altdumper

Simple, fully external, smart, fast, JSON-configurated, feature-rich Windows x86 DLL Memory Dumper with Code Generation. Written in Modern C++.

Features

• Fully external (Binary based)

  Details

  • You're not required to run any program other than altdumper to generate your values from a config. You just need according binaries.

• Code generation

  Details

  • Your config output automatically generates to valid, no-cost (compile-time) variables.
  • This component can be used independently.

  ---

  • Currently supported languages are:
    • C++

  ---

• JSON-configurated

  Details

  • The inputs are very human friendly (meaning, you can edit your configs by hand) and ideal for usage on a server.
  • This also makes it pretty portable, without any official support for editing, as it is incredibly intuitive.

• Fully user assisting

  Details

  • You will be walked through both the process of generating a JSON configuration for making, and throughout inputting it. The process is a dialogue, and you'll have file/folder prompts when required, name inputting when required, value inputting when required, and you'll also have instructions at hand, in the CLI.

• Multi-threaded

  Details

  • The processing of every individual DLL is spanned across their own thread.

• Pattern scanning

  Details

  ---

  • Keep in mind: Scanning here is done only throughout the .text section.

  ---

  Prompts you to input the following:

  • IDA-style string of pattern (example: "AA BB CC DD EE ? FF").
    • ? is the 'ignore mismatch' wildcard.
  • N-th instance of pattern (given it repeats).
    • Default value is 0 (first one).
  • Padding (from first pattern byte).
  • Dereferences (from pattern start + padding).

• String-search scanning

  Details

  Prompts you to input the following:

  • String to find in .rdata. Input is null terminated.
  • Section where to scan for the references.
  • Reference instance (N-th reference in .text of the address where our string is stored).
  • Padding (to skip over reference pointer, you would input 4).
  • Dereferencing (from padding).

• Procedure scannign

  Details

  Prompts you to input the following:

  • Export procedure name.

• Misc scanning

  Details

  • ConVar scanning

    Prompts you to input the following:

    • Name of ConVar.
    • Whether is it server bounded or not (to deduce the constructor).
      • A server-bounded ConVar example is: cl_cmdrate.
      • A non-server-boudned ConVar example is: r_aspectratio.

Example config (CS:GO)

• You'll have to change the DLL paths by hand, currently, if you want to use this, or any other config that you didn't configure! There is currently no 'edit' mode, anywho, it shouldn't be an issue.

{
  "D:\\SteamLibrary\\steamapps\\common\\Counter-Strike Global Offensive\\bin\\engine.dll": {
    "convars": {
      "pp_cmdrate_cvar": {
        "name": "cl_cmdrate",
        "server-bounded": true
      },
      "pp_aspect_ratio_cvar": {
        "name": "r_aspectratio",
        "server-bounded": false
      }
    },
    "procedures": {
      "p_create_interface": {
        "name": "CreateInterface"
      }
    },
    "signatures": {
      "p_global_vars": {
        "dereferences": 1,
        "nth-match": 0,
        "padding": 1,
        "signature": "68 ? ? ? ? FF 35 ? ? ? ? FF 10 8A"
      }
    },
    "string-search": {
      "p_engine_client": {
        "dereferences": 0,
        "padding": -8,
        "reference-instance": 0,
        "section": ".data",
        "string": "VEngineClient014"
      },
      "ppp_localize": {
        "dereferences": 0,
        "padding": -4,
        "reference-instance": 0,
        "section": ".data",
        "string": "Localize_001"
      }
    }
  }
}

License

WTFPL