Jump to content

How to decrypt an encrypted .dll file with GDB gcore (Root & ARM only)


4 posts in this topic

Recommended Posts

Hi there,

 

 

 

 

I will show you how to decrypt and encrypted .dll file (when trying to MOD Unity based Android games) using Gcore dump and WinHex.

 

 

 

 

 

Before we start, how to check if a .dll file is encrypted?

 

 

 

 

 

Easy. When you open a .dll file into Reflector and you get:

 

 

 

 

 

"Assembly-CSharp (this could change, depending on the name of the file), File is not a portable executable. DOS header does not contain 'MZ' signature."

 

 

 

 

 

it means you have got an encrypted DLL!

 

 

 

 

 

See image:

 

 

 

 

 

Mt9bkqf.png

 

 

 

 

 

It means the DLL file does not have a valid MZ/PE header so you can't open/modify it. DLL files require MZ/PE headers in order to view its content and, to prevent hacking, some game developers protect their game erasing these MZ/PE headers from some dll files.

 

 

 

 

 

Now let's start with the requirements!

 

 

 

 

 

First of all, you need:

 

 

1. To have some Android Hacking experiences (otherwise you will not understand a single word of this Topic)

 

 

2. A rooted Android device

 

 

3. .NET Reflector or JustDecompile installed on your computer (if you've got hacking experience, you should already have this tool)

 

 

4. A computer running at least Windows XP

 

 

5. A Rooted Android device (Works with BlueStacks) running Android 4.2.2 and newer versions. Previous version might not work.

 

 

Works with Bluestacks. Custom roms with Android 4.2.2+ based are supported

 

 

6. At least 1 GB of RAM on your Device. A minimum of 300-400 MB free RAM space is required

 

 

7. Latest verison of SuperSU or other Superuser apps

 

 

8. BusyBox for Android. Get it from HERE

 

 

9. Terminal app for Android. You can download it from HERE

 

 

10. gcore installed on your device. Download it from: HERE

 

 

11. Any file explorer app installed on your Android device. I'd recommended X-plore

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

55NjVLk.jpg

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

PtsKJ2l.pngVWiprRv.png

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

oMPbxeI.jpg

 

 

 

 

 

 

 

 

 

 

 

 

VEKB0Zp.png

 

 

 

 

 

 

 

 

 

 

 

 

dH2dx7q.png

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

su

 

 

 

 

 

 

 

 

 

 

YwQuPVl.png

 

 

 

 

 

 

 

 

 

 

 

root@[member='YourName'] #

 

 

 

 

 

 

 

 

fIzHnqp.png

 

 

 

 

 

 

 

 

 

 

 

dumpsys meminfo

 

 

 

 

 

 

 

 

 

 

or

 

 

 

 

 

 

dumpsys meminfo | grep com.*

 

 

 

 

 

 

 

 

 

 

or

 

 

 

 

 

 

dumpsys meminfo | grep th.*

 

 

 

 

 

 

 

 

 

 

UynNHbb.png

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

118740 kB: com.nhnent.SKQUEST (pid 383 / activities)

 

 

 

 

 

2f4kK8y.png

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

gdb -pid xxxxx

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

BjM722D.png

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

(gdb)

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

chmod 777 /system/bin/gdb && chmod 777 /system/bin/gdbserver

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

gcore /sdcard/anynames

 

 

 

 

 

 

 

 

 

 

evw3QCI.png

 

 

 

 

 

 

 

 

 

 

 

 

 

daIMwGJ.png

 

 

 

 

 

 

 

 

 

 

 

Saved corefile /sdcard/xxxxxxxx

 

 

 

 

 

1k2XoSb.png

 

 

 

 

 

 

 

 

 

 

 

 

qu0dUi6.jpg

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

21XDniJ.jpg

 

 

 

 

 

 

 

 

 

 

KyVpF3A.jpg

 

 

 

 

 

OR

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

1zZ2okI.pnglDxOJBM.png

 

 

 

 

 

 

 

 

 

 

BLAMO2F.png

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

vwiY6Sl.jpg

 

 

 

 

 

 

 

 

 

 

G1TXfOH.png

 

 

 

 

 

 

 

 

 

 

nABBcma.png

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

HfbJdcY.png

 

 

 

 

 

 

 

 

 

 

AR43Mxe.jpg

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

MsPP0tr.png

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

eDtKnU0.png

 

 

 

 

 

 

 

 

 

 

 

Assembly-CSharp.dll

Assembly-CSharp-firstpass.dll

Assembly-UnityScript.dll

Assembly-UnityScript-firstpass.dll

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

mZB1PnI.png

 

