-
Posts
2,972 -
Joined
-
Last visited
-
Days Won
221
Content Type
Profiles
Forums
Downloads
Gallery
Posts posted by NoFear
-
-
29 minutes ago, CmP said:
Strangely enough, it seems that the instructions are still read from process memory after they have been executed once, but after some more executions of the instructions, they are indeed "cached" and are no longer read from memory. I figured that out from several observations, but I don't know how this mechanism of instructions "caching" really works in libhoudini or other translation solutions.
I'm not entirely sure either.
Try modded apk. (AGAIN, ARMV8 ONLY)
https://sbupload.com/dc2cf1e30d1c5edf
3 -
14 minutes ago, cisco72563 said:
Thanks so much,
All credit goes to @NoFear
And if patched then all credit goes to the DevIt's not patched... I'm just busy, I'll try to find time.
1 -
Give me time... I'll try to post apk and do armv7
1 -
9 minutes ago, cisco72563 said:
Well, the version is same.
You said 4.3.2..... not sure why you said that version
1 -
4.3.7
1 -
3 minutes ago, cisco72563 said:
Any suggestions? I do not have a smartphone?
Edit the 64bit lib. And replace in on emulator. Make sure games is completely closed before running. That might work.
On emulator, once offset is called, you can't modify it. So no "toggle". Libhoudini is essentially what reads and translates the lib. But it does revisit an offset if it already addressed it.
2 -
6 minutes ago, cisco72563 said:
Well @NoFear it is the arm64 version in the data/app/lib folder, since, I am using the Bluestacks 64 bit version and for proof I will also share the screenshot (if you want). The folder name is x86_64. I also have the 32 bit version of Bluestacks, but, for testing your method I installed the 64 bit version of Bluestacks. Well, anyways I am not a pro in modding (just have some cue's as how some things maybe done). So, thanks again for your efforts, I think maybe if you can mod the apk, or maybe in the new season I might use the swap item method (while replacing all 11 addressing values).
You are on emulator. X86 system. Not arm.
1 -
1 hour ago, cisco72563 said:
Hello @NoFear I tried the GG search in Xa (Dword) but no results found, also tried to edit the libgame.so file found in data/app/lib folder with HxD, searched the offsets and replaced with the edits but then nothing happened. Also closed and opened the game twice. Maybe it's the version issue my game version is 4.3.7. Please do guide if I did something wrong if not then I think mod apk is the final option.
All credit goes to @NoFear
And if patched then the credit will go to the DevYou are on armv7 is my guess. arm64 will be the folder in the data app.
1 -
1 hour ago, AKidWithMidgetFriend said:
I've never see r or E used in a search before, what's up with this syntax?
r is reverse hex.
I left everything in format similar to Arm opcodes.
2 -
This is for armv8 only, I haven't bothered to debug armv7 (yet). Your can edit lib on device if rooted and not deal with gg. Or use GG. When buying golden ticket, game will seem like nothing happened. Close and reopen.
Inapp seems to only add boosters. No coins or other elements.
Please, if you share of create mod... Give credit, don't try to claim this as your own work. (Biggest reason I stopped posting free to the public).
Offsets
18B2C78
18B3AEC
Edits
29008052
E803679EOr search dword in Xa range
092140B9r;081540FDr::3701
Edit
29008052r;E803679Er
8 -
7 hours ago, AKidWithMidgetFriend said:
Hello NoFear!
Thank you for your help understanding that bit about field offsets
But another question arose while observing a dump dll and given that you are so familiar with offsets you'd seem like the perfect person to help
So I noticed that these classes have assigned Tokens... These tokens are structured very similarly to offsets.
My questions being;
Are tokens and offsets directly related or are they both just reference constructors to allocate data?
Can a token be searched in the libil2cpp with HxD the same way you'd search an offset?
I'm sorry if I am wasting your time by inquiring I try not to make a habit of asking others opposed to plugging my questions into a search engine but I couldn't find the proper keywords to filter out irrelevant information
You would use a disassembler... IDA for example. Then could search strings for the "0xD0". Granted, will be insane number of results. Because the 0xD0 I believe could be used for something else on another function.
I'm still relatively new with lib editing.... I know enough to be dangerous
[added 0 minutes later]2 hours ago, nio04 said:understood! thanks for the information
u saw any lib script?
Scripts for lib editing. Do exist.
4 -
5 hours ago, cisco72563 said:
@NoFear that is awesome, do not worry about patch, just install and play it offline it won't update, secondly I wanted to ask can this be done on GG or this can only be done by modding?
Because there is a new season every month and the Golden Ticket resets for every month (It is not a permanent purchase, but, only for the season which one has purchased and then he/she would have to purchase the ticket again when the new season starts).
Man, I do not want to bother you again and again for every season so if modding is the case, so, which tutorial do you think I need to follow?It can be done with gg. I worry if method is public, developer will see and patch.
