This is a port of ReClass to the .NET platform with lots of additional features.
- Support for x86 / x64
- File import from ReClass 2007-2016 and ReClass QT
- Memory Nodes
- Automatic Node Dissection
- Highlight changed memory
- Pointer Preview
- Copy / Paste Support across ReClass.NET instances
- Display types from Debug Symbols (*.pdb)
- Display Runtime Type Informations (RTTI)
- Control the remote process: start / stop / kill
- Process Selection Dialog with filtering
- Memory Viewer
- Memory Scanner
- Import files from Cheat Engine and CrySearch
- Scan for values correlated to your input
- Class address calculator
- Code Generator (C++ / C#)
- Module / Section Dumper
- Linux Support (tested on Ubuntu 18.04)
- Debugger with "Find out what writes/accesses this address" support
- Plugin Support
- Plugins can be written in different languages (example: C++, C++/CLI, C#)
- Plugins can provide custom methods to access an other process (example: use a driver)
- Plugins can interact with the ReClass.NET windows
- Plugins can provide node infos which will be displayed (example: class informations for Frostbite games)
- Plugins can implement custom nodes with load/save and code generation support
- Sample Plugins
- Frostbite Plugin
- MemoryPipe Plugin
- LoadBinary Plugin
- Handle Abuser Plugin
- Unreal Plugin (not available anymore) (by DrP3pp3r)
- DriverReader (by Niemand)
To install a plugin just copy it in the "Plugins" folder. If you want to develop your own plugin just learn from the code of the Sample Plugins and Frostbite Plugin repositories. If you have developed a nice plugin, leave me a message and I will add it to the list above.
Just download the latest version and start the x86 / x64 version or let the launcher decide.
-
Lots of elements have a context menu. Just right-click it and see what you can do there.
-
The node window can be controlled with the keyboard too. Arrow keys can select other keys, combined with the shift key the nodes get selected. The menu key opens the context menu which itself can be controlled with the keyboard.
-
The memory address field of a class can contain a real formula not just a fixed address.
<Program.exe> + 0x123 will use the base address of Program.exe and add 0x123 to it.
[0x4012ABDE] will read the integer (4 byte on x86 / 8 byte on x64) from the address 0x4012ABDE and use this value as class address.
[<Program.exe> + 0xDE] - AB will use the base address of Program.exe, add 0xDE to it, read the value from this address and finally sub 0xAB from it.
[<Program.exe> + offset + [<Program.exe> + offset2]] Nested operations are supported too.Valid operations are read ([..]), add (+), sub (-), mul (*) and div (/). Please note that all operations are integer calculations.
If you want to compile ReClass.NET just fork the repository and open the ReClass.NET.sln file with Visual Studio 2019. Compile the project and copy the dependencies to the output folder.
To compile the linux native core library, you need WSL installed and configured. If you do not need linux support, simply unload the project in the Solution Explorer. If you want to build cross-platform (x86/x64) you have to install g++-multilib
too.
If you use the Makefile
with docker
or podman
you have to build the needed image gcc_multilib
from the following Dockerfile
(docker build -t gcc_multi .
):
FROM ubuntu:latest
RUN apt-get update \
&& apt-get install --assume-yes --no-install-recommends --quiet \
make \
g++ \
g++-multilib \
&& apt-get clean all
- KN4CK3R
- DrUnKeN ChEeTaH
- P47R!CK
- DogMatt
- ajkhoury
- IChooseYou
- stevemk14ebr
- Timboy67678
- DarthTon
- ReUnioN
- leveln
- buddyfavors
- DrP3pp3r
- ko1N
- Niemand (see his talk at BlackHat Europe 2019 (London) "Unveiling the underground world of Anti-Cheats")