricky parameter.
The function signature should be ...
- 161
1
vote
0
answers
244
views
Warframe Network Communication
Warframe is a MMO that has both servers and peer to peer networking, I am looking into the server side of things. What I am wanting to achieve is client communication to a emulated server.
So far I am ...
- 11
0
votes
1
answer
227
views
How do I gain access to files that an Android app stores in its persistent internal storage directory?
I was playing a game that had hidden achievements and wanted to find the conditions necessary to unlock these achievements. To do this, I've tried to get the source code of the game, to find the ...
- 1
0
votes
0
answers
134
views
Game Hacking Prevention - General Question
So I'm in a middle of developing an online video game for Windows and was wondering, how does games' hacking is even possible?
I mean, assuming I calculate the HP and the location of every player in ...
- 1
1
vote
2
answers
266
views
Does Microsoft's C++ compiler add functions?
I'm working on reverse engineering a classic game (early 2000s) and am fortunate enough to have debug symbols for a different platform other than PC for reference.
I've noticed that the same functions ...
- 11
1
vote
1
answer
116
views
How could I find a call of a function thats only referenced inside a vftable?
So I have this function which I'm trying to figure out the arguments to.
However, all the xrefs of it point to a VFTable.
How would I find a call for this function?
- 21
0
votes
1
answer
458
views
How do I find a function and find out what it does using reverse engineering?
I am attempting to find a function in a specific game. Is there any way that, using the assembly code I get from decompiling the game in either IDA or x64dbg, I can locate a function I am specifically ...
- 39
2
votes
1
answer
533
views
Finding function from pattern
I have been trying to reverse engineer a game for a while now. I have a pattern already for the function I want to find:
\x89\x54\x24\x10\x4C\x89\x44\x24\x18\x4C
\x89\x4C\x24\x20\x48\x83\xEC\x28\x48\...
- 39
1
vote
1
answer
753
views
Is there a way to find the implementation of methods with MethodImplOptions.InternalCall attribute?
Background:
The Unity engine provides a number of PlayerPrefs.SetXxx functions that can be used to save user data. However, it will automatically append a hash to the name of what you saved. For ...
- 163
0
votes
1
answer
229
views
Stuck in finding the algorithm of a save game file CRC/checksum
A sample message-CRC pair looks like this:
00000005 00000000 12121212 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 2F8376FE
...
0
votes
1
answer
581
views
Windows User Identification / HWID Limiting
I've been playing a game that has an HWID limit and a bunch of other limitations, such as:
a) Cannot be ran in a VM
b) Cannot be ran using Sandboxie and other Sandbox environments
c) Limits 3 ...
- 1
0
votes
1
answer
107
views
How to make sense of the pointer in reversed function call?
I have the code below, derived from the reversed function in the original application:
gladius::world::World::create(*(gladius::world::World**)(*(char*)(this + 0x5e8) + 0x50));
The create function ...
- 326
0
votes
1
answer
87
views
Modify main function for C++ game file
I am trying to modify the main function for a specific decompiled .exe. More specifically, I want to remove the reference to GUI from that .exe file, so that GUI doesn't get initialised on the startup ...
- 326
1
vote
0
answers
123
views
Unknown binary format (.scp) - No Header
I hope everyone is doing well. I've recently been trying to decode the structure of some files that contain a lot Unicode-8 IIRC characters, with a mix of binary. When I put it into IDA, I can't seem ...
- 11
0
votes
1
answer
500
views
How can I get the correct offset from that instruction?
I have the following instructions:
The registers' values in the First instruction are:
RAX=0000000033307EE0
RCX=0000000000000000
The registers' values in the Second instruction are:
RAX=...
- 269
0
votes
0
answers
285
views
How can I get a value from a memory address that changes almost every millisecond?
After a lot of time, I found an address in the memory that has the target value but there is something unusual in that address! that address changes every millisecond.
ScreenShot:
I did a hardware ...
- 269
2
votes
1
answer
253
views
Retrieve user data as if it were the game making the request
Don't think the title really summed it up but here goes.
There's a game built in Unreal Engine 4 that displays your (and other users) in-game statistics e.g a leaderboards page.
I can determine some ...
- 21
1
vote
0
answers
100
views
Reverse Engineering SNES adapter
A good "Hello world" for everybody here
I've bought a Mayflash PC052 adapter to convert an original SNES-mini controller (CLV-202) to a USB port on PC or PS4...
The thing is, this CLV-202 ...
- 11
2
votes
0
answers
207
views
How can I extract working files (in the form of graphics) from these MZP executables?
There's a 1999 PC/Mac game that I'm hoping to extract assets from. All game data appears to be stored in various files with the extension .rsc. I've been able to extract all the game's audio from the ...
- 21
0
votes
1
answer
186
views
How do I find missing/undefined vtable functions in IDA64?
I'm reverse engineering a game and came across some function calls like the ones shown below, how do I find where these functions are located / decompile them?
(*(BaseClient->int640 + 304))(...
- 11
2
votes
0
answers
193
views
Reverse engineering PS2 Naruto 3D Model Format
As a personal project, I've been trying to reverse engineer the model for a Naruto PS2 game, but to no success in trying to visualize vertex data and faces with Model Ressearcher, and the .OBJ ...
0
votes
0
answers
92
views
finding a not-so-straightforward game's function
I am working on Mad Max game [ APEX engine ]
I do my best to explain the situation.
so my target executes function like this:
there are commands like " call [eax+XX] " or " call RX &...
- 51
2
votes
1
answer
424
views
Reverse Engineering API's of Browser games
I like the idea of Reverse Engineering API's and creating bots/scripts for Browser games. However, I am a beginner in the Computer Science field. I recently started my Computer Science Degree and ...
- 21
1
vote
0
answers
97
views
Restoring online functionality of an obsucure Korean PS2 horror game
Last year I posted for help in order to reverse-engineer and translate a Korean exclusive Horror game for the Playstation 2 called Mystic Nights. Here is the Original Post.
Thanks to the kind folks ...
- 43