Trainer Canyon Need Help finding/modifying the offset values from dump.cs file

[Sasuke_Uchiha07]

Hello All, 

I am trying to modify a value of crystals/golds from one game, i was able to successfully create a dump file using il2cppDumper and found the class , field offset and method offset. in the game guardian i am providing the offset 0x824F0C (pic1) and then pressed "Xa" . It opens up a list of files to choose from(pic2)  and i am choosing "libil2cpp.so" (2nd option).  It brings me to the address shown in pic3. now i don't know what should i do next to find the real address of golds/crystals and how to change the values. I am still learning how to use game guardian. Can someone please help me.

The game is : Trainer Canyon 

link: https://trainer-canyon.en.softonic.com/android

 

Below is a snippet of the code from dump file.
 

// Namespace: protocol

[ProtoContractAttribute] // RVA: 0x824F0C Offset: 0x824F0C VA: 0x824F0C

[Serializable]

public class GetPlayerInfoAllWSC : IExtensible // TypeDefIndex: 3266

{

    // Fields

    private int _gold; // 0x34

    private int _crystal; // 0x40

   

[sammax71]

In the dump is there a method similar to "get_gold" or "get_crystal"?

[Sasuke_Uchiha07]

yes, there is.
 

// RVA: 0x12FE148 Offset: 0x12FE148 VA: 0x12FE148

    public int get_gold() { }

 

[sammax71]

16 minutes ago, Sasuke_Uchiha07 said:

yes, there is.
 

// RVA: 0x12FE148 Offset: 0x12FE148 VA: 0x12FE148

    public int get_gold() { }

 

Then try going to that offset and editing that and see if it works.

Have the Arm 64 opcodes set to show in GG. Go to the offset, press edit button, hit the triangle next to the value to open the drop down box, select the Arm 64 opcode at the bottom.

Edit will be something like "~A8 MOV W0, #65000". Edit the line directly under it to "~A8 RET".

Then check if your gold changes.

Good luck

[Sasuke_Uchiha07]

Hello sammax71,

i am trying to change " LDR W0,[X0,#0x34] " to "LDR W0,#999999" but it is showing the error from the second picture. I also tried changing the value by writing the relevent hex value i got from deepseek but it still shows the same error. I think it has some kind of security mechanism or i am just modifying the wrong way. can you please help me with this. Thank You

[sammax71]

1 hour ago, Sasuke_Uchiha07 said:

Hello sammax71,

i am trying to change " LDR W0,[X0,#0x34] " to "LDR W0,#999999" but it is showing the error from the second picture. I also tried changing the value by writing the relevent hex value i got from deepseek but it still shows the same error. I think it has some kind of security mechanism or i am just modifying the wrong way. can you please help me with this. Thank You

The max you can edit that way is #65535 otherwise you need to use hex format like #0xF8000 which is about 1 million for higher amounts.

You also want to change it to MOV W0, #0xF8000 and not LDR

Edited August 14 by sammax71

[Sasuke_Uchiha07]

As you can see, i tried editing via "~A8 MOV W0, #6500" and also edited the line below this one which returns the value but the amount of coins is still unchanged .Btw Thank you for your help.

[sammax71]

1 hour ago, Sasuke_Uchiha07 said:

As you can see, i tried editing via "~A8 MOV W0, #6500" and also edited the line below this one which returns the value but the amount of coins is still unchanged .Btw Thank you for your help.

It's always disappointing when it doesn't work but also very exciting when you find a method and change it and it does work.

[HorridModz]

6 hours ago, Sasuke_Uchiha07 said:

As you can see, i tried editing via "~A8 MOV W0, #6500" and also edited the line below this one which returns the value but the amount of coins is still unchanged .Btw Thank you for your help.

Perhaps the game has yet to call the method. Try updating your coins (gaining or spending some).

[HorridModz]

Also, another method is to directlly edit those fields you mentioned. Editing fields is doable, but a bit of a pain. Here is a script for doing so:

https://hackershouse.tech/feild-offset-finder-game-guardian

[Sasuke_Uchiha07]

On 8/15/2025 at 4:44 AM, HorridModz said:

Also, another method is to directlly edit those fields you mentioned. Editing fields is doable, but a bit of a pain. Here is a script for doing so:

https://hackershouse.tech/feild-offset-finder-game-guardian

i tried spending some coins to call the method but the system knows my real gold value. and I am using  Virtual Master to use game guardian , i downloaded your script but i can't find it in virtual master's space, hence i can't use the script. 

