某三国游戏提取lua资源文件

import frida

import sys

import os

import time

"""

adb forward tcp:27042 tcp:27042

adb forward tcp:27043 tcp:27043

"""

package_id = 'com.gale.sanguokill.hd'  # 隐去

dev = frida.get_remote_device()

pid = dev.spawn(package_id)

dev.resume(pid)

time.sleep(1)

process = dev.attach(pid)

# luaL_loadbuffer

src = '''

var addr = Module.findBaseAddress('libgame.so').add(0x00C72CB8)

Interceptor.attach(addr, {

    onEnter: function(args) {

        var name = Memory.readUtf8String(args[3]);

        var obj = {}

        obj.size = args[2].toInt32()

        obj.name = name;

        obj.content = Memory.readCString(args[1], obj.size);

        send(obj);

    }

} )

'''

def write(path, content):

    print('write:', path)

    folder = os.path.dirname(path)

    if not os.path.exists(folder):

        os.makedirs(folder)

    open(path, 'w').write(content)

script = process.create_script(src)

def on_message(message, data):

    if message['payload']['name']:

        name = message['payload']['name']

        name = "./app/" + name

        content = message['payload']['content']

        dirName = os.path.dirname(name)

        if not os.path.exists(dirName):

            os.makedirs(os.path.dirname(name))

        write(name, content)

script.on('message', on_message)

script.load()

sys.stdin.read()