OsOmE1 / Beebyte-Deobfuscator

A plugin for Il2CppInspector that performs quasi deobfuscation
GNU Affero General Public License v3.0
87 stars 15 forks source link

Field Offsets / Order #18

Open HorridModz opened 1 year ago

HorridModz commented 1 year ago

I was looking through the code of Beebyte Deobfuscator (you did a great job making it clean and readable) and I found that it compares field offsets. This confused me. Are field ordering and field offsets not scrambled by Beebyte Deobfuscator? Will fields never be scrambled?

OsOmE1 commented 1 year ago

First off I'd like to say that this project is not really functional right now although I do plan on fixing it in the future. But yeah in my experience Beebyte doesn't really reorder fields just renames them I don't know whether theres an option for that but I've never seen it in practice.

esauvisky commented 1 year ago

There are several other things it doesn't reorder, like vtable/slotted methods, events and others

HorridModz commented 1 year ago

There are several other things it doesn't reorder, like vtable/slotted methods, events and others

Thanks! I'm making my own deobfuscator, so this is really helpful.

By the way, how do you know this? From experience, or do you somehow have source or documentation?