Ted2

gg

Bypassing the limited beta screen if you didn't figure that one out yet: https://iosgods.com/topic/65627-bypassing-google-license-check-harry-potter-hogwarts-mystery-example-smali/

Hi, I saw that people commented in the request of the game about the fact they weren't able to play the game due the Beta Limited. I was pretty sure it was just a simple license check, so I thought let's show you guys how to disable it Requirements: - Apktool (or any tool where you can decompile the apk with) - A text editor which can read smali files (sublime, notepad++ etc) Alright so it's pretty simple & is always the same file (from my experience) Go to: /smali/com/google/android/vending/licensing/LicenseValidator.smali or /smali_classes2/com/google/android/vending/licensing/LicenseValidator.smali --> Some apps have 2 classes.dex files nowadays Open that file in your text editor. Search for 'handleRespone' as a method: Now inside this method, 'mPolicy' & under that you see 'allowAcces()Z' --> ()Z means BOOLEAN in smali Now you can bypass the license check in two ways: 1. Return allowAccess to true (0x1) 2. comment out the jump (if-eqz v0, :cond_0) I prefer option two, since I don't have to type 2 lines of code How it should look like after patch: Original Code: Patched Code: Hope you learned something Credits: - @Ted2

Good tut, will help lots of people

Make a tutorial for the people who can't, if you don't mind!

Can't wait to read it

Thanks Joka for the suppoart

Idk, I never tried his code

Config.h file is likely included into the tweak.xm, which means you either have to have that file in your project folder OR in your theos/include

You can't look up the address from igg into IDA. You need to use lldb to find the IDA offset. You find that using the igg address. See tutorial section so you can better understand.

Wow

I don't know

The tweak Ptrace Pwner can bypass it on some games. If not, you gotta bypass it yourself

Use search bar & you'll figure out it's anti debugging protection.

Nah, it would. Do you know about 'register read'

Aslr isn't stored in the old & new value. Sometimes they tell me huge ass numbers too while the actual number was 29 or smth, doesn't always mean it's the wrong func. You gotta remove the aslr from the offset it gave you though.

K

There is already a tutorial on this

Do you even english mate

gg

nahh, iOS 11.1.2 Jailbreak is total sh!t

Are you a hecker