For AOTDLL, how to dump it

[kpba]

After a game was updated, some content in il2cpp was deleted and a file called AOTDLL was added. I guess the deleted content is here, but I can’t dump it. What should I do?

 

[MC874]

Hi @kpba, certainly you can dump it once it is loaded into the memory. Before doing dumping, most file are getting flushed out of memory once it's done being loaded. Thus, you need to find a right time, when the file is loaded in Memory. You can use Game Guardian for this, here's how:

• 1) Goto Game Guardian Memory Editor (!!!)
• 2) Next, go to more settings (|||)
• 3) Select Dump Memory, and lookup for your File. Use DropDown.

Or you can use Termux and install MemDumper. You can just do this:

• 1) Install the Library:

apt install git
git clone https://github.com/kp7742/MemDumper

• 2) Specify the architecture you're going to use for the game:

cd ./MemDumper/libs/[your architecture]/

--[your architecture] = arm64-v8a (for 64bit), armeabi-v7a (for 32bit)

• 3) After that, you can dump the file right away:

--[32 Bit]
./MemDumper -r -n [your_file_name] -o [your_output_folder]
--[64 Bit]
./MemDumper64 -r -n [your_file_name] -o [your_output_folder]

• 4) You can find out how to use the MemDumper by:

./MemDumper -h
./MemDumper --help