How to reverse engineer C# and Unity3D Games?

Eric Wei
2 Min To Read
24 Jul, 2021
- Unity
- Security

Before writing this article, I thought Unity’s games were much safer than some browser games built by Java Script. Because games are generated to binary files and embedded in an apk file, which should be very challenging to reverse engineer games when compared to some games generated by plaintext JavaScript codes.

However, after I did some experiments, I realized my theory was wrong and decided to write this tutorial.

If you build a game in Scripting Backend: IL2CPP, it is easy to reverse your game from apk file to C# codes that other people can see what kind of classes, methods, functions, properties, and even logic you implemented in games.

In this tutorial, you will know how easy it is to reverse engineer a Unity-based game.

When did this happen?

Since August 1, 2019, Google has required all the games to support 64-bit architecture, all the Unity developers needed to enable Scripting Backend: IL2CPP, built and released their games to Google Play Store.

This could lead to some potential risks that many games may be easily revealed to the public.

ref: https://developer.android.com/distribute/best-practices/develop/64-bit