 

 

 

 

 

 

 

 

 

 

Assembly-CSharp.dll = 000034.dll

Assembly-CSharp-firstpass.dll = 000030.dll

Assembly-UnityScript.dll = 000028.dll

Assembly-UnityScript-firstpass.dll = 000013.dll

 

 

 

 

 

 

 

 

 

 

B0CD3jO.png

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

AndnixSH

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Updated by AndnixSH

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Unfortunately, your content contains terms that we do not allow. Please edit your content to remove the highlighted words below. For more information, please read our Posting Guidelines.
Reply to this topic... Posting Guidelines

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Our picks

    • Modded/Hacked App: Sweet Cube Blast By Puzzle1Studio,inc.
      Bundle ID: com.puzzle1studio.ap.sweetcubesmatchblast
      iTunes Store Link: https://apps.apple.com/us/app/sweet-cube-blast/id6444350503?uo=4


      🤩 Hack Features

      - Coins

      - Lives

      - Stars No Need [ Task ]

      - Booster

      - Auto Win

       

      ⬇️ iOS Hack Download IPA Link
        • Like
      • 0 replies
    • Sweet Cube Blast v25.0124.00 [ +5 Cheats ] Auto Win
      Modded/Hacked App: Sweet Cube Blast By Puzzle1Studio,inc.
      Bundle ID: com.puzzle1studio.ap.sweetcubesmatchblast
      iTunes Store Link: https://apps.apple.com/us/app/sweet-cube-blast/id6444350503?uo=4 

      🤩 Hack Features

      - Coins

      - Lives

      - Stars No Need [ Task ]

      - Booster

      - Auto Win

       

      ⬇️ iOS Hack Download Link


      Hidden Content

      Download Hack
      • 3 replies
    • Frost & Flame: King of Avalon Cheats v20.7 +2
      Modded/Hacked App: Frost & Flame: King of Avalon By FunPlus International AG
      Bundle ID: com.diandian.kingofavalon
      iTunes Store Link: https://apps.apple.com/us/app/frost-flame-king-of-avalon/id1084930849?uo=4


      Hack Features:
      - Multiply Attack
      - Multiply Defense

      NOTE: Cheat maybe buggy so make sure you have both features on. Don't ask me why cuz I have no idea

       

      Free Non-Jailbroken Hack: https://iosgods.com/topic/188621-frost-flame-king-of-avalon-v1990-jailed-cheats-2/


      iOS Hack Download Link: https://iosgods.com/topic/188620-frost-flame-king-of-avalon-cheats-v2000-2/
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 42 replies
    • Dream League Soccer 2024 v12.110 +12 Cheats
      Modded/Hacked App: Dream League Soccer 2024 By First Touch Games Ltd.
      Bundle ID: com.firsttouch.dls7
      iTunes Store Link: https://apps.apple.com/us/app/dream-league-soccer-2024/id1462911602?uo=4


      Hack Features:
      - Stupid AI
      - No Foul
      - No Injuries
      - No Offside
      - Freeze Stamina
      - No Substitutions Limit
      - No Forfeit Penalty
      - Custom Logo Unlocked
      - Custom Kit Unlocked
      - Unlock Customizations
      - Throw In to End Current Half
      - Freeze Match Clock

      Notes: Play offline if you get kicked out of match.


      Non-Jailbroken & No Jailbreak required hack(s): 
       

      iOS Hack Download Link: https://iosgods.com/topic/138633-dream-league-soccer-2024-v11230-12-cheats/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 2,096 replies
    • Candy Crush Soda Saga Cheats v1.287.3 +3
      Modded/Hacked App: Candy Crush Soda Saga By King.com Limited
      Bundle ID: com.midasplayer.apps.candycrushsodasaga
      iTunes Store Link: https://apps.apple.com/us/app/candy-crush-soda-saga/id850417475?uo=4

       

      🔧 Mod Requirements

      - Jailbroken iPhone or iPad.
      - iGameGod / Filza / iMazing.
      - Cydia Substrate, ElleKit, Substitute or libhooker depending on your jailbreak (from Cydia, Sileo or Zebra).

