Tutorial How to decrypt an encrypted .dll file with GDB gcore (Root only)

Vostox

1/3 Games Approved
Jan 19, 2019
13
67
78
25
Indonesia
Hello.

I followed your tutorial but I stopped at the point where you have successfully dumped using gdb.
The dumping process was fine, and I could get the file to be transferred to my PC.
But there is something weird, the file is only 1KB.

I know it's not normal so I tried to redo the process; however, the result is still the same.
Have you ever had an experience like this before? How do you solve it?

P.S. The game I'm trying to dump is Utopia: Origin.
 

iphil

Rookie
Feb 13, 2019
1
0
1
39
Germany
this error appears to me

root@hlteatt:/ # gdb -pid 9476
WARNING: generic atexit() called from legacy shared library
GNU gdb (GDB) 7.2
Copyright (C) 2010 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <The GNU General Public License v3.0 - GNU Project - Free Software Foundation>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "arm-linux".
For bug reporting instructions, please see:
<Bugs in GDB>.
Attaching to process 9476
Reading symbols from /system/bin/app_process...(no debugging symbols found)...done.

warning: Can't read pathname for load map: I/O error.
Cannot access memory at address 0x777c9afc
(gdb) Quit
(gdb)
 

G-Bo ッ

Administrator
Original poster
Staff member
Administrator
Mar 22, 2017
8,652
340,028
2,350
Behind you.
platinmods.com
this error appears to me

root@hlteatt:/ # gdb -pid 9476
WARNING: generic atexit() called from legacy shared library
GNU gdb (GDB) 7.2
Copyright (C) 2010 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <The GNU General Public License v3.0 - GNU Project - Free Software Foundation>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "arm-linux".
For bug reporting instructions, please see:
<Bugs in GDB>.
Attaching to process 9476
Reading symbols from /system/bin/app_process...(no debugging symbols found)...done.

warning: Can't read pathname for load map: I/O error.
Cannot access memory at address 0x777c9afc
(gdb) Quit
(gdb)
you are using a x86 device or trying to dump a x86 game. GDB only works for ARM.
 

mrcas

Rookie
Jan 6, 2020
2
0
1
38
Viet Nam
I got the problem. It say that gdb not found. Although i can be sure that both of files was copied to /system/bin already.