Function reversing

[Hatz~]

So i've been trying to improve my function reversing skill and i was following this tutorial and trying to apply it to nostale:

 Spoiler

According to the tutorial you can find game functions by tracing back the winsock send function but when i was trying it with nostale it seems like the functions that call the send function is something like a tick counter and it's being called everytime so it's impossible for me to trace it back. Is it because nostale works different or maybe the game function is called after the winsock send function? To find functions i usually use CE, look for some value on the structure that i think is being used by a function and try to trace it back.

[WalrossGreat]

Why do you want to trace winsock function if you already got the address of "packet send" function? Unless you want to reverse the nostale packet crypto, but it doesn't sound like it's your goal.

[Hatz~]

I don't want to reverse the nostale packet crypto, i just want to reverse other functions that i'm struggling to find.

According to the tutorial you can find other functions like "say" function or "walk" function by tracing back the winsock send function. So I tried it and as i said i ended up on a function that's something like a tick counter and I got very confused since it seems very easy in the tutorial.

Should i just trace back the packet send function?

[WalrossGreat]

Yes. There is no point tracing the winsock function as it will eventually lead you to the send packet function anyway. However the whole method doesn't look good, for example you won't find the "walk" function using this method, only that one that sends the "walk" packet (they are not the same)

[Hatz~]

Ok thank you very much, you are always so helpfull