Skip to content

DOWNLOAD.md

Latest commit

 

History

History
53 lines (37 loc) · 1.77 KB

DOWNLOAD.md

File metadata and controls

53 lines (37 loc) · 1.77 KB
Raw

Downloading the Target Binary

The target binary does NOT ship in this repo. Get it from a USB drive at the event or download the APK yourself.

Option 1: USB Drive (fastest)

Grab a USB drive from the front table. It contains:

  • libil2cpp.so — the compiled game binary (ARM64)
  • global-metadata.dat — Unity's metadata file
  • output/ — pre-generated Il2CppDumper output (dump.cs, script.json, stringliteral.json)
  • A pre-analyzed Ghidra project with names applied and auto-analysis complete

The pre-analyzed Ghidra project saves you 15+ minutes. Open it directly in Ghidra.

Option 2: Download the APK

Target: Subway Surfers 6.04.0
Version 6.04.0
SHA256 00e45db1a8cfb99cf71bad6e3f6f427fea349196f3813631e537e15b4e5c0088
  1. Go to APKMirror or APKPure.
  2. Search for "Subway Surfers" and find version 6.04.0 specifically.
  3. Download the arm64-v8a variant (.apk, not .apks or .xapk).
  4. Verify the SHA256: sha256sum SubwaySurfers_6.04.0.apk

Option 3: extract.py (automated)

Once you have the APK:

python target/extract.py path/to/SubwaySurfers.apk

This extracts libil2cpp.so and global-metadata.dat, then runs Il2CppDumper if it's installed.

After Extraction

You should have:

libil2cpp.so          — the binary to analyze in Ghidra
global-metadata.dat   — Unity metadata (needed by Il2CppDumper)
output/
  dump.cs             — C# class definitions with offsets
  script.json         — address-to-name mappings for Ghidra
  stringliteral.json  — string literals with addresses

Verify: grep -i "coin" output/dump.cs should show coin-related classes.

Next: Follow setup/IL2CPP_SETUP.md to import names into Ghidra.