Jump to content

TekMonts

Ascended
 View Profile  See their activity

  • Posts

    70

  • Joined

  • Last visited

  • Days Won

    5

 Content Type 

Posts posted by TekMonts

    Call Of Duty Mobile VN 1.8.39 32bit

    in LUA scripts

    Posted

    Call Of Duty Mobile VN 1.8.39 32bit

    View File

    Call Of Duty Mobile VN 1.8.39 32bit

    Game: Call Of Duty Mobile VN

    Version: 1.8.39

    Google play store https://play.google.com/store/apps/details?id=com.vng.codmvn

    This script will expire on June 10th 2023

    32 bit only

    Use your all bypass

    Note:

    - Download game from https://apkcombo.com/vi/call-of-duty-mobile-vn/com.vng.codmvn/

    - Open xapk file and remove split_config.arm64_v8a.apk and install xapk file to get 32bit of the game.

    - Tested on Mi12S Pro Android 13 without bypass and working for over months no ban.

     

    Contact: Telegram

     

    0

    Lua script error can't figure out.

    in Help

    Posted

    On 5/24/2021 at 2:22 PM, HAaHUuHIi said:

    @TekMonts 

    
l = gg.getRangesList('libil2cpp.so')
if (l[1] ~= nil) then libaddres = string.format( "0X%8.8X", t[1]['start'] ) end

function haxx(offsethax,valuehax,type)
	_address = libaddres + offsethax
	local _value = {}
	_value[1] = {}
	_value[1].address = _address
	_value[1].flags = type
	_value[1].value = valuehax
	gg.setValues(_value)
end

function main()
  gg.alert("begin hack abc at xyz")
  haxx(0xABCDEF01, 9999, 16)
end

    give another example plss,to make it clear for me

     

    i want to edit the value which is

    offset > 0xABCDEF02

    edit value to > 1000

    edit value 1000 type > dword

    how to insert into the command u provided..thx

     

      

    l = gg.getRangesList('libil2cpp.so') --get the range address from lib
if (l[1] ~= nil) then libaddres = string.format( "0X%8.8X", t[1]['start'] ) end --check null and set memory where GG start working at

function haxx(offsethax,valuehax,type)
	_address = libaddres + offsethax
	local _value = {}
	_value[1] = {}
	_value[1].address = _address
	_value[1].flags = type
	_value[1].value = valuehax
	gg.setValues(_value)
end

function main()
  gg.alert("begin hack value 1000 type DWORD at 0xABCDEF02")
  haxx(0xABCDEF02, 1000, gg.TYPE_DWORD) -- call function, where 0xABCDEF02 is offset need to change, value 1000, type dword
end

     

    0

    Cyber Hunter body color

    in LUA scripts

    Posted

    Cyber Hunter body color

    View File

    Cyber Hunter body color

    I made a simple cheats for cyber hunter, this cheat will change the color of enemy to red.

    I just only test on Snapdragon chipset (845), not sure it will work for Mediatek or Kirin....

    This cheat not work for special characters.

    Here is step for blinking the enemy that I'm lazy to add to script. You can try for yourself:

    Set memory region to VIDEO

    Find group 1.074.798.617;1;537.214.977;0;512;537.001.985;1.178.077.185;1;538.214.402;0;512;537.001.986;1.187.514.370;2;537.985.268;0;1.280;203.489.287;1.081.081.885;0;0;1.903.648;1.669.922.845;0;0;1.903.650;1.669.955.613::105 with type DWORD

    Refine 2, type dword

    Edit all to 0

    Normally this only affect on VIDEO region and will not trigger the security check.

    But anyway, uses at your all risk!

     

     

    0

    Work around with libil2cpp and GG using offset

    in Guides

    Posted

    1 hour ago, nio04 said:

    holy sht!! this is codm?

     

    i m working on cod hack too. but i m very noob. but already made some simple hacks

     

    you use telegram, sir?

     

    i understood almost everything but

     

    "

    original('7F 45 4C 46 01 01 01 00')

    replaced('01 00 A0 E3 1E FF 2F E1')

    "

     

    this... what is this original & replaced value? how can i find this "original hex value" 

    original('7F 45 4C 46 01 01 01 00')	-- begin hex of original file, open the libil2cpp.so with HexView and find first 8 bytes of hex
replaced('01 00 A0 E3 1E FF 2F E1')	-- use arm to hex converter, convert "return true" to hex, see https://armconverter.com/?code=mov%20r0,%20%231%0Abx%20lr   uses the arm code to hack directly, 01 00 A0 E3 1E FF 2F E1 =  mov r0, #1 bx lr = return true

     

    1
    • Popular Post
    • Popular Post

    Work around with libil2cpp and GG using offset

    in Guides

    Posted · Edited by TekMonts

    Too many guys ask about GG and libil2cpp.so to working with gameguardian.

    So I decided to make some guides to working around with it using offset.

    Game: Call of duty - Mobile VN

    Funtion to hack: Show enemy on radar

    This game was protected from dumper, so I uses Il2CppInspector to inspect the lib.

    Open up the Il2CppInspector.exe and drag the apk to the app GUI then wait a bit:

    image.thumb.png.d12bdb800645e0f276ebd63598a21610.png

     

    I exported the Json file to find the function and address, and I want to find where the function to show enemy on rada, I found this:

    image.thumb.png.28f4e19dfa46f73b53544cadaa277d38.png

      

    0x046C37F4 -- here is address holded the function get_ShowEnemyOnRadar()

     

    So what should we do?

    We can mod directly in libil2cpp.so, using the hock, create the app to call...

    But here, I willshow you how to modify this function using GameGuardian

    First, you need the function tohandle the lib, share on Internet and I just copy paste here: 

    local memFrom, memTo, lib, num, lim, results, src, ok = 0, -1, nil, 0, 32, {}, nil, false
function name(n)
    if lib ~= n then
        lib = n
        local ranges = gg.getRangesList(lib)
        if #ranges == 0 then
            print("⚠ERROR: " .. lib .. " are not found!⚠")
            gg.toast("⚠ERROR: " .. lib .. " are not found!⚠")
            os.exit()
        else
            memFrom = ranges[1].start
            memTo = ranges[#ranges]["end"]
        end
    end
end
function hex2tbl(hex)
    local ret = {}
    hex:gsub(
        "%S%S",
        function(ch)
            ret[#ret + 1] = ch
            return ""
        end
    )
    return ret
end
function original(orig)
    local tbl = hex2tbl(orig)
    local len = #tbl
    if len == 0 then
        return
    end
    local used = len
    if len > lim then
        used = lim
    end
    local s = ""
    for i = 1, used do
        if i ~= 1 then
            s = s .. ";"
        end
        local v = tbl[i]
        if v == "??" or v == "**" then
            v = "0~~0"
        end
        s = s .. v .. "r"
    end
    s = s .. "::" .. used
	
    gg.searchNumber(s, gg.TYPE_BYTE, false, gg.SIGN_EQUAL, memFrom, memTo)
    if len > used then
        for i = used + 1, len do
            local v = tbl[i]
            if v == "??" or v == "**" then
                v = 256
            else
                v = ("0x" .. v) + 0
                if v > 127 then
                    v = v - 256
                end
            end
            tbl[i] = v
        end
    end
    local found = gg.getResultCount()

