Strongleong/ScrapHacks
1
0
Fork 0
forked from ReScrap/ScrapHacks
Code Issues Pull requests Projects Releases Packages Wiki Activity
American McGee's Scrapland reversing and modding
84 commits 2 branches 0 tags 9.7 MiB
Python 52.7%
C++ 34.6%
JavaScript 5.3%
Rust 3.8%
CMake 2.9%
Other 0.7%
Find a file
Daniel Seiller 8d92f25b8c Lots of Updates (expand for more): 
- Started implementing new parser for chunked data
- Started documenting data formats
- Started dissector for network protocol
- Added AI-Graph renderer (converts .pth files to python data you can import into Blender)
- Added Script to convert savefile to JSON
- Added (old) parser for chunked data format
- Added basic parser for LFVF data section (Vertex Data)
- Added script to analyze and filter read trace generated with frida script
- Added various Frida scripts
2020-08-04 18:05:34 +02:00
.vscode Lots of changes (expand to read more) 2020-01-03 03:22:09 +01:00
file_formats Lots of Updates (expand for more): 2020-08-04 18:05:34 +02:00
frida Lots of Updates (expand for more): 2020-08-04 18:05:34 +02:00
ScrapHacks Lots of Updates (expand for more): 2020-08-04 18:05:34 +02:00
tools Lots of Updates (expand for more): 2020-08-04 18:05:34 +02:00
.gitignore Lots of Updates (expand for more): 2020-08-04 18:05:34 +02:00
config.yml Lots of Updates (expand for more): 2020-08-04 18:05:34 +02:00
helplib.txt Auto format everything 2019-09-02 21:44:17 +02:00
LICENSE Add LICENSE 2018-12-22 17:21:50 +00:00
NOTES.md Lots of Updates (expand for more): 2020-08-04 18:05:34 +02:00
r2_analyze.py Lots of Updates (expand for more): 2020-08-04 18:05:34 +02:00
README.md Lots of Updates (expand for more): 2020-08-04 18:05:34 +02:00

README.md

Scrapland Reverse Engineering notes and tools

Note!

All memory addresses are only valid for an unprotected Scrap.exe v1.0 with a SHA1 checksum of d2dde960e8eca69d60c2e39a439088b75f0c89fa , other version will crash if the memory offsets don't match and you try to inject ScrapHacks

Computer Bild Spiele Issue 2006/08 Contains a full version of the game which was used as the basis for this project

Scripts

  • tools/rbingrep.py: Search for pattern in all files and generate radare2 script to find all references (currently configured to search for chunked file section headers)
  • frida/: Scripts for use with Frida
  • parse_chunked.py: WIP Parser for the game's chunked data format (Models, Animations, Maps)
  • save_to_json.py: Convert game save to JSON
  • scrapper.py: Extractor and Repacker for *.packed files, needs the construct and tqdm python modules and python 3.x
  • Run scrapper.py -h for help
  • r2_analyze.py: uses radare2 to parse and label a lot of interesting stuff in the Scrap.exe binary
  • lib/dbg.py: general Script for poking around inside the game's scripting system
  • Run import dbg;dbg.init() inside the Game's Console, this will load all builtin modules, ScrapHacks and enable godmode
  • The dbg module also enables writing to the ingame console using print <var> and defines two global functions s_write() and e_write() for writing to the Ingame Console's Stdout and Stderr Stream
  • dbg.menu() Displays the Game's built in Debug Menu (doesn't work properly)
  • dbg.enable_all_conv() allows you to "overwrite" any character, even if they are protected/invulnerable
  • dbg.become(name) allows you to transform into any character
  • dbg.helplib() generates a file helplib.txt in the Game's folder containing all available Documentation for all available classes and functions
  • dbg.settrace() Logs all Python function calls together with their arguments into a dbg.txt file inside the Game's folder

ScrapHacks

WIP Memory hacking library

Notes

Tools used:

  • Binary parsing:
  • Static analysis:
  • Dynamic analysis:
    • x64dbg for dynamic analysis
    • Reclass.NET to analyze structures and classes in memory
    • Frida for tracing and instrumenting functions