Jump to content

16 posts in this topic

Recommended Posts

Posted

Hey guys,

 

Well, as some of you might know, I am totally noob in modding. So please bear with me..

 

I am trying to stop a timer in a game. However, I do not know how to I find it. Please keep in mind that strings method does not work because I cannot find anything related.

 

My question is, is there a method to do this using GDB + IDA pro ? Or, is there another method to do this?

 

Thanks...

Posted (edited)

First, start the game with the timer counting down then pause. Go into whatever game editor and search for all value types. Many different games store many different timers as floats, 2 bytes, 4 bytes, or 8 bytes. Then, search for an unknown initial value. After you find your (many) results, unpause the game, allow the timer to decrease, and go into your game editor of choice and scan for a decreased value. If it is possible to add time in the game, you could then search for an increased value to greatly narrow the results. This should, lead you to the address that controls the timer. From there, you could either freeze the value or nop the code that decreases it. 

Edit: Be back in an hour or two  :yes: 

Edit2: Back!

Updated by XxGam3Ma2t3rxX
Posted

First, start the game with the timer counting down then pause. Go into whatever game editor and search for all value types. Many different games store many different timers as floats, 2 bytes, 4 bytes, or 8 bytes. Then, search for an unknown initial value. After you find your (many) results, unpause the game, allow the timer to decrease, and go into your game editor of choice and scan for a decreased value. If it is possible to add time in the game, you could then search for an increased value to greatly narrow the results. This should, lead you to the address that controls the timer. From there, you could either freeze the value or nop the code that decreases it. 

Edit: Be back in an hour or two  :yes: 

I found it I will try to nop it and get back to u.

Posted (edited)

@@steelabood1

Oh this is also important as well!

Time is stored in two ways and two types. 

The first type is a float or double representing seconds. 
When searching this method, always search a range between plus/minus one of the display time. 
So for example > 5:43, you want to search between 342 and 344

The second type is a 4-byte or 8-byte representing milliseconds. 
Similarly, you want to search a range of values. 
So for example > 5:43, you want to search between 342000 and 344000

In addition to these types, games don't always store the value as total time left. 
Sometimes, they use total elapsed time and count up from zero. 
So if the game starts at 10:00, when it reaches 5:43, you want to search ranges around 4:17
Increase that range to 3 seconds just in case buddy ;).


Well, nopping the instruction does not work. When I nop it, in gdb I receive a lot of illegal instructions when I try to continue the game.

Illegal instructions? As in it does not let you continue?

Edit: What game are you trying to do this on? If it is server-sided this will not work most of the time. However sometimes you can slip it in and freeze the timer for games such as pokemon shuffle. However I believe the timer is not server sided until you finish that puzzle match and then the data you just got from completing that round is transferred to the server. Everything else on that game such as their gem system aka diamonds would not be hackable. Coins can be with scripts that multiply them.

Updated by XxGam3Ma2t3rxX
Posted (edited)

@@steelabood1

Oh this is also important as well!

Time is stored in two ways and two types. 

 

The first type is a float or double representing seconds. 

When searching this method, always search a range between plus/minus one of the display time. 

So for example > 5:43, you want to search between 342 and 344

 

The second type is a 4-byte or 8-byte representing milliseconds. 

Similarly, you want to search a range of values. 

So for example > 5:43, you want to search between 342000 and 344000

 

In addition to these types, games don't always store the value as total time left. 

Sometimes, they use total elapsed time and count up from zero. 

So if the game starts at 10:00, when it reaches 5:43, you want to search ranges around 4:17

Increase that range to 3 seconds just in case buddy ;).

Illegal instructions? As in it does not let you continue?

Edit: What game are you trying to do this on? If it is server-sided this will not work most of the time. However sometimes you can slip it in and freeze the timer for games such as pokemon shuffle.

Yeah I found time address using seconds and it was DW. I found two addresses. one leads me to an instruction and the other leads me to another instruction in the same subroutine. I basically want to speed up the timer or decrease the "time left" until the thing happens. I do not know how to go about that.

@@steelabood1

Illegal instructions? As in it does not let you continue?

Edit: What game are you trying to do this on? If it is server-sided this will not work most of the time. However sometimes you can slip it in and freeze the timer for games such as pokemon shuffle. However I believe the timer is not server sided until you finish that puzzle match and then the data you just got from completing that round is transferred to the server. Everything else on that game such as their gem system aka diamonds would not be hackable. Coins can be with scripts that multiply them.

I am trying to hack Rodeo Stampede, and I do not think it is server sided because I was able to hack the coins + play offline.

Updated by steelabood1
Posted (edited)

Yeah I found time address using seconds and it was DW. I found two addresses. one leads me to an instruction and the other leads me to another instruction in the same subroutine. I basically want to speed up the timer or decrease the "time left" until the thing happens. I do not know how to go about that.

I am trying to hack Rodeo Stampede, and I do not think it is server sided because I was able to hack the coins + play offline.

Your stumping me...The timer could be a different byte value haha.

However considering iGG or iGameGuardian is the same thing as cheat engine maybe this example can help you out some.

The assasins creed series was built like this for example since many failed to adjust the timers for the series

Countdown and stopwatch timers for this game are built this way: 

Two 8byte integers. One second is 30000

 

While initializing

- stopwatch: value1 = systemtime, value2 = systemtime 

- countdown: value1 = systemtime, value2 = systemtime + 30000*startingTimerValueInSeconds 

 

For "stopwatch" you see 00:00.00 on screen. For "countdown" you see 00:45.00 on screen (example). 

 

Every cycle

- stopwatch: value2 = systemtime, onscreenstring = converttohumanreadabletime( (value2 - value1)/30000 ) 

- countdown: value1 = systemtime, onscreenstring = converttohumanreadabletime( (value2 - value1)/30000 ) 

 

The problem is..the timer can be

- ANY TYPE 

- one value increasing (or decreasing) from 0(or some non zero value) up to (down to) some non zero value (or zero). <<< Pretty sure this seems to be your issue

- two values (two integers, or two floating point). Both are initialized. Only one is changing every cycle. Every cycle there is calculated difference, and it is converted to other type. At the end, it is converted to string or progress bar width, or arrow angle, or sand, or .... whatever. 

- three, four or even more 

 

Then there are temporary values, that said I looked into your game a bit and it seems scripting might be best for this scenario rather than an engine of any sort.

Updated by XxGam3Ma2t3rxX
Posted

Your stumping me...The timer could be a different byte value haha.

However considering iGG or iGameGuardian is the same thing as cheat engine maybe this example can help you out some.

The assasins creed series was built like this for example since many failed to adjust the timers for the series

Countdown and stopwatch timers for this game are built this way: 

Two 8byte integers. One second is 30000

 

While initializing

- stopwatch: value1 = systemtime, value2 = systemtime 

- countdown: value1 = systemtime, value2 = systemtime + 30000*startingTimerValueInSeconds 

 

For "stopwatch" you see 00:00.00 on screen. For "countdown" you see 00:45.00 on screen (example). 

 

Every cycle

- stopwatch: value2 = systemtime, onscreenstring = converttohumanreadabletime( (value2 - value1)/30000 ) 

- countdown: value1 = systemtime, onscreenstring = converttohumanreadabletime( (value2 - value1)/30000 ) 

 

The problem is..the timer can be

- ANY TYPE 

- one value increasing (or decreasing) from 0(or some non zero value) up to (down to) some non zero value (or zero). <<< Pretty sure this seems to be your issue

- two values (two integers, or two floating point). Both are initialized. Only one is changing every cycle. Every cycle there is calculated difference, and it is converted to other type. At the end, it is converted to string or progress bar width, or arrow angle, or sand, or .... whatever. 

- three, four or even more 

 

Then there are temporary values, that said I looked into your game a bit and it seems scripting might be best for this scenario rather than an engine of any sort.

Well, as I am new to all of this, I have to read what you wrote carefully and try to understand it. Thanks for your help!

Posted (edited)

Well, as I am new to all of this, I have to read what you wrote carefully and try to understand it. Thanks for your help!

Sure. I am gonna take a shower my friend. Will add a note when I am back.

Edit: Back @@steelabood1

Back to this case, I feel like a script should be better as that is what a lot of these timer hacks use is scripts, now do not get me wrong some timer hacks use engines such as cheat engine but it is more-over a script which involves hex editing, javascript knowledge, etc.

Updated by XxGam3Ma2t3rxX

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Our picks

    • Zombie Fortress: Trap Defense v0.8.0 [+6 Jailed Cheats]
      Modded/Hacked App: Zombie Fortress: Trap Defense By SayGames LTD
      Bundle ID: com.nlabsoft.zombiecrusher.s
      App Store Link: https://apps.apple.com/us/app/zombie-fortress-trap-defense/id6747713523?uo=4



      🤩 Hack Features

      - Add Cash
      - Add Diamond
      - Add Energy
      - Add Parts
      - Never Die
      - Add Battle Gold (Enable inside battle)
        • Winner
      • 3 replies
    • Zombie Fortress: Trap Defense v0.8.0 [+6 Cheats]
      Modded/Hacked App: Zombie Fortress: Trap Defense By SayGames LTD
      Bundle ID: com.nlabsoft.zombiecrusher.s
      App Store Link: https://apps.apple.com/us/app/zombie-fortress-trap-defense/id6747713523?uo=4



      🤩 Hack Features

      - Add Cash
      - Add Diamond
      - Add Energy
      - Add Parts
      - Never Die
      - Add Battle Gold (Enable inside battle)
        • Winner
      • 1 reply
    • Heroes Crew: Strategy Defense v1.1.5 [+6 Cheats]
      Modded/Hacked App: Heroes Crew: Strategy Defense By AlohaFactory
      Bundle ID: com.overdogs.heroes
      App Store Link: https://apps.apple.com/us/app/heroes-crew-strategy-defense/id6744350078?uo=4



      🤩 Hack Features

      - Add Currency
      - Unlimited Items
      - Unlimited Property (Heroes, Relic etc)
      - Activate VVip (Use after tutorial and only in main menu)
      - Activate Premium Hunt Pass (Use after tutorial and only in main menu)
      - Unlimited Battle Currency (Always Will Increase)
        • Winner
        • Like
      • 31 replies
    • Heroes Crew: Strategy Defense v1.1.5 [+6 Jailed Cheats]
      Modded/Hacked App: Heroes Crew: Strategy Defense By AlohaFactory
      Bundle ID: com.overdogs.heroes
      App Store Link: https://apps.apple.com/us/app/heroes-crew-strategy-defense/id6744350078?uo=4



      🤩 Hack Features

      - Add Currency
      - Unlimited Items
      - Unlimited Property (Heroes, Relic etc)
      - Activate VVip (Use after tutorial and only in main menu)
      - Activate Premium Hunt Pass (Use after tutorial and only in main menu)
      - Unlimited Battle Currency (Always Will Increase)
        • Informative
        • Agree
        • Winner
        • Like
      • 15 replies
    • Candy Pop Story : Match 3 v1.23.0722 [ +3 Cheats ] Auto Win
      Modded/Hacked App: Candy Pop Story : Match 3 By F.O.G LIMITED
      Bundle ID: com.gamoper.candysweetstory.ios
      App Store Link: https://apps.apple.com/us/app/candy-pop-story-match-3/id6670773988?uo=4


      🤩 Hack Features

      - Auto Win
      - Coins
      - Moves
      -
        • Thanks
      • 6 replies
    • Candy Pop Story : Match 3 v1.23.0722 [ +3 Jailed ] Auto Win
      Modded/Hacked App: Candy Pop Story : Match 3 By F.O.G LIMITED
      Bundle ID: com.gamoper.candysweetstory.ios
      App Store Link: https://apps.apple.com/us/app/candy-pop-story-match-3/id6670773988?uo=4
       

      🤩 Hack Features

      - Auto Win
      - Coins
      - Moves
        • Winner
        • Like
      • 6 replies
    • Boom Castle Tower Defense TD v1.5.2 [ +7 Jailed ] Easy Win
      Modded/Hacked App: Boom Castle: Tower Defense TD By Terahype s.r.o.
      Bundle ID: castle.heroes.tower.defense.kingdom.magic.battle.archer
      iTunes Store Link: https://apps.apple.com/us/app/boom-castle-tower-defense-td/id6502820312?uo=4


      Hack Features:

      - Enemy Status [ HP DEF ]

      - Base HP 

      - Battle Cost 0 

      - Stage Unlocked [ Play Any Stage ]

      - Battle Pass Unlocked 

      - Battle Pass Claim Unlimited [ Gems Gold ]

      - iGG Speed Hack Max 0 - 10 [ Skill CD - ATK Speed - Animation Speed - Wave Faster ]


      Jailbreak required hack(s): https://iosgods.com/forum/5-game-cheats-hack-requests/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
        • Informative
        • Agree
        • Winner
        • Like
      • 48 replies
    • Boom Castle Tower Defense TD v1.5.2 [ +7 Cheats ] Easy Win
      Modded/Hacked App: Boom Castle: Tower Defense TD By Terahype s.r.o.
      Bundle ID: castle.heroes.tower.defense.kingdom.magic.battle.archer
      iTunes Store Link: https://apps.apple.com/us/app/boom-castle-tower-defense-td/id6502820312?uo=4


      Hack Features:
      - Enemy Status [ HP DEF ]

      - Base HP 

      - Battle Cost 0 

      -  Stage Unlocked [ Play Any Stage ]

      - Battle Pass Unlocked 

      - Battle Pass Claim Unlimited [ Gems Gold ]

      - iGG Speed Hack Max 0 - 10 [ Skill CD - ATK Speed - Animation Speed - Wave Faster ] 


      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/forum/79-no-jailbreak-section/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 52 replies
    • Zombie Infinity v1.9.1 [ +5 Cheats ] Currency Max
      Modded/Hacked App: Zombie Infinity By kamasu.jp Inc.
      Bundle ID: jp.kamasu.oread
      App Store Link: https://apps.apple.com/ph/app/zombie-infinity/id6736433765?uo=4


      🤩 Hack Features

      - ADS Pass

      - Energy Pass

      - Premium Pass

      - Currency

      - Hero Status [ HP - DMG ]
        • Thanks
        • Like
      • 4 replies
    • Zombie Infinity v1.9.1 [ +5 Jailed ] Currency Max
      Modded/Hacked App: Zombie Infinity By kamasu.jp Inc.
      Bundle ID: jp.kamasu.oread
      App Store Link: https://apps.apple.com/ph/app/zombie-infinity/id6736433765?uo=4


      🤩 Hack Features

      - ADS Pass

      - Energy Pass

      - Premium Pass

      - Currency

      - Hero Status [ HP - DMG ]
        • Like
      • 3 replies
    • Alien Survivor: Survival Arena v1.40.0 [ +7 Cheats ] Currency Max
      Modded/Hacked App: Alien Survivor: Survival Arena By IMPONILOX LIMITED
      Bundle ID: world.playme.x
      iTunes Store Link: https://apps.apple.com/us/app/alien-survivor-survival-arena/id1669761844?uo=4
       

      🚀 Hack Features

      - ADS NO [ Rewards Free ]

      - Gems [ Achievements Rewards Only One Get ]

      - Energy [ Just Buy ]

      - HP [ Just Equip & Unequip ]

      - ATK [ Just Equip & Unequip ]

      - DEF [ Just Equip & Unequip ]

      - Skill CD [ First Get Then Use ]


      🍏 For Non-Jailbroken & No Jailbreak required hacks: https://iosgods.com/forum/79-no-jailbreak-section/
      🤖 Modded Android APK(s): https://iosgods.com/forum/68-android-section/
        • Informative
        • Agree
        • Haha
        • Winner
        • Like
      • 19 replies
    • Alien Survivor: Survival Arena v1.40.0 [ +7 Jailed ] Currency Max
      Modded/Hacked App: Alien Survivor: Survival Arena By IMPONILOX LIMITED
      Bundle ID: world.playme.x
      iTunes Store Link: https://apps.apple.com/us/app/alien-survivor-survival-arena/id1669761844?uo=4


      🚀 Hack Features

      - ADS NO [ Rewards Free ]

      - Gems [ Achievements Rewards Only One Get ]

      - Energy [ Just Buy ]

      - HP [ Just Equip & Unequip ]

      - ATK [ Just Equip & Unequip ]

      - DEF [ Just Equip & Unequip ]

      - Skill CD [ First Get Then Use ]


      🍏 Jailbreak iOS hacks: https://iosgods.com/forum/5-game-cheats-hack-requests/
      🤖 Modded Android APKs: https://iosgods.com/forum/68-android-section/
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 32 replies
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines