Il2cppInspector: C++ Scaffold Guide

This guide includes examples related to the following questions:

Contact

Examples

Getting the type from a class (Il2CppObject* to Type*)

Il2CppObject*Il2CppHelper::GetTypeFromClass(const Il2CppImage* _image,constchar* _namespaze,constchar* _name){Il2CppClass* _targetClass =il2cpp_class_from_name(_image, _namespaze, _name);if (_targetClass) {const Il2CppType* _targetType =il2cpp_class_get_type(_targetClass);if (_targetType) {Il2CppObject* targetObject =il2cpp_type_get_object(_targetType);if (targetObject) {return targetObject;}}}returnnullptr;}

const Il2CppImage* _CoreModule = _Il2CppHelper->GET_IL2CPP_IMAGE("UnityEngine.CoreModule.dll");if (_CoreModule) {Il2CppObject* _object = _Il2CppHelper->GetTypeFromClass(_CoreModule,"UnityEngine","GameObject");if (_object) {Type* gameobjectType =reinterpret_cast<Type*>(_object);if (gameobjectType) {Object_1__Array* getAllGameObjects =Object_1_FindObjectsOfType(gameobjectType,nullptr);std::cout <<"Gameobject count:" << getAllGameObjects->max_length <<"\n";if (getAllGameObjects) {for (int i =0; i < getAllGameObjects->max_length; i++) {Object_1* currentGameObject = getAllGameObjects->vector[i];if (GameObject_get_activeInHierarchy(reinterpret_cast<GameObject*>(currentGameObject),nullptr)) {std::cout <<"GameObject Name:" <<il2cppi_to_string(Object_1_GetName(currentGameObject,nullptr)) <<"\n";}}}}}}

GameObject[] allGameObjects = FindObjectsOfType<GameObject>();

Getting class names and types from a specific assembly

voidIl2CppHelper::GetClassesAndNamesFromAssembly(const Il2CppImage* _image){if (_image) {size_t classCount =il2cpp_image_get_class_count(_image);std::cout <<"{\n";for (size_t i =0; i < classCount; ++i) {const Il2CppClass* _klass =il2cpp_image_get_class(_image, i);if (_klass) {char* _name =const_cast<char*>(il2cpp_class_get_name(const_cast<Il2CppClass*>(_klass)));char* _namespace =const_cast<char*>(il2cpp_class_get_namespace(const_cast<Il2CppClass*>(_klass)));std::cout <<" [\n";std::cout <<"\tName:" << _name <<"\n";std::cout <<"\tNamespace:" << _namespace <<"\n";std::cout <<" ],\n";}}std::cout <<"\n}\n";}}

const Il2CppImage* _BoltDll = _Il2CppHelper->GET_IL2CPP_IMAGE("bolt.dll");if (_BoltDll) {    _Il2CppHelper->GetClassesAndNamesFromAssembly(_BoltDll);}

const Il2CppImage* _assemblyCSHARP = _Il2CppHelper->GET_IL2CPP_IMAGE("Assembly-CSharp.dll");if (_assemblyCSHARP) {   _Il2CppHelper->GetClassesAndNamesFromAssembly(_assemblyCSHARP);}

Getting information about any method

voidIl2CppHelper::GetMethodInfo(const Il2CppImage* _image,constchar* _funcName,int argLength,constchar* _class_name,constchar* _class_namespace){Il2CppClass* _class =il2cpp_class_from_name(_image, _class_namespace, _class_name);if (_class ==nullptr)return;const MethodInfo* methodInfo =il2cpp_class_get_method_from_name(_class, _funcName, argLength);if (methodInfo ==nullptr)return;Il2CppReflectionMethod* reflectionMethod =il2cpp_method_get_object(methodInfo, _class);// Check if the reflectionMethod is not nullif (reflectionMethod ==nullptr)return;std::cout <<"{\n";// Get the method's name from the reflectionMethod objectconstchar* methodName =il2cpp_method_get_name(methodInfo);std::cout <<"\tMethod Name:" << methodName << std::endl;const Il2CppType* returnType =il2cpp_method_get_return_type(methodInfo);std::cout <<"\tReturn Type:" <<il2cpp_type_get_name(returnType) << std::endl;// Get the parameter count of the method using il2cpp_method_get_param_countint parameterCount =il2cpp_method_get_param_count(methodInfo);std::cout <<"\tParameter Count:" << parameterCount << std::endl;std::cout <<"\t[\n";// Get the parameter types of the methodfor (int i =0; i < parameterCount; i++) {// Get the parameter type at index i using il2cpp_method_get_paramconst Il2CppType* parameterType =il2cpp_method_get_param(methodInfo, i);// Get the type name of the parameter type using il2cpp_type_get_nameconstchar* parameterTypeName =il2cpp_type_get_name(parameterType);// Print the parameter type name to the consolestd::cout <<"\t\tParameter" << i <<" Type:" << parameterTypeName << std::endl;}std::cout <<"\t]\n";std::cout <<"}\n";}

const Il2CppImage* _AssemblyCSharp = _Il2CppHelper->GET_IL2CPP_IMAGE("Assembly-CSharp.dll");_Il2CppHelper->GetMethodInfo(_AssemblyCSharp,"SetFOV",1,"NolanBehaviour","");

Get the assemblies

// Get the active domainconst Il2CppDomain* domain = il2cpp_domain_get();// Define variables to hold the assembly listconst Il2CppAssembly** assemblies;size_t size;// Use the il2cpp_domain_get_assemblies function to retrieve all assembliesassemblies = il2cpp_domain_get_assemblies(domain, &size);for (size_t i =0; i < size; ++i) {const Il2CppAssembly* assembly = assemblies[i];if (assembly) {// Get the assembly name using il2cpp_image_get_name functionconstchar* assemblyName =il2cpp_image_get_name(assembly->image);std::cout << assemblyName <<"\n";}}

