| View previous topic :: View next topic |
| Author |
Message |
fred26 Expert Cheater
Reputation: 0
Joined: 20 Dec 2014 Posts: 103
|
Posted: Fri Jan 20, 2017 8:22 pm Post subject: Export Undecorated Symbols |
|
|
Is there a way to copy to the clipboard or write to a file all the undecorated exported symbols of a specific DLL/EXE?
Cheat Engine retrieves them perfect vs: Dependecy Walker that does not for example.
Is it possible via Lua Script as well ?
Thanks
|
|
| Back to top |
|
 |
fred26 Expert Cheater
Reputation: 0
Joined: 20 Dec 2014 Posts: 103
|
Posted: Sat Jan 21, 2017 12:57 pm Post subject: |
|
|
| No one ? DarkByte?
|
|
| Back to top |
|
 |
Dark Byte Site Admin
Reputation: 471
Joined: 09 May 2003 Posts: 25818 Location: The netherlands
|
Posted: Sat Jan 21, 2017 1:29 pm Post subject: |
|
|
not by design.
but 'maybe' you can do a form create waych, then execute the onclick handler of view->enumerate dlls and symbols, watch that window till the cancel button is gone using a timer and then read out the treeview items of that form
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
 |
fred26 Expert Cheater
Reputation: 0
Joined: 20 Dec 2014 Posts: 103
|
Posted: Sat Jan 21, 2017 2:46 pm Post subject: |
|
|
Thanks Dark Byte.
One question is, the undecorated complete parameters names are shown (sometimes) on the Memory Viewer windows (sometimes it loads them and sometimes you need to wait until they appear - CE 6.4 64bit. Sometimes they do not show up either. You can see some comments also specifying eacch prometer associated with some registers).
What can you do to accelerated this process or to show these comments ?
Also when you copy and try to paste these, you looses some of the parameters names/types. Why ?
Thanks
|
|
| Back to top |
|
 |
fred26 Expert Cheater
Reputation: 0
Joined: 20 Dec 2014 Posts: 103
|
Posted: Sun Jan 22, 2017 4:18 am Post subject: |
|
|
Dark Byte, I downloaded CE 6.6 and decorated names populate very quickly, but can't copy them.
Is there a way I can get these with a tool ? Dependency walker does not show complete decoration on parameters.
May be another tool? I have the PDB of the exe available.
|
|
| Back to top |
|
 |
fred26 Expert Cheater
Reputation: 0
Joined: 20 Dec 2014 Posts: 103
|
Posted: Sun Jan 22, 2017 2:00 pm Post subject: |
|
|
Just an example:
The CE provides me the following:
get_object(GUID pList, void pCallbackData);
while Dependency Walker provides me:
get_object(GUID pList, void *);
Why CE provide more information? How can I retrieve this additional information?
|
|
| Back to top |
|
 |
fred26 Expert Cheater
Reputation: 0
Joined: 20 Dec 2014 Posts: 103
|
Posted: Mon Jan 23, 2017 4:14 pm Post subject: |
|
|
I solved this using PDB parsing.
Thanks
|
|
| Back to top |
|
 |
|