Il2CppDumper VS Il2CppInspector

By using IL2CppDumper along with the game's global-metadata.dat file, we can generate headers and structs that we can use with Ghidra, a tool for disassembling code. Once we load Engage and these headers and structs into Ghidra, we can look for a particular function called App.BattleMath$$_IsProbabilityHit. This function is provided a displayed hit (or, as Intelligent Systems calls it, ratio) and is responsible for determining whether or not that attack will actually hit. Ghidra will try to automatically decompile the assembly code into something more readable, and while the results are sometimes mixed, here it's pretty clear what's going on. We can see how, when the displayed hit is less than 51 (or when it's 100), it simply multiplies the displayed hit by 100, and when the displayed hit is 51 or greater, it uses the sin function as described earlier:

So i want to reverse a game which uses Il2cpp, so i used this to dump the files: https://github.com/Perfare/Il2CppDumper

Basically the title; I decompiled a game and intend to mod its behavior, so I used a Il2Cpp dumper that seems pretty popular (https://github.com/Perfare/Il2CppDumper).

There's plenty of resources on decompiling apks. An APK is just a zip basically, and it contains an Ill2cpp.so file & and global-metadata file. You can use Il2cppdumper (https://github.com/Perfare/Il2CppDumper/releases. https://github.com/Perfare/Il2CppDumper ) to restore the Assembly-CSharp. Then you can use IlSpy or just open the assembly or the dump.cs in visual studio that gets produced.

Download and run https://github.com/Perfare/Il2CppDumper/releases. Find and load libil2cpp.so and global-metadata.dat from your combined apk folder when it asks. This will create a bunch of files. The ones we care about right now are the ones in the DummyDll folder.

You'll need: https://github.com/Perfare/AssetStudio and (for the optional part) https://github.com/Perfare/Il2CppDumper

if the game is compiled with IL2CPP you can convert it to a dummy Assembly-CSharp file using IL2Cpp Dumper - https://github.com/Perfare/Il2CppDumper

The tool is https://github.com/Perfare/Il2CppDumper But I'm not sure it uses il2cpp, you have to check by yourself (i think there is a folder/file named il2cpp ?), I guess if you have no assembly it does because it one of the most popular option for Unity games.

That's it! It'd be 2 seconds in C#, but this tool is beyond me. Anybody have experience creating a mod like this or using IL2CPPInspector? Here is a link to the tutorial if any C++ aficionados are unfamiliar with the tool but want to take a gander: https://katyscode.wordpress.com/2021/01/14/il2cppinspector-tutorial-working-with-code-in-il2cpp-dll-injection-projects/

il2cpp.py> Running... Generated script file by Il2CppInspector - http://www.djkaty.com - https://github.com/djkaty Processing method definitions Processing constructed generic methods Processing custom attributes generators Processing Method.Invoke thunks Processing string literals Processing Il2CppClass (TypeInfo) pointers Processing Il2CppType (TypeRef) pointers Processing MethodInfo pointers Processing function boundaries Processing IL2CPP type metadata Traceback (most recent call last): File "H:\extracting shit\sf1 rema\ghidra\inspector\il2cpp.py", line 220, in ProcessJSON(jsonData) File "H:\extracting shit\sf1 rema\ghidra\inspector\il2cpp.py", line 197, in ProcessJSON DefineField(d['virtualAddress'], d['name'], d['type']) File "H:\extracting shit\sf1 rema\ghidra\inspector\il2cpp.py", line 119, in DefineField SetType(addr, AsUTF8(type)) File "H:\extracting shit\sf1 rema\ghidra\inspector\il2cpp.py", line 60, in SetType createData(addr, t) at ghidra.program.database.code.CodeManager.checkValidAddressRange(CodeManager.java:1945) at ghidra.program.database.code.CodeManager.createCodeUnit(CodeManager.java:2030) at ghidra.program.database.ListingDB.createData(ListingDB.java:422) at ghidra.program.flatapi.FlatProgramAPI.createData(FlatProgramAPI.java:1646) at jdk.internal.reflect.GeneratedMethodAccessor59.invoke(Unknown Source) at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.base/java.lang.reflect.Method.invoke(Method.java:564) ghidra.program.model.util.CodeUnitInsertionException: ghidra.program.model.util.CodeUnitInsertionException: Conflicting data exists at address 182069d98 to 182069d9f il2cpp.py> Finished!

https://github.com/djkaty/Il2CppInspector#adding-metadata-to-your-ghidra-workflow