Jump to content

ThePianoGuy

Senior Member
  • Posts

    569
  • Joined

  • Last visited

Posts posted by ThePianoGuy

  1. I have a jailbroken iPad 2 running 9.3.5. As requested by my fans, I want to crack il2cpp iOS free games to make tutorial how to dump il2cpp and find useful function names + offsets.

    About Clutch2, MTerminal crash when I try to dump Hearthstone and got Segmentation fault: 11 error when i try to dump Dead Trigger 2. using ulimit -n 512 or above doesn't work. About Rasticrac,  it gives me "935 and executable is 60 blah blah" error even i installed the game using iTunes. Apple had removed the ability to download apps and games from iTunes (PC version) so no more Rasticrac cracking :(

    How do i do now?

  2. I have found a new way to decrypt .dll and other files using Termux. In this tutorial, I'll show you how to decrypt an encrypted .dll file

    Requirements:
    - Rooted device or Emulator. ARM or x86.
    - A powerful Android device: 1 GB RAM, 4 cores, 1.5 - 2.x GHz. If you have a low-end device, your device may freeze during dumping.
    - Available free space of Internal storage or Sdcard: 2 GB
    - Requires Android 5.0 and up. Works on Marshmallow 6.0.1. Termux will not work on 4.4.4 and below.
    - Termux app. It is avaliable on Play Store
    - Modified Winhex for Windows (free version will not work for this purpose).

    Hidden Content

    React or reply to this topic to see the hidden content & download link. 👀

    Notes:
    There is no need PIE patching. gdb 7.12 natively support Android 5.0 and up

    If your device is running Kitkat 4.4.4 and below, please read my old tutorial:

    Using Android Emulator?
    Sorry, gdb gcore doesn't work with x86.

    Finding the package name of the app:
    Find the package name of the app you're going to hack!
    This will be required to find the app in the Terminal app we're going to use soon.
    It's usually called "com.DEVELOPER_CODE.GAME_CODE".
    You can find it going (with your browser) to the Google Play website, looking for the game you have installed on your device and then copying what's next to "id=".

    See screenshot:

    proxy?url=http%3A%2F%2Fi.imgur.com%2FbMh

    Alternatively, you can Install Package Name Viewer 2.0 from play store and you'll find the package name of any app you have installed on your device.

    proxy?url=http%3A%2F%2Fi.imgur.com%2FlFD

    If your device is running Cyanogenmod/Lineage OS, you can go to Settings -> Apps and then you'll find the package name of any app you have installed on your device.

    dH2dx7q.png

    Termux setup and decryption:
    Open Termux. It should be very similar to the following one:


    proxy?url=http%3A%2F%2Fi.imgur.com%2FEv8


    Type the following commands:

    apt update

    Update package infomation
    apt-get update downloads the package lists from the repositories and "updates" them to get information on the newest versions of packages and their dependencies.

     

    apt install gdb tsu

    Install both gdb and tsu

    gdb is a process debugger
    tsu is a root mode for Termux.

    Press the home button and launch the game. Let the game fully load.

    Open multitask, and go back to Termux

    Type the following commands:

    su

    Enter Superuser mode
    Grant root access to enter superuser mode for your device when asked.

    dumpsys meminfo | grep com*


    Show process list

    This command will search for all the running processes starting with "com." (the * is a jolly symbol which means any letter/number/symbol). The package name of the game is always at top. Don't forget to write it down


    proxy?url=http%3A%2F%2Fi.imgur.com%2FiHs

    exit


    Exit Superuser mode

    tsu


    Enter root mode for Termux

    gdb -pid <pid>


    attach a process with gdb

    Example:

    gdb -pid 12345

    Hit return to continue when asked.

    Do not worry about any warnings like these you may read in the Terminal app:


    proxy?url=http%3A%2F%2Fi.imgur.com%2F7d8

    gcore <path>


    save core file

    Example:

    gcore /sdcard/thegametodump

    Type Y when asked

    This will take 3-5 minutes. You device may freeze during dumping. Do not touch your device.

    quit


    quit gdb
    And deattach the process when asked

    Or you can exit Termux session from notification

    proxy?url=http%3A%2F%2Fi.imgur.com%2F7Mc


    Connect your device to your computer and copy your dumped file, if the file does not appear, just create a folder and move the file. This way Windows should be able to see it

    Recover decrypted files using WinHex:
    Open Winhex.exe

    File -> Open... and select a dumped file

    Tools -> Disk Tools -> File Recovery by Type

    HfbJdcY.png

    Click the "+" next to "Programs" (1) and check "Windows exec." (2). Now, select the folder where you want the new file to be generated under "Output Folder" (3).

    Ensure "Complere byte-level search" is checked (4) and then click "OK" (5).

    7e6W8nE.png

    The file recover will now begin and, when it finished you'll get a message like this:

    MsPP0tr.png

    Now, reach the location where you saved this file and delete all files with the ".com" extension. They're not needed and may only cause confusion.

    You can finally close WinHex.

    Happy modding!

    Credits:
    AndnixSH
    x-ways devs (Winhex program)
    Fredrik (Termux app)

    • Like 16
    • Winner 1
    • Thanks 5
    • Haha 1
    • Agree 3
    • Informative 2
  3. Hello

    Katy, who made il2cpp dumper ( https://github.com/djkaty/Il2CppInspector ) is looking for cracked Hearthstone binary file. It is a very good tool because it dumps function names + IDA offsets. A problem is me and my friends don't have a jailbroken iOS device so i can't help. I've told her to ask in this community but she didn't.

    Can someone crack and send me the decrypted binary file of latest version of Hearthstone so I can forward it to her?

×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines