Search the Community

@nok1a thanks for your help, I solved the problem, the chainer is working now. now I just have to do some tests to select the right range in the scripts. unfortunately searching for a string takes too long, so I will directly use a getValues() to test for a known value. I'd say the problem is solved, thanks everyone! chainer.rrnolib.lua

View File Hill Climb Racing 2 (Script 1bb ) Open any chest and get 1 billion diamonds. Submitter J3VC Submitted 01/21/2024 Category LUA scripts  

View File SuperSusV3 𝙿𝚕𝚎𝚊𝚜𝚎 𝚍𝚎𝚊𝚌𝚝𝚒𝚟𝚊𝚝𝚎 𝚉𝚘𝚘𝚖 𝚊𝚝 𝚝𝚑𝚎 𝚎𝚗𝚍 𝚘𝚏 𝚝𝚑𝚎 𝚖𝚊𝚝𝚌𝚑 𝚊𝚗𝚍 𝚊𝚌𝚝𝚒𝚟𝚊𝚝𝚎 𝚒𝚝 𝚊𝚏𝚝𝚎𝚛 𝚒𝚝 𝚜𝚝𝚊𝚛𝚝𝚜 𝚊𝚐𝚊𝚒𝚗 Script functions 3X Zoom 6X Zoom Without shadow Speed Hack Submitter CGMODDER Submitted 01/20/2024 Category LUA scripts  

Hello I need help to find script hack sky children of light please help I Can't find any script

Script ended: Script error: luaj.o: /storage/emulated/0/Pictures/Scripts/pointerTest.lua:67 ` if ((a[1].address > v["start"]) and (a[1].address < v["end"])) then` attempt to index ? (a nil value) with key 'address' (field '1')

Script pointerTest.lua

That's not my script. You changed the search string and added your own string in it. It's also not how you implement it in the chainer and removed the function to i guess? Also i did not read the full chainer script which was very big mistake of me, so i did not knew you needed to load results in order for it to work. I do now. So will implement the function in the chainer script.

Doesn't really work. It is not clear which of base apk to count from. gg.setRanges(gg.REGION_CODE_APP) t = gg.getRangesList('^/data/*com.ea.games.r3_row*base.apk*$') print('Found ' ..#t ..' results') a = 0 for i = 1, #t do if t[i]['type'] == 'rw-p' then print(t[i]) a = a + 1 end end print('Found ' ..a ..' rw-p results') -- -> Script ended: Found 37 results { -- table(5d5648b) ['end'] = 133868052664320, ['internalName'] = '/data/app/com.ea.games.r3_row-etCOPHVNo-lYN2A8uKT50Q==/base.apk', ['name'] = '/data/app/com.ea.games.r3_row-etCOPHVNo-lYN2A8uKT50Q==/base.apk', ['start'] = 133868052647936, ['state'] = 'O', ['type'] = 'rw-p', } { -- table(f005968) ['end'] = 133868054269952, ['internalName'] = '/data/app/com.ea.games.r3_row-etCOPHVNo-lYN2A8uKT50Q==/base.apk', ['name'] = '/data/app/com.ea.games.r3_row-etCOPHVNo-lYN2A8uKT50Q==/base.apk', ['start'] = 133868054241280, ['state'] = 'O', ['type'] = 'rw-p', } { -- table(cd3f181) ['end'] = 133868055478272, ['internalName'] = '/data/app/com.ea.games.r3_row-etCOPHVNo-lYN2A8uKT50Q==/base.apk', ['name'] = '/data/app/com.ea.games.r3_row-etCOPHVNo-lYN2A8uKT50Q==/base.apk', ['start'] = 133868055474176, ['state'] = 'O', ['type'] = 'rw-p', } { -- table(4995226) ['end'] = 133868055621632, ['internalName'] = '/data/app/com.ea.games.r3_row-etCOPHVNo-lYN2A8uKT50Q==/base.apk', ['name'] = '/data/app/com.ea.games.r3_row-etCOPHVNo-lYN2A8uKT50Q==/base.apk', ['start'] = 133868055617536, ['state'] = 'O', ['type'] = 'rw-p', } { -- table(bb3be67) ['end'] = 133868057997312, ['internalName'] = '/data/app/com.ea.games.r3_row-etCOPHVNo-lYN2A8uKT50Q==/base.apk', ['name'] = '/data/app/com.ea.games.r3_row-etCOPHVNo-lYN2A8uKT50Q==/base.apk', ['start'] = 133868057923584, ['state'] = 'O', ['type'] = 'rw-p', } { -- table(a35a414) ['end'] = 133868058820608, ['internalName'] = '/data/app/com.ea.games.r3_row-etCOPHVNo-lYN2A8uKT50Q==/base.apk', ['name'] = '/data/app/com.ea.games.r3_row-etCOPHVNo-lYN2A8uKT50Q==/base.apk', ['start'] = 133868058816512, ['state'] = 'O', ['type'] = 'rw-p', } { -- table(c4d24bd) ['end'] = 133868059889664, ['internalName'] = '/data/app/com.ea.games.r3_row-etCOPHVNo-lYN2A8uKT50Q==/base.apk', ['name'] = '/data/app/com.ea.games.r3_row-etCOPHVNo-lYN2A8uKT50Q==/base.apk', ['start'] = 133868059885568, ['state'] = 'O', ['type'] = 'rw-p', } { -- table(5386ab2) ['end'] = 133868116672512, ['internalName'] = '/data/app/com.ea.games.r3_row-etCOPHVNo-lYN2A8uKT50Q==/base.apk', ['name'] = '/data/app/com.ea.games.r3_row-etCOPHVNo-lYN2A8uKT50Q==/base.apk', ['start'] = 133868116594688, ['state'] = 'O', ['type'] = 'rw-p', } Found 8 rw-p results

