Legion War - Dword and Xor in same memory address (?!) impossible to hack.

[EmAnPr]

Hi, I used Game Guardian a few times and it always worked, even on encrypted values.

Bur this "Legion War" game (Legion War on Play Store) is just impossible to hack.

I've watched your tutorials again, specifically the Xor encryption, but nothing works.

This game, instead of having the Coins saved in a Dword in a memory address, and the Xor value in another address, it has 4 different types (with the same value of Coins) saved in the same memory address!

After refine searching, with 373 Coins in game, I got these values all in the same memory address 8EBFC690:

• Dword = 373
• Word = 373
• Qword = -60,129,541,771
• Xor = -1,900,034,075

Then I played a little to gain Coins and with 418 Coins in game, again in the same memory address I got these values:

• Dword = 418
• Word = 418
• Qword = -60,129,541,726
• Xor = -1,900,034,254

I gained and spent Coins to change these values, and it became clear the Xor Key for the Dword (and Word) value is -1,900,034,416.

It also became clear that the Xor key for the Qword is 58,229,507,728.

But Game Guardian is so good that I didn't even needed to calculate this, because if I change any of the values (Dword, Qword, Xor), the respective value of Coins is updated in the other types in a correct way.

THE PROBLEM is that when I do that, for instance inputing 999 or 500 or whatever as the new value for Coins, the value in game always changes to 0.

Now it gets even weirder, because if I use Game Guardian again to input the exact Coin value I had before trying the hack, the game brings my Coins back...

So, is this a new method used to make games impossible to hack with Game Guardian or am I missing something?

Sorry for any mistakes since this is my 1st time in your forum, and thanks for your help.

[Enyby]

It is not different values. It is different representation of same data stored in memory.

If address is same then this is same data in memory. But it can be represented in different ways.

Look like this game have some checks and defence against direct change values in memory. May be it is store this value and compare, maybe something other.

[NoFear]

Values are dword, nothing fancy.

I can release a video if needed.

And during a level can hack coins, atk, hp.....

 

[Ricardinho94]

On 6/1/2018 at 3:30 AM, NoFear said:

Values are dword, nothing fancy.

I can release a video if needed.

And during a level can hack coins, atk, hp.....

 

Hi. Congratulations. Can you help me about that? Thank you so much

[EmAnPr]

On 05/01/2018 at 8:15 PM, Enyby said:

It is not different values. It is different representation of same data stored in memory.

If address is same then this is same data in memory. But it can be represented in different ways.

Look like this game have some checks and defence against direct change values in memory. May be it is store this value and compare, maybe something other.

Thank you for the explanation. But why does GameGuardian does this with this game, but doesn't do this with other games where I tried (successfuly) to change values? And when this happens, which value should I change and save? In this case, when I select all 4 types (representations) to save them, only the Xor value is actually saved in GameGuardian. What does this means?

 

On 06/01/2018 at 2:30 AM, NoFear said:

Values are dword, nothing fancy.

I can release a video if needed.

And during a level can hack coins, atk, hp.....

Thank you. A video would be great.

I played the game in the past, and it's not excessively monetized, so it deserved my support (it's not one of those games that is insanely hard on purpose, nor those that monetize everything, almost even the developers mothers...). But only recently I discovered GameGuardian and installed some games again (and I am playing again...) to see if I could hack them. This one was the 1st game, of the ones I tried, that I couldn't hack. But if you can do it, please send that video.

[Enyby]

It happens always and everywhere. You just did not pay attention.

You must use the type of presentation that you need.

Because you save the address in the list. Saving multiple views for one address does not make sense. They replace each other.

If you have a number of 5, it can be 5 apples or 5 pears, or 5 galoshes. Or maybe the fifth day of the month. Or 5 fingers on the arm.
The number is one, and its meaning is different. The meaning is determined by the context.