CtrlPlus

I just tried myself and I didnt get the items shown up in the end battle screen. I managed to freeze it in double, about 12 values. Also, I did try it with my 96 account on mirael, froze energy, that still did not work, how does it know how much dmg I can deal in 90 seconds tf. Does it scan my team and estimates it ?

You sure about the rewards ? Then please try this for me because I dont have access right now to the game. Use vedan, freeze his energy and freeze the time, deal a lot more dmg then unfreeze his energy to kill him or umfreeze time and check if you actually receive the amount of coins it shows up in the battle screen. [added 0 minutes later] Or any other hero if you freeze his hp actually

There is a protection in guid hunt. Check how much dmg you dealt, it shows up correctly if you did more than normal ?

If its a higher lvl acc it shouldnt verify your battle not crush your game, it probably means you ve frozen some other values you shouldn t have. @Rastakiwi I tried searching for static addresses with CE by using a emulator but I cant seem to probably attach the debugger even if I tried all 3 of them, or it has to do something with break points because every time I try checking what writes/accesses a dynamic address nothing shows. Any idea ?

I think that would only be possible through ida

Any idea what is stored in lilith sdk process that launches with the game?

Lately I ve noticed an increase in crashes and sometimes an error attaching debbuger. @KingBlein is correct about the protection, at low levels I can use energy and hp freeze freely. I still havent figured out why guild hunts results arent showing when using any of the above. Any luck on tavern elite spawn? I mean the guarantee elite summon you do after reaching 100 summons.

Pretty much anything else than battles, only visuals, also I confirm that energy float scan is faster and works. Good job Rastakiwi !

Thank u ! I will experimwnt with this

No, I cant locate any pointers thats the issue. Its annoying searching values every battle and its not a guarantee that you find them, because of this is pretty hard to even change values, we can only freeze them, except energy which you can increase. No pointers, no base key to values, pretty limited.

Scan 0 dword as soon as you press begin battle, and do increase value scan until the hero uses ult, then after he uses ult, the hero should have no energy so refine to 0 value. If this wont find aroud 8 to 13 values then repeat the process.

I'm back with some info on hp freeze. It it possible it seems. I ran a few scans in campaign with warek. I managed to freeze his hp at a point but there are some implications. First of all, using unknown and decrease means that the hero will end up with low hp and big burst of dmg will bring it down. Second, using decreased value in a battle is quite a bad technique, there is the timer decreasing and other hp bars from enemies as well. In my tests when I froze warek's hp I also froze the time because of this and it seems that whenever you freeze time in campaign, it sticks, the addresses dont change. I found 9 values for hp only and 11 including the time it seems. There s a pattern in this values, they usually come in pairs. Will be be back after further tests.

They have a server based clock. Everything that happens in-game its tied to that clock

Pretty much...anything. We can't do anything but the speedhack and even this is limited. This is why I set up this topic, maybe together we can find something to exploit.

I don't know yet if its possible to freeze the HP but if you play enough with values in battles you'll notice that hp sometimes glitches, even so, I think that at the end, the battle wont be verified. Anything else that its not inside a campaign battle must be harder to change, I ve noticed that the campaign battle runs in offline mode, if you turn off your data/wifi, even if you get a pop up that there s no connection, the battle runs in the background. I think that this is something that might be exploitable, we must change something inside a battle then the results are sent to their servers. About the values,you could try saving them to txt then importing them.

I'm currently looking into ascension and if we can trick the game into thinking positions are filled even if they aren't. Btw, when you experiment with energy freeze, you should be careful because when you freeze values in a battle and try again in another battle without unfreezing the last addresses the game might crash as those respective addresses seem to be used for something else.

I know there is no working mod for this game yet and anything replaced with GG its just visual so I want to share my findings about this game, maybe we can put together something exploitable. I found that there is a way to edit energy values, patterns I found about this: - Addresses reset every time so every battle you must search again - The amount of values you find depends on the battle > There are 13 values for Campaign battles, 8 values for Guild Battle and around 1 or 2 when you go to Test Hero - Whenever you found values you can freeze them at 1,600,000,000 + and the hero will continuously use his ult - No energy at all is always value 0 and even just a bit of energy or full its 1,050,999,999 + ( there is always the same value for capped energy) -Every address found in campaign follows some sort of pattern, they end mostly in 14 28 50 or 78 88 - Lucius' values are harder to track -You can find the values of the enemies as well -Sometimes protection kicks in and the battle wont be verified, oddly sometimes it works Other things: In the daily guild battle with Wrizz, if you use a combination of Vedan and freeze his energy so he ults continuously he is invincible and also, YOU CAN FREEZE time. Search dword then decrease, go under 30 values, interestingly its that you can go to like 5-6 values with time, the more time there is the more values you'll find. Something else stops this technique, it seems that its coded in the game somewhere else that you only have 90 seconds and even if you froze time and dealt millions of dmg more than you would normally, when the battle is finished the registered value will be the dmg that you've done in the actual 90 seconds.