Personally with my current knowledge on the topic i just think that finding some unique values in the executable is enough. Search unique value. Then call gg.getRangesList(). All ranges will be displayed with there start and end address. In my case i know that the UTF8 string "libRealRacing3.so" resides in the Xa region of the executable. So i just search it and then get the first address of that char. So i know that's the right executable. But since lack of infomration on what your script does i adjusted my function getLib() for it to work with getRanges() by calling gg.getRangeList() to obtain the start address of the executable in which the string i just searched is located. Since the getRanges() function expects a table from gg.getRangeList(). Then knowing that the executable is divided in to 4 segments but the chainer only will take the first segment that includes the "w" permission i just increment the table i took from gg.getRangeList() by 3 since the third segment is the one the chainer use since it has the "w" permission. I test on 2 emulators that are 32 bit and on the 64 bit as well. Both worked. And as you can see in the post of Game lib (#c64p69nw) It worked for Count_Nosferatu after executing the script as expected.

thanks @nok1a i ll try it with chainer asap. meanwhile i did some test manually and i manage to get it works. when libRealRacing.so is not present in /data/app/etc... i get this using gg.getRangesList("com.ea.games.r3_row*base.apk*bss"): Script terminato: Start: 0x7CF1C07000 dimension: 0x32000 Start: 0x7CFE362000 dimension: 0x42000 Start: 0x7CFE4AD000 dimension: 0x3000 Start: 0x7CFEDFE000 dimension: 0x2000 { -- table(2e1b136) [1] = { -- table(3db1837) ['end'] = 536632070144, ['internalName'] = '/data/app/com.ea.games.r3_row-64kIDFJ_5MVEqukwLYrwhQ==/base.apk:bss', ['name'] = '[anon:.bss]', ['start'] = 536631865344, ['state'] = 'O', ['type'] = 'rw-p', }, [2] = { -- table(73441a4) ['end'] = 536841175040, ['internalName'] = '/data/app/com.ea.games.r3_row-64kIDFJ_5MVEqukwLYrwhQ==/base.apk:bss', ['name'] = '[anon:.bss]', ['start'] = 536840904704, ['state'] = 'O', ['type'] = 'rw-p', }, [3] = { -- table(6181b0d) ['end'] = 536842272768, ['internalName'] = '/data/app/com.ea.games.r3_row-64kIDFJ_5MVEqukwLYrwhQ==/base.apk:bss', ['name'] = '[anon:.bss]', ['start'] = 536842260480, ['state'] = 'O', ['type'] = 'rw-p', }, [4] = { -- table(98faac2) ['end'] = 536852037632, ['internalName'] = '/data/app/com.ea.games.r3_row-64kIDFJ_5MVEqukwLYrwhQ==/base.apk:bss', ['name'] = '[anon:.bss]', ['start'] = 536852029440, ['state'] = 'O', ['type'] = 'rw-p', }, } the first one starting at 0x7CF1C07000 is the working one. Now i have a new question: all ranges have same state,type,name. how to get the correct one writing a script? by checking size? furthermore, if the game library is present, the getRangesList function only returns the last 3 ranges you see. Any ideas for managing everything via script? many thanks in advance

I only edited part of the chainer script since i dunno which part are used in the script. But i guess the issue is with the getRanges() function since you have to input the path name to get right executable.

Yes, for the chainer it is.

Message me on telegram and I will give you the script. @KINGVINAYYY

Tablet Android 10 x64 with VirtualXposed, script returned this: Script ended: { -- table(8e7fafb) [1] = { -- table(2608718) ['arch'] = 'AArch64', ['end'] = 522830204928, ['internalName'] = '/data/data/io.va.exposed/virtual/data/app/com.ea.games.r3_row/base.apk', ['name'] = '/data/data/io.va.exposed/virtual/data/app/com.ea.games.r3_row/base.apk', ['start'] = 522830127104, ['state'] = 'O', ['type'] = 'rw-p', }, } It's normal ? print(gg.getTargetInfo()) --> --- ['nativeLibraryDir'] = '/data/user/0/io.va.exposed/virtual/data/app/com.ea.games.r3_row/lib', ---

Not sure which part of the chainer script that has been included in the script, but i modified the getRanges() function little bit. function getLib() gg.setRanges(gg.REGION_CODE_APP) gg.searchNumber(":libRealRacing3.so", gg.TYPE_BYTE) local a = gg.getResults(1) gg.clearResults() local t = gg.getRangesList() local startAddress = {} for i, v in ipairs(t) do if ((a[1].address > v["start"]) and (a[1].address < v["end"])) then startAddress = {t[i], t[i+1], t[i+2]} end end return startAddress end function getRanges() local archs = {[0x3] = 'x86', [0x28] = 'ARM', [0x3E] = 'x86-64', [0xB7] = 'AArch64'} local ranges = {} local t = getLib() local arch = 'unknown' for i, v in ipairs(t) do if v.type:sub(2, 2) == '-' then local t = gg.getValues({{address = v.start, flags = gg.TYPE_DWORD}, {address = v.start + 0x12, flags = gg.TYPE_WORD}}) if t[1].value == 0x464C457F then arch = archs[t[2].value] if arch == nil then arch = 'unknown' end end end if v.type:sub(2, 2) == 'w' then v.arch = arch table.insert(ranges, v) end end return ranges end local ranges = getRanges() print(ranges) Hope it works.

The best script I hope you back

I also need the script please