[List of games with ptrace defend]

Legacy of Discord but may be bit bigger

[[help]blade of conquest]

perhaps try to change quest reward value instead of editing coins directly

[GameGuardian]

14 minutes ago, Enyby said:

No. It is just temp file in shared memory. It is normal and not connected with defend.

 

And you can not get normal .so file because in memory .so files stored in special way. It is not same file as on disk. .so file (any ELF file if be exact) loaded partially, linked and so on. It is mean if you dump .so from memory it is not valid executable ELF file.

thats exact problem i encountered. so is missing last few bytes at the end so is not valid. do you know a method to overcome this problem?

[GameGuardian]

 

this is from different game but used this one as an example. I was trying to dump main .so from Summoners wart and that file has been deleted. I guess because of a gameguard protection. Thanks Enyby. You are doing good job here guys

[GameGuardian]

thanks guys. memory dump works well. could you please tell me what does it mean or why some files have deleted next to them when reading list. is there any solution for that or this is part of game protection. cheers. been using gdb to dump but this is more convenient