1 -
10 minutes ago, CmP said:
Firstly, since we are dealing with bitwise operations, it is reasonable to convert all values to hex:
Anti-cheat 1 = 0x50D00B6E
Anti-cheat 2 = 0x120B5C6E
Real value = 0x428C0000Now let's define new values that are derived from these "anti-cheat" values:
Key1 = Anti-cheat 1 = 0x50D00B6E
Key2 = Anti-cheat 2 with 2nd and 3rd bytes swapped = 0x125C0B6EReal value can then be calculated from previously defined values like this:
Real value = Key1 XOR Key2
Real value = 0x50D00B6E XOR 0x125C0B6E = 0x428C0000Following the same steps for this example:
-
Anti-cheat 1 = 0x50015F1D
Anti-cheat 2 = 0x135F511D
Real value = 0x43500000
-
Key1 = 0x50015F1D
Key2 = 0x13515F1D
- Real value = 0x50015F1D XOR 0x13515F1D = 0x43500000
Well done. Not much more I can say, other than impressive
1 -
Anti-cheat 1 = 0x50015F1D
-
6 minutes ago, AKidWithMidgetFriend said:
Hello, thank you this worked perfectly, but now I've found another line of code I was curious about and my specific question I cannot find an answer to with some searches because alot of different topics use the word offset
I found a public bool for god_mode in the dump.cs and it looks something like this
public bool god_mode // 0xD0
My question is 0xD0 an offset, the code doesn't explicitly state that it is and it is rather short compared to the offsets I've seen and used so far so it's a little questionable for an inexperienced person such as myself.
Sorry for not being to the point as I know your time, and whoever else looks into this thread is very important, but thank you for your time and help!
0xD0
You look for something like
Ldr W8, [x25, 0xD0]
Where W8 and X25 are just random for this example.
You'll have to find offset. In dump still.
2 -
-
Not sure. I think something is missing still....
One: this person doesn't realize he can just group copy and group paste.... Which discredits the knowledge level for me.
Two: they explain how the "calculation" works, but never utilizes that knowledge to create any custom value, but instead just uses data in memory.
I would have to go looking around for myself to find proper method. I think they have SOME of the information.... Or are misinterpreting the data at hand.
1 -
4 hours ago, 1337-D34thk1ller said:
But 1 question is left:
Its the Anti-cheat system of the Game "Anima"
All values (in Dword) a encrypted with 2 values that random generated every time they change.
Anti-cheat 1 XOR Anti-cheat 2 = real Value (Dword)
No problem to Bypass this
BUT the Weaponstats are saved in float
Anti-cheat 1 = 1.355.811.694d = 2,79232799e10f
Anti-cheat 2 = 302.734.446d = 4,39745947e-28f
Real Value = 1.116.471.296d = 70.0f
Other example:
Anti-cheat 1 = 1.342.267.165d = 8.681.976.832,0f
Anti-cheat 2 = 325.013.789d = 2,8186549e-27f
Real Value = 1.129.316.352d = 208.0f
No matter how i calculate there is always an difference.
Now the Question: is there an dword value for 0.0 float that is not 0?
In some games i found -0.0 float that has a long dword value (sorry dont find it for example anymore)
Maybe i need this 0.0float to XOR the Anti-cheat value befor calculate them
If i XOR the 2 Anti-cheat values and search for the result, I dont find anything. Same with calculate the Anti-cheat 1 or 2 with real value.
I might have to see it in memory browser... In case more info is needed.
1 -
5 hours ago, cisco72563 said:
Thanks @NoFear some additional info, here are some screenshots as to what a youtuber does in his videos. He takes the first reward and once he proceeds with his hack, he then resets the previous (taken reward).
Yea.... No need. Still working how to make it public with less risk of patch
[added 0 minutes later]1 hour ago, cisco72563 said:@NoFear will you share the trick with us or are you making a script?
Mod apk possibly.
1 -
Memory browser.
Goto address.
Xa range, select the lib you will be editing.
Goto it's start address. Long press address. Offset calculator. Enter your offset (hex). Click goto
4 -
13 minutes ago, cisco72563 said:
@NoFear let's see what happens. Man did you find any trick?
Oh yea.
1 -
It's xor.
Xor key = 320,017,171
Xor value = 1,363,350,291
Xor result = 1,112,539,136
Dword 1,112,539,136 = 52.0 float
Edit:
If you want 500,000,000 gold
dword edit
1,593,669,691
3 -
So debating on free public method.... Due to what's possible with it... Developer would patch it very quickly.
3 -
1 hour ago, cisco72563 said:
@NoFear you are missing the point, there are special rewards in the Golden Ticket that are not available otherwise (like the Piglet on @HamidKhan22 screenshot).
@HamidKhan22 man I tried it myself, the thing is that first you find the value of some coins in the free items line doing a group search, then you can narrow down by using the refine feature just putting the coins value (you will get 14 - 60 addresses), then you can use increment by 1 and you will then get the value of the coins from that line.
After this you can go to the address of the coins value as in offset calculator put 48 as offset (48 is the offset these items are apart from each other).
Do the same thing with the Golden Ticket Items, then you have to copy the values (in DWORD) above the value of the item you just are on (like the value of coins) and paste it on the Free items addresses above that value (there are 11 addresses linked to that value). Then, go back and press the Farm Season event button again and you can see the change.[added 4 minutes later]But the problem here is that once I did this with the Piglet, it showed that I got the Piglet as reward but then nothing happened, when I previewed the piglet with it's costume and pressed the back button then the piglet appeared, which means that there is something that I was still missing. Now the piglet disappears and reappears only when I preview it with the costume and press the back button (also I did not change all the 11 addresses from the Free item line with the Golden Ticket item just changed the 5 address above the address holding the value of the item).
I recently learned that was the reason.... I have a better method than what was circulating.
1 -
Discovered you could easily edit stars on current version... And it doesn't reset after close game...
Not sure the appeal of swapping items if you just edit currency and moves and everything....
3
Unlimited gem Evil Hunter Tycoon
in Tutorials
Posted
Honestly no idea if it still works. Haven't checked.