优质游戏封包分析与优化：从识别到高效处理.pdfVIP

son1:Understanding

Packets

1.Understandtheserverand

client

SendWSASendsendto

2.Understandtherelationshipweenpacketcalland

functioncall.

3.Understandthefunctionofpacket

call.

A.Improveefficiencyandreducethechance

oferrors.B.Implementsomeslightly

abnormalfunctions.C.Implementsome

functionsthataredifficulttoimplement.D.

Dropofflinequickly.(Sendingpackets

indiscriminately)

第二课识别明文封包call

一．为什么要用喊话来找明文发包:

喊话内容是我们在游戏内存中识别的＂明文＂．但其它功能

不可能会有什么明显的标志．如：打坐，发技能，即使你找到的是明

文封包，却无从识别．

喊话是喊＂11111aaaaa＂这样的数字或字母．这样即使有编

码不是常用的时候，也能识别．如果喊＂我是人＂这样的汉字的

话，编码不寻常是，就不认识了．

二．对比出明文封包call:

喊话技能吃药

明文封包

Breakpoints

地址模块激活反汇编

注释

00576BEBelementc始终callelementc.0077E910

0077EA7Delementc始终callelementc.0077A910

三．对比出明文封包call:

现在游戏发包的类型：＂流线型＂，＂线程循环型＂．

son2:Identifyingintext

packetscall

1.Whydoweneedtousepropagandatofind

cleartexttoissuecontracts:

Thecontentoftheshoutingisthecleartextthatwecan

bestidentifyinthegamememory.Butotherfunctionsmaynot

haveanyobvioussigns.Forexample:meditating,sendingskills,

evenifyoufindacleartextpacket,youcannotidentifyit.

Itisbesttoshoutnumbersorletterslike11111aaaaa.I

nthisway,evenifthecodeisnotcommonlyused,itcanbe

recognized.IfyoushoutcharacterslikeIam

,thecodeisunusualandyouwillnotrecognizeit.

2.Comparetheintextpacketc

all:

喊话技能