DLL Memory Dump for Unity
Memory Dumping
DLL Memory Dump for Unity Posted on: 03/16/2013 2:04pm
Quote Post
something like SWF Memory Dump, but a f__king lot more ugly, and is for unity3d.

Update
================================================================
17/03/2013
- Dump correct dll only.
- Added refresh.
- Does not quit if not dumping anything.
- Thanks to kolonelkadat for code suggestions.
================================================================

You need
================================================================
Visual C++ Redistributable for Visual Studio 2012
http://www.microsoft.com/en-us/download/details.aspx?id=30679
================================================================

Usage
================================================================
1. Open a fresh browser, not a new tab.

2. Load your game in browser
3. Open this memory dump
4a. Choose the right .exe to scan (eg. plugin-container.exe/chrome.exe) by entering the index number on the left.
4b. If you don't find your process, enter 0 to refresh.
5. Assembly-CSharp.dll will be dumped to the same folder if found.
================================================================
Unity seems will retain dll in memory for some time, if you run multiple unity games when dumping/ before dumping, you won't know which games the dll is from.

If there is no Assembly-CSharp found, and if you are sure the right process is selected, report here with the game's link.

http://www.sendspace.com/file/qiyu9c
MD5(.exe after unrar only)
5e2f36aca02aad19b7a2e548c394bbb3

There will be improvements... eventually, and if you have some ideas, reply and let me know.



RE: DLL Memory Dump for Unity Posted on: 03/16/2013 4:08pm
Quote Post
Never let a computer tell me shit.

im about to leave but here is what i can think of off the top of my head. Im not sure it will work in c++, but im sure c++ has an equivalent.

use system.reflection.assembly.loadfile()
and then getassemblyname()
http://msdn.microsoft.com/en-us/library/system.reflection.assemblyname.getassemblyname.aspx

im not sure if you will have to write the file to temp storage or if you can access it direct from memory.

hope this helps out, at least a little bit.
  ETA
Im upping the old version as its infinitely more usefule *sometimes*
https://konghack.com/filemanager/get/1bLB27x1619x53df68fdcc5c5

Attached Files
Filename Filesize Downloads
dll memory dumper.rar 10.06 KB 1,066



I use this AoB tool to make all the AoBs I post. Try the online version if you dont feel like downloading it.
"Obviously, windows are central to Windows. They are so important that they named the operating system after them. But what is a window?"

RE: DLL Memory Dump for Unity Posted on: 03/16/2013 5:45pm
Quote Post
nonomnonom
i still can't open it after install Visual C++ Redistributable for Visual Studio 2012.




hello i'm goodknife.
RE: DLL Memory Dump for Unity Posted on: 03/16/2013 7:53pm
Quote Post
Try download the new one and check md5 after unrar-ing, as your message is usually seen when the file is corrupted.



RE: DLL Memory Dump for Unity Posted on: 03/17/2013 12:48pm
Quote Post
nonomnonom
still not working after re-download and md-check. can u help me dump .dll from this game? thx in advance. http://www.tekken-card-tournament.com



hello i'm goodknife.
RE: DLL Memory Dump for Unity Posted on: 06/21/2013 6:01am
Quote Post

hmm...suppose i can try out that software to help me hack dead frontier once more.

RE: DLL Memory Dump for Unity Posted on: 08/20/2013 12:25pm
Quote Post
I finally realize the problem lol

This compile does not run on 32 bit only machine...



RE: DLL Memory Dump for Unity Posted on: 10/23/2013 12:19pm
Quote Post
Upload 32bit version Please?
RE: DLL Memory Dump for Unity Posted on: 11/22/2013 11:13am
Quote Post
RE: DLL Memory Dump for Unity Posted on: 12/28/2013 10:21am
Quote Post
FlameBlazer Posted on: 11/22/2013 6:13am

not finding dll - http://www.kongregate.com/games/tfender/contract-wars?acomplete=contr#


is all what I found
Game: http://turbobit.net/do8ur9m6h3d0.html
0x075bacd4-0x07614ee0.dll
0x100f0048-0x1010ee48.dll

RE: DLL Memory Dump for Unity Posted on: 02/09/2014 1:16pm
Quote Post
FlameBlazer Posted on: 11/22/2013 6:13am

not finding dll - http://www.kongregate.com/games/tfender/contract-wars?acomplete=contr#



Help please, assembly-csharp not found :-/

RE: DLL Memory Dump for Unity Posted on: 04/08/2014 5:43am
Quote Post
kolonelkadat Posted on: 03/16/2013 12:08pm

im about to leave but here is what i can think of off the top of my head. Im not sure it will work in c++, but im sure c++ has an equivalent.

use system.reflection.assembly.loadfile()
and then getassemblyname()
http://msdn.microsoft.com/en-us/library/system.reflection.assemblyname.getassemblyname.aspx

im not sure if you will have to write the file to temp storage or if you can access it direct from memory.

hope this helps out, at least a little bit.
  ETA
Im upping the old version as its infinitely more usefule *sometimes*
http://konghack.com/files/000000000040/files/DLL%20Memory%20Dumper.rar



Thanks Kadat, now, after more than a year I realized that it is TRUELY INFINITELY more useful.
Great that you had this backed up.




RE: DLL Memory Dump for Unity Posted on: 05/26/2014 11:20pm
Quote Post

Would anyone happen to have a List of Definitions for the bytecodes of what the various hex bytes mean?  Like how there's the list for AVM2 - https://konghack.com/c/1/avm2_instructions.php

Because so far all I know is that 58 is Add, 59 is Subtract... 6A Multiply.. that's it. XD

RE: DLL Memory Dump for Unity Posted on: 05/26/2014 11:26pm
Quote Post
Never let a computer tell me shit.



I use this AoB tool to make all the AoBs I post. Try the online version if you dont feel like downloading it.
"Obviously, windows are central to Windows. They are so important that they named the operating system after them. But what is a window?"

RE: DLL Memory Dump for Unity Posted on: 05/27/2014 12:21am
Quote Post
kolonelkadat Posted on: 05/26/2014 7:26pm

http://lmgtfy.com/?q=list+of+cil+instructions&l=1#
I reference this in all of my unity videos im sure.

if you need more help, theres always the ecma 335 http://www.ecma-international.org/publications/files/ECMA-ST/ECMA-335.pdf



Ahh thanks, I didn't know about the cil thing, and I didn't see it in your video, the Part 2 video - https://www.youtube.com/watch?v=8WAnjiyjMcI

That's the only one I watched so far, I also sent you an email yesterday via the Contact link, Was wondering if you got it.