Trying to correctly dump Imaginary Fest

[MerluzaCuca]

I dumped the game by memory dump, but I search for an offset and it's all plain zero. Also tried to follow some tutorials about IDA to get coderegistration and metadata registration, but without success.

[nok1a]

  On 1/25/2024 at 5:36 PM, MerluzaCuca said:

I dumped the game by memory dump, but I search for an offset and it's all plain zero. Also tried to follow some tutorials about IDA to get coderegistration and metadata registration, but without success.

Expand  

I don't understand the question.
I don't know anything about IDA but you need the codeRegistration and metaRegistration, why?
Your using Il2CppDumper.GUI.2.1.0 ?
What you mean with offsets being 0 ?

[MerluzaCuca]

  On 1/27/2024 at 12:35 PM, nok1a said:

I don't understand the question.
I don't know anything about IDA but you need the codeRegistration and metaRegistration, why?
Your using Il2CppDumper.GUI.2.1.0 ?
What you mean with offsets being 0 ?

Expand  

When try to dump, the next error appears:

Initializing metadata...
Metadata Version: 29
Initializing il2cpp file...
Applying relocations...
Il2Cpp Version: 29
Searching...
CodeRegistration : 0
MetadataRegistration : 0
ERROR: No symbol is detected
ERROR: Can't use auto mode to process file, trying manual mode...
CodeRegistration or MetadataRegistration is empty

[nok1a]

  On 1/28/2024 at 1:06 AM, MerluzaCuca said:

When try to dump, the next error appears:

Initializing metadata...
Metadata Version: 29
Initializing il2cpp file...
Applying relocations...
Il2Cpp Version: 29
Searching...
CodeRegistration : 0
MetadataRegistration : 0
ERROR: No symbol is detected
ERROR: Can't use auto mode to process file, trying manual mode...
CodeRegistration or MetadataRegistration is empty

Expand  

Oke, but your not using gameguardian to dump the lib and metadata at runtime. I can't open the game on my emulator. Dump at runtime. You can use the script:

libil2cpp.so and metadata.dat dumping script (#rpaaz4p)

 

[MerluzaCuca]

  On 1/28/2024 at 1:56 AM, nok1a said:

Oke, but your not using gameguardian to dump the lib and metadata at runtime. I can't open the game on my emulator. Dump at runtime. You can use the script:

libil2cpp.so and metadata.dat dumping script (#rpaaz4p)

 

Expand  

I already did dumped with that script, but most of the time it crashes and the other times I manage to dump, but when I search for an offset that has to contain values or methods, it's just pure zeroes 

[zwz]

Hello, Nok1a, Same problem here. I've used the script you provided, but I can't dump this game. Can you try to dump it? Here's the game link: https://m-apps.qoo-app.com/en-US/app/13857

  On 1/28/2024 at 1:56 AM, nok1a said:

Oke, but your not using gameguardian to dump the lib and metadata at runtime. I can't open the game on my emulator. Dump at runtime. You can use the script:

libil2cpp.so and metadata.dat dumping script (#rpaaz4p)

 

Expand  

Hello, Nok1a, Same problem here. I've used the script you provided, but I can't dump this game. Can you try to dump it? Here's the game link: https://m-apps.qoo-app.com/en-US/app/13857

[nok1a]

  On 1/28/2024 at 4:06 PM, MerluzaCuca said:

I already did dumped with that script, but most of the time it crashes and the other times I manage to dump, but when I search for an offset that has to contain values or methods, it's just pure zeroes 

Expand  

Ok, i can't run the game. It insta crashes. Did you take a look at these tutorials in case the game applied some protection methods on the lib or metadata.

 

 

 

 

  On 1/29/2024 at 1:40 AM, zwz said:

Hello, Nok1a, Same problem here. I've used the script you provided, but I can't dump this game. Can you try to dump it? Here's the game link: https://m-apps.qoo-app.com/en-US/app/13857

Hello, Nok1a, Same problem here. I've used the script you provided, but I can't dump this game. Can you try to dump it? Here's the game link: https://m-apps.qoo-app.com/en-US/app/13857

Expand  

Also watch the tutorials:

Trying to correctly dump Imaginary Fest (#1vi9kopg)

Also when sharing game. Better to give direct apk link or play store link. I won't install that QooApp.

 

[nok1a]

My phone is not rooted, it's just crashing 

 

Edited January 29, 2024 by nok1a

[zwz]

  On 1/29/2024 at 4:29 AM, nok1a said:

Ok, i can't run the game. It insta crashes. Did you take a look at these tutorials in case the game applied some protection methods on the lib or metadata.

 

 

 

 

Also watch the tutorials:

Trying to correctly dump Imaginary Fest (#1vi9kopg)

Also when sharing game. Better to give direct apk link or play store link. I won't install that QooApp.

 

Expand  

Hi, I have watched two videos and tried to follow the operations in the videos, but it doesn't work. Here is the link: https://gf2-cn.cdn.sunborngame.com/download/apk/2076/1702057730_signed_aligned_ReYun_gwaz_GW_Build_402_1842_2838_1702024150_2076_100.apk

[nok1a]

I would prefer if you send me video on how you did it. 

[zwz]

  On 1/29/2024 at 5:52 AM, nok1a said:

I would prefer if you send me video on how you did it. 

Expand  

Trust me, I've done every step in the video, dumped the lib, and dumped the metadata. But I think the structure of the metadata in this game has changed, so it can't be dumped normally. You can give it a try.

[THETWINSOFFICIAL]

  On 1/29/2024 at 5:50 AM, zwz said:

Hi, I have watched two videos and tried to follow the operations in the videos, but it doesn't work. Here is the link: https://gf2-cn.cdn.sunborngame.com/download/apk/2076/1702057730_signed_aligned_ReYun_gwaz_GW_Build_402_1842_2838_1702024150_2076_100.apk

Expand  

I try

[zwz]

  On 1/29/2024 at 11:56 AM, SYLVIA said:

I try

Expand  

Hi SYLVIA, Thx for help, I hope you manage to dump successfully.

Edited January 29, 2024 by zwz

[THETWINSOFFICIAL]

  On 1/29/2024 at 5:50 AM, zwz said:

Hi, I have watched two videos and tried to follow the operations in the videos, but it doesn't work. Here is the link: https://gf2-cn.cdn.sunborngame.com/download/apk/2076/1702057730_signed_aligned_ReYun_gwaz_GW_Build_402_1842_2838_1702024150_2076_100.apk

Expand  

 

com.Sunborn.SnqxExilium-dump.csFetching info...

[zwz]

  On 1/29/2024 at 12:01 PM, SYLVIA said:

 

com.Sunborn.SnqxExilium-dump.cs 12.05 MB · 2 downloads

Expand  

Thank you, SYLVIA. I have checked your dump.cs. I guess you used zygisk-il2cppdumper, however, some method addresses were not dumped, their addresses are 0x0, and the dump.cs doesn't seem to be complete, but I still appreciate your help very much.

Edited January 29, 2024 by zwz

[THETWINSOFFICIAL]

  On 1/29/2024 at 12:14 PM, zwz said:

Thank you, SYLVIA. I have checked your dump.cs. I guess you used zygisk-il2cppdumper, however, some method addresses were not dumped, their addresses are 0x0, and the dump.cs doesn't seem to be complete, but I still appreciate your help very much.

Expand  

Oh , yes maybe that protected