Last edited by TomSwitch,
Members-only download
Post automatically merged:
Last edited by TomSwitch,
Members-only download
@NeoGranzon don't say I never take care of you. I ported il2cpp to Switch for you.
When dumping with main.elf, il2cppdumper(Win) incorrectly shifts the CodeRegistration address of Unity Game version 24.4, can not extract any c# and bin files, while dumping with main without any problem.
System.IO.EndOfStreamException: Unable to read beyond the end of the stream.
at Il2CppDumper.BinaryStream.ReadUIntPtr() in C:\GitHub\Il2CppDumper\Il2CppDumper\IO\BinaryStream.cs:line 223
at Il2CppDumper.BinaryStream.ReadPrimitive(Type type) in C:\GitHub\Il2CppDumper\Il2CppDumper\IO\BinaryStream.cs:line 104
at Il2CppDumper.BinaryStream.ReadClass[T]() in C:\GitHub\Il2CppDumper\Il2CppDumper\IO\BinaryStream.cs:line 120
at Il2CppDumper.BinaryStream.ReadClassArray[T](Int64 count) in C:\GitHub\Il2CppDumper\Il2CppDumper\IO\BinaryStream.cs:line 190
at Il2CppDumper.BinaryStream.ReadClassArray[T](UInt64 addr, Int64 count) in C:\GitHub\Il2CppDumper\Il2CppDumper\IO\BinaryStream.cs:line 203
at Il2CppDumper.BinaryStream.ReadClassArray[T](UInt64 addr, UInt64 count) in C:\GitHub\Il2CppDumper\Il2CppDumper\IO\BinaryStream.cs:line 197
at Il2CppDumper.Il2Cpp.MapVATR[T](UInt64 addr, UInt64 count) in C:\GitHub\Il2CppDumper\Il2CppDumper\Il2Cpp\Il2Cpp.cs:line 266
at Il2CppDumper.Il2Cpp.Init(UInt64 codeRegistration, UInt64 metadataRegistration) in C:\GitHub\Il2CppDumper\Il2CppDumper\Il2Cpp\Il2Cpp.cs:line 165
at Il2CppDumper.Il2Cpp.AutoPlusInit(UInt64 codeRegistration, UInt64 metadataRegistration) in C:\GitHub\Il2CppDumper\Il2CppDumper\Il2Cpp\Il2Cpp.cs:line 114
at Il2CppDumper.Elf64.PlusSearch(Int32 methodCount, Int32 typeDefinitionsCount, Int32 imageCount) in C:\GitHub\Il2CppDumper\Il2CppDumper\ExecutableFormats\Elf64.cs:line 97
at Il2CppDumper.Program.Init(String il2cppPath, String metadataPath, Metadata& metadata, Il2Cpp&il2Cpp) in C:\GitHub\Il2CppDumper\Il2CppDumper\Program.cs:line 210
ERROR: An error occurred while processing.
Press any key to exit...
I also compare other unity version game extracted files from main and main.elf, all RVA/definition/ect. offset change, so unfortunately, games of unity version 24.4 can not get supported by breeze 100's new features
White Day: A Labyrinth Named School 1.0.2 TID: 010076601839C000 BID: 36D6740B3873CE4A
ダンガンロンパ 希望の学園と絶望の高校生 (Danganronpa - Trigger Happy Havoc Anniversary Edition) 1.0.1 TID: 0100BF70140EE000 BID: FE75821656F9FCEB
System.IO.EndOfStreamException: Unable to read beyond the end of the stream.
