Descrypt global metadata First Method - IroniaTheMaster/Descrypt-global-metadata.dat GitHub Wiki
Hello People!
I will teach two methods how to decrypt global-metadata.dat
- Decrypted Bytes (if you don't have a file (global-metadata.dat) of some decrypted version of the game, please disregard) For this method you will need to use Game Guardian and also your knowledge.
You will need a decrypted global-metadata.dat, and get the first few bytes of it, just like in the image.
(You can use programs like HxD, 010 Editor or any other program that edits hex)
put the decrypted file there
we can compare this file above (decrypted) with an encrypted file
(Encrypted)
You can see that the 4 columns are totally different while the decrypted one is "AF 1B B1 FA 18". The encrypted one is "F8 21 D6 F5 E0".
Well, in this case you can use Game Guardian(link) (root)
Start Game Guardian, select the process, select this and this xD
you need to click on this: "select search intervals" or "ranges". My Game Guardian is in Portuguese, don't be surprised xD.
After that, select all and press save.
Go to search
You need to put the "H and the 4 decrypted columns", like that. click "New search"
The result appears here, click on the first
You will get some information, copy this value, after that exit this window
Do the following step:
the window pops up, you click dump or free memory
you will paste the value you copied before, and then click there
The ball must be selected, so you click on that address
Do the same with the bottom one, paste the same copied value, and press that button (Do the same process) from above
After that, just press save.
Now you need to edit this file which was generated by Game Guardian. Take that file and dump it into a hex editor, search for the same value (out of 4 columns, in my case "AF 1B B1 FA 18" and then delete everything above that value
Well, if you save it, and run it in Il2CppDumper, it will work, but the global-metadata that we modified, will not have the same weight as the other one, so that we can correct this, just get the encrypted global-metadata and see its last offset. You can see the last offset, in this case the bytes end up in column 0B
Now we just need to go back global-metadata that we modified and go to this offset and delete everything after column 0B
Now, just save and rename the file to global-metadata.dat
Enjoy ;)