https://estertion.win/media/bandicam%202019-10-29%2013-39-41-080.mp4
Open resources.assetes
, search CRIWareInitializer
, select Managed(non-il2cpp) / generated DummyDll(il2cpp dumper) folder
iOS tweak, package at com.estertion.crikeylogger_3_iphoneos-arm.deb or https://repo.estertion.win/
Intercept and log hca key
Usage:
- Use il2cppDumper to dump the function offset of
CriWareDecrypterConfig.ctor()
(You might need some tool such as Clutch to dump the app exectuable binary) - Install the deb package
- Modify
/Library/MobileSubstrate/DynamicLibraries/CRIKeyLogger.plist
, edit entryInjectAppID
to app id to inject, edit entryInjectFunctionOffset
to function offset fromdump.cs
- Open the game and retrive your key
拦截并记录hca密钥
用法:
- 用 il2cppDumper 获取
CriWareDecrypterConfig.ctor()
函数的偏移地址 (你可能需要如 Clutch 之类的工具获得未加密的程序可执行文件) - 安装deb包
- 在设备上修改
/Library/MobileSubstrate/DynamicLibraries/CRIKeyLogger.plist
, 编辑InjectAppID
至需要注入的程序id, 编辑InjectFunctionOffset
至从dump.cs
里得到的函数偏移地址 - 打开游戏取得key