at Il2CppDumper.BinaryStream.ReadUIntPtr() in C:\GitHub\Il2CppDumper\Il2CppDumper\IO\BinaryStream.cs:line 223
at Il2CppDumper.BinaryStream.ReadPrimitive(Type type) in C:\GitHub\Il2CppDumper\Il2CppDumper\IO\BinaryStream.cs:line 104
at Il2CppDumper.BinaryStream.ReadClass[T]() in C:\GitHub\Il2CppDumper\Il2CppDumper\IO\BinaryStream.cs:line 120
at Il2CppDumper.BinaryStream.ReadClassArray[T](Int64 count) in C:\GitHub\Il2CppDumper\Il2CppDumper\IO\BinaryStream.cs:line 190
at Il2CppDumper.BinaryStream.ReadClassArray[T](UInt64 addr, Int64 count) in C:\GitHub\Il2CppDumper\Il2CppDumper\IO\BinaryStream.cs:line 203
at Il2CppDumper.BinaryStream.ReadClassArray[T](UInt64 addr, UInt64 count) in C:\GitHub\Il2CppDumper\Il2CppDumper\IO\BinaryStream.cs:line 197
at Il2CppDumper.Il2Cpp.MapVATR[T](UInt64 addr, UInt64 count) in C:\GitHub\Il2CppDumper\Il2CppDumper\Il2Cpp\Il2Cpp.cs:line 266
at Il2CppDumper.Il2Cpp.Init(UInt64 codeRegistration, UInt64 metadataRegistration) in C:\GitHub\Il2CppDumper\Il2CppDumper\Il2Cpp\Il2Cpp.cs:line 165
at Il2CppDumper.Il2Cpp.AutoPlusInit(UInt64 codeRegistration, UInt64 metadataRegistration) in C:\GitHub\Il2CppDumper\Il2CppDumper\Il2Cpp\Il2Cpp.cs:line 114
at Il2CppDumper.Elf64.PlusSearch(Int32 methodCount, Int32 typeDefinitionsCount, Int32 imageCount) in C:\GitHub\Il2CppDumper\Il2CppDumper\ExecutableFormats\Elf64.cs:line 97
at Il2CppDumper.Program.Init(String il2cppPath, String metadataPath, Metadata& metadata, Il2Cpp&il2Cpp) in C:\GitHub\Il2CppDumper\Il2CppDumper\Program.cs:line 210
ERROR: An error occurred while processing.
Press any key to exit...
I also compare other unity version game extracted files from main and main.elf, all RVA/definition/ect. offset change, so unfortunately, games of unity version 24.4 can not get supported by breeze 100's new features
White Day: A Labyrinth Named School 1.0.2 TID: 010076601839C000 BID: 36D6740B3873CE4A
ダンガンロンパ 希望の学園と絶望の高校生 (Danganronpa - Trigger Happy Havoc Anniversary Edition) 1.0.1 TID: 0100BF70140EE000 BID: FE75821656F9FCEB
you can always dump with main, I just find the build in one less reliable that is all, if it works no reason to not use it.
Is it possible to make Breeze able to decompile games that use the unreal engine, too? That would be another great addition to things you can do on the switch with Breeze.
Members-only download
Gen2 & Memory Explorer Enhancement – A new Class Field button has been added to both the Gen2 and Memory Explorer menus, providing direct access to the pinned Class Field Instance View. The button is now also tolerant of minor address inaccuracies.
Class Field is now a super button. Try it and let me know if you agree. Tolerant of address inaccuracies means more power to more people.
Members-only download
- Cheat Menu – Added an Edit Note button. You can now create or edit cheat notes directly on the device, without needing a PC.
- Search Menu - Added a Klass dump button. This will dump 0x1000 bytes from class instance candidate start. Try it and let me know if it is a useful feature to use instead of a full memory dump.
- Joined
- Nov 7, 2021
- Messages
- 1,254
- Reaction score
- 5,778
- Trophies
- 2
- Age
- 44
- Location
- Denpasar Bali
- XP
- 7,916
- Country
How do you use the Klass Dump..i dont see it in the menu..can you help me...Thank you for your great contribution...You are awesome
How do you use the Klass Dump..i dont see it in the menu..can you help me...Thank you for your great contribution...You are awesome
To see this button you need to switch to normal mode. Likely to be the last button.
It will freeze for about 4 second, then you seen the status line on the right panel updating.
Klass (candidates) is where the definition is.
Klass_instance (candidates) is where the instance is.
And the dump is simply the memory from instance start + 0x1000.
Be mindful that these are candidates, not necessarily real Klass objects.
The dump is smaller than a full memory dump. Whether it helps that much, I don’t know.
Yep, I'm learning to use ida pro, and I've been able to crack into the unreal games, but you've made it way more convenient to do it all on the switch if I can!
I am having 1 problem, though. I'm trying to load the files from nxdump tool that breeze extracted, but in the switch il2cpp dumper, I get this error message "Failed to load metadata image table size is not aligned to element size. Loading failed" Do you know what could be causing this? I'm on atmos 1.10.1, firmware 21.1.0, and breeze 100.4, and I'm using a full memory dump if any of this matters. Thanks.
Some older one you need to use main not main.elf. If that also don't work then it is end of the road for now.
Breeze can do class field view on it's own with no dump.cs. It is less accurate.
@dsrules I am now looking into pointer search. You are the best I know so want to tap your brain. Do you think unity pointer chains always point to a Klass instant? If that is true I can significantly improve Unity pointer search.
This is one that is the case. The value is max hp.
One jump back
@dsrules I think never mind, it's probably already like this without doing anything. I see no significant different looking for klass start as the offset.
Unity=1 searches for Klass pointers only. The results look very similar to simply setting num_segment=1, which may reflect the nature of Unity—where pointers often already resolve to Klass instances.
It could still make a difference in certain games, but this is highly dependent on the game’s architecture and the specific field being targeted in the pointer search.
Improvements & Fixes
This is one that is the case. The value is max hp.
One jump back
Post automatically merged:
@dsrules I think never mind, it's probably already like this without doing anything. I see no significant different looking for klass start as the offset.
Post automatically merged:
Members-only download
Unity=1 searches for Klass pointers only. The results look very similar to simply setting num_segment=1, which may reflect the nature of Unity—where pointers often already resolve to Klass instances.
It could still make a difference in certain games, but this is highly dependent on the game’s architecture and the specific field being targeted in the pointer search.
Post automatically merged:
Members-only download
Improvements & Fixes
- Prevented double visiting of Klass instances during pointer search in Unity games.
- Pointer search can now safely reach depth 12 without risking excessive memory usage or crashes.
Last edited by TomSwitch,
Members-only download
The AOB system lets you create version-resilient cheat hooks. When a game updates, instead of manually finding the hook address again, the AOB file stores a byte pattern that can automatically locate the correct address in the new version.
If cheat creators share the AOB file and the ASM source, users can update them themselves with just a few button presses for most cheats.
Thanks, must have not compile when I change the version. Seems like already the second time. Fixed.
Post automatically merged:
Members-only download
A quick fix to prevent crashes when Breeze tries to search for cheat files on the web for LeafGreen and FireRed. Older version simply create a bad file but the last one would crash.
Nobody voice out when name extraction failed. Anyone have seen any app that is able to display the title name for LeafGreen or FireRed?
This fix is minor so I just edited 102.0 to become 102.1.
Last edited by TomSwitch,
Is this with Unity turned on? 0, B8, A8, and C0 are specifically designated as endpoints for Unity = 1. If not, then it’s a bug.
Unity = 1 is probably a bit flaky—I’m not sure yet whether it actually adds value. I’ll need your help on that.
Last edited by TomSwitch,
hi @TomSwitch
i think there is a bug on this 102.1 when it try to load the cheat online, i got crashed 1 game before (cant remember the name) it load up online and it crashed could be 1 version before this
i just got crashed on this game Saints Row IV (as i try to going into template cheat setup of mine) after reboot and go in see fps cheats is save in
is there a way to turn off auto download cheat online?
i think there is a bug on this 102.1 when it try to load the cheat online, i got crashed 1 game before (cant remember the name) it load up online and it crashed could be 1 version before this
i just got crashed on this game Saints Row IV (as i try to going into template cheat setup of mine) after reboot and go in see fps cheats is save in
is there a way to turn off auto download cheat online?
Similar threads
