Help/Support How to dump a binary without having to open the app on ios 12

anakinsky249 · January 2, 2020

I wanted to play Fire Emblem Heroes, but the game has a jailbreak detection on it. I tried Liberty, NoSub and such, but nothing worked. I decided to try and see what I can do by reversing the binary. While I have experience in reverse engineering in general, I have close to none on ios reversing. Here's the issue: I know I need to dump the binary to disassemble it, else it's encrypted. I tried stuff like clutch, bfdecrypt, frida and crackerXI, but either they don't work, or they require the app to be open. This is an issue, since the app instantly crashes a few seconds after being launched due to the jailbreak detection.

Are there any way I can get a dumped binary without having to launch the application? Everything I find online is severely outdated...

Ted2 · January 2, 2020

Hello,

I managed to dump the game with https://github.com/AloneMonkey/frida-ios-dump

Here's the IPA: https://anonfile.com/Xc2cF8K1n8/FE_Heroes_ipa

anakinsky249 · January 2, 2020

1 hour ago, Ted2 said:

Hello,

I managed to dump the game with https://github.com/AloneMonkey/frida-ios-dump

Here's the IPA: https://anonfile.com/Xc2cF8K1n8/FE_Heroes_ipa

Wow thanks a lot! Out of curiosity, by "managed", you mean you managed to do it despite the crash or you actually ran the game without having it crash?

Ted2 · January 2, 2020

34 minutes ago, anakinsky249 said:

Wow thanks a lot! Out of curiosity, by "managed", you mean you managed to do it despite the crash or you actually ran the game without having it crash?

I managed to do it despite the crash. As the game does not instant crash, frida dump has enough time to dump