Enyby

I can not help you. it is problem of your firmware. Try use third-party application for that. For example Titanium Backup, Lucky Patcher and so on. I think in Google Play present lot of apps can do this.

Move GG to internal memory from sdcard.

Install GG from official source. https://gameguardian.net/download

https://gameguardian.net/forum/topic/7398-gathering-information-about-gg-errors/

You can use Minion rush as example because this game does not strip debug info from libs.

Use cat /proc/pid/maps From root shell. Pid must be pid of needed process. Showed in square brackets in GG before process name. In output this command you get all regions in memory include rebased so. It is more condensed output from smaps.

Install GG from official source. https://gameguardian.net/download

Not argument. Need replace return value. And not entire calls. Only in needed places. It must be 4 calls for double storage or 2 for one storage. Usually placed on init class storage. _______________________________________________ added 1 minute later I simple NOP'ed STR instruction for saving result of calls in class fields. By default field zero filled. May be because placed in .bss, may be because use memset with zero fill after malloc.

protectedStorageKey = randomValue1; protectedStorageRotateBits = randomValue2; x' = ((x << protectedStorageRotateBits) | (x >> (0x20 - protectedStorageRotateBits))) ^ protectedStorageKey ^ memoryAddrOf(x); If set random values to zero then all goes to: x' = x ^ memoryAddrOf(x);

Gameloft use random keys for XOR. It generated every run of game. You can not do anything with it. If be exact they use ROR and XOR. Offset for ROR and key for XOR is random. It set on calls near lrand48. Newer games use double storage, older - one storage. Double storage have same algorithm but implemented two times. Of course double storage use different params for each. _______________________________________________ added 1 minute later Most easy way - mod so for prevent init keys for storage. It lead to ROR and XOR with zero params. It cause to leaved only XOR with address. It is simple and can be found in GG in one search with data type XOR.

Here video with full explanation how it worked: https://www.youtube.com/watch?v=gqqm9CMKrA4

Stefan, we do not know how that worked. It is pure magic from Hogwarts School of Witchcraft and Wizardry.

Use only 16 timer and timer 40. But Timer 40 can cause problems with input.

You have no idea what the problem have most people. 1. Some of them believe that not the list of running applications, but a list of installed applications. 2. Some of them have problems after just rename checkbox: Mode Hacking -> value encrypted. 3. Most people will not be able to find a place to set the output memory editor. 4. When editing a set of values majority of people entering a value in the Increment field, so we hide this from button "More". 5. Some users try use group search on old versions. And complain to us. 6. Some users try use group search with format GameKiller. And complain to us. 7. Most of users ask me dumb question written on every corner in app. Like "How use speedhack", "How use group search".

1. Too complicated. And gg used for many apps not for one. And selected app can be not loaded. 2. May be. But it lead to view all options of config tab. If we add something to it - users noticed that. If exit first user can skip new items and do not know about that.

You can google about data types like byte, word, dword. It is common terms. Xor is just dword xor'ed with their address - common defend technic, cheap and simple.