Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

No response #2

Open
CorsDev opened this issue Oct 3, 2018 · 3 comments
Open

No response #2

CorsDev opened this issue Oct 3, 2018 · 3 comments

Comments

@CorsDev
Copy link

CorsDev commented Oct 3, 2018

Hi, when i try to inject the dll and try to listen to the port 7000 I do not get any kind of data.
I tried use the debug version that should print the data on cmd and it doesn't show anything.
It's strange since I do not get any kind of error so the Invoke function should have been found.

@CorsDev
Copy link
Author

CorsDev commented Oct 3, 2018

Can you explain me how does the hook work and what do you do in order to find the functions fingerprint?

@CorsDev
Copy link
Author

CorsDev commented Oct 3, 2018

Ok, i found out that it hangs on the first loop that searches the INVOKE function.

for (int i = 0; i < text_section_size - sizeof(INVOKE_FINGERPRINT); i++){

		cout << i << "\n"; //it does print just 0 so I think the problem is the memcmp function

		if (0 == memcmp(reinterpret_cast<void*>(text_section + i), &INVOKE_FINGERPRINT[0], sizeof(INVOKE_FINGERPRINT))){
			invoke_address = (LPVOID)(text_section + i);
		}
	}

@Matviy
Copy link
Owner

Matviy commented Nov 8, 2018

Hi TheStraing, sorry for the late response.

The function fingerprint is found by breaking somewhere inside the Invoke() function and going backwards in the callstack until you get back into the main binary. Finding the function in the first place can be tricky.

Riot has made lots of changes to the client, and have quite likely removed ScaleForm at this point, though I have not checked. Which means that the Invole() function is no longer present.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants