private static bool Init(byte[] il2cppBytes, byte[] metadataBytes, string stringVersion, int mode, out Metadata metadata, out Il2Cpp il2Cpp) { var sanity = BitConverter.ToUInt32(metadataBytes, 0); if (sanity != 0xFAB11BAF) { throw new Exception("ERROR: Metadata file supplied is not valid metadata file."); } float fixedMetadataVersion; var metadataVersion = BitConverter.ToInt32(metadataBytes, 4); if (metadataVersion == 24) { if (stringVersion == null) { Console.WriteLine("Input Unity version: "); stringVersion = Console.ReadLine(); } try { var versionSplit = Array.ConvertAll(Regex.Replace(stringVersion, @"\D", ".").Split(new[] { "." }, StringSplitOptions.RemoveEmptyEntries), int.Parse); var unityVersion = new Version(versionSplit[0], versionSplit[1]); if (unityVersion >= Unity20191) { fixedMetadataVersion = 24.2f; } else if (unityVersion >= Unity20183) { fixedMetadataVersion = 24.1f; } else { fixedMetadataVersion = metadataVersion; } } catch { throw new Exception("You must enter the correct Unity version number"); } } else { fixedMetadataVersion = metadataVersion; } Console.WriteLine("Initializing metadata..."); metadata = new Metadata(new MemoryStream(metadataBytes), fixedMetadataVersion); //判断il2cpp的magic var il2cppMagic = BitConverter.ToUInt32(il2cppBytes, 0); var isElf = false; var isPE = false; var is64bit = false; var isNSO = false; switch (il2cppMagic) { default: throw new Exception("ERROR: il2cpp file not supported."); case 0x304F534E: isNSO = true; is64bit = true; break; case 0x905A4D: //PE isPE = true; break; case 0x464c457f: //ELF isElf = true; if (il2cppBytes[4] == 2) //ELF64 { is64bit = true; } break; case 0xCAFEBABE: //FAT Mach-O case 0xBEBAFECA: var machofat = new MachoFat(new MemoryStream(il2cppBytes)); Console.Write("Select Platform: "); for (var i = 0; i < machofat.fats.Length; i++) { var fat = machofat.fats[i]; Console.Write(fat.magic == 0xFEEDFACF ? $"{i + 1}.64bit " : $"{i + 1}.32bit "); } Console.WriteLine(); var key = Console.ReadKey(true); var index = int.Parse(key.KeyChar.ToString()) - 1; var magic = machofat.fats[index % 2].magic; il2cppBytes = machofat.GetMacho(index % 2); if (magic == 0xFEEDFACF) { goto case 0xFEEDFACF; } else { goto case 0xFEEDFACE; } case 0xFEEDFACF: // 64bit Mach-O is64bit = true; break; case 0xFEEDFACE: // 32bit Mach-O break; } var version = config.ForceIl2CppVersion ? config.ForceVersion : metadata.version; Console.WriteLine("Initializing il2cpp file..."); if (isNSO) { var nso = new NSO(new MemoryStream(il2cppBytes), version, metadata.maxMetadataUsages); il2Cpp = nso.UnCompress(); } else if (isPE) { il2Cpp = new PE(new MemoryStream(il2cppBytes), version, metadata.maxMetadataUsages); } else if (isElf) { if (is64bit) { il2Cpp = new Elf64(new MemoryStream(il2cppBytes), version, metadata.maxMetadataUsages); } else { il2Cpp = new Elf(new MemoryStream(il2cppBytes), version, metadata.maxMetadataUsages); } } else if (is64bit) { il2Cpp = new Macho64(new MemoryStream(il2cppBytes), version, metadata.maxMetadataUsages); } else { il2Cpp = new Macho(new MemoryStream(il2cppBytes), version, metadata.maxMetadataUsages); } if (mode == 0) { Console.WriteLine("Select Mode: 1.Manual 2.Auto 3.Auto(Plus) 4.Auto(Symbol)"); var modeKey = Console.ReadKey(true); mode = int.Parse(modeKey.KeyChar.ToString()); } if (mode != 1) { Console.WriteLine("Searching..."); } try { bool flag; switch (mode) { case 1: //Manual Console.Write("Input CodeRegistration: "); var codeRegistration = Convert.ToUInt64(Console.ReadLine(), 16); Console.Write("Input MetadataRegistration: "); var metadataRegistration = Convert.ToUInt64(Console.ReadLine(), 