If you’re the nefarious type who sells exploits for money, you probably don’t care how the target software works either, as long as you can sell your exploitative trash (shame on you).
If you’re a malware analyst, you don’t care how the payload is encrypted you just want to understand what threat vectors the malware exploits, what its key behaviour is, and how to create a signature to detect it. People reverse engineer code for different reasons. We had a good chuckle together reverse engineering League of Legends: Wild Rift, but now it’s time to get serious. miHoYo has taken aim at our beloved (and sometimes hated) IL2CPP tools and trashed them with customized metadata encryption and extensive struct reordering, encapsulated in an obfuscated UnityPlayer.dll built from a modified Unity source code base. You can check out the reference source code repository here.Of all the IL2CPP workloads that have landed on my office desk over the years, those published by miHoYo (web site in Chinese) are what I consider to be the current gold standard for IL2CPP obfuscation.
One of the main motivations for the move was that developers had already been providing GitHub repositories with disassembled code, which is technically against Unity’s terms of service and not legal. He noted that Unity did not have the organisational framework to handle these requests and that any requests were still against the licence terms. Pranckevičius added Unity is not taking pull requests against the reference source code. By looking at each commit you can see what has changed between successive version.” “Going forward, the repository will be updated shortly after every new release. “C# source of everything that goes into UnityEngine and UnityEditor managed assemblies, for every single version going back to Unity 2017.1,” said Unity's Aras Pranckevičius The C# reference source code has been release under read-only terms rather than for modification.
The technology firm stressed it was not releasing Unity as open source and that the main engine will remain proprietary for the foreseeable future. In a surprise move Unity has published the engine and editor C# source code on GitHub under a reference-only licence.
0 kommentar(er)
