Leaderboard

New version 9.2.0.4.8 released

New version 9.2.0.2.11 released

View File Real Racing 3 (9.2.0) Update Autocompleter REAL RACING 3 UPDATE AUTOCOMPLETER Current version: 9.2.0.0.3 Beta Working RR3: 9.2.0 Description: Auto complete all the races added in latest update. One click script. Instructions: Run the script, then restart the game.That s all! Known issues: STILL BETA VERSION 64 BIT ONLY Video: Submitter MarioRossi93i Submitted 02/21/2021 Category LUA scripts  

New version 9.2.0.2.9 released

I can confirm that script doesn t work (32bit), i ll reupload fixed version asap, stay tuned...

I think this happens for 32 bit, but unfortunally i have some problems running 32 bit version. it crashes. So i ll can t solve so quickly...

New version 9.2.0.3.2 released

SINGLE CAR UNLOCKER Use this if main script doesn t work for you rr3_car_single_unlocker.v9.2.0.4.1.bin.lua

new version 9.2.0.4.1 released

New version 9.2.0.2.10 released

I see a lot of redundancy.. So I decide to clean it up. Original Shorten version: local CHOICES = {1, 2, 3, 4, 5, 6, 7, 8, 9, 0} function getResult(multiplier) local menu = gg.choice(CHOICES) return menu * multiplier end Here is the final result. local CHOICES = {1, 2, 3, 4, 5, 6, 7, 8, 9, 0} function getResult(multiplier) local menu = gg.choice(CHOICES) return menu * multiplier end -- Prompt three times in a row and wait... function find() local a, b, c = getResult(100), getResult(10), getResult(1) local n1= getResult(100) + getResult(10) + getResult(1) gg.searchNumber(n1, gg.TYPE_DWORD) --You can edit anything here end function main() local menu = gg.choice({"Find", "Refine", "Edit"}, nil, "YOUR TITLE") if not menu then else if menu == 1 then gg.clearResults() find() elseif menu == 2 then find() else gg.getResults(gg.getResultsCount()) gg.editAll(999) end end while true do if gg.isVisible() then gg.setVisible(false) main() end end

New version 9.2.0.4.5 released

New version 9.2.0.0.3 beta released

New version 9.2.0.3.1 released

New version 9.2.0.0.2-alpha released

This script doesn t work on many emulators, you ll can use the single car unlocker that will be released asap, stay tuned!

