memorytool 1.0.0__tar.gz

memorytool-1.0.0/PKG-INFO

@@ -0,0 +1,8 @@
+Metadata-Version: 2.4
+Name: memorytool
+Version: 1.0.0
+Summary: A powerful Unity memory tool with deobfuscator
+Author-email: iceglock66 <iceglockk@email.com>
+Requires-Python: >=3.7
+Description-Content-Type: text/markdown
+Requires-Dist: psutil>=5.9.0

memorytool-1.0.0/memorytool/__init__.py

@@ -0,0 +1,4 @@
+from .core import MemoryTool
+from .deobfuscator import StringDeobfuscator
+
+__version__ = "1.0.0"

memorytool-1.0.0/memorytool/core.py

@@ -0,0 +1,104 @@
+import ctypes
+import ctypes.wintypes
+import psutil
+import threading
+import time
+import re
+
+# Windows Constants
+PROCESS_ALL_ACCESS = 0x1F0FFF
+MEM_COMMIT = 0x1000
+
+
+class MemoryTool:
+    def __init__(self, process_name: str):
+        self.kernel32 = ctypes.windll.kernel32
+        self.process_name = process_name
+        self.process_handle = None
+        self.pid = None
+        self.unity_module = None
+        self.is_il2cpp = False
+        self._frozen_values = {}
+
+        self._attach()
+        self._detect_unity()
+
+    def _attach(self):
+        for proc in psutil.process_iter(['name', 'pid']):
+            if proc.info['name'].lower() == self.process_name.lower():
+                self.pid = proc.info['pid']
+                break
+        if not self.pid:
+            raise Exception(f"Process {self.process_name} not found.")
+        self.process_handle = self.kernel32.OpenProcess(PROCESS_ALL_ACCESS, False, self.pid)
+
+    def _detect_unity(self):
+        if self.get_module_base("GameAssembly.dll"):
+            self.is_il2cpp = True
+            self.unity_module = "GameAssembly.dll"
+        elif self.get_module_base("mono-2.0-bdwgc.dll"):
+            self.is_il2cpp = False
+            self.unity_module = "mono-2.0-bdwgc.dll"
+        else:
+            self.unity_module = "UnityPlayer.dll"
+
+    def get_module_base(self, module_name: str):
+        process = psutil.Process(self.pid)
+        for module in process.memory_maps(grouped=False):
+            if module_name.lower() in module.path.lower():
+                return int(module.addr.split('-')[0], 16)
+        return None
+
+    def dump_dlls(self):
+        modules = {}
+        process = psutil.Process(self.pid)
+        for module in process.memory_maps(grouped=False):
+            name = module.path.split('\\')[-1]
+            if name not in modules:
+                addr = module.addr.split('-')[0]
+                modules[name] = addr
+        return modules
+
+    def read_memory(self, address, var_type):
+        buffer = var_type()
+        if self.kernel32.ReadProcessMemory(self.process_handle, ctypes.c_void_p(address), ctypes.byref(buffer),
+                                           ctypes.sizeof(buffer), None):
+            return buffer.value
+        return None
+
+    def read_raw(self, address, size):
+        buffer = (ctypes.c_char * size)()
+        if self.kernel32.ReadProcessMemory(self.process_handle, ctypes.c_void_p(address), buffer, size, None):
+            return buffer.raw
+        return None
+
+    def write_memory(self, address, value, var_type):
+        buffer = var_type(value)
+        return self.kernel32.WriteProcessMemory(self.process_handle, ctypes.c_void_p(address), ctypes.byref(buffer),
+                                                ctypes.sizeof(buffer), None)
+
+    def get_pointer_address(self, base_address: int, offsets: list):
+        addr = base_address
+        ptr_type = ctypes.c_uint64 if ctypes.sizeof(ctypes.c_void_p) == 8 else ctypes.c_uint32
+        for i, offset in enumerate(offsets):
+            if i == len(offsets) - 1:
+                addr += offset
+            else:
+                addr = self.read_memory(addr + offset, ptr_type)
+                if not addr: return None
+        return addr
+
+    def _freeze_worker(self, address, value, var_type):
+        while address in self._frozen_values:
+            self.write_memory(address, value, var_type)
+            time.sleep(0.01)
+
+    def freeze_value(self, address, value, var_type=ctypes.c_int):
+        if address in self._frozen_values: self.unfreeze_value(address)
+        thread = threading.Thread(target=self._freeze_worker, args=(address, value, var_type), daemon=True)
+        self._frozen_values[address] = True
+        thread.start()
+
+    def unfreeze_value(self, address):
+        if address in self._frozen_values:
+            del self._frozen_values[address]

memorytool-1.0.0/memorytool/deobfuscator.py

@@ -0,0 +1,26 @@
+class StringDeobfuscator:
+    @staticmethod
+    def xor_cipher(data: bytes, key: int) -> bytes:
+        return bytes([b ^ key for b in data])
+
+    @staticmethod
+    def caesar_cipher(text: str, shift: int) -> str:
+        result = ""
+        for char in text:
+            if char.isalpha():
+                start = ord('a') if char.islower() else ord('A')
+                result += chr((ord(char) - start - shift) % 26 + start)
+            else: result += char
+        return result
+
+    @staticmethod
+    def read_unity_string(mem, address: int):
+        import ctypes
+        # Unity strings: Header(0x10) -> Length(4 bytes) -> Data(UTF-16)
+        ptr_size = ctypes.sizeof(ctypes.c_void_p)
+        len_addr = address + (0x10 if ptr_size == 8 else 0x8)
+        length = mem.read_memory(len_addr, ctypes.c_int)
+        if length and 0 < length < 1024:
+            raw = mem.read_raw(len_addr + 4, length * 2)
+            return raw.decode('utf-16')
+        return ""

memorytool-1.0.0/memorytool.egg-info/PKG-INFO

@@ -0,0 +1,8 @@
+Metadata-Version: 2.4
+Name: memorytool
+Version: 1.0.0
+Summary: A powerful Unity memory tool with deobfuscator
+Author-email: iceglock66 <iceglockk@email.com>
+Requires-Python: >=3.7
+Description-Content-Type: text/markdown
+Requires-Dist: psutil>=5.9.0

memorytool-1.0.0/memorytool.egg-info/SOURCES.txt

@@ -0,0 +1,10 @@
+pyproject.toml
+setup.py
+memorytool/__init__.py
+memorytool/core.py
+memorytool/deobfuscator.py
+memorytool.egg-info/PKG-INFO
+memorytool.egg-info/SOURCES.txt
+memorytool.egg-info/dependency_links.txt
+memorytool.egg-info/requires.txt
+memorytool.egg-info/top_level.txt

memorytool-1.0.0/memorytool.egg-info/dependency_links.txt

@@ -0,0 +1 @@
+

memorytool-1.0.0/memorytool.egg-info/requires.txt

@@ -0,0 +1 @@
+psutil>=5.9.0

memorytool-1.0.0/memorytool.egg-info/top_level.txt

@@ -0,0 +1 @@
+memorytool

memorytool-1.0.0/pyproject.toml

@@ -0,0 +1,14 @@
+[build-system]
+requires = ["setuptools>=61.0", "wheel"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "memorytool"
+version = "1.0.0"
+description = "A powerful Unity memory tool with deobfuscator"
+readme = "README.md"
+authors = [{name = "iceglock66", email = "iceglockk@email.com"}]
+dependencies = [
+    "psutil>=5.9.0",
+]
+requires-python = ">=3.7"

memorytool-1.0.0/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+

memorytool-1.0.0/setup.py

@@ -0,0 +1,10 @@
+from setuptools import setup, find_packages
+
+setup(
+    name="memorytool",
+    version="1.0.0",
+    packages=find_packages(),
+    install_requires=[
+        "psutil",
+    ],
+)