How to dump protected global-metadata.dat(Legend Slime)

[nok1a]

Sometimes dumping does not go to well because of some protection. Here a video on some common metadata protections and how to fix it so that you obtain a proper dump.cs, but note that this does not work for "Every" protected unity game. In this video we use Legend Slime as example which has metadata protected.

Requirement:

• Computer
• Il2CppDumperGUI: https://github.com/AndnixSH/Il2CppDumper-GUI
• Emulator: Bluestacks, Nox, VLPlayer...etc
• Game engine: Unity

 

 

Edited March 13, 2023 by nok1a
add requirement

[THETWINSOFFICIAL]

On 3/13/2023 at 7:54 PM, nok1a said:

Sometimes dumping does not go to well because of some protection. Here a video on some common metadata protections and how to fix it so that you obtain a proper dump.cs, but note that this does not work for "Every" protected unity game. In this video we use Legend Slime as example which has metadata protected.

Requirement:

• Computer
• Il2CppDumperGUI: https://github.com/AndnixSH/Il2CppDumper-GUI
• Emulator: Bluestacks, Nox, VLPlayer...etc
• Game engine: Unity

 

 

I try mobile phone but not work --_++

[nok1a]

1 hour ago, Alessa- said:

I try mobile phone but not work --_++

I'm not sure what steps you did on mobile phone nor which game, can't help with provided info. I only dump process memory on phone/emulator with GG. I use windows Il2CppDumperGUI for create struct. 

[nok1a]

I also seen that if you use those mobile variants of il2cppDumper protected games usually can't be dumped.

[nok1a]

Online il2cppDumper either:

Really have to use Il2CppDumperGUI (windows).

[THETWINSOFFICIAL]

6 hours ago, nok1a said:

I'm not sure what steps you did on mobile phone nor which game, can't help with provided info. I only dump process memory on phone/emulator with GG. I use windows Il2CppDumperGUI for create struct. 

Metadata protected 

64 bit 

-30 and +38 

 

32bit -30 dan 28 

And mush same addres of header ok ?

But i try phone not same header metada 

Is wrong, maybe pc work

5 hours ago, nok1a said:

Online il2cppDumper either:

Really have to use Il2CppDumperGUI (windows).

For il2cppdumper gui 

I use il2cppdumper lates version 

In shell android

[nok1a]

32 bit minus -20, then +28 for offset. Which game was it?

[THETWINSOFFICIAL]

On 3/16/2023 at 1:41 PM, nok1a said:

32 bit minus -20, then +28 for offset. Which game was it?

Yes and 

64bit

-30 and +38 

Slime and and etc

[THETWINSOFFICIAL]

On 3/16/2023 at 1:41 PM, nok1a said:

32 bit minus -20, then +28 for offset. Which game was it?

So... ?

[nok1a]

On 3/18/2023 at 7:52 AM, The-Twins said:

So... ?

Send video of how you do it.

[THETWINSOFFICIAL]

56 minutes ago, nok1a said:

Send video of how you do it.

have you ever tried it on the phone?

[nok1a]

1 hour ago, The-Twins said:

have you ever tried it on the phone?

No, i only dump with GG on phone, then transfer the files to windows. I assume you dump with a dumper designed for mobile only. Which doesn't work with protected games.

Edited March 20, 2023 by nok1a

[THETWINSOFFICIAL]

2 hours ago, nok1a said:

No, i only dump with , i only dump with GG on phone, then transfer the files to windows. I assume you dump with a dumper designed for mobile only. Which doesn't work with protected games. , then transfer the files to windows. I assume you dump with a dumper designed for mobile only. Which doesn't work with protected games.

Bro i dump follow tutorial you video from mr.deagonstart but 

Addres not same and metadafile 

https://youtu.be/Z2jKfLl9Dis

[nok1a]

18 hours ago, The-Twins said:

Bro i dump follow tutorial you video from mr.deagonstart but 

Addres not same and metadafile 

https://youtu.be/Z2jKfLl9Dis

I don't think neither of those are the right metadata. When the metadata is in region Other, the start of metadata should be at a address ending with 000. I don't think it's normal that for you suddenly the metadata is at a address ending with 014 or even D18. I checked your previous videos and there the metadata as well started at address ending with 000.

[nok1a]

On 3/20/2023 at 8:28 PM, The-Twins said:

Bro i dump follow tutorial you video from mr.deagonstart but 

Addres not same and metadafile 

https://youtu.be/Z2jKfLl9Dis

It's the wrong metadata. Sometimes you have to wait sometime before metadata gets loaded. Had the issue several times.