[Can a group search be done for encrypted value or any other way to speed up the process?]

53 minutes ago, nok1a said:

Indeed, just make sure that your using hex and not decimal. 12 bytes = 0xC

Okay. I apologize if I am being a pain but I'm still trying to grasp this thing and pull all the pieces together to make sense of it. Now when I run your script and get the health value, shouldn't I theoretically be able to go to the nearest pointer, which is 4 bytes above your health value and click "go to pointer" and find that block that you used for your group search? I mean since they are static they should appear on my device too just like they did on your 2 devices, right? Well I went up and down the list and I didn't find that block of numbers.   

But regardless, going off of your health value, I found the same distance pointer (nearest one that has the same static block of numbers on 2 devices) and I got the group search and it works fine, then I refine this number: 1,900,544 and get 55 results. This is all fine. But when I run the script (used yours as a template for my values) I find no pointers.

If you're curious why I am refining to this number (1,900,544) please check the attached video

 

Here's he script (based it on yours but with my numbers):

gg.setRanges(gg.REGION_ANONYMOUS | gg.REGION_C_BSS | gg.REGION_C_ALLOC)
gg.searchNumber("17A;1,075,642,368A;1,900,544A;1,310,728A;589,828A;1,703,957A;1,703,969A;1,376,289A;1,920A;469,762,048A::185", gg.TYPE_DWORD)
gg.refineNumber("1,900,544", gg.TYPE_DWORD)
print("Group search: ", gg.getResultsCount())
local grp = gg.getResults(1)
gg.loadResults({{address = grp[1].address - 0xc, flags = gg.TYPE_DWORD}})
gg.searchPointer(0)
print("First Pointer search: ", gg.getResultsCount())
gg.searchPointer(0)
print("Second Pointer search: ", gg.getResultsCount())
local t = gg.getResults(gg.getResultsCount())
local sensitivity = {}
for i, v in ipairs(t) do
  sensitivity[i] = {address = v.address + 0xc, flags = gg.TYPE_FLOAT}
end
sensitivity = gg.getValues(sensitivity)
local healthPointer = {}
for i = 1, #sensitivity do
  if sensitivity[i].value == "1.0" then
    healthPointer[i] = {address = t[i].address, flags = gg.TYPE_DWORD}
  end
end
gg.loadResults(healthPointer)
print("Results healthPointer: ", gg.getResultsCount())
gg.searchPointer(0)
print("Third Pointer search: ", gg.getResultsCount())
local res = gg.getResults(1)
local health = {[1] = {address = res[1].address - 0xc, flags = gg.TYPE_FLOAT, name = "Health"}}
gg.addListItems(health)
gg.loadResults(health)
 

 

Any ideas?

 

EDIT:

I first accidentally pasted the script with 0x12 for the 12 bytes, but I definitely tried it with 0xc (hex) and it still gave me no pointers

[Can a group search be done for encrypted value or any other way to speed up the process?]

9 hours ago, nok1a said:

Thanks for the vote but that's more about status. Account status not that relevant but perhaps it can work as a backbone regarding the reliability of the information provided and as well the individual his contribution in the forum. Positive votes always better then negative ones to.

Aside from that most important to me is that the information shared is done good enough in a way that the person communicating to understands it. And of course to use the knowledge obtained for himself and improve so the person becomes a even better person.

Sorry I have another question.  When you added 4 bytes, then subtracted 4 bytes then added 4 bytes again, is all of this because the health value was 4 bytes below the closest/final pointer?  So if my health value is 12 bytes above the closest/final pointer then essentially I should reverse what you did? So in other words I should subtract 12 bytes then add 12 bytes then subtract 12 bytes?  When I did this it didn't work.

[Can a group search be done for encrypted value or any other way to speed up the process?]

2 minutes ago, nok1a said:

LDPlayer

Make sure you deleted any installed dead trigger 2 versions from the emulator using the uninstall option in the play store.

Sign in to the play store with your google account. Then create new folder in 0/android/obb/

name folder: com.madfingergames.deadtrigger2 and then store the .obb file (main.15020074.com.madfingergames.deadtrigger2.obb) from the modded apk in it.

Should resolve the issue.

I'll do that. Much obliged 

[Can a group search be done for encrypted value or any other way to speed up the process?]

