Files
root 93ec493d02 Absorb game-reserve's Unity/Lua and AssetBundle reverse engineering
Adds references/unity-lua-and-assetbundles.md: Unity + Lua containers, the Lua 5.1
header-byte tamper, the loader's bytecode-only check, the CRC manifest the game
actually reads, UnityFS partial-encryption windows, rebuild traps (layout loss,
dependency null, compressed == raw), TextAsset read-back, and half-encrypted Mono
assemblies behind a publisher shell.

Extends framework-runtimes with LayaAir Conch (DCC checksum and loader patch),
recon with resource completeness and the encryption map, repack-and-sign with
package rename, split-apk with the narrow apktool merge, dex-patching with
call-deletion instead of method rewrite, and packers with PairIP as a
target-selection signal. Adds pitfalls P51-P53 and two symptom rows.

Registration: one reference row, two capability rows (both partial/unverified),
two evidence-summary rows, two route-inventory rows, two coverage bullets, one
known-limitation bullet, and EXTENSION-game-reserve-2026-11.md. Gates and pytest
green.
2026-11-09 20:35:44 +08:00

66 lines
1.6 KiB
Plaintext

# build artifacts
*.class
*.jar
!skills/apk-reverse/scripts/dexpatch/*.java
# working data -- never commit samples or outputs
*.apk
*.aab
*.dex
*.odex
*.vdex
*.oat
*.so
*.jks
*.keystore
*.pk8
*.pem
*.p12
# local scratch
_tmp/
out/
work/
audit_out/
# local extension-pass workspace: toolchains, device archives, dumped images, scratch notes.
# Nothing under tools/ belongs to the repository -- the skill's own evidence record lives in
# docs/tool-verification/ and carries no target identity or vendored binaries.
tools/
# local input material (the reporting sample and the analysis notes it came with)
存在问题和例子/
# Local copies of the third-party write-ups an absorption pass reads. They are someone else's
# text, not content of this repository: what ships is the absorbed method under an `inferred`
# label, plus the anonymized source line in docs/tool-verification/EXTENSION-absorption-*.md.
# One `git add -A` is all it would take to commit them, so the rule is explicit here rather than
# resting on "nobody has added them yet".
.ref/
# A public skill clone read by the 2026-11 game-reserve absorption pass. Same rule: the method
# and the anonymised record ship, the upstream tree does not.
game-reserve/
# sandbox installs made while testing `npx skills add .` against this repo
.claude/
.agents/
*.log
*.jsonl
*.pcap
*.png
*.jpg
# python / editors
__pycache__/
*.pyc
.venv/
.vscode/
.idea/
.DS_Store
# local input material -- the same rule as 存在问题和例子/: the reports these passes are based on
# are the user's material, not content of this repository
新的建议和思路/
朋友全面审查和建议/