skills.rest
vzco
vzcoOFFICIAL
Explore all skills by this author →
GitHub

find-function

Locate target functions in running processes via strings, RTTI, or behavior.

15|4|Updated Mar 7, 2026
Search Tags:#function#find#breakpoints#signature#disassembly#rtti#pattern-scan
One-click install
npx skills add https://github.com/vzco/arc-probe --skill find-function
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: find-function
Source: https://github.com/vzco/arc-probe/tree/main/plugins/arc-probe/skills/find-function
Command: npx skills add https://github.com/vzco/arc-probe --skill find-function

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill locates a specific function inside a target process by analyzing behavior, string references, RTTI, or hardware breakpoints.

Core Features & Use Cases

  • Multiple search strategies: string-based, RTTI-based, and behavior-based searches to identify function boundaries.
  • Disassembly and verification: disassemble surrounding code, verify references, and generate a robust function signature for future reuse.
  • Use Case: In a game or application, find the function responsible for handling input or damage by following strings or RTTI to locate the function address.

Quick Start

Provide a natural language description of the function you want to locate and the tool will begin the search.

Frequently Asked Questions about find-function

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find a function in a running process by behavior or string references?▼

You can find a function in a running process by utilizing string-based searches, RTTI traversal, behavior-driven analysis, and hardware breakpoints to identify function boundaries and verify references through disassembly.

What is RTTI-based symbol discovery for locating function addresses?▼

RTTI-based symbol discovery is a technique that traverses Run-Time Type Information to locate specific function addresses inside a target process, allowing you to identify functions when standard symbols are unavailable.

Can I generate a function signature for robust re-identification after pattern scanning?▼

Yes, after using pattern scanning and disassembly to locate and verify a target function, the tool can generate and test a robust function signature to ensure reliable re-identification in future sessions.

Does this approach support behavior-driven analysis across multiple modules?▼

Yes, behavior-driven analysis is supported across modules, allowing you to locate specific functions like input or damage handlers by observing execution behavior and verifying findings through code disassembly.

What is the best way to locate a game function responsible for handling input?▼

The best way to locate a game input handler is by providing a natural language description of the function, which triggers string or RTTI searches and hardware breakpoints to pinpoint the function address.

How do I verify function boundaries after finding a target address in disassembly?▼

You verify function boundaries by disassembling the surrounding code, checking string references, and analyzing execution behavior to confirm the identified address matches the target function.

Related Skills

Explore More Software Engineering Skills→
eaglhuangeaglhuang
3

ui-runtime-verify

Refresh Cocos asset-db, run UI validation scripts, and produce runtime-verdict artifacts.

Community
Intermediate
hzqsthzqst
60

find-Host_Say-AND-UTIL_SayTextFilter-AND-UTIL_SayTextFilter2

Identify and generate signatures for chat functions in CS2 server binaries using IDA Pro.

Community
Advanced
vzcovzco
15

trace-writes

Trace memory writes in x64 processes using hardware breakpoints and disassembly.

Official
Intermediate
2389-research2389-research
90

binary-re:static-analysis

Analyze binary structure and decompile functions with radare2 and Ghidra headless.

Official
Advanced