       

      🚀 Hack Features

      - Freeze Moves
      - Freeze Lives
      - Freeze Boosters


      🍏 For Non-Jailbroken & No Jailbreak required hacks: https://iosgods.com/topic/191667-candy-crush-soda-saga-v12861-jailed-cheats-3/

       

      📥 iOS Hack Download Link: https://iosgods.com/topic/191666-candy-crush-soda-saga-cheats-v12873-3/
        • Agree
        • Like
      • 3 replies
    • Evil Hunter Tycoon Cheats v1.384 +10
      Modded/Hacked App: Evil Hunter Tycoon by SuperPlanet corp.
      Bundle ID: com.superplanet.evilhunter
      iTunes Store Link: https://apps.apple.com/us/app/evil-hunter-tycoon/id1493512288?uo=4&at=1010lce4


      Hack Features:
      - Hero Legendary when visit the village
      - God Mode PvE
      - Huge Damage PvE
      - Infinite Coin (Turn on before tap to enter the game, earn some or spend some)
      - Freeze Material (Upgrade, create new weapon, armor, etc ...)
      - Free Store  
      - Free iAP
      - Disabled Anti Cheat

      iOS Hack Download Link: https://iosgods.com/topic/121180-arm64-evil-hunter-tycoon-cheats-v124-10/

      Credit: Laxus
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 2,325 replies
    • Magical Girl Dungeon v1.1.6 +3 Jailed Cheats [ Damage ]
      Modded/Hacked App: Magical Girl Dungeon By Kenjirou Uesaka
      Bundle ID: com.KCG.MahoDungeon
      iTunes Store Link: https://apps.apple.com/us/app/magical-girl-dungeon/id6741759536?uo=4

       


      🤩 Hack Features

      - God Mode
      - Damage Multiplier
      -- No Ads
        • Winner
        • Like
      • 0 replies
    • Magical Girl Dungeon v1.1.6 +3 Cheats [ Damage ]
      Modded/Hacked App: Magical Girl Dungeon By Kenjirou Uesaka
      Bundle ID: com.KCG.MahoDungeon
      iTunes Store Link: https://apps.apple.com/us/app/magical-girl-dungeon/id6741759536?uo=4

       


      🤩 Hack Features

      - God Mode
      - Damage Multiplier
      -- No Ads
        • Agree
        • Like
      • 3 replies
    • Racing Kingdom v0.34.126 +2 Jailed Cheats [ Auto Win ]
      Modded/Hacked App: Racing Kingdom By SUPERGEARS OYUN YAZILIM TEKNOLOJI VE PAZARLAMA ANONIM SIRKETI
      Bundle ID: com.supergears.racingkingdom
      iTunes Store Link: https://apps.apple.com/us/app/racing-kingdom/id6468027706?uo=4

       


      🚀 Hack Features

      - Auto Win
      - Freeze Rival


      🍏 Jailbreak iOS hacks: [Mod Menu Hack] Racing Kingdom v0.33.6 +2 Cheats [ Auto Win ] - ViP Cheats - iOSGods
      🤖 Modded Android APK(s): https://iosgods.com/forum/68-android-section/
        • Informative
        • Like
      • 6 replies
    • Racing Kingdom v0.34.126 +2 Cheats [ Auto Win ]
      Modded/Hacked App: Racing Kingdom By SUPERGEARS OYUN YAZILIM TEKNOLOJI VE PAZARLAMA ANONIM SIRKETI
      Bundle ID: com.supergears.racingkingdom
      iTunes Store Link: https://apps.apple.com/us/app/racing-kingdom/id6468027706?uo=4

       
       

      🚀 Hack Features

      - Auto Win
      - Freeze Rival


      🍏 For Non-Jailbroken & No Jailbreak required hacks: [IPA Mod Menu] Racing Kingdom v0.33.6 +2 Jailed Cheats [ Auto Win ] - ViP Non-Jailbroken Hacks & Cheats - iOSGods
      🤖 Modded Android APK(s): https://iosgods.com/forum/68-android-section/
        • Agree
        • Winner
        • Like
      • 27 replies
    • Modded/Hacked App: Yukon: Family Adventure By Enixan Europe Limited
      Bundle ID: com.enixan.yukon.family.adventure
      iTunes Store Link: https://apps.apple.com/us/app/yukon-family-adventure/id6455041311?uo=4


      🤩 Hack Features

      - Gems

      - Energy

      - Items

      - EXP

       
        • Winner
      • 0 replies
    • Yukon: Family Adventure v1.51.0 [ +4++ Jailed ] Everything Unlimited
      Modded/Hacked App: Yukon: Family Adventure By Enixan Europe Limited
      Bundle ID: com.enixan.yukon.family.adventure
      iTunes Store Link: https://apps.apple.com/us/app/yukon-family-adventure/id6455041311?uo=4


      🤩 Hack Features

      - Gems

      - Energy

      - Items

      - EXP
      • 1 reply
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines