ThePianoGuy

Nice

thanks

i found this when i was looking for gameloft hacks

nice

Nice. That's was what i was looking for

I would like to know the software. PM me

nice

Is there infomation or source code about native code injection for Android that i can write my simple code to modify offsets and compile it into .so file, like mobile substrate code injection?

ok let's improve the console version lol

@vorrac have a nice holiday

Requirements: - Net Framework 4 - Windows 7 and above Features: - Select files - Rename files - Set output directory. - Set mode. - Set registration offsets - Auto fill up offset registrations after dump - Drag and drop support - Remember everything except registrations - Logs saves on exit. It saves on your documents if tool is located in C drive. - Works as same as original Il2CppDumper Download: Mediafire Dropbox How to use: This works as same as original Il2CppDumper but with more advanced features. Open .apk (Android) or .ipa (iOS) using 7-zip or Winrar. Extract libil2cpp.so file from ARM or x86 folder (Android) or extract binary file that does not have a file extension (iOS) Extract global-metadata.dat from \Data\Managed\Metadata\ Select binary file (.so file or iOS binary) and global-metadata.dat file. Set your output directory Rename the files if you want Select your mode. If manual set, you need to imput offsets you found in the binary file. Press start when you are ready Credits: Perfare Il2CppDumper AndnixSH (GUI)

updated to 1.41

i'm in

thanks

I'm in

I want sony xperia xz

Sorry but I'm not familiar with code injection. Please create a new thread to ask question. Thank you

If there is no class names in ida, you can't hook the class function. do code injection instead. There are lot of tutorials in iosgods. Just search and search Nevermoe's loader is unstable

Why do you want to hack IEnumerator? I don't think it's useful

Anyone have a full list of Armv8 instructions or any sources to learn more about armv8? Google search still freaking suck at searching