Calling a function with "il2cpp_runtime_invoke"

if (GetAsyncKeyState(VK_F1) &0x8000) {const Il2CppImage* _AssemblyCSharp = _Il2CppHelper->GET_IL2CPP_IMAGE("Assembly-CSharp.dll");_Il2CppHelper->GetMethodInfo(_AssemblyCSharp,"SetRank",1,"NolanRankController","");}if (GetAsyncKeyState(VK_F2) &0x8000) {const Il2CppImage* _csharp = _Il2CppHelper->GET_IL2CPP_IMAGE("Assembly-CSharp.dll");if (_csharp ==nullptr)return;Il2CppObject* nolanObj = _Il2CppHelper->GetTypeFromClass(_csharp,"","NolanRankController");Type* TNolan =reinterpret_cast<Type*>(nolanObj);auto isTypeValid =Object_1_FindObjectOfType(TNolan,nullptr);if(isTypeValid){NolanBehaviour* _nb_ =reinterpret_cast<NolanBehaviour*>(isTypeValid);if (_nb_) {Il2CppClass* _nbClass =il2cpp_class_from_name(_csharp,"","NolanRankController");if (_nbClass ==nullptr)return;const MethodInfo* methodInfo =il2cpp_class_get_method_from_name(_nbClass,"SetRank",1);int newRankvalue =666;void* params[] = { &newRankvalue };std::cout <<"call function..\n";il2cpp_runtime_invoke(methodInfo, _nb_, params,nullptr);}}}

Getting a List of All Functions in the Target Class

voidIl2CppHelper::PrintMethods(Il2CppClass* klass) {const MethodInfo* methodIter =nullptr;void* iter =nullptr;// Retrieve all methods of the classwhile ((methodIter =il2cpp_class_get_methods(klass, &iter)) !=nullptr) {// Get the name of the methodconstchar* methodName =il2cpp_method_get_name(methodIter);// Get the return type of the methodconst Il2CppType* methodReturnType =il2cpp_method_get_return_type(methodIter);char* returnTypeName =il2cpp_type_get_name(methodReturnType);// Print the method name and its return typestd::cout <<"Method Name:" << methodName;std::cout <<" (" << returnTypeName <<")\n------------------------------------\n";// Perform necessary memory operationsil2cpp_free(returnTypeName);}}

Example:

const Il2CppImage* _timage = _Il2CppHelper->GET_IL2CPP_IMAGE("Assembly-CSharp.dll");if (_timage) {Il2CppClass* nolanRankControllerClass =il2cpp_class_from_name(_timage,"","NolanRankController");if (nolanRankControllerClass !=nullptr) {_Il2CppHelper->PrintMethods(nolanRankControllerClass);}}

Getting Information about Class Fields (FieldInfo)

voidIl2CppHelper::GetFieldsInformation(Il2CppClass* klass){void* iter =nullptr;FieldInfo* field =nullptr;// Iterate through the fields of the classwhile ((field =il2cpp_class_get_fields(klass, &iter)) !=nullptr){// Get the name of the fieldconstchar* fieldName =il2cpp_field_get_name(field);// Get the type of the fieldconst Il2CppType* fieldType =il2cpp_field_get_type(field);char* fieldTypeStr =il2cpp_type_get_name(fieldType);// Print the information about the fieldstd::cout <<"Field Name:" << fieldName << std::endl;std::cout <<"Type:" << fieldTypeStr << std::endl;std::cout <<"-----------\n";}}

const Il2CppImage* _assemblyCSHARP = _Il2CppHelper->GET_IL2CPP_IMAGE("Assembly-CSharp.dll");if (_assemblyCSHARP) {Il2CppClass* _nolanBehaviourClass =il2cpp_class_from_name(_assemblyCSHARP,"","NolanBehaviour");_Il2CppHelper->GetFieldsInformation(_nolanBehaviourClass);}

Modifiying the Value of a Field

if (GetAsyncKeyState(VK_F1) &0x8000) {// Get the Il2CppImage for "Assembly-CSharp.dll"const Il2CppImage* _AssemblyCSharp = _Il2CppHelper->GET_IL2CPP_IMAGE("Assembly-CSharp.dll");// Get the object for the "Menu" class within the "Horror" namespaceIl2CppObject* _horrorMenuClassObject = _Il2CppHelper->GetTypeFromClass(_AssemblyCSharp,"Horror","Menu");// Check if the object existsif (_horrorMenuClassObject) {// Find the object represented by _horrorMenuClassObject in the appauto menuType =app::Object_1_FindObjectOfType_1(reinterpret_cast<Type*>(_horrorMenuClassObject),true,nullptr);// Check if the object was foundif (menuType) {// Get the Il2CppClass for the "Menu" classIl2CppClass* menuClass =il2cpp_class_from_name(_AssemblyCSharp,"Horror","Menu");if (menuClass ==nullptr)return;// Get the FieldInfo for the "steamName" fieldFieldInfo* steamNameField =il2cpp_class_get_field_from_name(menuClass,"steamName");// Check if the field existsif (steamNameField) {std::cout <<"field is exists!!\n";// Define a new value for the fieldconstchar* newSteamNameValue ="il2cpp-field";// Create a new Il2CppString from the new valueIl2CppString* newSteamNameString =il2cpp_string_new(newSteamNameValue);// Set the field's value to the new valueil2cpp_field_set_value(_horrorMenuClassObject, steamNameField, newSteamNameString);}else {std::cout <<"field is not exists!\n";}}}}