Phase 1 recon: ares_recon tool, IL2CPP dump results, offsets.json v1, findings doc