thanks

As requested, here is the tutorial how to dump il2cpp of iOS Unity games. With Il2CppDumper, it will be much easier to find useful functions and offsets to hack. No need to waste your time debugging the game. Requirements: - ARM/ASM knowledge - IDA hacking experience - IDA Pro. Download link - Notepad++. Download link - Il2CppDumper (Windows). Download link - Clutch or Rasticrac for jailbroken devices or visit appvn.com to download latest cracked free games - Winrar or 7-zip to open .ipa file Instructions: Download Il2CppDumper released version by Perfare and extract the program To open .ipa file, simply rename file extension to .zip and open it If you are using 7-zip, right click -> 7-zip -> Open Archive to open .ipa file directly Navigate to \Payload\<app or game name>.app\ and extract the big binary file that doesn't have file extension Navigate to \Payload\iosfps.app\Data\Managed\Metadata\ and extract global-metadata.dat 32-bit: Press 1 for 32-bit and press 2 for auto. Please use Auto mode to get the program to find offsets and dump code for you because looking for 2 required pointers (CodeRegistration and MetadataRegistration) in IDA Pro to dump is too complicated and Unity already stripped all names of functions which means it will be harder to find, As you used auto mode, the program will tell the pointers, but you do not need to know it if you have no idea what it is. Skip 64-bit steps if you are working with 32-bit 64-bit: Auto mode does not work on 64-bit binary yet. Here is dev's response "I have to say, these same questions will make me feel that adding auto feature is a bad decision We have to find 2 required offsets (CodeRegistration and MetadataRegistration) in IDA to dump. Open IDA Pro 64-bit (idaq64.exe), and disassemble the binary in 64-bit. Search function name InitFunc_1. Above InitFunc_1, there is sub function that contains 2 pointers we need. sub_100C46D8C ; DATA XREF: InitFunc_1+8o ADRP X0, #unk_101D48FE8@PAGE ADD X0, X0, #unk_101D48FE8@PAGEOFF ADRP X1, #dword_101D948C8@PAGE In Il2CppDumper, Press 2 for 64-bit and Press 1 for manual. Input your pointers: Input CodeRegistration(X0): your first pointer Input MetadataRegistration(X1): your second pointer The dump.cs file should be created at the location where Il2CppDumper.exe is located Open dump.cs with Notepad++ by right click and select Edit with Notepad++ Inside dump.cs, you'll see C# codes. Method bodies are not dumped but it's a very simple code that tells you function names and offsets to mod. launch Il2CppDumper.exe. It will open the dialog twice to select file. For ELF file or Mach-O file, select the binary file. For global-metadata.dat, select global-metadata.dat It will ask you to select platform, 32-bit or 64-bit. Press 1 for 32-bit or press 2 for 64-bit. Now for Mode, Press 1 for manual and press 2 for auto. Please use Auto mode to get the program to find offsets and dump code for you because looking for 2 required offsets (CodeRegistration and MetadataRegistration) in IDA Pro to dump is too complicated and Unity already stripped all names of functions which means it will be harder to find, and I haven't find out where to find 2 offsets in 64-bit binary yet. As you used auto mode, the program will tell the offsets, but you do not need to know it if you have no idea what it is. The dump.cs file should be created at the location where Il2CppDumper.exe is located Open dump.cs with Notepad++ by right click and select Edit with Notepad++ Inside dump.cs, you'll see C# codes. Method bodies are not dumped but it's a very simple code that tells you function names and offsets to mod. To search, click Search -> Find... To find all keyword, click on Find All in Current Document If you never seen C# code before, I'll explain a bit what the codes mean. I'm bad at explaining what these code means but I hope it goes well This comment you see on top is just a list .dll files that are been converted into il2cpp // Image 0: mscorlib.dll - 0 // Image 1: System.Security.dll - xxxx … // Image xx: Assembly-CSharp.dll - xxxx The Assembly-CSharp.dll (Android users know this) is a game logic thing and it is what we looking for. The full code of "Assembly-CSharp.dll" thingy is always located somewhere at the bottom of the dumped file This class body is like a group to make programmers easier to find codes. For example PlayerAntiHack class contains anti-hack code related. // Namespace: public class PlayerScript : MonoBehaviour // TypeDefIndex: 4303 { } In IDA you'll probarly see function names like Player::Get_Gold… Player::Get_Cash… Player::Isbanned… …. I'll bring this better details for you: A class is a construct that enables you to create your own custom types by grouping together variables of other types, methods and events. A class is like a blueprint. It defines the data and behavior of a type. ... Unlike structs, classes support inheritance, a fundamental characteristic of object-oriented programming. In the class, you'll see something like this: // Fields private int primaryWeaponIndex; // 0x10 private float minSpread; // 0x820 private float spread; // 0x824 private float visualSpread; // 0x828 …. Fields is not what we looking for so let's look into Methods. // Methods private int findNextAvailableWeapon(int currentWeaponIndex); // 1e704c private bool IsLookingAtPlayer(PlayerScript player); // 1f3894 public bool HasBeenVisible(); // 1f2fa0 …. public int get_Gold_Example(); // 1a2b3c public float float_example(); // 1a2b3d …. This is what we looking for. These simple codes explains the name of the methods/functions, what type and the REAL IDA OFFSETS are written in the green commenented text. public, private, protected etc, are access modifier. It's not important to know static is a static modified to declare a static member. It's not important to know int, float, double, boolean etc are data type. If you look up the offset in IDA, you will see a sub_xxxxxx Write down all useful functions + offsets you found inside the dumped .cs file and start writing your code injection. Note: It is suggested that you disassemble the binary file and look up the offsets to see if there are enough spaces to replace the instructions to hack. That's all. Good luck hacking iOS games! Credits: AndnixSH# Perfare (Il2CppDumper https://github.com/Perfare/Il2CppDumper) If you have any issues with Il2CppDumper, please report the issue at: https://github.com/Perfare/Il2CppDumper/issues/

Just tried it but it's not giving me list of applications and it says "There are no encrypted applications on this device"

I have a jailbroken iPad 2 running 9.3.5. As requested by my fans, I want to crack il2cpp iOS free games to make tutorial how to dump il2cpp and find useful function names + offsets. About Clutch2, MTerminal crash when I try to dump Hearthstone and got Segmentation fault: 11 error when i try to dump Dead Trigger 2. using ulimit -n 512 or above doesn't work. About Rasticrac, it gives me "935 and executable is 60 blah blah" error even i installed the game using iTunes. Apple had removed the ability to download apps and games from iTunes (PC version) so no more Rasticrac cracking How do i do now?