Jump to content

NoFear

Moderators
  • Posts

    2,972
  • Joined

  • Last visited

  • Days Won

    221

Posts posted by NoFear

  1. 29 minutes ago, CmP said:

    Strangely enough, it seems that the instructions are still read from process memory after they have been executed once, but after some more executions of the instructions, they are indeed "cached" and are no longer read from memory. I figured that out from several observations, but I don't know how this mechanism of instructions "caching" really works in libhoudini or other translation solutions.

    I'm not entirely sure either.

    Try modded apk. (AGAIN, ARMV8 ONLY)

    https://sbupload.com/dc2cf1e30d1c5edf

     

  2. 3 minutes ago, cisco72563 said:

    Any suggestions? I do not have a smartphone?

    Edit the 64bit lib. And replace in on emulator. Make sure games is completely closed before running. That might work.

    On emulator, once offset is called, you can't modify it. So no "toggle". Libhoudini is essentially what reads and translates the lib. But it does revisit an offset if it already addressed it.

  3. 6 minutes ago, cisco72563 said:

    Well @NoFear it is the arm64 version in the data/app/lib folder, since, I am using the Bluestacks 64 bit version and for proof I will also share the screenshot (if you want). The folder name is x86_64. I also have the 32 bit version of Bluestacks, but, for testing your method I installed the 64 bit version of Bluestacks. Well, anyways I am not a pro in modding (just have some cue's as how some things maybe done). So, thanks again for your efforts, I think maybe if you can mod the apk, or maybe in the new season I might use the swap item method (while replacing all 11 addressing values).

    You are on emulator. X86 system. Not arm.

  4. 1 hour ago, cisco72563 said:

    Hello @NoFear I tried the GG search in Xa (Dword) but no results found, also tried to edit the libgame.so file found in data/app/lib folder with HxD, searched the offsets and replaced with the edits but then nothing happened. Also closed and opened the game twice. Maybe it's the version issue my game version is 4.3.7. Please do guide if I did something wrong if not then I think mod apk is the final option.
    All credit goes to @NoFear
    And if patched then the credit will go to the Dev 😂😂

    You are on armv7 is my guess. arm64 will be the folder in the data app.

     

  5. This is for armv8 only, I haven't bothered to debug armv7 (yet). Your can edit lib on device if rooted and not deal with gg. Or use GG. When buying golden ticket, game will seem like nothing happened. Close and reopen.

    Inapp seems to only add boosters. No coins or other elements.  

     

    Please, if you share of create mod... Give credit, don't try to claim this as your own work. (Biggest reason I stopped posting free to the public).

    Offsets

    18B2C78

    18B3AEC

    Edits
    29008052
    E803679E

     

     

    Or search dword in Xa range

    092140B9r;081540FDr::3701

    Edit

    29008052r;E803679Er

  6. 7 hours ago, AKidWithMidgetFriend said:

    Hello NoFear!

    Thank you for your help understanding that bit about field offsets 

    But another question arose while observing a dump dll and given that you are so familiar with offsets you'd seem like the perfect person to help

    So I noticed that these classes have assigned Tokens... These tokens are structured very similarly to offsets.

    My questions being;

    Are tokens and offsets directly related or are they both just reference constructors to allocate data?

    Can a token be searched in the libil2cpp with HxD the same way you'd search an offset?

    I'm sorry if I am wasting your time by inquiring I try not to make a habit of asking others opposed to plugging my questions into a search engine  but I couldn't find the proper keywords to filter out irrelevant information

    You would use a disassembler... IDA for example. Then could search strings for the "0xD0".  Granted, will be insane number of results. Because the 0xD0 I believe could be used for something else on another function. 

    I'm still relatively new with lib editing.... I know enough to be dangerous 😛

    [added 0 minutes later]
    2 hours ago, nio04 said:

    understood! thanks for the information

     

    u saw any lib script?

    Scripts for lib editing. Do exist.

  7. 5 hours ago, cisco72563 said:

    @NoFear that is awesome, do not worry about patch, just install and play it offline it won't update, secondly I wanted to ask can this be done on GG or this can only be done by modding?
    Because there is a new season every month and the Golden Ticket resets for every month (It is not a permanent purchase, but, only for the season which one has purchased and then he/she would have to purchase the ticket again when the new season starts).
    Man, I do not want to bother you again and again for every season so if modding is the case, so, which tutorial do you think I need to follow?

    It can be done with gg. I worry if method is public, developer will see and patch.

