Quote:
Originally Posted by Izeliae
is there a way to use the game's connection to test things in-game??
it might make trial and error go by a lot faster.
|
Well it is also easier when you trace a function to the send packet. Then back trace a bit to what the information is.
Like this segment right here.
Code:
00632B0D /. 55 PUSH EBP
00632B0E |. 8BEC MOV EBP,ESP
00632B10 |. 83EC 14 SUB ESP,14
00632B13 |. A1 3CC1C200 MOV EAX,DWORD PTR DS:[C2C13C]
00632B18 |. 8365 F0 00 AND [LOCAL.4],0
00632B1C |. 8945 F6 MOV DWORD PTR SS:[EBP-A],EAX
00632B1F |. 66:A1 30C1C200 MOV AX,WORD PTR DS:[C2C130]
00632B25 |. 66:8945 FA MOV WORD PTR SS:[EBP-6],AX
00632B29 |. A0 48C1C200 MOV AL,BYTE PTR DS:[C2C148]
00632B2E |. 8845 FC MOV BYTE PTR SS:[EBP-4],AL
00632B31 |. A0 4CC1C200 MOV AL,BYTE PTR DS:[C2C14C]
00632B36 |. 56 PUSH ESI
00632B37 |. 8B35 14BEC500 MOV ESI,DWORD PTR DS:[C5BE14]
00632B3D |. 8845 FD MOV BYTE PTR SS:[EBP-3],AL
00632B40 |. 6A 12 PUSH 12 ; /Arg2 = 00000012
00632B42 |. 8D45 EC LEA EAX,[LOCAL.5] ; |
00632B45 |. 50 PUSH EAX ; |Arg1 = 000005FB
00632B46 |. 66:C745 EC E2B7 MOV WORD PTR SS:[EBP-14],0B7E2 ; |Packet Head
00632B4C |. 66:C745 F4 3601 MOV WORD PTR SS:[EBP-C],136 ; |Packet ID
00632B52 |. 66:C745 EE 1200 MOV WORD PTR SS:[EBP-12],12 ; |Packet Size
00632B58 |. E8 8F9BDFFF CALL CabalMai.0042C6EC ; Encrypt Show Off Skill packet
00632B5D |. 8B0D 14BEC500 MOV ECX,DWORD PTR DS:[C5BE14] ; PacketInfo (Look at cabot source)
00632B63 |. E8 B39BDFFF CALL CabalMai.0042C71B ; Send Show Off Skill packet
00632B68 |. 5E POP ESI
00632B69 |. C9 LEAVE
00632B6A . C3 RETN
You can easily see what is being set, you back trace a bit more and find out exactly what everything is.