im trying to hook send/receive for some private server where it lunch using csv3 loader
after disabling client protections i didn't find the 4 send calls for ws2_32, so i've made a hw bp on the send function at ws2_32 to figure out who calls it
and this is what i found
at the stack it says return from csv3 to conquer , going there at the cpu to find out that it should call something at csv3 but instead it call the import table to call the send function at ws2_32
i honestly duno what's doing on, with common sense im guessing that loader should patch 2 things , first the socket to connect to the private server and the password crypto stuff but im so so confused about how to handle that
should i just hook the function after tracing it backward from ws2_32 and not caring about what csv3 loader do to the socket as there is no send functions at csv3 ?
notice : again i apologize for asking too many questions and not spending days trying but i badly need to save time :)
after disabling client protections i didn't find the 4 send calls for ws2_32, so i've made a hw bp on the send function at ws2_32 to figure out who calls it
and this is what i found
at the stack it says return from csv3 to conquer , going there at the cpu to find out that it should call something at csv3 but instead it call the import table to call the send function at ws2_32
i honestly duno what's doing on, with common sense im guessing that loader should patch 2 things , first the socket to connect to the private server and the password crypto stuff but im so so confused about how to handle that
should i just hook the function after tracing it backward from ws2_32 and not caring about what csv3 loader do to the socket as there is no send functions at csv3 ?
notice : again i apologize for asking too many questions and not spending days trying but i badly need to save time :)