    results = {}
    local count = 0
    local checked = 0
    while true do
        if checked >= found then
            break
        end
        local all = gg.getResults(8)
        local total = #all
        local start = checked
        if checked + used > total then
            break
        end
        for i, v in ipairs(all) do
            v.address = v.address + myoffset
        end
        gg.loadResults(all)
        while start < total do
            local good = true
            local offset = all[1 + start].address - 1
            if used < len then
                local get = {}
                for i = lim + 1, len do
                    get[i - lim] = {address = offset + i, flags = gg.TYPE_BYTE, value = 0}
                end
                get = gg.getValues(get)
                for i = lim + 1, len do
                    local ch = tbl[i]
                    if ch ~= 256 and get[i - lim].value ~= ch then
                        good = false
                        break
                    end
                end
            end
            if good then
                count = count + 1
                results[count] = offset
                checked = checked + used
            else
                local del = {}
                for i = 1, used do
                    del[i] = all[i + start]
                end
                gg.removeResults(del)
            end
            start = start + used
        end
    end
end
function replaced(repl)
    num = num + 1
    local tbl = hex2tbl(repl)
    if src ~= nil then
        local source = hex2tbl(src)
        for i, v in ipairs(tbl) do
            if v ~= "??" and v ~= "**" and v == source[i] then
                tbl[i] = "**"
            end
        end
        src = nil
    end
    local cnt = #tbl
    local set = {}
    local s = 0
    for _, addr in ipairs(results) do
        for i, v in ipairs(tbl) do
            if v ~= "??" and v ~= "**" then
                s = s + 1
                set[s] = {["address"] = addr + i, ["value"] = v .. "r", ["flags"] = gg.TYPE_BYTE}
            end
        end
    end
    if s ~= 0 then
        gg.setValues(set)
    end
    ok = true
end

     

    Now you need to call the function: 

    gg.setRanges ( gg .REGION_CODE_APP | gg .REGION_C_DATA) -- usally you only need this region
name('libil2cpp.so')									-- name the lib
myoffset = 0x046C37F4									-- offset you found
original('7F 45 4C 46 01 01 01 00')						-- begin hex, open the libil2cpp.so with HexView and find first 8 bytes of hex
replaced('01 00 A0 E3 1E FF 2F E1')						-- use arm to hex converter, convert "return true" to hex, see https://armconverter.com/?code=mov%20r0,%20%231%0Abx%20lr
gg.toast("Done!")

     

    Put it in your lua and done, you're now can hack the radar using GG and libil2cpp.

    Demo:

    Screenshot_2020-11-12-17-42-09-837_com.tekmonts.virtualspace.thumb.jpg.0ca01654a8c10ccc6f414a91bb6a4376.jpg

     

    Demo file: CODHack_Demo.lua

    18

    No CD hack - All characters. Amber damage multiple

    in LUA scripts

    Posted

    On 11/4/2020 at 6:51 AM, Sroumin said:

    it works fine, no disparage, but unstable, each time you switch the scene you will have to reload from the beginning, meaning when you switch scenes you will not have one hit and you have to reload

    Damage table store in Anonymous Region (RAM). Each times game load screen, address change, unless you hard code the mod in apk, otherwise nothing can help you just run script one times and it's always work.

    0

    Lua script error can't figure out.

    in Help

    Posted 

    l = gg.getRangesList('libil2cpp.so')
if (l[1] ~= nil) then libaddres = string.format( "0X%8.8X", t[1]['start'] ) end

function haxx(offsethax,valuehax,type)
	_address = libaddres + offsethax
	local _value = {}
	_value[1] = {}
	_value[1].address = _address
	_value[1].flags = type
	_value[1].value = valuehax
	gg.setValues(_value)
end

function main()
  gg.alert("begin hack abc at xyz")
  haxx(0xABCDEF01, 9999, 16)
end

    You can use this code to hack the Xa region (code app) directly without finding anything.

    2

    No CD hack - All characters. Amber damage multiple

    in LUA scripts

    Posted

    No CD hack - All characters. Amber damage multiple

    View File

    No CD hack - All characters. Amber damage multiple

    Genshin Impact No CD hack for all characters, just need to run one times.

    Don't use multiple damage in Multiplayer/Abyss mode or you'll got ban.

    Password (if any): 123

    Language: VN/EN

    Please keep the name of the file.

    Credit by me: TekMonts - GG

    Required GG 100, not tested on lower version yet.

    Please review the script.

    If positive review, I will update more stub.

    Use at your all risk.

     

    2
×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.

  I accept