How to get offsets from game without libil2cpp.so

[kalibro]

Hi, can somebody explain where can i find dump offsets for game which hasn't libil2cpp.so? Thanks 

[MC874]

5 hours ago, kalibro said:

Hi, can somebody explain where can i find dump offsets for game which hasn't libil2cpp.so? Thanks 

Hi @kalibro. In general, you should do it manually. Inspecting the Lib structure using IDA or Ghidra, off course  you need some knowledge on Arm Instruction (Assembly Language) and this is not an easy task.

Quote

offsets for game

Well if we make the scale more small, technically, you can entirely depends on Game Guardian for Inspecting Libs. You can either find the Offsets one-by-one using GG or see-ing the Lib ELF Table. Well, I was saying there's no Universal Offsets Dumper for Any Libs. That's why; Reverse Engineering work exist.

Quote

for game which hasn't libil2cpp.so?

Well, it is depends on The Engine the game produced. Using Game Engine will produce same pattern (Although not most engine), then it is possible to use the same Dumper Script over and over. Let's talk about Unreal Engine 4:

[ Unreal Engine 4 ]
You can find games that use this engine by looking at the existence of LibUE4.so. At the Surface level: It will look Scrambled, Obfuscated, etc. Once you find some GWorld and GName to calculate the starting point, you can see the structure more clearly (Properties, Class, Offets, etc).

[ Conclusion ]

• - Identify the Game Engine and find some Script that correlates to it. You can try to look-at QuickBMS script as Starting-Point: Zenhax.
• - In general: to dump any Offsets, you should learn the Structure of the Libs. You can either takes note for the Offsets or make your own Dumper.
• - There's no Universal Offsets Dumper that's why most Dumper will specify what kind of game it will works on.

[THETWINSOFFICIAL]

On 4/2/2023 at 7:15 AM, kalibro said:

Hi, can somebody explain where can i find dump offsets for game which hasn't libil2cpp.so? Thanks 

Use ida or ghidra

[THETWINSOFFICIAL]

Inpor lib 

Wait for green loading 

Goto tab export 

And search any text 

Example search 

Damage 

If you find klik that 

And goto hex 

Copy hex dan search on gg