Update README.md

workingdir/cra0-upated
xerox 4 years ago
parent c3d364227d
commit 6ee7af3830

@ -20,4 +20,24 @@ After the dump folder has been moved to the `Pictures` folder simply click the f
<img src="https://imgur.com/RK1wImb.png"/> <img src="https://imgur.com/RK1wImb.png"/>
Now that we have the dump files we are going to need to cut the desired shared object file out of the `.bin` memory range that contains our shared object. Now that we have the dump files we are going to need to cut the desired shared object file out of the `.bin` memory range that contains our shared object.
As you can see the dump generates a text file that gives you all of the memory ranges + lib names.
<img src="https://imgur.com/loFpzH1.png"/>
Now find the `.bin` that contains your ENTIRE `.so` memory range. Not just one of them. For this dump the range is: `92154000` - `98495000`. In the dump folder we can see a `.bin` that contains
this memory range.
<img src="https://imgur.com/L8pR07E.png"/>
Open the .bin in hxd and search for "ELF" if you scroll down to the bottom you will see an ELF header! This is the header for the il2cpp.so! now calculate the size of the .so by taking the end address
and subtracting it with the start address. (`0x98495000` - `0x92154000` = `0x6341000`).
<img src="https://imgur.com/FWhDB73.png"/>
Now that we have the memory selected, click file->new then paste, save as `il2cpp.so`.
# using il2cppdumper
Take the dumped `il2cpp.so` and `global-metadata.dat` file, put together in a new folder + make a folder inside of that new folder called `output`.
Loading…
Cancel
Save