search

Fireboyd78 / native-gen

Tool for generating IDA scripts to aid in reverse-engineering of GTA 5.
10 stars 4 forks source link

How to get RegisterNative address? #2

Open MaxKade opened 8 years ago

MaxKade commented 8 years ago

I'm currently trying to use your IDA script to make a dump but I can't get it to work. I've dumped GTA5 from memory using x64dbg, loaded it in IDA but there is no such address (0x14072FBB0) so script does nothing. How to get this address? Thank you in advance.

Fireboyd78 commented 8 years ago

@Zorg93 Any ideas? I don't know the slightest about this stuff.

njames93 commented 8 years ago

Unsure what he is wanting, to find the address of a native in a specific game version(probably latest)

Fireboyd78 commented 8 years ago

You know the RegisterNative address that gets called during the "NativeReg_XXX" stuff? He's trying to find it in (presumably) the latest build of GTA 5. Doesn't it get removed after all natives are registered?

njames93 commented 8 years ago

You have to breakpoint the RegisterNative funcition(the one thats called inside NativeReg_XXX functions). Then when that breakpoint is hit you can dump the module and it should have the hashes w/addresses, but R* tried their hardest to hide it even still