16); il2Cpp.Init(codeRegistration, metadataRegistration); flag = true; break; case 2: //Auto flag = il2Cpp.Search(); break; case 3: //Auto(Plus) flag = il2Cpp.PlusSearch(metadata.methodDefs.Count(x => x.methodIndex >= 0), metadata.typeDefs.Length); break; case 4: //Auto(Symbol) flag = il2Cpp.SymbolSearch(); break; default: Console.WriteLine("ERROR: You have to choose a mode."); return(false); } if (!flag) { throw new Exception(); } } catch { throw new Exception("ERROR: Can't use this mode to process file, try another mode."); } return(true); }
public IL2CppDump(Stream il2cppStream, Stream metaStream, Config config = null) { metadata = new Metadata(metaStream); this.config = config ?? new Config(); var buffer = new byte[5]; il2cppStream.Read(buffer, 0, 5); il2cppStream.Seek(0, SeekOrigin.Begin); int version = config.ForceIl2CppVersion ? config.ForceVersion : metadata.version; uint magic = BitConverter.ToUInt32(buffer, 0); checkMagic: switch (magic) { case PE: il2cpp = new PE(il2cppStream, version, metadata.maxMetadataUsages); break; case ELF: if (buffer[4] == 2) { il2cpp = new Elf64(il2cppStream, version, metadata.maxMetadataUsages); } else { il2cpp = new Elf(il2cppStream, version, metadata.maxMetadataUsages); } break; case FAT: case FAT_LE: var machofat = new MachoFat(il2cppStream); int index = 0; uint preferredMagic = 0; switch (this.config.PreferredMachoVersion) { case MachoVersion.Macho32: preferredMagic = MACHO_32; break; case MachoVersion.Macho64: preferredMagic = MACHO_64; break; } for (int i = 0; i < machofat.fats.Length; i++) { if (machofat.fats[i].magic == preferredMagic) { index = i; magic = preferredMagic; break; } } Stream fatStream = il2cppStream; il2cppStream = new MemoryStream(machofat.GetMacho(index)); fatStream.Close(); goto checkMagic; case MACHO_64: il2cpp = new Macho64(il2cppStream, version, metadata.maxMetadataUsages); break; case MACHO_32: il2cpp = new Macho(il2cppStream, version, metadata.maxMetadataUsages); break; default: throw new InvalidDataException("Unknown IL2Cpp binary format."); } }
private static bool Init(byte[] il2cppBytes, byte[] metadataBytes, out Metadata metadata, out Il2Cpp il2Cpp) { var sanity = BitConverter.ToUInt32(metadataBytes, 0); if (sanity != 0xFAB11BAF) { throw new InvalidDataException("ERROR: Metadata file supplied is not valid metadata file."); } Console.WriteLine("Initializing metadata..."); metadata = new Metadata(new MemoryStream(metadataBytes)); Console.WriteLine($"Metadata Version: {metadata.Version}"); //判断il2cpp的magic var il2cppMagic = BitConverter.ToUInt32(il2cppBytes, 0); var isElf = false; var isPE = false; var is64bit = false; var isNSO = false; switch (il2cppMagic) { default: throw new NotSupportedException("ERROR: il2cpp file not supported."); case 0x304F534E: isNSO = true; is64bit = true; break; case 0x905A4D: //PE isPE = true; break; case 0x464c457f: //ELF isElf = true; if (il2cppBytes[4] == 2) //ELF64 { is64bit = true; } break; case 0xCAFEBABE: //FAT Mach-O case 0xBEBAFECA: var machofat = new MachoFat(new MemoryStream(il2cppBytes)); Console.Write("Select Platform: "); for (var i = 0; i < machofat.fats.Length; i++) { var fat = machofat.fats[i]; Console.Write(fat.magic == 0xFEEDFACF ? $"{i + 1}.64bit " : $"{i + 1}.32bit "); } Console.WriteLine(); var key = Console.ReadKey(true); var index = int.Parse(key.KeyChar.ToString()) - 1; var magic = machofat.fats[index % 2].magic; il2cppBytes = machofat.GetMacho(index % 2); if (magic == 0xFEEDFACF) { goto case 0xFEEDFACF; } else { goto case 0xFEEDFACE; } case 0xFEEDFACF: // 64bit Mach-O is64bit = true; break; case 0xFEEDFACE: // 32bit Mach-O break; } var version = config.ForceIl2CppVersion ? config.ForceVersion : metadata.Version; Console.WriteLine("Initializing il2cpp file..."); var il2CppMemory = new MemoryStream(il2cppBytes); if (isNSO) { var nso = new NSO(il2CppMemory, version, metadata.maxMetadataUsages); il2Cpp = nso.UnCompress(); } else if (isPE) { il2Cpp = new PE(il2CppMemory, version, metadata.maxMetadataUsages); } else if (isElf) { if (is64bit) { il2Cpp = new Elf64(il2CppMemory, version, metadata.maxMetadataUsages); } else { il2Cpp = new Elf(il2CppMemory, version, metadata.maxMetadataUsages); } } else if (is64bit) { il2Cpp = new Macho64(il2CppMemory, version, metadata.maxMetadataUsages); } else { il2Cpp = new Macho(il2CppMemory, version, metadata.maxMetadataUsages); } Console.WriteLine($"Il2Cpp Version: {il2Cpp.Version}"); Console.WriteLine("Searching..."); try { var flag = il2Cpp.PlusSearch(metadata.methodDefs.Count(x => x.methodIndex >= 0), metadata.typeDefs.Length); if (!flag) { flag = il2Cpp.Search(); } if (!flag) { flag = il2Cpp.SymbolSearch(); } if (!flag) { Console.WriteLine("ERROR: Can't use auto mode to process file, try manual mode."); Console.Write("Input CodeRegistration: "); var codeRegistration = Convert.ToUInt64(Console.ReadLine(), 16); Console.Write("Input MetadataRegistration: "); var metadataRegistration = Convert.ToUInt64(Console.ReadLine(), 16); il2Cpp.Init(codeRegistration, metadataRegistration); return(true); } } catch (Exception e) { Console.WriteLine(e); Console.WriteLine("ERROR: An error occurred while processing."); return(false); } return(true); }
static void Main(string[] args) { config = File.Exists("config.json") ? new JavaScriptSerializer().Deserialize <Config>(File.ReadAllText("config.json")) : new Config(); var ofd = new OpenFileDialog(); ofd.Filter = "ELF file or Mach-O file|*.*"; if (ofd.ShowDialog() == DialogResult.OK) { var il2cppfile = File.ReadAllBytes(ofd.FileName); ofd.Filter = "global-metadata|global-metadata.dat"; if (ofd.ShowDialog() == DialogResult.OK) { try { Console.WriteLine("Initializing..."); metadata = new Metadata(new MemoryStream(File.ReadAllBytes(ofd.FileName))); Console.Clear(); //判断il2cpp的magic var il2cppmagic = BitConverter.ToUInt32(il2cppfile, 0); var isElf = false; var is64bit = false; switch (il2cppmagic) { default: throw new Exception("ERROR: il2cpp file not supported."); case 0x464c457f: //ELF isElf = true; goto case 0xFEEDFACE; case 0xCAFEBABE: //FAT header case 0xBEBAFECA: var machofat = new MachoFat(new MemoryStream(il2cppfile)); Console.Write("Select Platform: "); for (var i = 0; i < machofat.fats.Length; i++) { var fat = machofat.fats[i]; if (fat.magic == 0xFEEDFACF) //64-bit mach object file { Console.Write($"{i + 1}.64bit "); } else { Console.Write($"{i + 1}.32bit "); } } Console.WriteLine(); var key = Console.ReadKey(true); var index = int.Parse(key.KeyChar.ToString()) - 1; var magic = machofat.fats[index].magic; il2cppfile = machofat.GetMacho(index); if (magic == 0xFEEDFACF) // 64-bit mach object file { goto case 0xFEEDFACF; } else { goto case 0xFEEDFACE; } case 0xFEEDFACF: // 64-bit mach object file is64bit = true; goto case 0xFEEDFACE; case 0xFEEDFACE: // 32-bit mach object file Console.WriteLine("Select Mode: 1.Manual 2.Auto 3.Auto(Advanced) 4.Auto(Plus)"); key = Console.ReadKey(true); var version = config.forceil2cppversion ? config.forceversion : metadata.version; switch (key.KeyChar) { case '2': case '3': case '4': if (isElf) { il2cpp = new Elf(new MemoryStream(il2cppfile), version, metadata.maxmetadataUsages); } else if (is64bit) { il2cpp = new Macho64(new MemoryStream(il2cppfile), version, metadata.maxmetadataUsages); } else { il2cpp = new Macho(new MemoryStream(il2cppfile), version, metadata.maxmetadataUsages); } try { if (key.KeyChar == '2' ? !il2cpp.Search() : key.KeyChar == '3' ? !il2cpp.AdvancedSearch(metadata.methodDefs.Count(x => x.methodIndex >= 0)) : !il2cpp.PlusSearch(metadata.methodDefs.Count(x => x.methodIndex >= 0), metadata.typeDefs.Length)) { throw new Exception(); } } catch { throw new Exception("ERROR: Unable to process file automatically, try to use other mode."); } break; case '1': { Console.Write("Input g_CodeRegistration: "); var codeRegistration = Convert.ToUInt64(Console.ReadLine(), 16); Console.Write("Input g_MetadataRegistration: "); var metadataRegistration = Convert.ToUInt64(Console.ReadLine(), 16); if (isElf) { il2cpp = new Elf(new MemoryStream(il2cppfile), codeRegistration, metadataRegistration, version, metadata.maxmetadataUsages); } else if (is64bit) { il2cpp = new Macho64(new MemoryStream(il2cppfile), codeRegistration, metadataRegistration, version, metadata.maxmetadataUsages); } else { il2cpp = new Macho(new MemoryStream(il2cppfile), codeRegistration, metadataRegistration, version, metadata.maxmetadataUsages); } break; } default: return; } var writer = new StreamWriter(new FileStream("dump.cs", FileMode.Create), new UTF8Encoding(false)); Console.WriteLine("Dumping..."); //Script var scriptwriter = new StreamWriter(new FileStream("script.py", FileMode.Create), new UTF8Encoding(false)); scriptwriter.WriteLine(Resource1.ida); //dump image; for (var imageIndex = 0; imageIndex < metadata.uiImageCount; imageIndex++) { var imageDef = metadata.imageDefs[imageIndex]; writer.Write($"// Image {imageIndex}: {metadata.GetStringFromIndex(imageDef.nameIndex)} - {imageDef.typeStart}\n"); } //dump type; for (var idx = 0; idx < metadata.uiNumTypes; ++idx) { try { var typeDef = metadata.typeDefs[idx]; var isStruct = false; var isEnum = false; var extends = new List <string>(); if (typeDef.parentIndex >= 0) { var parent = il2cpp.types[typeDef.parentIndex]; var parentname = GetTypeName(parent); if (parentname == "ValueType") { isStruct = true; } else if (parentname == "Enum") { isEnum = true; } else if (parentname != "object") { extends.Add(parentname); } } //implementedInterfaces if (typeDef.interfaces_count > 0) { for (int i = 0; i < typeDef.interfaces_count; i++) { var @interface = il2cpp.types[metadata.interfaceIndices[typeDef.interfacesStart + i]]; extends.Add(GetTypeName(@interface)); } } writer.Write($"\n// Namespace: {metadata.GetStringFromIndex(typeDef.namespaceIndex)}\n"); writer.Write(GetCustomAttribute(typeDef.customAttributeIndex)); if (config.dumpattribute && (typeDef.flags & TYPE_ATTRIBUTE_SERIALIZABLE) != 0) { writer.Write("[Serializable]\n"); } var visibility = typeDef.flags & TYPE_ATTRIBUTE_VISIBILITY_MASK; switch (visibility) { case TYPE_ATTRIBUTE_PUBLIC: case TYPE_ATTRIBUTE_NESTED_PUBLIC: writer.Write("public "); break; case TYPE_ATTRIBUTE_NOT_PUBLIC: case TYPE_ATTRIBUTE_NESTED_FAM_AND_ASSEM: case TYPE_ATTRIBUTE_NESTED_ASSEMBLY: writer.Write("internal "); break; case TYPE_ATTRIBUTE_NESTED_PRIVATE: writer.Write("private "); break; case TYPE_ATTRIBUTE_NESTED_FAMILY: writer.Write("protected "); break; case TYPE_ATTRIBUTE_NESTED_FAM_OR_ASSEM: writer.Write("protected internal "); break; } if ((typeDef.flags & TYPE_ATTRIBUTE_ABSTRACT) != 0 && (typeDef.flags & TYPE_ATTRIBUTE_SEALED) != 0) { writer.Write("static "); } else if ((typeDef.flags & TYPE_ATTRIBUTE_INTERFACE) == 0 && (typeDef.flags & TYPE_ATTRIBUTE_ABSTRACT) != 0) { writer.Write("abstract "); } else if (!isStruct && !isEnum && (typeDef.flags & TYPE_ATTRIBUTE_SEALED) != 0) { writer.Write("sealed "); } if ((typeDef.flags & TYPE_ATTRIBUTE_INTERFACE) != 0) { writer.Write("interface "); } else if (isStruct) { writer.Write("struct "); } else if (isEnum) { writer.Write("enum "); } else { writer.Write("class "); } writer.Write($"{metadata.GetStringFromIndex(typeDef.nameIndex)}"); if (extends.Count > 0) { writer.Write($" : {string.Join(", ", extends)}"); } writer.Write($" // TypeDefIndex: {idx}\n{{\n"); //dump field if (config.dumpfield && typeDef.field_count > 0) { writer.Write("\t// Fields\n"); var fieldEnd = typeDef.fieldStart + typeDef.field_count; for (var i = typeDef.fieldStart; i < fieldEnd; ++i) { //dump_field(i, idx, i - typeDef.fieldStart); var fieldDef = metadata.fieldDefs[i]; var fieldType = il2cpp.types[fieldDef.typeIndex]; var fieldDefault = metadata.GetFieldDefaultValueFromIndex(i); writer.Write(GetCustomAttribute(fieldDef.customAttributeIndex, "\t")); writer.Write("\t"); var access = fieldType.attrs & FIELD_ATTRIBUTE_FIELD_ACCESS_MASK; switch (access) { case FIELD_ATTRIBUTE_PRIVATE: writer.Write("private "); break; case FIELD_ATTRIBUTE_PUBLIC: writer.Write("public "); break; case FIELD_ATTRIBUTE_FAMILY: writer.Write("protected "); break; case FIELD_ATTRIBUTE_ASSEMBLY: case FIELD_ATTRIBUTE_FAM_AND_ASSEM: writer.Write("internal "); break; case FIELD_ATTRIBUTE_FAM_OR_ASSEM: writer.Write("protected internal "); break; } if ((fieldType.attrs & FIELD_ATTRIBUTE_LITERAL) != 0) { writer.Write("const "); } else { if ((fieldType.attrs & FIELD_ATTRIBUTE_STATIC) != 0) { writer.Write("static "); } if ((fieldType.attrs & FIELD_ATTRIBUTE_INIT_ONLY) != 0) { writer.Write("readonly "); } } writer.Write($"{GetTypeName(fieldType)} {metadata.GetStringFromIndex(fieldDef.nameIndex)}"); if (fieldDefault != null && fieldDefault.dataIndex != -1) { var pointer = metadata.GetDefaultValueFromIndex(fieldDefault.dataIndex); if (pointer > 0) { var pTypeToUse = il2cpp.types[fieldDefault.typeIndex]; metadata.Position = pointer; object multi = null; switch (pTypeToUse.type) { case Il2CppTypeEnum.IL2CPP_TYPE_BOOLEAN: multi = metadata.ReadBoolean(); break; case Il2CppTypeEnum.IL2CPP_TYPE_U1: multi = metadata.ReadByte(); break; case Il2CppTypeEnum.IL2CPP_TYPE_I1: multi = metadata.ReadSByte(); break; case Il2CppTypeEnum.IL2CPP_TYPE_CHAR: multi = BitConverter.ToChar(metadata.ReadBytes(2), 0); break; case Il2CppTypeEnum.IL2CPP_TYPE_U2: multi = metadata.ReadUInt16(); break; case Il2CppTypeEnum.IL2CPP_TYPE_I2: multi = metadata.ReadInt16(); break; case Il2CppTypeEnum.IL2CPP_TYPE_U4: multi = metadata.ReadUInt32(); break; case Il2CppTypeEnum.IL2CPP_TYPE_I4: multi = metadata.ReadInt32(); break; case Il2CppTypeEnum.IL2CPP_TYPE_U8: multi = metadata.ReadUInt64(); break; case Il2CppTypeEnum.IL2CPP_TYPE_I8: multi = metadata.ReadInt64(); break; case Il2CppTypeEnum.IL2CPP_TYPE_R4: multi = metadata.ReadSingle(); break; case Il2CppTypeEnum.IL2CPP_TYPE_R8: multi = metadata.ReadDouble(); break; case Il2CppTypeEnum.IL2CPP_TYPE_STRING: var uiLen = metadata.ReadInt32(); multi = Encoding.UTF8.GetString(metadata.ReadBytes(uiLen)); break; } if (multi is string) { writer.Write($" = \"{ToEscapedString((string)multi)}\""); } else if (multi is char) { var c = (int)(char)multi; writer.Write($" = '\\x{c:x}'"); } else if (multi != null) { writer.Write($" = {multi}"); } } } if (config.dumpfieldoffset) { writer.Write("; // 0x{0:X}\n", il2cpp.GetFieldOffsetFromIndex(idx, i - typeDef.fieldStart, i)); } else { writer.Write(";\n"); } } writer.Write("\n"); } //dump property if (config.dumpproperty && typeDef.property_count > 0) { writer.Write("\t// Properties\n"); var propertyEnd = typeDef.propertyStart + typeDef.property_count; for (var i = typeDef.propertyStart; i < propertyEnd; ++i) { var propertyDef = metadata.propertyDefs[i]; writer.Write(GetCustomAttribute(propertyDef.customAttributeIndex, "\t")); writer.Write("\t"); if (propertyDef.get >= 0) { var methodDef = metadata.methodDefs[typeDef.methodStart + propertyDef.get]; writer.Write(GetModifiers(methodDef)); var pReturnType = il2cpp.types[methodDef.returnType]; writer.Write($"{GetTypeName(pReturnType)} {metadata.GetStringFromIndex(propertyDef.nameIndex)} {{ "); } else if (propertyDef.set > 0) { var methodDef = metadata.methodDefs[typeDef.methodStart + propertyDef.set]; writer.Write(GetModifiers(methodDef)); var pParam = metadata.parameterDefs[methodDef.parameterStart]; var pType = il2cpp.types[pParam.typeIndex]; writer.Write($"{GetTypeName(pType)} {metadata.GetStringFromIndex(propertyDef.nameIndex)} {{ "); } if (propertyDef.get >= 0) { writer.Write("get; "); } if (propertyDef.set >= 0) { writer.Write("set; "); } writer.Write("}"); writer.Write("\n"); } writer.Write("\n"); } //dump method if (config.dumpmethod && typeDef.method_count > 0) { writer.Write("\t// Methods\n"); var methodEnd = typeDef.methodStart + typeDef.method_count; for (var i = typeDef.methodStart; i < methodEnd; ++i) { var methodDef = metadata.methodDefs[i]; writer.Write(GetCustomAttribute(methodDef.customAttributeIndex, "\t")); writer.Write("\t"); writer.Write(GetModifiers(methodDef)); var pReturnType = il2cpp.types[methodDef.returnType]; writer.Write($"{GetTypeName(pReturnType)} {metadata.GetStringFromIndex(methodDef.nameIndex)}("); for (var j = 0; j < methodDef.parameterCount; ++j) { var pParam = metadata.parameterDefs[methodDef.parameterStart + j]; var szParamName = metadata.GetStringFromIndex(pParam.nameIndex); var pType = il2cpp.types[pParam.typeIndex]; var szTypeName = GetTypeName(pType); if ((pType.attrs & PARAM_ATTRIBUTE_OPTIONAL) != 0) { writer.Write("optional "); } if ((pType.attrs & PARAM_ATTRIBUTE_OUT) != 0) { writer.Write("out "); } if (j != methodDef.parameterCount - 1) { writer.Write($"{szTypeName} {szParamName}, "); } else { writer.Write($"{szTypeName} {szParamName}"); } } if (methodDef.methodIndex >= 0) { writer.Write("); // 0x{0:X}\n", il2cpp.methodPointers[methodDef.methodIndex]); //Script - method var name = ToEscapedString(metadata.GetStringFromIndex(typeDef.nameIndex) + "$$" + metadata.GetStringFromIndex(methodDef.nameIndex)); scriptwriter.WriteLine($"SetMethod(0x{il2cpp.methodPointers[methodDef.methodIndex]:X}, '{name}')"); // } else { writer.Write("); // 0\n"); } } } writer.Write("}\n"); } catch (Exception e) { Console.WriteLine("ERROR: Some errors in dumping"); writer.Write("/*"); writer.Write($"{e.Message}\n{e.StackTrace}\n"); writer.Write("*/\n}\n"); } } //Script - stringLiteral if (il2cpp.version > 16) { foreach (var i in metadata.stringLiteralsdic) { scriptwriter.WriteLine($"SetString(0x{il2cpp.metadataUsages[i.Key]:X}, r'{ToEscapedString(i.Value)}')"); } } //Script - MakeFunction var orderedPointers = il2cpp.methodPointers.ToList(); orderedPointers.AddRange(il2cpp.genericMethodPointers.Where(x => x > 0)); orderedPointers.AddRange(il2cpp.invokerPointers); orderedPointers.AddRange(il2cpp.customAttributeGenerators); orderedPointers = orderedPointers.OrderBy(x => x).ToList(); for (int i = 0; i < orderedPointers.Count - 1; i++) { scriptwriter.WriteLine($"MakeFunction(0x{orderedPointers[i]:X}, 0x{orderedPointers[i + 1]:X})"); } // writer.Close(); scriptwriter.Close(); Console.WriteLine("Done !"); Console.WriteLine("Create