I have encrypted Android
so library that decrypts itself on load. I want to get its unencrypted code. For me it looks good idea to dump that library from memory when application started.
/proc/self/maps to get loaded process memory map. I found 3 segments that correspond to the library in memory maps and used
/proc/self/mem to dump these 3 segments to binary files. So, I got 3 binary files: code, writable data and read only data.
Does anyone know how to parse these 3 binary files and assemble them back to
so file that Android can run & debug?