find-function

Name: find-function
Availability: InStock
Author: vzco

Locate target functions in running processes via strings, RTTI, or behavior.

15|4|Updated Mar 7, 2026

Search Tags:#function #find #breakpoints #signature #disassembly #rtti #pattern-scan

Ready to run

npx skills add https://github.com/vzco/arc-probe --skill find-function

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: find-function
Source: https://github.com/vzco/arc-probe/tree/main/plugins/arc-probe/skills/find-function
Command: npx skills add https://github.com/vzco/arc-probe --skill find-function

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill locates a specific function inside a target process by analyzing behavior, string references, RTTI, or hardware breakpoints.

Core Features & Use Cases

Multiple search strategies: string-based, RTTI-based, and behavior-based searches to identify function boundaries.
Disassembly and verification: disassemble surrounding code, verify references, and generate a robust function signature for future reuse.
Use Case: In a game or application, find the function responsible for handling input or damage by following strings or RTTI to locate the function address.

Quick Start

Provide a natural language description of the function you want to locate and the tool will begin the search.

Frequently Asked Questions about find-function

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I find a function in a running process by behavior or string references?▼

You can find a function in a running process by utilizing string-based searches, RTTI traversal, behavior-driven analysis, and hardware breakpoints to identify function boundaries and verify references through disassembly.

What is RTTI-based symbol discovery for locating function addresses?▼

RTTI-based symbol discovery is a technique that traverses Run-Time Type Information to locate specific function addresses inside a target process, allowing you to identify functions when standard symbols are unavailable.

Can I generate a function signature for robust re-identification after pattern scanning?▼

Yes, after using pattern scanning and disassembly to locate and verify a target function, the tool can generate and test a robust function signature to ensure reliable re-identification in future sessions.

Does this approach support behavior-driven analysis across multiple modules?▼

Yes, behavior-driven analysis is supported across modules, allowing you to locate specific functions like input or damage handlers by observing execution behavior and verifying findings through code disassembly.

What is the best way to locate a game function responsible for handling input?▼

The best way to locate a game input handler is by providing a natural language description of the function, which triggers string or RTTI searches and hardware breakpoints to pinpoint the function address.

How do I verify function boundaries after finding a target address in disassembly?▼

You verify function boundaries by disassembling the surrounding code, checking string references, and analyzing execution behavior to confirm the identified address matches the target function.