DummyDll..."); //DummyDll if (Directory.Exists("DummyDll")) { Directory.Delete("DummyDll", true); } Directory.CreateDirectory("DummyDll"); Directory.SetCurrentDirectory("DummyDll"); var dummy = new DummyAssemblyCreator(metadata, il2cpp); foreach (var assembly in dummy.Assemblies) { var stream = new MemoryStream(); assembly.Write(stream); File.WriteAllBytes(assembly.MainModule.Name, stream.ToArray()); } Console.WriteLine("Done !"); // break; } } catch (Exception e) { Console.WriteLine($"{e.Message}\r\n{e.StackTrace}"); } Console.WriteLine("Press any key to exit..."); Console.ReadKey(true); } } }
private static bool Init(string il2cppPath, string metadataPath, out Metadata metadata, out Il2Cpp il2Cpp) { Console.WriteLine("Initializing metadata..."); var metadataBytes = File.ReadAllBytes(metadataPath); metadata = new Metadata(new MemoryStream(metadataBytes)); Console.WriteLine($"Metadata Version: {metadata.Version}"); Console.WriteLine("Initializing il2cpp file..."); var il2cppBytes = File.ReadAllBytes(il2cppPath); var il2cppMagic = BitConverter.ToUInt32(il2cppBytes, 0); var il2CppMemory = new MemoryStream(il2cppBytes); switch (il2cppMagic) { default: throw new NotSupportedException("ERROR: il2cpp file not supported."); case 0x6D736100: var web = new WebAssembly(il2CppMemory); il2Cpp = web.CreateMemory(); break; case 0x304F534E: var nso = new NSO(il2CppMemory); il2Cpp = nso.UnCompress(); break; case 0x905A4D: //PE il2Cpp = new PE(il2CppMemory); break; case 0x464c457f: //ELF if (il2cppBytes[4] == 2) //ELF64 { il2Cpp = new Elf64(il2CppMemory); } else { il2Cpp = new Elf(il2CppMemory); } break; case 0xCAFEBABE: //FAT Mach-O case 0xBEBAFECA: var machofat = new MachoFat(new MemoryStream(il2cppBytes)); Console.Write("Select Platform: "); for (var i = 0; i < machofat.fats.Length; i++) { var fat = machofat.fats[i]; Console.Write(fat.magic == 0xFEEDFACF ? $"{i + 1}.64bit " : $"{i + 1}.32bit "); } Console.WriteLine(); var key = Console.ReadKey(true); var index = int.Parse(key.KeyChar.ToString()) - 1; var magic = machofat.fats[index % 2].magic; il2cppBytes = machofat.GetMacho(index % 2); il2CppMemory = new MemoryStream(il2cppBytes); if (magic == 0xFEEDFACF) { goto case 0xFEEDFACF; } else { goto case 0xFEEDFACE; } case 0xFEEDFACF: // 64bit Mach-O il2Cpp = new Macho64(il2CppMemory); break; case 0xFEEDFACE: // 32bit Mach-O il2Cpp = new Macho(il2CppMemory); break; } var version = config.ForceIl2CppVersion ? config.ForceVersion : metadata.Version; il2Cpp.SetProperties(version, metadata.maxMetadataUsages); Console.WriteLine($"Il2Cpp Version: {il2Cpp.Version}"); if (il2Cpp.Version >= 27 && il2Cpp is ElfBase elf && elf.IsDumped) { Console.WriteLine("Input global-metadata.dat dump address:"); metadata.Address = Convert.ToUInt64(Console.ReadLine(), 16); } Console.WriteLine("Searching..."); try { var flag = il2Cpp.PlusSearch(metadata.methodDefs.Count(x => x.methodIndex >= 0), metadata.typeDefs.Length, metadata.imageDefs.Length); if (RuntimeInformation.IsOSPlatform(OSPlatform.Windows)) { if (!flag && il2Cpp is PE) { Console.WriteLine("Use custom PE loader"); il2Cpp = PELoader.Load(il2cppPath); il2Cpp.SetProperties(version, metadata.maxMetadataUsages); flag = il2Cpp.PlusSearch(metadata.methodDefs.Count(x => x.methodIndex >= 0), metadata.typeDefs.Length, metadata.imageDefs.Length); } } if (!flag) { flag = il2Cpp.Search(); } if (!flag) { flag = il2Cpp.SymbolSearch(); } if (!flag) { Console.WriteLine("ERROR: Can't use auto mode to process file, try manual mode."); Console.Write("Input CodeRegistration: "); var codeRegistration = Convert.ToUInt64(Console.ReadLine(), 16); Console.Write("Input MetadataRegistration: "); var metadataRegistration = Convert.ToUInt64(Console.ReadLine(), 16); il2Cpp.Init(codeRegistration, metadataRegistration); return(true); } } catch (Exception e) { Console.WriteLine(e); Console.WriteLine("ERROR: An error occurred while processing."); return(false); } return(true); }
