I've tried to reverse engineering Clash Royale. First strange thing is that I can't find libg.so in maps.

cat /proc/<pid>/maps | grep libg.so

As I understand split_config.arm64_v8a.apk contains libg.so

With GameGuardian I've tried to found info about gold (money). I found some values but all of them was in [anon:libc_malloc]

Am I right that it's heap?

I also tried to search pointer of gold value but I didn't find so I tried to search pointer on [anon:libc_malloc] but I was confused. Like pointer on [anon:libc_malloc] was in another heap. I think it was bad idea.

I thought I can find some offest of libg.so where I can find pointer that contains info about gold.

I don't understand how it works. Can you explain how it should work and how can I get info about gold in this game?

I know this game has protection so I can't attach to libg.so functions so I tried to read memory.

  • Have you tried frida? It has probably all you need, especially module scanning and memory editing – morsisko Aug 3 '20 at 15:57

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.