some shit i tried to make to extract the obfuscated protobuf messages from dump.cs file (needs to set manually the repetitive string that comes after the class name)
YOU WILL NEED A FULL DUMP.CS FILE CONTAINING 100% FULL DUMP (INCLUDING ALL FULL FIELDS AND VALUES) ELSE IT WONT WORK
1- edit the "string searchString" in the code to match the repetitive string that comes after the class name
2- build it via Visual Studio 2022
3- put the dump.cs file NAMED AS "dump.cs" in same folder as the executable
4- run the program
5- you will be left with an output
folder, containing the protobuf messages as .cs
files, looking like this:
and a defs
folder containing SOME protos. please remember, this tool isnt perfect and may not parse all of them perfectly
6- profit
I WILL NOT GUIDE YOU ON HOW TO DEOBFUSCATE PROTOS, YOU CAN DO IT USING TOOLS OR MANUALLY IF YOU'RE CRAZY ENOUGH
- oneof's are not being parsed