Search the Community

slight correction, in my method if you use group size don't forget the 0D so the syntax should be String Length Dword ; 0 Dword ; Query : Group size The 0D is always be there, if you see it on the memory view, example 11 Dword > String Length of Said Item 0 Dword > uncertain what this meant but it's there 1953396072 Dword > first dword values of said item ID 1667199589 Dword > second dword values of said item ID .....

12 is length of the letters of the item name, and 0, is just exist there, probs buffer and D is DWORD and :20 is group size, Q probably stands for query and thats why i called it query search

Thank you SO much! I was finally able to finish my chopper. Now trying to complete the ATV but I can't get it to work using that same method. Tried the grouped search but no results come up. Should I try increasing the group size?

bro... either u checked too much values for "group search" or the values you chose to make "group search" they are far from base value - thats why group size increased solution - first, just copy base value search it... if the results very less, directly edit them (u might face crash, but its worth trying) sec. - run couple match and restart game... check static values around your base value... then group search it... (dont choose too much values) Also choose option - "Add type" & "group size" & select "ordered" hope its help

Same way as for exact values, but using ranges. For example, a string for group searching these values with default group size looks like: "7~7.1;13.9~14;21~21.1". More information about this can be found in GG help: https://gameguardian.net/help/help.html#help_group_search_ https://gameguardian.net/help/help.html#help_range_search

What you'd need is: 2D;0D::5 2D;0D is the group search of two values : means grouped within certain distance from each other and the second ":" means it's ordered i.g. they go one after another in the specified order 5 is the group size i.g. how far away they are from one another

you should enable String Representation on top right(on memory besideview small refresh button(h,D,F) and add string and Double) and the Item ID always be in 0D;0.0F;0.0E, on your video it's not, and helsing is 7 letters not 8, so the query should be 7D;0D;Q 'helsing', and again group size (:20) is vary from devices.

what are you trying to find? resources are simple and easy enough. search = ID;Current QTY;Max Storage::9 example : Wood ID = 2 currrent Qty = 20 max storage = 25 search = 2;20;25::9 @Jimeous guides for the resources is only for 32bit(armv7). for 64bit(armv8) you only need to increase the group size from 17 to 25. = 3B9AC9FFh~C4653600h;0;2;20;25::25

No commas like , this is to provide number place value . Like 100,100 will mean the value is Hundred Thousand One Hundred , which is treated as a complete one value. And group search means different values which are seperated by ; and their group size defined after : . To understand it more clearly you can try writing search function using , and without , and making group and all the possible ways you think. And just look at gg searching it , and see what it is searching.

this isn't a bug.. copy group size will copy byte values with proper distance..( 97;99::3 ) if you want to merge the characters together to make a consecutive string, then select utf8 or utf16.. (:ac) this is useful if you have half a string ("Hello") starting at address 0xABC and also need another half ("World") at address 0xCBA, Now you can merge and search. ":Hello World" and not do a group byte search for values that are ::270 , this would be drastic!!

yup that same as mine but at group size of 5. also same like you..sometime it work..sometime it doesnt. the game is weird a bit(or rather had little protection maybe?)sometime as when manually search the coins values..some refine results change to memory Other. and there was also a time when correct value was found and edited..when look for <Changed as search result>..no result appear at all like nothing ever been changed before.

Double Float amd dword All this types R 4 bytes in length means If there r two values 123 and 124. If 124 is next to it then 124 is 4 bytes away From 123. If u understand this then u should get ur answer. 512 is a group size or 512 bytes length! 40D;3F;3F:512 In 512 bytes length if 40 Dword value 3 Float value and 3 Float value exist then it will show u Result of this 3 values. Use of it example To Find any unique group search or code

soo basically the Excel is filled with Item_name, Dword values, Length of String item_ID This Excel is used for item swap, and no pointer is used lets say you wanted a Terem Ball We find the Terem ITEM ID by using String Item ID and use the String ID to located Item ID Using Query, you'll need Length (len) = 10; Divider = 0; String ID = Q 'ball_terem' Group Size (vary, mine 20) = :20 Search: 10D;0D; Q 'ball_terem':20 Type: Any and Using DWORD, you'll need Length (len) = 10; Divider(always there) = 0; Dword 1st 4 = 1,819,042,146; Dword 2nd 4 (if available) = 1,919,251,551; Dword 3rd 4 (if available) = 28,005; Dword 4th 4 (if available) = N/A Group Size (vary, mine 20) = :20 Search: 10;0;1,819,042,146;1,919,251,551;28,005:20 TYPE: DWORD and you'll find the item's string ID, and use the Length as reference point to find the Item ID which most the time located 3 address above Length. Here i attach a video for you, Droplist Item Swap wood to Terem and Terem to Mysterious Map sorry for low bitrate, i use 1mb bitrate for recording gudie.mp4

im using the Battle Pass to check what item i will get when changing the ID. so that i can use that ID value in Event Quest to claim it. as in Event Quest the item wont show up when you changed it..you will only see what you got after you claim it clearly you need to watch the video again and pay attention. yep if i may say so..its in the game codes anyway. search for the big value (ie.Cash 50000) then goto..scroll up and you will see the others values too. check all the values then Copy as group search -> Add group size

