GameGuardian

[Enyby]

@BAEalpha It is not GG issue. It is detection by game. Use Xposed or similar app for hide GG from the game.

[BAEalpha]

Can you tell me how?
I beg you.

[Enyby]

@BAEalpha I do not know.

[BAEalpha]

Ok... thanks...

[ricopradana]

GG is not work at iruna online, im using GG 18.20.0

My analog got frezee,im confused,i need help for this problem,

I using android 6.1 marsmallow,karnel 3.10.84

[Enyby]

@ricopradana GG work on Iruna. Speedhack not work with Iruna above android 4, because they use Java timers.

[Enyby]

What's New in Version 8.21.0   

• Added feature 'memory dump'.
• Added XOR converter.
• Added ability to search only within the specified memory range.
• Improved UI.
• Improved detection the foreground task.
• Updated translations.

 

[Guest ttah11]

How do I read the .bin file after I dumped the memory?

[Enyby]

It is raw file. You can use hex editor or some special tools for this.

[BAEalpha]

Execution error game guardian.

so A roundabout attempt

After Decompile apk 

in armeabi folder (Name of extension = .so) Encryption

 

Is it possible? or Don't you want it?

[Enyby]

I understand nothing.

[kryokil]

thanks guys. memory dump works well. could you please tell me what does it mean or why some files have deleted next to them when reading list. is there any solution for that or this is part of game protection. cheers. been using gdb to dump but this is more convenient

[Enyby]

1 hour ago, kryokil said:

could you please tell me what does it mean or why some files have deleted next to them when reading list.

I not understand what you mean.

[kryokil]

 

this is from different game but used this one as an example. I was trying to dump main .so from Summoners wart and that file has been deleted. I guess because of a gameguard protection. Thanks Enyby. You are doing good job here guys

[Enyby]

No. It is just temp file in shared memory. It is normal and not connected with defend.

 

And you can not get normal .so file because in memory .so files stored in special way. It is not same file as on disk. .so file (any ELF file if be exact) loaded partially, linked and so on. It is mean if you dump .so from memory it is not valid executable ELF file.