il2cpp一键dump-Mac

# -*- coding: utf-8 -*- import json from ghidra.app.util.cparser.C import CParserUtils from ghidra.app.cmd.function import ApplyFunctionSignatureCmd processFields = [ "ScriptMethod", "ScriptString", "ScriptMetadata", "ScriptMetadataMethod", "Addresses", ] functionManager = currentProgram.getFunctionManager() baseAddress = currentProgram.getImageBase() USER_DEFINED = ghidra.program.model.symbol.SourceType.USER_DEFINED def get_addr(addr): return baseAddress.add(addr) def set_name(addr, name): name = name.replace(' ', '-') createLabel(addr, name, True, USER_DEFINED) def set_type(addr, type): # Requires types (il2cpp.h) to be imported first newType = type.replace("*"," *").replace(" "," ").strip() dataTypes = getDataTypes(newType) addrType = None if len(dataTypes) == 0: if newType == newType[:-2] + " *": baseType = newType[:-2] dataTypes = getDataTypes(baseType) if len(dataTypes) == 1: dtm = currentProgram.getDataTypeManager() pointerType = dtm.getPointer(dataTypes[0]) addrType = dtm.addDataType(pointerType, None) elif len(dataTypes) > 1: print("Conflicting data types found for type " + type + "(parsed as '" + newType + "')") return else: addrType = dataTypes[0] if addrType is None: print("Could not identify type " + type + "(parsed as '" + newType + "')") else: createData(addr, addrType) def make_function(start): func = getFunctionAt(start) if func is None: createFunction(start, None) def set_sig(addr, name, sig): try: typeSig = CParserUtils.parseSignature(None, currentProgram, sig, False) except ghidra.app.util.cparser.C.ParseException: print("Warning: Unable to parse") print(sig) print("Attempting to modify...") # try to fix by renaming the parameters try: newSig = sig.replace(", ","ext, ").replace("\)","ext\)") typeSig = CParserUtils.parseSignature(None, currentProgram, newSig, False) except: print("Warning: also unable to parse") print(newSig) print("Skipping.") return if typeSig is not None: typeSig.setName(name) ApplyFunctionSignatureCmd(addr, typeSig, USER_DEFINED, False, True).applyTo(currentProgram) f = askFile("script.json from Il2cppdumper", "Open") data = json.loads(open(f.absolutePath, 'rb').read().decode('utf-8')) if "ScriptMethod" in data and "ScriptMethod" in processFields: scriptMethods = data["ScriptMethod"] monitor.initialize(len(scriptMethods)) monitor.setMessage("Methods") for scriptMethod in scriptMethods: addr = get_addr(scriptMethod["Address"]) name = scriptMethod["Name"].encode("utf-8") set_name(addr, name) monitor.incrementProgress(1) if "ScriptString" in data and "ScriptString" in processFields: index = 1 scriptStrings = data["ScriptString"] monitor.initialize(len(scriptStrings)) monitor.setMessage("Strings") for scriptString in scriptStrings: addr = get_addr(scriptString["Address"]) value = scriptString["Value"].encode("utf-8") name = "StringLiteral_" + str(index) createLabel(addr, name, True, USER_DEFINED) setEOLComment(addr, value) index += 1 monitor.incrementProgress(1) if "ScriptMetadata" in data and "ScriptMetadata" in processFields: scriptMetadatas = data["ScriptMetadata"] monitor.initialize(len(scriptMetadatas)) monitor.setMessage("Metadata") for scriptMetadata in scriptMetadatas: addr = get_addr(scriptMetadata["Address"]) name = scriptMetadata["Name"].encode("utf-8") set_name(addr, name) setEOLComment(addr, name) monitor.incrementProgress(1) if scriptMetadata["Signature"]: set_type(addr, scriptMetadata["Signature"].encode("utf-8")) if "ScriptMetadataMethod" in data and "ScriptMetadataMethod" in processFields: scriptMetadataMethods = data["ScriptMetadataMethod"] monitor.initialize(len(scriptMetadataMethods)) monitor.setMessage("Metadata Methods") for scriptMetadataMethod in scriptMetadataMethods: addr = get_addr(scriptMetadataMethod["Address"]) name = scriptMetadataMethod["Name"].encode("utf-8") methodAddr = get_addr(scriptMetadataMethod["MethodAddress"]) set_name(addr, name) setEOLComment(addr, name) monitor.incrementProgress(1) if "Addresses" in data and "Addresses" in processFields: addresses = data["Addresses"] monitor.initialize(len(addresses)) monitor.setMessage("Addresses") for index in range(len(addresses) - 1): start = get_addr(addresses[index]) make_function(start) monitor.incrementProgress(1) if "ScriptMethod" in data and "ScriptMethod" in processFields: scriptMethods = data["ScriptMethod"] for scriptMethod in scriptMethods: addr = get_addr(scriptMethod["Address"]) sig = scriptMethod["Signature"][:-1].encode("utf-8") name = scriptMethod["Name"].encode("utf-8") set_sig(addr, name, sig) print 'Script finished!'