Too many guys ask about GG and libil2cpp.so to working with gameguardian. So I decided to make some guides to working around with it using offset. Game: Call of duty - Mobile VN Funtion to hack: Show enemy on radar This game was protected from dumper, so I uses Il2CppInspector to inspect the lib. Open up the Il2CppInspector.exe and drag the apk to the app GUI then wait a bit: I exported the Json file to find the function and address, and I want to find where the function to show enemy on rada, I found this: 0x046C37F4 -- here is address holded the function get_ShowEnemyOnRadar() So what should we do? We can mod directly in libil2cpp.so, using the hock, create the app to call... But here, I willshow you how to modify this function using GameGuardian First, you need the function tohandle the lib, share on Internet and I just copy paste here: local memFrom, memTo, lib, num, lim, results, src, ok = 0, -1, nil, 0, 32, {}, nil, false function name(n) if lib ~= n then lib = n local ranges = gg.getRangesList(lib) if #ranges == 0 then print("⚠ERROR: " .. lib .. " are not found!⚠") gg.toast("⚠ERROR: " .. lib .. " are not found!⚠") os.exit() else memFrom = ranges[1].start memTo = ranges[#ranges]["end"] end end end function hex2tbl(hex) local ret = {} hex:gsub( "%S%S", function(ch) ret[#ret + 1] = ch return "" end ) return ret end function original(orig) local tbl = hex2tbl(orig) local len = #tbl if len == 0 then return end local used = len if len > lim then used = lim end local s = "" for i = 1, used do if i ~= 1 then s = s .. ";" end local v = tbl[i] if v == "??" or v == "**" then v = "0~~0" end s = s .. v .. "r" end s = s .. "::" .. used gg.searchNumber(s, gg.TYPE_BYTE, false, gg.SIGN_EQUAL, memFrom, memTo) if len > used then for i = used + 1, len do local v = tbl[i] if v == "??" or v == "**" then v = 256 else v = ("0x" .. v) + 0 if v > 127 then v = v - 256 end end tbl[i] = v end end local found = gg.getResultCount() results = {} local count = 0 local checked = 0 while true do if checked >= found then break end local all = gg.getResults(8) local total = #all local start = checked if checked + used > total then break end for i, v in ipairs(all) do v.address = v.address + myoffset end gg.loadResults(all) while start < total do local good = true local offset = all[1 + start].address - 1 if used < len then local get = {} for i = lim + 1, len do get[i - lim] = {address = offset + i, flags = gg.TYPE_BYTE, value = 0} end get = gg.getValues(get) for i = lim + 1, len do local ch = tbl[i] if ch ~= 256 and get[i - lim].value ~= ch then good = false break end end end if good then count = count + 1 results[count] = offset checked = checked + used else local del = {} for i = 1, used do del[i] = all[i + start] end gg.removeResults(del) end start = start + used end end end function replaced(repl) num = num + 1 local tbl = hex2tbl(repl) if src ~= nil then local source = hex2tbl(src) for i, v in ipairs(tbl) do if v ~= "??" and v ~= "**" and v == source[i] then tbl[i] = "**" end end src = nil end local cnt = #tbl local set = {} local s = 0 for _, addr in ipairs(results) do for i, v in ipairs(tbl) do if v ~= "??" and v ~= "**" then s = s + 1 set[s] = {["address"] = addr + i, ["value"] = v .. "r", ["flags"] = gg.TYPE_BYTE} end end end if s ~= 0 then gg.setValues(set) end ok = true end Now you need to call the function: gg.setRanges ( gg .REGION_CODE_APP | gg .REGION_C_DATA) -- usally you only need this region name('libil2cpp.so') -- name the lib myoffset = 0x046C37F4 -- offset you found original('7F 45 4C 46 01 01 01 00') -- begin hex, open the libil2cpp.so with HexView and find first 8 bytes of hex replaced('01 00 A0 E3 1E FF 2F E1') -- use arm to hex converter, convert "return true" to hex, see https://armconverter.com/?code=mov%20r0,%20%231%0Abx%20lr gg.toast("Done!") Put it in your lua and done, you're now can hack the radar using GG and libil2cpp. Demo: Demo file: CODHack_Demo.lua

And top geo makes the strong encryption used by many script writers.

1000 X 4 = 1719825657 The 1000X4 means find the address which XOR with the adjacent address' value to get 1000. In other word, the previous address of value 1719825657 is 1,719,826,193. In order to trace the YYY from ZZZ, you have to XOR ZZZ with the adjacent value.

don't worry, I love you as if you were normal

You would use a disassembler... IDA for example. Then could search strings for the "0xD0". Granted, will be insane number of results. Because the 0xD0 I believe could be used for something else on another function. I'm still relatively new with lib editing.... I know enough to be dangerous [added 0 minutes later] Scripts for lib editing. Do exist.

Firstly, since we are dealing with bitwise operations, it is reasonable to convert all values to hex: Anti-cheat 1 = 0x50D00B6E Anti-cheat 2 = 0x120B5C6E Real value = 0x428C0000 Now let's define new values that are derived from these "anti-cheat" values: Key1 = Anti-cheat 1 = 0x50D00B6E Key2 = Anti-cheat 2 with 2nd and 3rd bytes swapped = 0x125C0B6E Real value can then be calculated from previously defined values like this: Real value = Key1 XOR Key2 Real value = 0x50D00B6E XOR 0x125C0B6E = 0x428C0000 Following the same steps for this example: Anti-cheat 1 = 0x50015F1D Anti-cheat 2 = 0x135F511D Real value = 0x43500000 Key1 = 0x50015F1D Key2 = 0x13515F1D Real value = 0x50015F1D XOR 0x13515F1D = 0x43500000

Memory browser. Goto address. Xa range, select the lib you will be editing. Goto it's start address. Long press address. Offset calculator. Enter your offset (hex). Click goto

It's xor. Xor key = 320,017,171 Xor value = 1,363,350,291 Xor result = 1,112,539,136 Dword 1,112,539,136 = 52.0 float Edit: If you want 500,000,000 gold dword edit 1,593,669,691

Even if encrypted value is interpreted as float by the game, one still needs to know exact values to be able to analyze how values in the pairs you provided are related. That's why you were asked to provide the values interpreted as dword.

I think you are confusing what you think is an id, as part of your value. Each pair, is Xor key Xor result If you want, could debug and find the function the reads each value to edit the function to set values that way. Edit: Your values decrypted in picture are. 10 33 8

The Y value is the non Encrypted value. Not sure how you don't know that value but you know the encrypted value. Anyway, the xor key should be 1 line above. Can use that to know what the 'ZZZZ' is with the built in XOR calc on GG.

