Kantai Collection/Vita/Decompilation

From Bibliotheca Anonoma

The Kancolle Vita game provides the entire engine and logic of Kantai Collection in full, but in Unity. This makes decompilation and even a possible port to PC easy.

Unity uses one of two languages (C# and UnityScript), both of which use Microsoft's .NET framework. The .NET framework is cross-platform since it uses a unified bytecode format: Common Intermediate Language (CIL) which then runs on the portable Common Language Runtime (CLR). Like Java bytecode, CIL is designed for an idealized computer that is emulated by the CLR, so the bytecode is easier to decompile.

The C# code is located in Media/Managed/Assembly-CSharp.dll The XML "server" data defining ships and accessories and other strings are in Media/StreamingAssets/Xml/tables/master/

Move to PC Unity

It may be possible that the same binaries, which are cross platform, will work on a PC Unity project. I'm not familiar with using it but I can learn.

Decompiling Unity DLLs

Use ILSpy or dotPeek to open three files located under PCSG00684/Media/Managed/, Assembly-CSharp.dll, Assembly-CSharp-firstpass.dll, and Assembly-UnityScript.dll.

  • C#
  • UnityScript (JavaScript basically)

http://stackoverflow.com/a/5188580

http://www.alanzucconi.com/2015/09/02/a-practical-tutorial-to-hack-and-protect-unity-games http://archive.is/ATA5L

This is a starter guide to direct CIL editing:

http://resources.infosecinstitute.com/net-reverse-engineering-1cil-programming/#gref

Basic CIL editing of unity and put back into dll: https://www.unknowncheats.me/forum/general-programming-and-reversing/106107-patching-cil-instructions-ida-hxd.html

JetBrains dotPeek

You can use JetBrains dotPeek, a free .NET decompiler, to figure out which IL code corresponds to an interpretation of it into C#. This allows you to read actual C# code so you know what you're dealing with.

Note that this is just a viewing method, you still need to get down and dirty with ilasm as stated in the next section. But at least dotPeek will show you exactly which C# code line corresponds with what IL.

  1. drag and drop the assembly-csharp.dll file into the leftmost assembly explorer pane
  2. Press the arrow next to the list entry for Assembly-CSharp
  3. At the top left menu click Windows->IL Viewer
  4. click the arrow next to a namespace you want to see, such as Server_Models
  5. Double-click the file you want to see, such as Mst_ships
  6. Click a line in the C# code that you want to read in IL, such as the "Name equals なし" code

Change strings within DLLs

An easy test case to prove that we can edit to strings is to do a simple test case:

  1. Change all instances of なし to None in mst_ships.xml
  2. Decompile Assembly-CSharp.dll using islasm.exe. Choose UTF-8 Mode (it actually doesn't matter, just be consistent).
  3. Server_Models/Mst_ship.cs Change なし to None in this line:
    • C#: if(this.Name.Equals("なし")) (from dotPeek interpretation)
    • IL: IL_0084: ldstr bytearray (6A 30 57 30 ) (little endian Unicode byte)
  4. Recompile it in using islasm.exe.
    • Ensure that there are no compilation errors before proceeding.
  5. After that, copy to Media/Managed/Assembly-CSharp.dll and Media/StreamingAssets/Xml/tables/master/mst_ship.xml in the Kancolle game folder in your vita.
  6. Then just run the game again to see if it crashes on the title screen.
    • If there are no crashes, your mod works!
    • If there are crashes, you may have forgotten to change

The relevant code line: https://github.com/limyz/KCKaiVita/blob/master/Assembly-CSharp/dotPeek/Server_Models/Mst_ship.cs#L941

If the modified Assembly-CSharp.dll works, this proves that DLLs can have their CIL code strings modified.


This is a starter guide to direct CIL editing:

http://resources.infosecinstitute.com/net-reverse-engineering-1cil-programming/#gref

Change strings within DLLs

An easy test case to prove that we can edit to strings is to do a simple test case:

  1. Server_Models/Mst_ship.cs Change なし to None
  2. Change all instances of なし to None in mst_ships.xml

The relevant code line: https://github.com/limyz/KCKaiVita/blob/master/Assembly-CSharp/dotPeek/Server_Models/Mst_ship.cs#L941

If the modified Assembly-CSharp.dll works, this proves that DLLs can have their CIL code strings modified.

Decompiling Unity Assets

We do this all the time with the translation project, it's easy.

Recompiled/Reverse Engineered Replacement

After decompilation, the next step is to produce a completely reverse engineered version.

Engine

The first step is to simply extract the crucial game elements, and reimplement them in another form. This

UI and Visuals

The UI and Visuals must be implemented in Unity, since that's where the assets come from. This is a bit harder and can be more of a grey area. Maybe we could pitch this as providing Vita style visuals for the browser game.