/Dumpcs2Protobuf

tool to extract the obfuscated protobuf messages from dump.cs file (works on GI <3.5.5, SR)

Primary LanguageC#

Dumpcs2Protobuf

some shit i tried to make to extract the obfuscated protobuf messages from dump.cs file (needs to set manually the repetitive string that comes after the class name)

DOESNT WORK ON 3.6 AND PRETTY MUCH DEAD AND ABANDONED PROJECT, REVIVE IF YOU WANT

SUPPORTS SR

YOU WILL NEED A FULL DUMP.CS FILE CONTAINING 100% FULL DUMP (INCLUDING ALL FULL FIELDS AND VALUES) ELSE IT WONT WORK

USAGE

1- edit the "string searchString" in the code to match the repetitive string that comes after the class name

2- build it via Visual Studio 2022

3- put the dump.cs file NAMED AS "dump.cs" in same folder as the executable

4- run the program

5- you will be left with an output folder, containing the protobuf messages as .cs files, looking like this:
image

and a defs folder containing SOME protos. please remember, this tool isnt perfect and may not parse all of them perfectly
image

6- profit

I WILL NOT GUIDE YOU ON HOW TO DEOBFUSCATE PROTOS, YOU CAN DO IT USING TOOLS OR MANUALLY IF YOU'RE CRAZY ENOUGH

KNOWN ISSUES:

  • oneof's are not being parsed