These symbols probably appear when the code is being copied from forum. Retyping the line where an error occured most likely will help. File with the function and a call to it (run from GG to test, if it works): aimbot_function.lua You don't need to do this. If it's group search and you need to search for values of different types, then you specify the type after the value. Otherwise, you don't. In your case, there is only 1 value, type of the search is "gg.TYPE_FLOAT", meaning that float value will be searched. Example, where specifying the type is needed: Objective — search for double value 4.32, followed by dword value 7274, followed by byte value 87 with group size equal to 14. Search string — "4.32E; 7274D; 87B::14".

Okay, whether I search with or without the pause menu visible doesn't seem to have any bearing on whether or not I find results. The only thing that seems to determine whether or not I get results is what group size I use. If I use ::13 I get nothing (again with or without the pause menu visible) for both the 256 and 257. Whereas if I use ::65536 I get thousands of results for the 257 and 5 to 7 results for the 256. I did a "goto" on all 7 results and randomly messed with the nearby negative values but unfortunately none were the correct health value. The funny thing is that having the "autopause game" setting in GG on "no" VS "yes" seems to make no difference at all. While actively in a mission, if you tap on GG's icon, you can perform your search without the pause menu visible regardless of what the setting says. If you want to perform the search WITH the pause menu visible all you have to do is tap on the X of GG's upper right corner and you'll immediately be brought to the pause menu and then you can tap on GG's icon again to perform your search with the pause menu visible. Way ahead of you Lol. Had already done it on my own but forgot to mention it EDIT: Sorry this may have been an oversight on my part.....I just now re-confirmed this, and with all regions enabled, the 327,684D;22D;28D;0D;33,554,931D::65 search yields the following restuls: But again none of the negative values around those results are the correct ones

Hello! I wanted to share my "protocol" to find any value in any application, I tried to group everything I learned from GG and people from this forum who helped me and others! If 1- doesn't work, go to 2-, etc... Each time I repeat until I find my value (sometimes they can be more than one), or nothing. I can see the value I'm searching for in memory, it is not a static value. If I dont know the value, go to 4-: 1- dword exact search if integer (1,2,3...), float exact search if not (0.1,0.5,1.8...), sometimes I do a group search of related values 2- Double exact search for integer or not (+ float exact search for integer if it fails, but I usually dont do that cause it is often time wasting) Now I think the value is encrypted or changes place each time: 3- Dword exact search "encrypted" if integer (I think a not integer value (float or double) is never encrypted this way (even if it is possible)) Now it is the same if I know the value or or not: 4- fuzzy Dword search value or float depending if it is integer value or not 5- if I know exactly how the value changes, I use advanced fuzzy search menu (more button) and I type the changes i can see to maybe waste less time, or only increased/decreased 6- fuzzy change/unchanged Now I'm sure the value always changes place, I search for a pointer: 7- Dword fuzzy search and "changed" each time the value changes, or after a loading, for certain values for example 8- Once there are just a few values, I can freeze the pointers one by one and see if the value still changes, if not, it is the good pointer Now i just follow the pointer, and look for my value, or try to change weird looking ones (it can still be encrypted) after where I land in memory. Sometimes they can be multiple pointers, so if I dont find my value I just go down in memory and follow the next pointer and repeat that. When my value is found, i look around it in memory (before or after) if I can't see something realted to (another currency...). It can be quite far sometimes, but there can still be interesting static values related. When I found what I want, I look for static values around it in memory tab and I copy as a group search with group size checked. Then I go in search tab, exact search and historic and I mark the last entry. Now I'll be able to find my value again next time :). Do you think it is good? Would you add something?

