Update README.md

dumper/README.md

@@ -21,3 +21,23 @@ After the dump folder has been moved to the `Pictures` folder simply click the f
 <img src="https://imgur.com/RK1wImb.png"/>
 
 Now that we have the dump files we are going to need to cut the desired shared object file out of the `.bin` memory range that contains our shared object.
+
+As you can see the dump generates a text file that gives you all of the memory ranges + lib names.
+
+<img src="https://imgur.com/loFpzH1.png"/>
+
+Now find the `.bin` that contains your ENTIRE `.so` memory range. Not just one of them. For this dump the range is: `92154000` - `98495000`. In the dump folder we can see a `.bin` that contains
+this memory range.
+
+<img src="https://imgur.com/L8pR07E.png"/>
+
+Open the .bin in hxd and search for "ELF" if you scroll down to the bottom you will see an ELF header! This is the header for the il2cpp.so! now calculate the size of the .so by taking the end address
+and subtracting it with the start address. (`0x98495000` - `0x92154000` = `0x6341000`).
+
+<img src="https://imgur.com/FWhDB73.png"/>
+
+Now that we have the memory selected, click file->new then paste, save as `il2cpp.so`.
+
+# using il2cppdumper
+
+Take the dumped `il2cpp.so` and `global-metadata.dat` file, put together in a new folder + make a folder inside of that new folder called `output`.