detect in game function calls

[stunthacker]

Hello i need to know what is de best way to detect when a funciton gets called inside the game client is there a better way than using detour, hope for answers thanks

[buFFy!]

Breakpoints and VEH Hooks are good alternatives. But i don't recommend to use it on often called functions, cuz it can cause a huge performance lack. Rather make your detour undetected.

Edit: You can also check the stack if you just want to know whether it was called

[mgX]

Originally Posted by u-coRe

Breakpoints and VEH Hooks are good alternatives. But i don't recommend to use it on often called functions, cuz it can cause a huge performance lack. Rather make your detour undetected.

Edit: You can also check the stack if you just want to know whether it was called

Yarr, cuz monitoring every threadstack wont hurt performance?

Detour the **** out of it is your best bet tbh

[MrSm!th]

you can used modified detours for example (warning: assembler!):

clc
jnc

or

stc
jc

instead of simple jmp

same effect, but it doesnt include the byte E9 (which is the only byte checked by most anti cheats)

or you could try to hook at an offset. dont hook exactly at the function address, but try function address + 5 or +7 or something like that (you just have to make sure that you dont overwrite a part of an instruction; use this between other instructions only, otherwise it will cause invalid opcodes and crashes ;O)