Jump to content

How to dump encrypted metadata?


Go to solution Solved by bR34Kr,

4 posts in this topic

Recommended Posts

  • Solution
Posted

The game uses a custom encrypted format fort he gllobal-metadata.dat as you've probably seen. I highly suggest you try to debug the game until the actual call is made to open the file (most probably via fopen) and then try to work your way from there. You should be able to be able to dump it at one point from the memory it is loaded into. Another great way for filtering out where it could be would be to

 try and find global-metadata.dat's magic bytes (the bytes that begin every file of its kind. You can try and download multiple random Unity games and analyze them and build from there) and then searching for that sequence in memory and dumping it from there.

 

Good luck! :)

Posted
  On 7/24/2021 at 11:03 PM, bR34Kr said:

The game uses a custom encrypted format fort he gllobal-metadata.dat as you've probably seen. I highly suggest you try to debug the game until the actual call is made to open the file (most probably via fopen) and then try to work your way from there. You should be able to be able to dump it at one point from the memory it is loaded into. Another great way for filtering out where it could be would be to

 try and find global-metadata.dat's magic bytes (the bytes that begin every file of its kind. You can try and download multiple random Unity games and analyze them and build from there) and then searching for that sequence in memory and dumping it from there.

 

Good luck! :)

Expand  

u mean search in ida ?

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Unfortunately, your content contains terms that we do not allow. Please edit your content to remove the highlighted words below. For more information, please read our Posting Guidelines.
Reply to this topic... Posting Guidelines

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines