Archipunchi

19 hours ago, Shrino said:

Я использую ImGui, поэтому он может отличаться от того, что используете вы.
В зависимости от того, равен ли testslide чему-либо чему угодно, затем выполните patchOffset .

Я предполагаю, что это то, что вам было нужно, потому что вы сказали, что понимаете byte
 

int testslide;

ImGui::SliderInt("Test Slider", &testslide, 0, 3);

if (testslide == 1) {

patchOffset(0x001000000, "0050241EC0035FD6");;
} else (testslide == 2) {
patchOffset(0x001000000,"0090261EC0035FD6");;
} else (testslide == 3) {
patchOffset(0x001000000,"00F0271EC0035FD6");;
}

 

Do I need to create an interface window in imgu? For this slider

Ok

5 hours ago, Rook said:

MSHookFunction can only be used to hook functions. With instructions, it gets a bit more complex and I don't think there's a public tutorial or example on this.

Is it even possible? What do you think? 

How to make a “slider” for non-unity? All I have is the address of the necessary function with the instruction FMOV S0, #0.5, and an understanding of which bytes to enter to edit this function. This is a FLOAT. 

I don't need a new app) but an old version, it even says become a vip client to get full access to the entire list of versions

In general, I need to download Bullet Echo 3.1.1 version, I searched everything on the Internet and found nothing, I know that there is a file store in Armconverter, but I would not like to purchase a subscription for the sake of one file, besides I don't need it at all, maybe there are some third-party methods of obtaining it? Some tweaks are fresh, anything else, I would be grateful if you really help

Not bad

IDA PRO Function

Above, I attached a function that I want to edit at the start of STP - 200080D2C0035FD6. But I have a question, what is the defender stack and how does it work? And will it prevent me from changing the beginning of the function? I don't seem to overflow the stack, but just change the contents, in general, I'm waiting for help from IDA experts

I pumped my IDA travel skills and found all the memory addresses for Bullet Echo with incredible actions) 

In total, I have:

 A map with light

an enlarged view from above (zoom)

a full vision of opponents in the grass

360 flashlight. 

Maybe I'll post a mod menu a week before the next update😅 I don't want views from the developers

10 hours ago, Happy Secret said:

Hello, I am not aware there are magic to port of Android offset to iOS.

Is it a Unity game? Do you familiar with Il2cpp dumper? You can actually get back the original function name of a Unity game in IDA with help of Il2cpp dumper.

You may refer to Stage 2 and Stage 6 of my tutorial here to understand a bit more.

 

I'll see what's inside, but it's not Unity, it's a server game

Good evening, friends. I explain the situation. I hacked a couple of Bullet Echo game functions, but on Android, using GameGuardian, because the functions from the iOS version of the game were obfuscated, I couldn't find anything useful there. Thanks to GG and my perseverance, I was able to crack 2 very serious functions, moreover, I was able to find lines of code in IDA, from the Android version of the game. I put labels on them so as not to lose them, on all memory addresses. The only question was how I would transfer these memory addresses to the iOS version of the game, again using IDA. In short, I imposed IDA (Android) on IDA (iOS) versions of the game, to analyze and find the right one on the iOS version, since I am an Apple user. I managed to patch the zoom function, but I have problems with the second function, I can't find some memory addresses comparing Android and iOS. There are big differences in processor architectures in IDA. The code is different, the constants are different. Roughly speaking, almost everything is different. Are there those who can tell me how I can superimpose android on ios, find the memory addresses that I have already found in IDA (Android), how can I find the exact addresses in the iOS structure? Thx 

Wow

2 minutes ago, Rook said:

Yeah, that's not possible right now but it may be in the future with iGameGod!

Can you tell me on the forum is there a solution to finding the desired function by hex sequence?

1 hour ago, Rook said:

How is that example lua script ran? What tool do you use?

This is GameGuardian, It's built into this program, it's like iosgods, it just has a much larger range of search functions.

It works on the principle of recording changes in memory cells, you find the desired function with your hands, and the script records it and next time it does everything that you did manually. For you.

54 minutes ago, Rook said:

I don't think so at this time. What is your LUA script trying to do exactly?

This feature may be added to iGameGod in the future.

I just know a person who made a couple of functions on bullet echo, and he did them on a lua script, obviously this is an android system, but lua is a record of actions in order to simplify the activation of functions for users, and then I have thoughts, it turns out he did it all the same ways? By finding offsets? Just in live mode? If so, then it turns out it can be hacked on iOS? However, again, why didn't he make a menu mod? Or is this not possible on android?(I don't think so). In general, the main question I'm asking is, why did he write it down in lua? Because of the dynamism of the displacements, maybe?

Guys, hello to everyone. I would like to get support from knowledgeable guys. Is it possible to embed a script into the iOS application process? Exactly the script. Something like lua on android, maybe there are some programs that allow you to do this? If there are any, what file extension is used on iOS?

Good job

Not working Infinity mana and stupid enemy, please Update @Zahir

Cool

There is one question that torments me as soon as I go to practice in the disassembler, in each game or application there are different registers in the function (R/S/W/X), I don't understand if there is a difference between them? are they just coefficients in front of numbers ?, for example R7/W0 etc. or does each of these letters have some meaning? I am a resident of Russia and, unfortunately, I cannot find sensible textbooks on Ida, and foreign textbooks are too difficult for me for linguistic reasons. Help me understand these registers. THX

Victory! The question may be closed. I was able to solve this problem by downloading all versions of il2cpp dumpers, among all versions, only v6.2.1 managed to fix these errors (https://github.com/Perfare/Il2CppDumper/releases/download/v6.2.1/Il2CppDumper-v6.2.1.zip) 

Thank you to everyone who tried to help me. 

exactly the same error "failed to load the type from the assembly"

https://imgur.com/a/AvJjUNT

Am I right that there's no way to fix this f***ing mistake? If so, how do you recommend hacking the game if the dumper sends you to hell?

16 hours ago, 0xNoctis said:

i Would suggest using GUI version of il2cppdumer as its more noob friendly 

Failed to load the "System.Runtime" type.InteropServices. OSPlatform "from the build" mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089". - LOG((

9 hours ago, Zahir said:

Hi @Archipunchi

Can you try the newer version of the dumper?

https://github.com/Perfare/Il2CppDumper/releases/download/v6.4.19/Il2CppDumper-v6.4.19.zip

Failed to load the type from the assembly ( literal translation from the error )

screenshot - https://imgur.com/a/3P5cbfa

6 hours ago, 0xNoctis said:

i Would suggest using GUI version of il2cppdumer as its more noob friendly 

Thanks for the advice, I'll try it now