Reverse Engineering Chat

https://blog.washi.dev/posts/misconceptions-about-dotnet/ I like this post about .NET, and learned a few things to make my life easier for RE 😬

ip loggeer

can you be more verbose?

im not a cli app running with a -verbose & aka --debug argument

life... easier for RE? especially at shitcrosoft :/ xd

hello everyone. who have IL2CPP decryption?

real easy way rn use frida to dump the decrypted metadata from memory while the game runs no need to crack the encryption urself frida js can finds and dumps decrypted global metadata.dat super clean, works on android mostly but adaptable finally u can use il2cppdumper

try this instead use an android emulator like bluestacks or ldplayer with root on or borrow a phone if it's mobile game use frida there then use that with libil2cpp.so / GameAssembly.dll in Il2CppDumper if u don't wanna deal with metadata at all plz check this https://github.com/vfsfitvnm/frida-il2cpp-bridge it dumps classes and methods live, no .dat needed what's the game name or package?

User Gideon Afosa Baffoe has 1/3 warnings; be careful! Reason: stay on topic

This find memory values functions??

nah bro those mainly for decrypting and dumping the global metadata.dat so il2cppdumper can spit out readable classes, methods and fields with names and offsets

Yes but

memory values is offsets from dump.cs health/pos etc like 0x1A2B no aes, custom xor and fsfshuffle w/ key from launcher json grab dat, fiddler json from prod.escapefromtarkov.com/client/metadata, run this cpp https://www.unknowncheats.me/forum/escape-from-tarkov/726047-tarkov-il2cpp-decryption.html if u decrypt the decrypted dat file with il2cppdumper, u can get the offset value

i tried this script from unknown cheats, but it's not fully script..so i should either add or frida