4 minutes ago, nok1a said:

But i also think that regarding voting it's more efficient to use it as accordingly as possible. Like for example i don't think you have to upvote every comment because you received a solution or want to show gratitude (of course it's appreciated), personally i believe only the solution should be upvoted or liked or answers that answer questions. Multiple answers can answer multiple questions so each of it should receive a vote if all those answers are well detailed enough in a way that the other person understands. (personal opinion)

Yeah that makes sense

[Can a group search be done for encrypted value or any other way to speed up the process?]

2 minutes ago, nok1a said:

Thanks for the vote but that's more about status. Account status not that relevant but perhaps it can work as a backbone regarding the reliability of the information provided and as well the individual his contribution in the forum. Positive votes always better then negative ones to.

Aside from that most important to me is that the information shared is done good enough in a way that the person communicating to understands it. And of course to use the knowledge obtained for himself and improve so the person becomes a even better person.

Understood my friend.  One question regarding the emulator, what emulator are you using?  Is i Bluestacks? I am using 2 phones but I'd like to try an android emulator on PC. When I installed the modded apk using Bluestacks and tried to launch it, i got a message saying "Download failed because the user is not signed in".  I figured maybe Bluestacks doesn't support modded apks? How did you get it installed on the emulator?

[Can a group search be done for encrypted value or any other way to speed up the process?]

10 hours ago, nok1a said:

It finds all pointers pointing to your address. To use it you need to load the address(es) you want to perform the pointer search on in the result list.

gg.loadResults({{address = grp[1].address + 0x4, flags = gg.TYPE_DWORD}})

Adds 4 bytes to the address, 0x9865E5B0 + 0x4 = 0x9865E5B4 and then loads it in the result list in data type dword.

gg.searchPointer(0)

Does the pointer search in the given ranges. Basically it's like doing: gg.searchNumber(9865E5B4h, gg.TYPE_DWORD)

You get a few results.

I dunno how gameguardian does it behind the hood but now i use gg.searchPointer(0) again because i want to perform pointer search on each of those addresses...that's why a second time.

I have now more results because there are a lot of pointers pointing to those few addresses from previous screenshot. Now i need to filter them out because the health value was one more pointer search away, and the address to pointer search is in this result list. One of those addresses had 4 bytes above it a value 1.0F. That's the same value i asked you to search using 256F;1.0F::16. Sadly it returned no results for you. But the 1.0F value is located 4 bytes above one of those addresses in the result list. So i used that for filter out all these values and to get only 1 address left.

local t = gg.getResults(gg.getResultsCount())
local sensitivity = {}
for i, v in ipairs(t) do
  sensitivity[i] = {address = v.address - 0x4, flags = gg.TYPE_FLOAT}
end
sensitivity = gg.getValues(sensitivity)

subtracted 0x4 from all the addresses in the result list and stored it in a new table(sensitivity) with data type float.

local healthPointer = {}
for i = 1, #sensitivity do
  if sensitivity[i].value == 1.0 then
    healthPointer[i] = {address = t[i].address, flags = gg.TYPE_DWORD}
  end
end

Checked which address of the table sensitivity contained the value 1.0F using iteration and if it found it should store the address that is 4 bytes under it in the table healthPointer and then load it in the result list using:

gg.loadResults(healthPointer)

It found a match and loaded the address in result list:

Script performs pointer search again.

local res = gg.getResults(1)
local health = {[1] = {address = res[1].address + 0x4, flags = gg.TYPE_FLOAT, name = "Health"}}

Will get 1 result, the health value is 4 bytes under that address...so i add 4 bytes to the address and store in the table health and gave it a name.

gg.addListItems(health)
gg.loadResults(health)

Add the table health in the saved list.

And loads it as well in the result list.

Adviced to check out the Lua scripting documentation.

Aside from upvoting and hearting your answers and marking the answer containing the script as "best answer", is there anything else I can do to express my sincere gratitude?

[Can a group search be done for encrypted value or any other way to speed up the process?]

7 minutes ago, nok1a said:

It finds all pointers pointing to your address. To use it you need to load the address(es) you want to perform the pointer search on in the result list.

gg.loadResults({{address = grp[1].address + 0x4, flags = gg.TYPE_DWORD}})

Adds 4 bytes to the address, 0x9865E5B0 + 0x4 = 0x9865E5B4 and then loads it in the result list in data type dword.

gg.searchPointer(0)

Does the pointer search in the given ranges. Basically it's like doing: gg.searchNumber(9865E5B4h, gg.TYPE_DWORD)

You get a few results.

I dunno how gameguardian does it behind the hood but now i use gg.searchPointer(0) again because i want to perform pointer search on each of those addresses...that's why a second time.

