Happy Secret

Sad to know

Are there way to sideload or include a file in App's document folder after sideloading it. I do not see Document Folder inside Payload. It must be programatically created.

Changed to executable.dat and try again.... Similar result... Task status for ID: ca2d1858-7e09-4611-8c15-1ad0762af92f Current status: error-il2cppdumper-35 Starting il2cppdumper on 2023-04-06 02:32:49.988211 Initializing metadata... Metadata Version: 27 Initializing il2cpp file... Il2Cpp Version: 27 Searching... Change il2cpp version to: 27.1 CodeRegistration : 6542890 MetadataRegistration : 6714fa0 Dumping... �䵀۸�)�7��В���Lq�,�a6�!q�2�8t�RO����ѱ��DC�����$��6���]u�f��Y��iW��x�$�rz�y�����' was not present in the dictionary. at System.Collections.Generic.Dictionary`2[TKey,TValue].get_Item (TKey key) [0x00021] in <12b418a7818c4ca0893feeaaf67f1e7f>:0 at Il2CppDumper.Il2CppExecutor..ctor (Il2CppDumper.Metadata metadata, Il2CppDumper.Il2Cpp il2Cpp) [0x0008f] in <f7e6b0919917422ea558f2909d3584d7>:0 at Il2CppDumper.Program.Dump (Il2CppDumper.Metadata metadata, Il2CppDumper.Il2Cpp il2Cpp, System.String outputDir) [0x0000a] in <f7e6b0919917422ea558f2909d3584d7>:0 at Il2CppDumper.Program.Main (System.String[] args) [0x001bc] in <f7e6b0919917422ea558f2909d3584d7>:0 Total time for il2cppdumper: 0:00:10.197426 ======== Il2cppdumper did not produce any files. Probably something is wrong with the executable or metadata?

Hello, I am dumping the Earth - Revival. I face below any idea how to resolve? Task status for ID: 7d968b49-41e7-4239-8caf-96dcec511ed2 Current status: error-il2cppdumper-35 Starting il2cppdumper on 2023-04-04 13:09:09.282188 Initializing metadata... Metadata Version: 27 Initializing il2cpp file... Il2Cpp Version: 27 Searching... Change il2cpp version to: 27.1 CodeRegistration : 6542890 MetadataRegistration : 6714fa0 Dumping... �䵀۸�)�7��В���Lq�,�a6�!q�2�8t�RO����ѱ��DC�����$��6���]u�f��Y��iW��x�$�rz�y�����' was not present in the dictionary. at System.Collections.Generic.Dictionary`2[TKey,TValue].get_Item (TKey key) [0x00021] in <12b418a7818c4ca0893feeaaf67f1e7f>:0 at Il2CppDumper.Il2CppExecutor..ctor (Il2CppDumper.Metadata metadata, Il2CppDumper.Il2Cpp il2Cpp) [0x0008f] in <f7e6b0919917422ea558f2909d3584d7>:0 at Il2CppDumper.Program.Dump (Il2CppDumper.Metadata metadata, Il2CppDumper.Il2Cpp il2Cpp, System.String outputDir) [0x0000a] in <f7e6b0919917422ea558f2909d3584d7>:0 at Il2CppDumper.Program.Main (System.String[] args) [0x001bc] in <f7e6b0919917422ea558f2909d3584d7>:0 Total time for il2cppdumper: 0:00:10.298265 ======== Il2cppdumper did not produce any files. Probably something is wrong with the executable or metadata? Looks like some encoding issue. How can I resolve it?

No need, I have manually updated. thx for the prompt. good that you are aware of the issue and action in place

@Rook This morning, I realised that this post got reverted to one week before version. I should have updated to v1.5 last friday. But I only see v1.4 this morning. Any idea why this happens? It seems those comments are not affected. Only the main post got reverted.

I want to learn the general technique. No specific game in mind, any game you would recommend me to start with?

Never changed, and I didn’t login again. so, pretty sure. It uses the locally stored login information.

@Rook What is the real latest version of Sideloadly? I recently got issue with it. After reinstall, it automatically update to 0.40.4....but in Sideloadly official site, i only see change log for 0.40.3 and My sideloadly now has two issues? 1. the auto bundle Id seems behaves differently. I suddenly got to copy of the game in my iPad. 2. after sideload, the game lost the File Sharing features. (This issue resolved after restart iPAD, the sharing folder suddenly there. odd) Any hint for me?

Version 1.5: 1. Isolate H5GG core feature Frida script with other script, to avoid override or affecting each other. Now you can use this new menu with other Frida scripts with less constraints and without issue. 2. Introducing Hex Search with nibble-level wildcards, like "?3 37 13 ?7". Hex search can also be used to achieve Text (UTF-8) search. Currently only script available, will incorporate into H5GG menu with UI in next version. 3. Minor bug fix on a number of bugs. note: Note Hex Search script result can be find in Debug Info UI. (press Debug from front UI)

Just added a script example that do UTF-8 String Seach. You may find it here.

Just choose TEXT, when choosing data size or data type. remember the last occurrence of the search is fake. I think iGG allocate memory to store that search string and it return that search string as well just ignore the very last one

You mean debugger to debug iOS application? GDB with IDA Pro, I believe it is the best combination, right? Anyway, I remember in my old days when using PC to hack iOS app, I use GDB. But it is ages ago. Ask the pro here or search tutorial

Version 1.4: 1. You can use script to search for object interested and add to Debug Info. Debug Info acts like a console.log but it will accumulate count on same message and update itself to latest version of data. You will LOVE it. 2. Under debug info, you can easily explore data at certain memory location (object location). As usual, you can update the data on that screen as well. 3. Minor bug fix on a number of bugs.

First! support

Come to learn

For Unity Game, with IL2Cpp Dumper it is not difficult to locate how the game store item code. Whether you can influence the item generation or change item, it is another story. Suggest you find a local (non-server sided Unity Game) to try. You can try Dungreed, where I already hack the item cheat panel. It should make you mush easier to do your research or practice.

If you are referring to TEXT search, it is already there from v0.3.0 Very nice feature, you should give it a try. Watch point is another nice new feature that you should look into.

Does it still work?

@tuancc You finally come back. I am not familiar with GitHub, not sure how to contribute the code back to H5GG GitHub. I have leave you message at Discord. Please check.

New Version 1.3: 1. You can type in simple ARM64 instruction to let the tool to convert to HEX for you. Only works on Simple ARM64 Instruction like MOV, ADD, SUB, NOP, RET. 2. Upgraded H5Frida Core to version 16.0.10 (thanks to @LeePham helping on final compilation on Theos) 3. Minor bug fix on a number of bugs. New Frida resolved iOS15 + iOS16 support issue on some memory function.

Per your request, update to Version 1.2: 1. You can tap on Bytes (middle column) to open Live Offset Patcher. Only works on Non-Jailbroken device with Debug state on the App OR Jailbroken device. Feel free to let me know if you have other idea.

Updated to Version 1.2: 1. You can tap on Bytes (middle column) to open Live Offset Patcher. Only works on Non-Jailbroken device with Debug state on the App OR Jailbroken device. 2. Color highlight on the current Instruction (specified in the Current Address field) 3. Minor bug fix on a number of bugs.

The address next to Hex and instruction is with ASLR. The normal memory address find in Cheat Engine. Yes, it worked one some devices. But not all. Good to know it works on your device as well.