/etc/hosts
file is at C:\Windows\System32\drivers\etc\hosts
.GameLogic.dll
and GameLogic.pdb
:GameLogic.dll
with Binja and select "Tools > PDB > Load" to load GameLogic.pdb
, which is a Program DataBase file that contains debugging information about GameLogic.dll
.master.pwn3
-> port 3333game.pwn3
-> port 3002Player
in the symbols, we find a Player::GetSprintMultiplier
function:0x10078b34
, we find a number 0x40400000
, which is 1077936128 in decimal:0x10078b34
00 e9 e4 75
in little-endian format. Why this number? Recall that 32-bit max signed int is 2147483647. Anything larger than it will be negative.