 

However i found this video some days ago  and i think there are some data which is stored on client side. I do have dump file but don't know how to differentiate which data is server sided and which one is client sided. Do you know any ways to find it?

[HorridModz]

On 8/16/2025 at 1:39 PM, Sasuke_Uchiha07 said:

i tried spending some coins to call the method but the system knows my real gold value. and I am using  Virtual Master to use game guardian , i downloaded your script but i can't find it in virtual master's space, hence i can't use the script. 

 

However i found this video some days ago  and i think there are some data which is stored on client side. I do have dump file but don't know how to differentiate which data is server sided and which one is client sided. Do you know any ways to find it?

Besides analyzing the code, there is no real way to know what is server sided and what is client sided. The best way is to try stuff, and if something doesn't work you move on. Unfortunately, modding is often a game of guessing and checking rather than getting what you want on the first try.

 

I am unfamiliar with Virtual Master, but for most Virtual spaces any files will not show up in them. Either download it inside of Virtual Master (go to this post in a web browser, inside of that space) or you can see if there is an option to transfer files.

[Sasuke_Uchiha07]

21 hours ago, HorridModz said:

Besides analyzing the code, there is no real way to know what is server sided and what is client sided. The best way is to try stuff, and if something doesn't work you move on. Unfortunately, modding is often a game of guessing and checking rather than getting what you want on the first try.

 

I am unfamiliar with Virtual Master, but for most Virtual spaces any files will not show up in them. Either download it inside of Virtual Master (go to this post in a web browser, inside of that space) or you can see if there is an option to transfer files.

understood it. still i have one question, there is a chest reward which you can get once you defeat your opponent and it randomly gives one item after the battle , you can't see it in the youtube video link i posted above. Is there a way i can find the address of this chest item and change it to desired item? Let's say the chest randomly gives you 100 coins but we manipulate it so that we get 100 crystals instead of coins.  

[HorridModz]

On 8/19/2025 at 8:57 AM, Sasuke_Uchiha07 said:

understood it. still i have one question, there is a chest reward which you can get once you defeat your opponent and it randomly gives one item after the battle , you can't see it in the youtube video link i posted above. Is there a way i can find the address of this chest item and change it to desired item? Let's say the chest randomly gives you 100 coins but we manipulate it so that we get 100 crystals instead of coins.  

Can you see the rewards before opening the chest? If not, maybe you can try pausing the game while opening the chest. But if the game generates the chest reward at the same time that you open / claim it, editing it may not be possible without hex patching the function itself. One more idea is to try searching for the chest rewards *after* you open it and editing + freezing the values so you get modified rewards next time.

[Sasuke_Uchiha07]

16 hours ago, HorridModz said:

Can you see the rewards before opening the chest? If not, maybe you can try pausing the game while opening the chest. But if the game generates the chest reward at the same time that you open / claim it, editing it may not be possible without hex patching the function itself. One more idea is to try searching for the chest rewards *after* you open it and editing + freezing the values so you get modified rewards next time.

I get this kind of box after i win, and the description just shows which items you may get after opening the boxes, i tried modifying the number of boxes but of course it is server sided , so only the modified value is being displayed, do you know how can i search for the reward after i open the chest , as you suggested ?

 

public class KKRoadMuseumRewardItem : MonoBehaviour // TypeDefIndex: 6559

{

    // Fields

    public UILabel nameLabel; // 0x18

    public UILabel needRankLabel; // 0x20

    public UILabel rewardTitleLabel; // 0x28

    public UIGrid rewardGrid; // 0x30


@@@@@@@@@@@@@@@@@@@@@@@@@@@

 

// Namespace:

public class KKPVPRewardWindow : MonoBehaviour // TypeDefIndex: 6552

{

    // Fields

    public GameObject closeBtn; // 0x18

    public UIGrid rewardGtid; // 0x20

    public GameObject roadMuseumItem; // 0x28

    public UIGrid itemGrid; // 0x30

    public UIPanel itemPanel; // 0x38

    public Transform itemTrans; // 0x40

    private int m_CurrentShowId; // 0x48

    private List<KKRoadMuseumRewardItem> rewardItemList; // 0x50

i have also found classes and methods related to reward chest/ rewardItem .