Tutorial Manually dump il2cpp unity 2019.x.x on Android games

[AndnixSH]

This is for Unity 2019.x.x on Android games

Input correct unity version you have found in any asset files... Just put 2019.1

When the error occur, do NOT close cmd. Remember the offset of MetadataRegistration

In the GUI version of dumper, it will also write the MetadataRegistration offset for you

Disassemble libil2cpp.so file with IDA Pro and let it finish loading for a while

Press G and jump to address of MetadataRegistration

Press X to view xrefs as follows.

Double-click on the blue selection in the figure to jump.

armeabi-v7a:
The CodeRegistration offset is right below MetadataRegistration

arm64-v8a:
Press space to switch to graph mode and look way above

Can't press space due to red instructions?
Click on the loc_xxxxx and press X to view xrefs as follows.

Double-click on the blue selection in the figure to jump.

Click on the loc_xxxxx and press X to view xrefs again

And double-click on the blue selection in the figure to jump.

You will be jumped to sub_xxxxx where you can see the CodeRegistration offset highlighted

x86:
The CodeRegistration offset is right below MetadataRegistration

Relaunch il2cppdumper and dump manually with the offsets you have found

 

[Francois284Modz]

thanks you man i get this done it will help us alot

 

[Mr Ikso]

can throw a bug report on the Perfare on github, let him fix automatically dump

 

[Arsenal]

AndnixSH is the best
love you

 

[komik]

@AndnixSH how about this?

and if 2019 this:

 

[AndnixSH]

@komik select auto plus. If still not work then create issue to Perfare/Il2CppDumper

 

[komik]

@komik select auto plus. If still not work then create issue to Perfare/Il2CppDumper

@AndnixSH well i will crate issue to perfare thanks

 

[Francois284Modz]

@AndnixSH well i will crate issue to perfare thanks

What game is it?

 

[komik]

What game is it?

@Francois284Modz this>> とある魔術の禁書目録 幻想収束 - Apps on Google Play
japanese game

 

[Trolino]

@AndnixSH how about this?
View attachment 166891
and if 2019 this:
View attachment 166892

I am getting the exact same thing. Trying to dump Teppen, new Capcom card game.

TEPPEN APK 3.5.0 (Android Game) - Download

Download TEPPEN APK [1.96 GB] (✓ Free) - TEPPEN Game - Latest Version. Developer: GungHo Online Entertainment, Inc. - Package Name: jp.gungho.teppen

apkcombo.com

 

[komik]

I am getting the exact same thing. Trying to dump Teppen, new Capcom card game.

TEPPEN APK 3.5.0 (Android Game) - Download

Download TEPPEN APK [1.96 GB] (✓ Free) - TEPPEN Game - Latest Version. Developer: GungHo Online Entertainment, Inc. - Package Name: jp.gungho.teppen

apkcombo.com

maybe i will try old dumper before release 4.5.11

 

[komik]

maybe i will try old dumper before release 4.5.11

i have test it, still same

 

[AndnixSH]

i have test it, still same

It's Encrypted, filled with 0 bytes
For now do some research, dump it from memory and recover it. I will make public tutorial if many games encrypt il2cpp but my method is useless in some games since encrypted bottom blocks can't be recovered by dump

 

[komik]

It's Encrypted, filled with 0 bytes
For now do some research, dump it from memory and recover it. I will make public tutorial if many games encrypt il2cpp but my method is useless in some games since encrypted bottom blocks can't be recovered by dump

View attachment 167715

wow

 

[Ducting6]

encrypt il2cpp

Yeah i have encounter some encrypt lib in new game nowdays

 

[AndnixSH]

Update about looking for offset in arm64-v8a

 

[BMD4E]

Very nice

 

[nik2143]

It's Encrypted, filled with 0 bytes
For now do some research, dump it from memory and recover it. I will make public tutorial if many games encrypt il2cpp but my method is useless in some games since encrypted bottom blocks can't be recovered by dump

View attachment 167715

I hope for a release

 

[opzon]

Being new to modding I probably shouldn't be here. Regardless, with my game I didn't get blue text stating 'CodeRegistration' but I did follow the guide and this is for armeabi-v7a. Assuming my code registration is after R0, PC, R0 like yours is mine looks like D1CBB0 (not starting with a number) and my 'MetadataRegistration' looks like d533f0 (again, doesn't start with a number and idk if that would matter just seems weird to me).

Picture of the IDA location along with a picture of Il2CppDumper dumping out the registration code and of course I almost forgot the picture of the error when I enter the two.

 

[AndnixSH]

@opzon Blue text are just my comments. You are doing right, this error just game compatibility issues. Can you tell me what game it is?