vfsfitvnm / frida-il2cpp-bridge

A Frida module to dump, trace or hijack any Il2Cpp application at runtime, without needing the global-metadata.dat file.
https://github.com/vfsfitvnm/frida-il2cpp-bridge/wiki
MIT License
1.03k stars 202 forks source link

Question about enumerate classes #219

Closed Chensem closed 2 years ago

Chensem commented 2 years ago

Snippets in dump.cs like below image try to find this class return null image use classes to filter can find this class image as the above show , the class's name is <>c , so try to use the snippet as below image

so how to correct this snippet ?

vfsfitvnm commented 2 years ago

That class is a nested class, that's why it doesn't come up with class or tryClass. The classes property, instead, shows every class, no matter if it's nested or not. This is not a decision of my own, but this is how the il2cpp internals work!

So, you want to do this instead:

AssembleCSharp.class("LitJson.JsonMapper").nested("<>c");