I have now more results because there are a lot of pointers pointing to those few addresses from previous screenshot. Now i need to filter them out because the health value was one more pointer search away, and the address to pointer search is in this result list. One of those addresses had 4 bytes above it a value 1.0F. That's the same value i asked you to search using 256F;1.0F::16. Sadly it returned no results for you. But the 1.0F value is located 4 bytes under one of those addresses in the result list. So i used that for filter out all these values and to get only 1 address left.

local t = gg.getResults(gg.getResultsCount())
local sensitivity = {}
for i, v in ipairs(t) do
  sensitivity[i] = {address = v.address - 0x4, flags = gg.TYPE_FLOAT}
end
sensitivity = gg.getValues(sensitivity)

subtracted 0x4 from all the addresses in the result list and stored it in a new table(sensitivity) with data type float.

local healthPointer = {}
for i = 1, #sensitivity do
  if sensitivity[i].value == "1.0" then
    healthPointer[i] = {address = t[i].address, flags = gg.TYPE_DWORD}
  end
end

Checked which address of the table sensitivity contained the value 1.0F using iteration and if it found it should store the address that is 4 bytes under it in the table healthPointer and then load it in the result list using:

gg.loadResults(healthPointer)

It found a match and loaded the address in result list:

Script performs pointer search again.

local res = gg.getResults(1)
local health = {[1] = {address = res[1].address + 0x4, flags = gg.TYPE_FLOAT, name = "Health"}}

Will get 1 result, the health value is 4 bytes under that address...so i add 4 bytes to the address and store in the table health and gave it a name.

gg.addListItems(health)
gg.loadResults(health)

Add the table health in the saved list.

And loads it as well in the result list.

Adviced to check out the Lua scripting documentation.

Wow that's incredible. It's sure going to take a lot of time for me to digest all of this lol.  Thanks again for all the explanations and screenshots. I truly appreciate your time.

[Can a group search be done for encrypted value or any other way to speed up the process?]

1 hour ago, Sami1982 said:

I got it first try!  Got a group search that gives me 5 pointer results every time and one of them always works.  But I'm a bit hazy on the "gg.searchPointer(0)" part.  What exactly do I need to do? I am looking at your script and you executed 3 pointer searches. But where does the script show what it's doing to grab that single health value?  Like what is the syntax or command that is performing this function? Is it this?

address = v.address - 0x4, flags = gg.TYPE_FLOAT

 

 

Got excited too soon Lol.  I did it wrong.  Still trying to get the hang of it. By the way, why did you refine "0" in your group search?  If it had any value or purpose shouldn't I be able to "go to pointer" or "pointer search" it? I get nowhere with it.

[Can a group search be done for encrypted value or any other way to speed up the process?]

2 hours ago, nok1a said:

Got it.

Glad to hear. Thank you to for continuing with it instead of dropping out halfway. Finding group searches for other members through communication of a forum takes time. Requires a bit of Forward and Back communication. People can get demotivated. You pulled through.

Group search was possible to find using my emulator and phone. When searching group search for other person or for your self you need to at least have the game on 2 different devices or virtuals to have some confirmation that your group search is possibly a static one.

As far i know in gameguardian a pointer is a value that points to an address in the virtual memory of the process. I don't want to tell you wrong info so i keep it with this link: https://en.wikipedia.org/wiki/Pointer_(computer_programming)#:~:text=Pointers are used to store,which objects are dynamically allocated.

GameGuardian highlights possible pointers with a colour: https://gameguardian.net/help/help.html#help_hex_colors

Pointers are more clear in 64bit games. On 32bit games to many values are highlighted but they aren't all pointers...after some practise you can quickly filter out the none pointers from actual pointers.

The pointer represents some object. 

If you can't find a group search around the value of interest you can follow the pointers which usually will lead to some static values. In lot's of cases the game needs to uses pointer references from an object in order to update for example your health value when you take damage.

In GG i used the nearest pointer that had the same distance from the health value on both devices. And kept using "go to pointer" till i saw a block of values that is the same on both devices so i could use it to make a group search. Then what you have to do in the script is use "gg.searchPointer(0)" and this will do the opposite. Instead of going to pointer you will be get all addresses that have a pointer that points to your address.

I advice you to check some scripts that uses pointer search and combine it with your manual knowledge on how to use the GG pointer feature.

Use the print() feature in the script to slowly debug the script. And use --[[ ]] to ignore code so that you can see line by line what happens.

