View previous topic :: View next topic |
Author |
Message |
GenericDM How do I cheat? Reputation: 0
Joined: 01 Apr 2018 Posts: 8
|
Posted: Sat Apr 21, 2018 3:42 pm Post subject: Searching for a function |
|
|
I'm looking for a referenced function in a game and I know the general memory area it's in, but I can't figure out how or if there's a way to searched for referenced functions in only one area of memory. A way to do that would be helpful if anyone knows how.
|
|
Back to top |
|
|
FreeER Grandmaster Cheater Supreme Reputation: 53
Joined: 09 Aug 2013 Posts: 1091
|
Posted: Sat Apr 21, 2018 6:59 pm Post subject: |
|
|
Lua has Code: | DissectCode class: (Inheritance: Object)
getDissectCode() : Creates or returns the current code DissectCode object
properties:
methods:
clear() : Clears all data
dissect(modulename) : Dissects the memory of a module
dissect(base,size) : Dissect the specified memory region
addReference(fromAddress, ToAddress, type, OPTIONAL isstring):
Adds a reference. Type can be jtCall, jtUnconditional, jtConditional, jtMemory
In case of jtMemory setting isstring to true will add it to the referenced strings list
deleteReference(fromAddress, ToAddress)
getReferences(address) : Returns a table containing the addresses that reference this address and the type
getReferencedStrings(): Returns a table of addresses and their strings that have been referenced. Use getReferences to find out which addresses that are
getReferencedFunctions(): Returns a table of functions that have been referenced. Use getReferences to find out which callers that are
saveToFile(filename)
loadFromFile(filename)
|
so presumably you could use something like this in the lua engine window
Code: | local dc = getDissectCode()
dc.saveToFile('savedDissect.dc') -- save whatever exists
dc.clear()
dc.dissect(base, size)
--dc.loadFromFile('savedDissect.dc') |
_________________
|
|
Back to top |
|
|
GenericDM How do I cheat? Reputation: 0
Joined: 01 Apr 2018 Posts: 8
|
Posted: Sat Apr 21, 2018 7:32 pm Post subject: |
|
|
Thank you! I will see if this works in a little while
|
|
Back to top |
|
|
|