Pointer is just the hex value = address. Pointer is Dword in armv7 Qword in armv8.

I already solved the problem, the normal Paralel Space was not working with me, so I installed the Paralel Space LITE and I managed, but thank you very much for answering me, and if you give an error in the lite I change For the X8 Sandbox.

Hum... Do you really think he's not trying to update the script ?? When it is possible to do so, Mario will post the script here for all of us.

getValues function can be used to get value(s) at specified address(es). However, in this case an optimization can be applied to get required values as a part of the search. The code may then look, for example, like this: gg.searchNumber("0;1350;-1~~1::9", gg.TYPE_DWORD, false, gg.SIGN_EQUAL, 0x7A00000000, 0x8A00000000, 0) gg.refineNumber("0;1350::5", gg.TYPE_DWORD, false, gg.SIGN_NOT_EQUAL) local numres = gg.getResultsCount() if numres > 0 then local res = gg.getResults(99) for i, v in ipairs(res) do v.value = 9999999 end gg.setValues(res) end In the initial search string the part "-1~~1" means any value except 0. It represents the target values that needs to be modified according to your condition. Refine search on the second line is used to remove first two values of each group of values that were found at the previous step from the results list, so that only target values remain there. The remaining code simply modifies found results (results list at this point consists only of the target values if any were found) to the desired value.

To help anyone else who is looking into this request. The app is Warplanes it's stated in the tag but not the title nor description. The values of the two currencies in the top right corner can be found group search DWord in Cd Ca and A memory range. However editing these values will cause all four to change but two of which will return to normal, and a "Hash differences" error gets returned in-game. I didn't look too much further into this as I've no expierence with working around a problem like this but hopefully someone will be able to help the post maker

When converting number to hex string, in most cases one would want to get a result with particular number of hexadecimal digits depending on the data type of the input. The following solution can be used to convert a number to hex string with specified count of digits: function convertToHexString(number, digits) if digits < 1 or digits > 16 then error("Number of hexadecimal digits in the resulting string has to be in range [1; 16]") end local mask = (1 << (digits * 4)) - 1 local format = "%0" .. digits .. "X" return string.format(format, number & mask) end Some examples of using the function along with returned strings: convertToHexString(94, 2) -- "5E" convertToHexString(-41, 2) -- "D7" convertToHexString(3345, 4) -- "0D11" convertToHexString(256787, 8) -- "0003EB13" convertToHexString(-62268, 8) -- "FFFF0CC4"

For move you can use this short script. It will give you two value. Freeze them both.move wont decrease anymore. I dont encrypt. So you can check my codes. homeEscape.lua

function dec2Hex(val) return val>=0 and string.format("%X", tonumber(val)) or string.format("%X", (val ~ 0xffffffffffffffff <<( string.len(string.format("%X",math.abs(val))) *4))) end I realize the first one not 100% working all the time. Here I improve the code, also to tell you something terrible. The use of Leading F is to indicate the sign of value. Try dec2Hex(1) and dec2Hex(-255). You will find both output = 1 because you had removed the leading sign bits. That's why it is better to keep the F there.

Please don't be rash. Hes clearly offering all the help he's got. If you too can offer some help ,then please do.

Give, give, give ...", "Teach me" and so on. oh my...this remind me of one now deleted topic that was once here with the most comments. you give, give and give...teach and show them but at the end of the day...they never really try to LEARN it or for god sake...READ. the just kept their MOUTH open and get ready to be FED only everytime. really not a fan of this kind of attitudes.

THE IMPORTANCE OF READING and usage of the SEARCH button on this site. countless question had been answered before but yet people still ask for it..even a simple one. while some search for it and found what they are looking for....there are some who dont ever bother to try looking for it...let alone to do some reading. its the JOURNEY for your goals that matter..you will never know what else you would find in the quest to find the answer. ..you may or may not find it...it will cost your time but with it you will gain some new knowledges as well in a very unexpected way. just a piece of my mind.

UPD: Im looked again - and found it! getTargetInfo() This is return table, and have "name" key inside. This method in API: *click*

download the simple armeabi-v7a version! when you install your app via google play, it automatically reads your build.prop to choose your base architecture, by default in emulators, the architecture of your libraries is x86, but the emulator also runs armeabi, but the priority is x86 if the game has this build in the store. then download the arm version from other stores and apk sites and try it out.