Addy Dumper in C# (44 addresses)

https://media.discordapp.net/attachments/773068882520309794/815171369192652821/unknown.png

Yes daddy DeepPain.

Hi ok I made an external address dumper in C# that dumps 44 addresses and calling conventions. Not the most impressive, but it's....something. Scanning time is around 8 seconds (Could do with some optimization. The dumper is also obfuscated).

Example results:

Scanning RBX version-23850bffd15b4a88...

deserialize         : 0x13A2E10 __cdecl
index2adr           : 0x13974D0 __cdecl
lua_getfield        : 0x1397AA0 __cdecl
lua_setfield        : 0x1398F60 __cdecl
lua_getfenv         : 0x1397A00 __cdecl
lua_settop          : 0x1399280 __stdcall
lua_setfenv         : 0x1398E90 __cdecl
lua_setsafeenv      : 0x1399190 __stdcall
lua_createtable     : 0x1397790 __fastcall
lua_rawvalue        : 0x1397580 __stdcall
lua_getmetatable    : 0x1397B50 __cdecl
lua_setmetatable    : 0x1399010 __cdecl
lua_gettable        : 0x1397C10 __cdecl
lua_getupvalue      : 0x1397CA0 __cdecl
lua_setupvalue      : 0x1399300 __thiscall
lua_insert          : 0x1397D30 __cdecl
lua_isuserdata      : 0x1397DB0 __stdcall
lua_iscfunction     : 0x1397E00 __stdcall
lua_isnumber        : 0x1397E50 __cdecl
lua_isstring        : 0x1397EB0 __cdecl
lua_lessthan        : 0x1397F00 __cdecl
lua_next            : 0x13980C0 __cdecl
lua_objlen          : 0x1398150 __cdecl
lua_pcall           : 0x1398230 __cdecl
lua_pushvalue       : 0x13987E0 __cdecl
lua_rawequal        : 0x1398930 __fastcall
lua_rawget          : 0x13989B0 __fastcall
lua_rawgeti         : 0x1398AE0 __cdecl
lua_rawset          : 0x1398B60 __cdecl
lua_rawseti         : 0x1398C30 __cdecl
lua_remove          : 0x1398D00 __cdecl
lua_replace         : 0x1398D90 __cdecl
lua_setreadonly     : 0x1399120 __stdcall
lua_settable        : 0x1399200 __stdcall
lua_toboolean       : 0x13993B0 __cdecl
lua_tointeger       : 0x1399400 __cdecl
lua_tolstring       : 0x1399480 __stdcall
lua_tonumber        : 0x13995B0 __cdecl
lua_topointer       : 0x1399630 __cdecl
lua_tostring        : 0x13996F0 __cdecl
lua_tothread        : 0x1399770 __cdecl
lua_tounsignedx     : 0x13997B0 __cdecl
lua_touserdata      : 0x1399840 __cdecl
lua_type            : 0x1399930 __cdecl

Done. Dumped 44 addresses.

2 eyestep threads in one day? Yes. (some calling conventions aren't correct sadly :c)

Download

Virustotal

--For mods--

Hybrid Analysis
AnyRun