Results 1 to 2 of 2
  1. #1
    Bloapie
    Bloapie is offline
    Guest
    Join Date
    2010 Oct
    Posts
    2
    Thanks Thanks Given 
    1
    Thanks Thanks Received 
    0
    Thanked in
    0 Posts
    Rep Power
    0

    Question about tracing source code to memory

    So I've been trying to figure out how this guy - http://opiumtest.blogspot.com/2010/08/h ... d-god.html - traced the cheat handler function from the source code to the memory. He looked at the source code and found the function that handles cheaters. I get that part. I also know how to NOP stuff in the memory using a hex editor. But how do you figure out where a specific portion of the code is in the memory?

    Another related question: he said he "replaced the get damage_ property with a different one in the code." These aren't variables you know the value of in the game, so you can't just do a simple search in the memory for these values. How did he manage to find this stuff in the memory?

    Here's a link to the game: http://www.realmofthemadgod.com/

  2. #2
    Dwar
    Dwar is offline
    Veteran Dwar's Avatar
    Join Date
    2010 Mar
    Posts
    2,222
    Thanks Thanks Given 
    211
    Thanks Thanks Received 
    2,230
    Thanked in
    292 Posts
    Rep Power
    10

    Re: Question about tracing source code to memory

    But how do you figure out where a specific portion of the code is in the memory?
    SWF decompiler tells you all what you need.
    "Raw data" can show not only decompiled string (e.g. function names), but also binary data as-is. Example:


    Now you know that the "_as3_iftrue offset: 6" is "11 06 00 00". Next, use "array of byte" search in CE.


    (I found another function, but it's clear as example)
    Please, post your questions on forum, not by PM or mail

    I spend my time, so please pay a little bit of your time to keep world in equilibrium

  3. The Following User Says Thank You to Dwar For This Useful Post:


Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •