CmP

There is no API function for that. If you need it for values that were changed by your script, that can be implemented in the script itself.

GG API function calls such as "setValues" and "addListItems" are quite expensive in comparison to several lua instructions, so less calls will be more efficient in almost all cases. But the difference may be noticeable only when many values are set/added, for 10 values it won't be.

It's done exactly as in his example. For your code it may be: gg.clearResults() gg.searchNumber("-7041975695332343808", 32) gg.refineNumber("-7041975695332343808", 32) local results = gg.getResults(10) gg.clearResults() local values = {} for i, v in ipairs(results) do values[i] = {address = v.address, flags = 16, value = "100", name = "Custom name"} end gg.setValues(values) gg.addListItems(values)

There isn't a function to get address range that is currently opened in memory viewer tab, but with selection of at least one element from the range, gg.getSelectedElements function can be used to get the address and then process the whole range of addresses as needed.

Checked implementation of "GetTripleDESCryptoServiceProvider" method that shows how key is derived from "KEY" constant: Because one can't just convert binary data to text and back and expect it to work, that leads to information loss. Use representation that is suitable for binary data. Or use a tool that allows to perform multiple transformations without a need for intermediate representations of data between steps, like the above-mentioned CyberChef.

Option for loading third result directly with one operation: gg.getResults(1, 2)

As for encoding of data that the game uses in preferences (and not only), dump with meaningful names also significantly simplifies research, revealing most of information that needs to be known. First step for decoding, that is specific to data in shared preferences, is mentioned in first post of the topic - URL decoding. Then, after base64 decoding, the data needs to be decrypted with Triple DES in ECB mode with 128-bit key "8a76f557475b615a6dcaedeaadd4d27b" (bytes of the key in hex). The result is also base64 encoded, so it needs to be decoded and the last step is to decompress the data as gzip. Below is a CyberChef recipe that implements the decoding: https://gchq.github.io/CyberChef/#recipe=From_Base64('A-Za-z0-9%2B/%3D',false,true)Triple_DES_Decrypt({'option':'Hex','string':'8a76f557475b615a6dcaedeaadd4d27b'},{'option':'Hex','string':''},'ECB','Raw','Raw')From_Base64('A-Za-z0-9%2B/%3D',false,true)Gunzip() And to illustrate it with examples, value for level 5 from topic's first post after decoding is: {"CheckSum":"1EBXq7XeVC5e6TxnIVs/T9kE2J8rLG9IeYdOBc3Nxs9INiuzkhi6urMRRl858UeQdgjO1dLqpfw=","Offset":620,"Value":625} and value for level 6 after decoding is: {"CheckSum":"1EBXq7XeVC5e6TxnIVs/T9kE2J8rLG9IOjAKjtrE26cgX17n25az4rF8y2+JN4AVv8YyOpD9PI8AmbJGj0p2sw==","Offset":-836,"Value":-830} both of which are JSON serializations of structures of "SafeInt" type that the game uses for values that it needs to protect.

Because shared preferences is merely a way of preserving data between different runs of application. There is no way to read/write value from/to shared preferences without having it in process memory. Search for fields named "currentAdventureLevel": When names of things are not obfuscated, data from the dump provides everything one needs to know to find basically any value in scope of (used by) libil2cpp.so.

I recommend you to grab jadx (or other similar tool) and check how those functions are implemented in GG. There you will also find confirmation that "gg.internal3" and "gg.searchPointer" do exactly the same. If there will be difficulties, ask here or in new topic.

This function has been later made available as part of GG public API - searchPointer. "gg.internal3" and "gg.searchPointer" are exactly the same function, it's just that it was first an experiment, so started as internal function. By the time of last update of chainer script, "searchPointer" function hasn't existed yet, that's why it isn't used there.

Didn't mean modifying the code, meant the regular GG-way of modifying the value. The only challenge here may be that the value is encrypted, so need to figure out how it works first. Though, I am not sure that it's encrypted value that needs to be modified, since according to the dump value of level exists in both encrypted and unencrypted forms. Because finding the value in process memory doesn't require figuring out how it is stored in preferences. I am somewhat surprised that you haven't checked it as one of the first things, since I see it as the "usual way" of finding desired values in Unity games.

That doesn't require doing anything with preferences file though and in this case it seems easier to do it in process memory. But if I understood correctly, you are researching how storing data in preferences works in case of this game. If that's so, start by doing the usual analysis of Unity games. Get the dump, open dummy dlls in dnSpy, look for things with relevant names within Assembly-CSharp.dll. Then check how those things are implemented in libil2cpp.so. First step should give a surface-level understanding of what's going on there. Second step will provide you with particular answers on how exactly it works.

That's way too unrealistic thing to ask, it requires decent qualification and serious investments of time. The way it can work for you is if someone shares which tools to use and how to not get detected, so it makes more sense to ask for that.

There are no issues with initial version of your code, it correctly sets value of S0 register to 0.06. It may be that you just need different value to make the character run slower. Does setting the value to 2 increase movement speed or decrease?

That's just code produced by script recording feature. Supposedly, when recording script, call to "processResume" function is inserted each time user returns from GG to game.

Again, the same reason, function "BP1" needs to be defined before it is called. If you don't want to reorder all of the functions, then moving block of code from lines 135-143 to the end of the file may work.

Because you need to define the functions before calling them as has been mentioned in the comment in the code above. For example: function HOME1() -- ... end HOME1() And not: HOME1() function HOME1() -- ... end

I guess you should use "versionName" field for that: -- ... if v.versionName == VN1 then HOME1() -- Functions HOME1, HOME2, HOME3 need to be defined before they are used elseif v.versionName == VN2 then HOME2() elseif v.versionName == VN3 then HOME3() else os.exit() end

This merely means that GG hasn't correctly identified that libraries belong to the application, process of which is selected. It doesn't affect anything other than how GG classifies the regions. The regions can still be found manually and from script just fine without relying on region being classified as "Xa", "Cd", etc.

local POINTER_TAG = 0xB4 << 56 local function addTag(pointer) return pointer | POINTER_TAG end gg.clearResults() gg.searchNumber("123456789", gg.TYPE_DWORD) local results = gg.getResults(1) local address = results[1].address - 0x8 -- applying the offset local taggedAddress = addTag(address) gg.clearResults() gg.searchNumber(taggedAddress, gg.TYPE_QWORD)

No, Google translate works fine, you just haven't specified what you need to implement in script. You just mentioned: but you haven't specified what script needs to do. Search for "123"? Then apply offset? How is this related to tagged pointers? Again, either describe what script needs to implement with text or show it with video.

Script what? Where is description of what needs to be implemented? Is it searching, is it editing, is it something else? If describing with text is too hard, at least show what script needs to do with a video.

Yes, conversions from/to tagged pointer can be implemented in script. The code to add tag to pointer can be found in this post: Need help in script. I don't know if it's possible to do it automatically (#298r5x2m) And removing tag from tagged pointer can be implemented like the following: local ADDRESS_MASK = ~(0xFF << 56) local function removeTag(pointer) return pointer & ADDRESS_MASK end

This is tagged pointer. There is no problem with it. You misunderstood the post from other topic, you shouldn't edit top byte of the pointer. You only need to remove it for navigating to the address in memory editor tab. For example, value of the pointer at address 0x754799F000 from the video is 0xB4000076B220F9F0, remove "B4" from it and leading zeros to get pointed address 0x76B220F9F0, then go to this address in memory editor tab and region label will be shown.