Help/Support How to dump (regions) RAM of an application?

[lOlbas 0]

For the sake of statistics I need to gather information from an online game. This information is stored in RAM and can be found by using iGameGuardian. But since manual search and processing of this info is boring I thought "why not make bash script that would do that for me?". And this is were I am unsure where to dig for info.

I do not know at the moment how to create my own command-line utils that would do that for me so I am trying the ones I find. So far, I tried:

1. Using gdb. I've been able to finally attach to the process (after cracking + thinning) and then trying this (offsets are taken from otool analysis of cracked and thinned binary - cryptoff and cryptsize):

(gdb) dump ihex memory ~/dump1.dmp 0x4000 0x1BC0000

but I am unsure if this command dumps RAM or binary contents.

2. Using memscan (https://mobileapphacking.com/2018/01/15/ios-memory-dump/). This tool seem to be doing what I need: it dumps 700MB file. However it only works when game is in main menu. During gameplay I get `Bus error 10` error.

How can I achieve RAM dumping? iGameGuardian is working perfectly but could someone point me how do similar apps do this under the hood?

 

All the stuff was done on iPad Air 2, iOS 8.1.