tanis

Is this stuff still relevant?

On 11/1/2018 at 2:27 PM, TheArmKing said:

de4dot works on mono games not il2cpp

It makes sense, I've got confused there. But now I wonder.. how would you get crash reports that make sense if you obfuscate the code? There should be a way to deobfuscate what comes through the crash reporting and it must either be stored in the game or somewhere offline for post processing of crash reports.. has anyone had a look into that by any chance?

@DiDA it works like a charm! Thanks for pointing me in the right direction 

47 minutes ago, DiDA said:

You can use DLGMemor the open sourced memory editor to learn how it works and how it’s made.

https://github.com/DeviLeo/DLGMemor

I didn't know about DLGMemor, I'll have a look at it. Are you actually using it?

Is there anyone who tried to write something similar to iGameGuardian or who has got an idea of how it could actually work.

I doubt that they hook malloc to keep a list of all the memory allocations in the heap. Is there a way to access the list of heaps arenas from within an iOS process? 

What would you do to find out the arenas? Maybe this could turn out in a collaborative project, wouldn't it be useful?

My basic plan would be to make it a dylib and sideload it with the app I want to read the memory from.

Hmm

Before anyone jumps in, this is a game made with Unity but that uses Lua scripts embedded in asset bundles.

Thanks!

Thanks!

Thanks!

Thanks!

Thanks!

Thanks!

3013

That's a bit broad of a question. You should start with some tutorials that let you find out whether it is a Unity game or something different, to start with.

I can't remember the exact name off the tip of my head but so far all of the obfuscations I've found were deobfuscable with de4dot: https://github.com/0xd4d/de4dot

Thanks and btw would something like this be doable on non-jalbroken devices? Do you have any pointers to documentation about how it works?

Cheers!