Search the Community

Game: https://play.google.com/store/apps/details?id=com.je.supersus Dumped meta/lib with GG, but having difficulties dumping the game with Il2cppDumper GUI. Read config... Initializing metadata... System.ArgumentException: An item with the same key has already been added. at System.ThrowHelper.ThrowArgumentException(ExceptionResource resource) at System.Collections.Generic.Dictionary`2.Insert(TKey key, TValue value, Boolean add) at System.Linq.Enumerable.ToDictionary[TSource,TKey,TElement](IEnumerable`1 source, Func`2 keySelector, Func`2 elementSelector, IEqualityComparer`1 comparer) at Il2CppDumper.Metadata..ctor(Stream stream) at Il2CppDumper.FormGUI.Init(String il2cppPath, String metadataPath, Metadata& metadata, Il2Cpp& il2Cpp) at Il2CppDumper.FormGUI.Dumper(String file, String metadataPath, String outputPath) I try to search for info but only found 2 links with a bit info. https://github.com/Perfare/Zygisk-Il2CppDumper/issues/30 https://forum.unity.com/threads/argumentexception-an-item-with-the-same-key-has-already-been-added-error-help.1052330/ According to github one i need to use IDA and il2cppInspector, but i'm not even sure if the dumper is the cause or the game. If the same key has been added to Dictionary`2 and ToDictionary then i guess i have to remove those keys it before it can be dumped it with Il2cppDumper? Is there a way to find those keys and remove them? I also don't know this error: at System.ThrowHelper.ThrowArgumentException(ExceptionResource resource) Not sure if that has anything to do with the duplication of keys. Perhaps also something odd but at almost the end of the metadata there is some weird data, it looks weird because it isn't properly in sync. It starts at offset 0xEA4F44 and goes up to 264 bytes. Putted it through 010 editor but there it doesn't make sense. Apparently its part of "struct Il2CppTypeDefinition typeDefinitions". int32 rgctxCount up to InterfacesIndex interfacesStart still seems follow a normal value pattern, but then VTableIndex vtableStart's value suddenly goes negative. Then if i check the next "struct Il2CppTypeDefinition typeDefinitions" and go to VTableIndex vtableStart all values go negative or big: Could this have to do with the dumping issue or did i dump wrong with GG ? I leave a link with dump files (32bit) just in case you want to have a look at it: metadata: https://mega.nz/file/OEMgTLIJ#BiW8-2BybWuErXa5JVosuuL4Cpf_4oSseU_Qu56lm5Y libil2cpp: https://mega.nz/file/iZkDiJrJ#8hjk_a9iJ2a12qzWbQ2mal7Nme5YzWlqCdrVLP5YQRg

A new major update of the game 'Night of the Full Moon' is coming out soon, which kinda caught my attention. I was able to mod an older version of the game (1.5.1.37), but that approach doesn't work for the newest version anymore (1.5.1.50). Here's my analysis: -The developers use their own anti-tamper solution called 'HProtect'. It (was?) responsible for decrypting the metadata, and it also force closed the game if any changes were detected. -They updated HProtect, and I wasn't able to figure out what it does now. -The metadata in the old version of the game was obviously obfuscated, but the one in the new version is not, since the 4 magic bytes are valid (I uploaded some screenshots). -The il2cpp.so binary seems to be valid and not encrypted at all. Things that I tried so far: -Using the zygisk il2cppdumper didn't work (dump.cs hasn't been created), but it did work with the old version of the game though. -Dumping via GameGuardian worked, but the output was identical to the file you get from the apk. -il2cppdumper gives me the "System.IO.EndOfStreamException: Unable to read beyond the end of the stream" error when trying to dump. -il2cppInspector says "could not verify the integrity of the metadata file or accurately identify the metadata sub-version" when selecting the metadata file. -Libdumper didn't work (also produced the identical output). I'm kinda lost at this point, it would be great if someone could help me out with this. Also, please let me know if I forgot to include something. Thanks in advance Metadata from the newest version.rar Metadata from the older version.rar Newest version of HProtect.rar Older version of HProtect.rar