Analysis of protection for most games Most of the games are not protected as such. Simple search values in the memory, and then change gives the desired result. Hacking can be done by any tool. Some games (such is not very much), base their protection on the use of float or double data type for integer types. Basically, the differences from the previous embodiment have. Some difficulty may be rounded values, although usually it is not. Hacking can be carried out by any tool with the support of the required type. If the tool does not support the media type, you can use converters and look for the value as dword, although it is inconvenient. Some games use encryption based on the xor, bit shifts and others, simple and cheap operation. Direct search value to find such data in memory can not be. Hacking can be accessed via fuzzy search or search through an encrypted (only GameGuardian). Search encrypted usually several times faster than the fuzzy search. Suffice rare complex encryption, which does not meet the requirements for the search through the "encrypted value" mode. You can find the correct values through fuzzy search in these cases. fit any tool with such capabilities. So much for the search changes the value in memory. Usually it's simple enough. These methods break down 90-95% of games with variable values. Now consider the case where the value can not be changed. A typical example is object prices in stores. In most cases the data are not encrypted, but find it difficult in the memory, because too many of the same values to memory. Naturally you need to search and sift through, but often it does not give significant reductions in the number of results found. If you change everything, the game may crash. There are two approaches to this case: 1. Group search, if there is any number of nearby. It works in many games and can give very good results for screenings when experimenting with a maximum group size. Usually, you can search up to 8 numbers at once. You can use any attacker that supports group search. However, not all tools correctly handle certain difficult situations, such as group search with the same values. Plus, not all tools can maintain the desired type in the group search. 2. The change in the value with subsequent verification of the change in the game. You can use any tool, but GameGuardian allows you to automate the process, doing everything in two or three clicks, while the remaining tools require hundreds, or even thousands of actions. It's about AutoFill. By combining these two approaches can achieve most of the hacking static values. Another useful thing is a memory editor in the hacker. If it is, you can view the memory near the values found - sometimes it allows you to find other values, or to speed up hacking. This requires the tool with the editor of memory and support for the conclusions of relevant data types. Sometimes you want to freeze to the successful hacking. Here, too, will fit any tool with this feature. These approaches and methods enough to break most existing games. Naturally it is only those games that can be hacked.

for obtaining unobtainable items, i suggest not, cuz its basically red flag for devs. tho you can do the item swap on obtainable items. and also you should try to modify an output of crafting, for resources, some is on crafting table while some is on disassemble tab, both can be modified, dont think its dangerous to be modify. let's use an example for hard to get resources. Steel you can craft steel on crafting menu/table, the recipe will be 5 Iron 1 Aluminum 20 Lead 5 coal and output 1 steel you can search this 5;1;20;5:200 the 200 is group size, it might differs from each devices, but it seems it's works on most ppl. Search type will be Double you might found only 4 address, but for sake of example, i'll use what i find i got 100+, so now filter it by the biggest number from the search group, which is 20 (20 coal) and editAll with increment of 1 (when you open Edit all, there's a button called More or whatever in your language, open it and there's a new prompt with increment, put 1 on it) now refresh the recipe tab, reopen it. now you should see coal requirement changed. find the address and save it, after you save it, revert all and delete (so game doesnt crash) now you open the saved address tab (in gg), open the address and then click goto now in these tab(memory tab) you'll see bunch of address, ignore it for now, and focus to top left corner of GG you'll find a pause button and a word (No Filter or something in your language), click the no filter, in it put .0$ after that the memory tab will updated, now go back to saved list and click the address again, then click goto. now we back to memory tab that filter any address that ends with 0, if you done correctly the highlighted address will have value of 20 in double (if you have double in your memory view setting, top right click the letter thingy beside refresh button, it'll open a tab of which value will be shown, enable Double or E+. [my setting will be, h,S,D,F,E]) select the highlighted address, then difference up/down about 3-5 address till you find other value for other requirement. in my case it'll be 5.0E; <== This will be the Iron (up by 4 address from aluminum) random (ignore) random (ignore) random (ignore) 0.0E; (ignore) 1.0E; <== This will be the Aluminum (up by 3 address from Lead) random (ignore) random (ignore) 0.0E; (ignore) 20.0E; <== This will be the Lead (HIGHLIGHTED ADDRESS) random (ignore) random (ignore) 0.0E; (ignore) 5.0E; <== This will be the Coal (down by 3 address from Lead) random (ignore) random (ignore) 0.0E; (ignore) 1.0E; <== This will be the Steel Output (down by 3 address from Coal) select all of these address that we need (you'll get 5 address), and then you can change the requirement to be 1 (minimum is 1, if negative or 0 it doesnt craft) and you can change the output to like 20k or something. Note: the more the crafting recipe needs, the more addresses you needs, for example, a car with 10 crafting resources needed, you'll find 10 requirement and 1 output, resulting 11. lmk if you had more question