  8. 10 minutes ago, CmP said:

    Firstly, since we are dealing with bitwise operations, it is reasonable to convert all values to hex:
    Anti-cheat 1 = 0x50D00B6E
    Anti-cheat 2 = 0x120B5C6E
    Real value = 0x428C0000

    Now let's define new values that are derived from these "anti-cheat" values:
    Key1 = Anti-cheat 1 = 0x50D00B6E
    Key2 = Anti-cheat 2 with 2nd and 3rd bytes swapped = 0x125C0B6E

    Real value can then be calculated from previously defined values like this:
    Real value = Key1 XOR Key2
    Real value = 0x50D00B6E XOR 0x125C0B6E = 0x428C0000

    Following the same steps for this example:

    1. Anti-cheat 1 = 0x50015F1D
      Anti-cheat 2 = 0x135F511D
      Real value = 0x43500000
       
    2. Key1 = 0x50015F1D
      Key2 = 0x13515F1D
       
    3. Real value = 0x50015F1D XOR 0x13515F1D = 0x43500000

    Well done.  Not much more I can say, other than impressive 🙂

  9. 6 minutes ago, AKidWithMidgetFriend said:

    Hello, thank you this worked perfectly, but now I've found another line of code I was curious about and my specific question I cannot find an answer to with some searches because alot of different topics use the word offset

    I found a public bool for god_mode in the dump.cs and it looks something like this 

    public bool god_mode // 0xD0

    My question is 0xD0 an offset, the code doesn't explicitly state that it is and it is rather short compared to the offsets I've seen and used so far so it's a little questionable for an inexperienced person such as myself.

    Sorry for not being to the point as I know your time, and whoever else looks into this thread is very important, but thank you for your time and help!

    0xD0

    You look for something like

    Ldr W8, [x25, 0xD0]

    Where W8 and X25 are just random for this example.

    You'll have to find offset. In dump still. 

  10. Not sure.  I think something is missing still....

    One: this person doesn't realize he can just group copy and group paste.... Which discredits the knowledge level for me.

    Two: they explain how the "calculation" works, but never utilizes that knowledge to create any custom value, but instead just uses data in memory.

     

     

    I would have to go looking around for myself to find proper method. I think they have SOME of the information.... Or are misinterpreting the data at hand.

  11. 4 hours ago, 1337-D34thk1ller said:

    But 1 question is left:

    Its the Anti-cheat system of the Game "Anima"

    All values (in Dword) a encrypted with 2 values that random generated every time they change.

    Anti-cheat 1 XOR Anti-cheat 2 = real Value (Dword)

    No problem to Bypass this😉

    BUT the Weaponstats are saved in float

    Anti-cheat 1 = 1.355.811.694d = 2,79232799e10f

    Anti-cheat 2 = 302.734.446d = 4,39745947e-28f

    Real Value = 1.116.471.296d = 70.0f

    Other example:

    Anti-cheat 1 = 1.342.267.165d = 8.681.976.832,0f

    Anti-cheat 2 = 325.013.789d = 2,8186549e-27f

    Real Value = 1.129.316.352d = 208.0f

     

    No matter how i calculate there is always an difference. 

    Now the Question: is there an dword value for 0.0 float that is not 0?

    In some games i found -0.0 float that has a long dword value (sorry dont find it for example anymore)

    Maybe i need this 0.0float to XOR the Anti-cheat value befor calculate them🤔

    If i XOR the 2 Anti-cheat values and search for the result, I dont find anything. Same with calculate the Anti-cheat 1 or 2 with real value.

    I might have to see it in memory browser... In case more info is needed. 

  12. 5 hours ago, cisco72563 said:

    Thanks @NoFear some additional info, here are some screenshots as to what a youtuber does in his videos. He takes the first reward and once he proceeds with his hack, he then resets the previous (taken reward).

    1.png

    2.png

    Yea.... No need.  Still working how to make it public with less risk of patch

    [added 0 minutes later]
    1 hour ago, cisco72563 said:

    @NoFear will you share the trick with us or are you making a script?

    Mod apk possibly. 

  13. 1 hour ago, cisco72563 said:

    @NoFear you are missing the point, there are special rewards in the Golden Ticket that are not available otherwise (like the Piglet on @HamidKhan22 screenshot).
    @HamidKhan22 man I tried it myself, the thing is that first you find the value of some coins in the free items line doing a group search, then you can narrow down by using the refine feature just putting the coins value (you will get 14 - 60 addresses), then you can use increment by 1 and you will then get the value of the coins from that line.
    After this you can go to the address of the coins value as in offset calculator put 48 as offset (48 is the offset these items are apart from each other).
    Do the same thing with the Golden Ticket Items, then you have to copy the values (in DWORD) above the value of the item you just are on (like the value of coins) and paste it on the Free items addresses above that value (there are 11 addresses linked to that value). Then, go back and press the Farm Season event button again and you can see the change.

    [added 4 minutes later]

    But the problem here is that once I did this with the Piglet, it showed that I got the Piglet as reward but then nothing happened, when I previewed the piglet with it's costume and pressed the back button then the piglet appeared, which means that there is something that I was still missing. Now the piglet disappears and reappears only when I preview it with the costume and press the back button (also I did not change all the 11 addresses from the Free item line with the Golden Ticket item just changed the 5 address above the address holding the value of the item).

     

    I recently learned that was the reason....  I have a better method than what was circulating. 

×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.