I got it first try!  Got a group search that gives me 5 pointer results every time and one of them always works.  But I'm a bit hazy on the "gg.searchPointer(0)" part.  What exactly do I need to do? I am looking at your script and you executed 3 pointer searches. But where does the script show what it's doing to grab that single health value?  Like what is the syntax or command that is performing this function? Is it this?

address = v.address - 0x4, flags = gg.TYPE_FLOAT

 

 

[Can a group search be done for encrypted value or any other way to speed up the process?]

1 hour ago, nok1a said:

Got it.

Glad to hear. Thank you to for continuing with it instead of dropping out halfway. Finding group searches for other members through communication of a forum takes time. Requires a bit of Forward and Back communication. People can get demotivated. You pulled through.

Group search was possible to find using my emulator and phone. When searching group search for other person or for your self you need to at least have the game on 2 different devices or virtuals to have some confirmation that your group search is possibly a static one.

As far i know in gameguardian a pointer is a value that points to an address in the virtual memory of the process. I don't want to tell you wrong info so i keep it with this link: https://en.wikipedia.org/wiki/Pointer_(computer_programming)#:~:text=Pointers are used to store,which objects are dynamically allocated.

GameGuardian highlights possible pointers with a colour: https://gameguardian.net/help/help.html#help_hex_colors

Pointers are more clear in 64bit games. On 32bit games to many values are highlighted but they aren't all pointers...after some practise you can quickly filter out the none pointers from actual pointers.

The pointer represents some object. 

If you can't find a group search around the value of interest you can follow the pointers which usually will lead to some static values. In lot's of cases the game needs to uses pointer references from an object in order to update for example your health value when you take damage.

In GG i used the nearest pointer that had the same distance from the health value on both devices. And kept using "go to pointer" till i saw a block of values that is the same on both devices so i could use it to make a group search. Then what you have to do in the script is use "gg.searchPointer(0)" and this will do the opposite. Instead of going to pointer you will be get all addresses that have a pointer that points to your address.

I advice you to check some scripts that uses pointer search and combine it with your manual knowledge on how to use the GG pointer feature.

Use the print() feature in the script to slowly debug the script. And use --[[ ]] to ignore code so that you can see line by line what happens.

Thanks again for all your help and precious efforts. This information is extremely valuable. I will try my best to apply this knowledge.  You are awesome dude

[Can a group search be done for encrypted value or any other way to speed up the process?]

58 minutes ago, nok1a said:

Could be wrong but it says that there is a character that isn't supposed to be there at line 1. I think you pasted the code in a file and typed some character in it by accident which then caused the error. Please recheck the script. Delete all and past again. If still same error it's odd. Should not be scripts mistake. Perhaps a character got added while copy pasting it. Upload script here if still not work.

You can download this one, it's the same script.

pointerTest.lua 1.2 kB · 0 downloads

You are a genius man. It worked!  But the sad part is that I have no idea how you did it and I would've loved to be able to learn how to do it myself. Looking at your script nothing makes sense to me as to how you came up with that group search or even how the pointer search is working

 

FYI I've reached my maximum posts for today. So if you reply to me and I can't reply until tomorrow you know why lol

[Can a group search be done for encrypted value or any other way to speed up the process?]

20 minutes ago, nok1a said:

Execute the script i gave you, and send screenshot of the prompt.

Okay I did, and it fails with this error (attached):

[Can a group search be done for encrypted value or any other way to speed up the process?]

17 minutes ago, nok1a said:

Oke and what about the group search 327,684D;22D;28D;0D;33,554,931D? When you enable all regions and go in match and search. No result?

The thing is, the group search and script i have tried on emulator and mobile phone and on both worked. And the values remain same even after restart of the game. So perhaps you have to find your health value and then you have to execute a script i can give you. And then we perhaps find out what for values are at the location of which your supposed to have: 327,684D;22D;28D;0D;33,554,931D. Possible it will be static for you as well. But first check if this group search works when enabling all regions.

Sorry this may have been an oversight on my part.....I just now re-confirmed this, and with all regions enabled, the 327,684D;22D;28D;0D;33,554,931D::65 search yields the following restuls:

But again none of the negative values around those results are the correct ones

[Can a group search be done for encrypted value or any other way to speed up the process?]

36 minutes ago, nok1a said:

You don't need to be in same mission. search 256;1.0 when the pause menu is visible. And search 257;1.0 when the pause menu is hidden.

Okay, whether I search with or without the pause menu visible doesn't seem to have any bearing on whether or not I find results. The only thing that seems to determine whether or not I get results is what group size I use. If I use ::13 I get nothing (again with or without the pause menu visible) for both the 256 and 257. Whereas if I use ::65536  I get thousands of results for the 257 and 5 to 7 results for the 256. I did a "goto" on all 7 results and randomly messed with the nearby negative values but unfortunately none were the correct health value.

The funny thing is that having the "autopause game" setting in GG on "no" VS "yes" seems to make no difference at all.  While actively in a mission, if you tap on GG's icon, you can perform your search without the pause menu visible regardless of what the setting says.  If you want to perform the search WITH the pause menu visible all you have to do is tap on the X of GG's upper right corner and you'll immediately be brought to the pause menu and then you can tap on GG's icon again to perform your search with the pause menu visible. 

11 minutes ago, nok1a said:

Enable all regions

Way ahead of you Lol.  Had already done it on my own but forgot to mention it

EDIT:  Sorry this may have been an oversight on my part.....I just now re-confirmed this, and with all regions enabled, the 327,684D;22D;28D;0D;33,554,931D::65 search yields the following restuls:

But again none of the negative values around those results are the correct ones

[Can a group search be done for encrypted value or any other way to speed up the process?]

8 hours ago, nok1a said:

Just connecting dods that perhaps is useful for others.

Btw can you try as shown in the video?:

And on top of that also try this group search, its in region A, Ca or Cb...ranges changes at restart...could also be ranges Other actually: 327,684D;22D;28D;0D;33,554,931D::65

Okay the search of 257;1.0F::13 in the video worked but refining to 256;1.0F::13 produced no results for me.

                 

But this search didn't produce any results at all.

                   And on top of that also try this group search, its in region A, Ca or Cb...ranges changes at restart...

                     could also be ranges Other actually: 327,684D;22D;28D;0D;33,554,931D::65

 

Do I need to be in the same mission as you?

 

 

[Can a group search be done for encrypted value or any other way to speed up the process?]

4 hours ago, Lenn1 said:

Have you tried doing a search in xor format? example the number of projectiles, health, stamina followed by "X12, X16...

150X12...

usually the encryption is found close to the key this way.

              

Thanks for replying. I just tried this but did not succeed, unfortunately

[Can a group search be done for encrypted value or any other way to speed up the process?]

3 hours ago, nok1a said:

In the new version there is a class named "CipherProvider".
 

I am using this class as pointer reference for the script.

The health value it self is part of the class Float:
 

I am not sure but i think in order to find out how the value works in the old version you have to investigate that class CipherProvider. To be honest madfinger games isn't really known to change anything to their encryption and normally they don't care.

Okay those screenshots look like a foreign language to me LOL. Is this DNS spy or something?  

 

[Can a group search be done for encrypted value or any other way to speed up the process?]

27 minutes ago, nok1a said:

Ok, i can't work with that. Also i am experiencing problems with the modded APK. Like while i am searching values gameguardian can't find the process anymore.

Aside from that i installed the latest APK and finding health value was way more easy and more making it in a script should not be an issue. I just tested it and it works fine, even if it is encrypted because it has a metadata and libil2cpp.so.
The version 1.5.1 doesn't has a libil2cpp and still uses libmono and that's why it will be a struggle finding the right pointers. The pointers point to their own address instead of a metadata.

Does the modded APK gives you any type of benefits that the latest version does not give you?

Wow, that's really awesome to hear!   

Being offline, the modded APK has the possibility to hack the gold so that I can instantly unlock any weapon without risking a ban.  With the latest version, it takes a long time to collect gold to unlock weapons.  I've already gradually unlocked all these weapons over the years legitimately using my good account and I don't want to risk a ban if I use GG.

[Can a group search be done for encrypted value or any other way to speed up the process?]

23 minutes ago, nok1a said:

I was thinking about pointer search. But not sure. Can you search the health value and select the 3 bytes and send a screenshot of the xor result. Like this.

 

 

Gladly!  I've attached them.  I was confused because you said "xor" but your screenshot was offset (or at least I felt that it was lol), so I took a screenshot of both just to be safe.

[Can a group search be done for encrypted value or any other way to speed up the process?]

23 minutes ago, nok1a said:

Weird. Installed the mod APK which was behaving really weird. I still could not find the value as you did using encrypted search. Do i have to search the value when i am in increasing my health with a medkit instead of when my health goes down? I found a health value using unknown search, it's possible the same as yours but if i edit it as you did "-9,999,999.0" the health value changes to 1. Do you always get a high health when you edit to 9999999 ?

Can you check if you go the address of the health value it looks like this? Are the pointers at the same distance from where the health value is located as the in the screenshots?

