Suddenly, even finding the areas of interest becomes magnitudes tougher. IL2CPP changes all that: we go from neat assemblies – often with all of the function and variable names intact – to straight up machine code that we have to wade through in a disassembler.

Unity games have traditionally been exceptionally easy to reverse engineer, generally requiring nothing more than a copy of ILSpy (or my preferred tool Telerik JustDecompile) and a dream. Instead, I want to focus on the opposite perspective: how do we reverse engineer compiled IL2CPP binaries? There are several excellent guides about how IL2CPP generates code such as Unity’s own IL2CPP Internals blog series and Jackson Dunstan’s exquisitely detailed musings, so I’m not going to repeat that work here. This is described quite well on this page of the Unity manual with this diagram: The premise of IL2CPP is to take these assemblies, parse the IL, generate C++ equivalent source code from it, then compile this C++ into machine code for faster, unmanaged execution.

NET assemblies which are executed by the managed runtime (CLR) on the target platform of choice as per the norm for any. It’s a beautiful mess, and today we’re going to start picking it apart.Ī standard Unity game is distributed as a series of. IL2CPP is an alternative application deployment model introduced into Unity in 2015 which is designed to bring significant performance improvements to Unity games. how to use IL2CPP at the command-line on arbitrary code without Unity.how to setup your environment to generate C++ source code and IL2CPP binaries from your own C# code so that you can examine and compare them with your original code.what the generated C++ source code and binary disassembly of a simple function looks like compared to native C#, IL and C++ code.

Dll that extracts unity asset package