private bool Init(string il2cppPath, string metadataPath, out Metadata metadata, out Il2Cpp il2Cpp) { string Mach_O = "2"; Invoke(new Action(delegate() { if (!iOSSwitch.Value) { Mach_O = "1"; } })); LogOutput("Read config..."); if (File.Exists(RealPath + "config.json")) { config = JsonConvert.DeserializeObject <Config>(File.ReadAllText(Application.StartupPath + Path.DirectorySeparatorChar + @"config.json")); } else { config = new Config(); LogOutput("config.json file does not exist. Using defaults", Color.Yellow); } LogOutput("Initializing metadata..."); var metadataBytes = File.ReadAllBytes(metadataPath); metadata = new Metadata(new MemoryStream(metadataBytes)); LogOutput($"Metadata Version: {metadata.Version}"); LogOutput("Initializing il2cpp file..."); var il2cppBytes = File.ReadAllBytes(il2cppPath); var il2cppMagic = BitConverter.ToUInt32(il2cppBytes, 0); var il2CppMemory = new MemoryStream(il2cppBytes); switch (il2cppMagic) { default: throw new NotSupportedException("ERROR: il2cpp file not supported."); case 0x6D736100: var web = new WebAssembly(il2CppMemory); il2Cpp = web.CreateMemory(); break; case 0x304F534E: var nso = new NSO(il2CppMemory); il2Cpp = nso.UnCompress(); break; case 0x905A4D: //PE il2Cpp = new PE(il2CppMemory); break; case 0x464c457f: //ELF if (il2cppBytes[4] == 2) //ELF64 { il2Cpp = new Elf64(il2CppMemory); } else { il2Cpp = new Elf(il2CppMemory); } break; case 0xCAFEBABE: //FAT Mach-O case 0xBEBAFECA: var machofat = new MachoFat(new MemoryStream(il2cppBytes)); for (var i = 0; i < machofat.fats.Length; i++) { var fat = machofat.fats[i]; //Console.Write(fat.magic == 0xFEEDFACF ? $"{i + 1}.64bit " : $"{i + 1}.32bit "); } var index = int.Parse(Mach_O) - 1; var magic = machofat.fats[index % 2].magic; il2cppBytes = machofat.GetMacho(index % 2); il2CppMemory = new MemoryStream(il2cppBytes); if (magic == 0xFEEDFACF) { goto case 0xFEEDFACF; } else { goto case 0xFEEDFACE; } case 0xFEEDFACF: // 64bit Mach-O il2Cpp = new Macho64(il2CppMemory); break; case 0xFEEDFACE: // 32bit Mach-O il2Cpp = new Macho(il2CppMemory); break; } var version = config.ForceIl2CppVersion ? config.ForceVersion : metadata.Version; il2Cpp.SetProperties(version, metadata.maxMetadataUsages); LogOutput($"Il2Cpp Version: {il2Cpp.Version}"); LogOutput("Searching..."); try { var flag = il2Cpp.PlusSearch(metadata.methodDefs.Count(x => x.methodIndex >= 0), metadata.typeDefs.Length); if (!flag && il2Cpp is PE) { LogOutput("Use custom PE loader"); il2Cpp = PELoader.Load(il2cppPath); il2Cpp.SetProperties(version, metadata.maxMetadataUsages); flag = il2Cpp.PlusSearch(metadata.methodDefs.Count(x => x.methodIndex >= 0), metadata.typeDefs.Length); } if (!flag) { flag = il2Cpp.Search(); } if (!flag) { flag = il2Cpp.SymbolSearch(); } if (!flag) { LogOutput("ERROR: Can't use auto mode to process file, input offset pointers to try manual mode.", Color.Yellow); var codeRegistration = Convert.ToUInt64(CodeRegistrationTxtBox.Text, 16); var metadataRegistration = Convert.ToUInt64(metadataRegistrationTxtBox.Text, 16); il2Cpp.Init(codeRegistration, metadataRegistration); return(true); } } catch (Exception ex) { LogOutput("An error occurred while processing.", Color.Red); #if DEBUG LogOutput(ex.ToString()); #else LogOutput(ex.Message); #endif return(false); } return(true); }