 

No, you don't need to increase your health with a medkit. You can decrease your health too if you want and it works as long as you don't die before you reach 10 or less values. But obviously if you're about to die and you still have a ton of results then you would naturally need to increase your health to be able to continue filtering for the correct value. By the way when taking damage, the value sometimes increases even though it should logically decrease and the opposite is true.  As such I only execute a "changed" scan.  Sometimes it gets glitchy and the only way I can find it is with an unknown search as you did.  You don't need to use -9,999,999.0.  You can simply freeze it.  No, I don't always get a high health when editing to -9,999,999.0.  Sometimes it randomly changes to 1 for me too as it did with you, in which case I simply just change it to -0.5 and that gives a high health.  And yes the pointers are at the same distance from the health value for me too.

8 minutes ago, nok1a said:

When changing last byte of the health value to -127 i get high health value.

 

 

"Personally i don't think it looks that simple to automate the process". Group search perhaps won't work.

Yeah unfortunately I had a feeling this would be the case. After my original post, the more I explored and the deeper I dug, the more evident it became to me that this wasn't going to be easily done through GG, if even at all possible.  I truly do appreciate your efforts and the time you have put into this to try to help me. Thanks a lot.

[Can a group search be done for encrypted value or any other way to speed up the process?]

13 minutes ago, nok1a said:

It's not on unlisted. It's on private. Ok thanks for providing the screenshot.

Oops. Sorry about that. I changed it to unlisted.  No thank YOU for trying to help me. 

[Can a group search be done for encrypted value or any other way to speed up the process?]

6 hours ago, nok1a said:

The video would be helpful. In fact, when you find your health value can you run @Lover1500 his script:

Class name and Field offset searcher (#4udgq21d)

And send a screenshot of the prompt.

Okay the screenshot is attached.  I sent you a youtube link to an unlisted video in a private message because when I tried to post the link here it wouldn't allow me to do it. 

Thanks

[Can a group search be done for encrypted value or any other way to speed up the process?]

1 hour ago, nok1a said:

Oke just asking but you said the value is encrypted but can you send me a screenshot of the health value you found, preferable in float data type.

Okay but the value is never the same after I restart the game. The screenshots are attached. I can also share a quick video of me finding the encrypted health value and demonstrating that it works if this helps. I just need a telegram or some other means of sharing as I tried posting a youtube link to an unlisted video here but it wouldn't allow me to do it.

[Can a group search be done for encrypted value or any other way to speed up the process?]

1 hour ago, nok1a said:

Does this only work on that dead trigger 2 version? If i used fuzzy search and decrease i get a float value. But im using last version because old version asked me to update.

And i still die even after freezing the value.

Thanks for trying I really appreciate the time and effort you are putting into this. I didn't try it on the latest version or using my good account because I didn't want to risk a ban. So I don't know to be honest if it only works on the version I am trying it on. The version I am trying it on is 1.5.1 and it's offline and it doesn't ask me to update. I can even turn off my internet completely and use it totally offline. If you'd like to try that version here is the link:

http://www.mediafire.com/file/nt83tt2wvjom7om/dead_trigger_2_hack.rar/file

All you have to do after installing it is set a new user name (it can be anything, e.g. "dead1234" for both the username and password) and allow storage permissions in the game's app settings. Thanks again

[Can a group search be done for encrypted value or any other way to speed up the process?]

On 1/1/2024 at 2:05 PM, MonkeySAN said:

maybe you can share the game name and what you are trying to find?

so that people can look for a way to find it.

Sorry I meant to reply to you with a quote, but instead I did it without a quote. Not sure if you got notified of my reply or not. But anyway, here it is:

Hi, thanks for the reply.  It's an old offline version of Dead Trigger 2 (version 1.5.1). Am I allowed to post a link here? If so I would link it.  What I need is a way to speed up/automate finding the health value. It's encrypted and I can find it fairly easily by checking the "this value is encrypted" option and then taking damage, decrease, refine...etc.  But I was hoping for a quicker way to re-find it once I restart the game so that I don't have to repeat this process all over every time I restart the game.  I can't find any unique/non-changing values above or below my main value.  I went all over the list of values and recorded videos and compared the values but they are always changing when the game restarts. I tried dozens of values but none of them give any results in the search once the game restarts.  I also tried the offsets method, finding xor key, pointer search..... but again once the game restarts sadly nothing works. I get no results whatsoever. Is it possible the encryption key is always changing when the game restarts and as such there is no way to accomplish what I want?