Trying to correctly dump Imaginary Fest

[MerluzaCuca]

I dumped the game by memory dump, but I search for an offset and it's all plain zero. Also tried to follow some tutorials about IDA to get coderegistration and metadata registration, but without success.

[nok1a]

On 1/25/2024 at 6:36 PM, MerluzaCuca said:

I dumped the game by memory dump, but I search for an offset and it's all plain zero. Also tried to follow some tutorials about IDA to get coderegistration and metadata registration, but without success.

I don't understand the question.
I don't know anything about IDA but you need the codeRegistration and metaRegistration, why?
Your using Il2CppDumper.GUI.2.1.0 ?
What you mean with offsets being 0 ?

[MerluzaCuca]

12 hours ago, nok1a said:

I don't understand the question.
I don't know anything about IDA but you need the codeRegistration and metaRegistration, why?
Your using Il2CppDumper.GUI.2.1.0 ?
What you mean with offsets being 0 ?

When try to dump, the next error appears:

Initializing metadata...
Metadata Version: 29
Initializing il2cpp file...
Applying relocations...
Il2Cpp Version: 29
Searching...
CodeRegistration : 0
MetadataRegistration : 0
ERROR: No symbol is detected
ERROR: Can't use auto mode to process file, trying manual mode...
CodeRegistration or MetadataRegistration is empty

[nok1a]

31 minutes ago, MerluzaCuca said:

When try to dump, the next error appears:

Initializing metadata...
Metadata Version: 29
Initializing il2cpp file...
Applying relocations...
Il2Cpp Version: 29
Searching...
CodeRegistration : 0
MetadataRegistration : 0
ERROR: No symbol is detected
ERROR: Can't use auto mode to process file, trying manual mode...
CodeRegistration or MetadataRegistration is empty

Oke, but your not using gameguardian to dump the lib and metadata at runtime. I can't open the game on my emulator. Dump at runtime. You can use the script:

libil2cpp.so and metadata.dat dumping script (#rpaaz4p)

 

[MerluzaCuca]

14 hours ago, nok1a said:

Oke, but your not using gameguardian to dump the lib and metadata at runtime. I can't open the game on my emulator. Dump at runtime. You can use the script:

libil2cpp.so and metadata.dat dumping script (#rpaaz4p)

 

I already did dumped with that script, but most of the time it crashes and the other times I manage to dump, but when I search for an offset that has to contain values or methods, it's just pure zeroes 

[zwz]

Hello, Nok1a, Same problem here. I've used the script you provided, but I can't dump this game. Can you try to dump it? Here's the game link: https://m-apps.qoo-app.com/en-US/app/13857

23 hours ago, nok1a said:

Oke, but your not using gameguardian to dump the lib and metadata at runtime. I can't open the game on my emulator. Dump at runtime. You can use the script:

libil2cpp.so and metadata.dat dumping script (#rpaaz4p)

 

Hello, Nok1a, Same problem here. I've used the script you provided, but I can't dump this game. Can you try to dump it? Here's the game link: https://m-apps.qoo-app.com/en-US/app/13857

[nok1a]

12 hours ago, MerluzaCuca said:

I already did dumped with that script, but most of the time it crashes and the other times I manage to dump, but when I search for an offset that has to contain values or methods, it's just pure zeroes 

Ok, i can't run the game. It insta crashes. Did you take a look at these tutorials in case the game applied some protection methods on the lib or metadata.

 

 

 

 

2 hours ago, zwz said:

Hello, Nok1a, Same problem here. I've used the script you provided, but I can't dump this game. Can you try to dump it? Here's the game link: https://m-apps.qoo-app.com/en-US/app/13857

Hello, Nok1a, Same problem here. I've used the script you provided, but I can't dump this game. Can you try to dump it? Here's the game link: https://m-apps.qoo-app.com/en-US/app/13857

Also watch the tutorials:

Trying to correctly dump Imaginary Fest (#1vi9kopg)

Also when sharing game. Better to give direct apk link or play store link. I won't install that QooApp.

 

[nok1a]

My phone is not rooted, it's just crashing 

 

Edited January 29 by nok1a

[zwz]

1 hour ago, nok1a said:

Ok, i can't run the game. It insta crashes. Did you take a look at these tutorials in case the game applied some protection methods on the lib or metadata.

 

 

 

 

Also watch the tutorials:

Trying to correctly dump Imaginary Fest (#1vi9kopg)

Also when sharing game. Better to give direct apk link or play store link. I won't install that QooApp.

 

Hi, I have watched two videos and tried to follow the operations in the videos, but it doesn't work. Here is the link: https://gf2-cn.cdn.sunborngame.com/download/apk/2076/1702057730_signed_aligned_ReYun_gwaz_GW_Build_402_1842_2838_1702024150_2076_100.apk

[nok1a]

I would prefer if you send me video on how you did it. 

[zwz]

3 minutes ago, nok1a said:

I would prefer if you send me video on how you did it. 

Trust me, I've done every step in the video, dumped the lib, and dumped the metadata. But I think the structure of the metadata in this game has changed, so it can't be dumped normally. You can give it a try.

[THETWINSOFFICIAL]

6 hours ago, zwz said:

Hi, I have watched two videos and tried to follow the operations in the videos, but it doesn't work. Here is the link: https://gf2-cn.cdn.sunborngame.com/download/apk/2076/1702057730_signed_aligned_ReYun_gwaz_GW_Build_402_1842_2838_1702024150_2076_100.apk

I try

[zwz]

3 minutes ago, SYLVIA said:

I try

Hi SYLVIA, Thx for help, I hope you manage to dump successfully.

Edited January 29 by zwz

[THETWINSOFFICIAL]

6 hours ago, zwz said:

Hi, I have watched two videos and tried to follow the operations in the videos, but it doesn't work. Here is the link: https://gf2-cn.cdn.sunborngame.com/download/apk/2076/1702057730_signed_aligned_ReYun_gwaz_GW_Build_402_1842_2838_1702024150_2076_100.apk

 

com.Sunborn.SnqxExilium-dump.cs

[zwz]

14 minutes ago, SYLVIA said:

 

com.Sunborn.SnqxExilium-dump.cs 12.05 MB · 2 downloads

Thank you, SYLVIA. I have checked your dump.cs. I guess you used zygisk-il2cppdumper, however, some method addresses were not dumped, their addresses are 0x0, and the dump.cs doesn't seem to be complete, but I still appreciate your help very much.

Edited January 29 by zwz

[THETWINSOFFICIAL]

50 minutes ago, zwz said:

Thank you, SYLVIA. I have checked your dump.cs. I guess you used zygisk-il2cppdumper, however, some method addresses were not dumped, their addresses are 0x0, and the dump.cs doesn't seem to be complete, but I still appreciate your help very much.

Oh , yes maybe that protected