Help! How Modif a GET/SET Obscured in ARMv7/ARM64v8

[ziz59]

Hello community,

Let me introduce myself, I have been registered for quite some time on your forum, and all your tutorials have allowed me to make good progress.

I'm not an experienced modder but I manage.

I need brains to understand or put into practice certain things, at least in part.

Let me explain, right now I'm mode a game that is in ARMv7 and ARM64v8 version, this game contains several protections and a well-known anti cheat (ACTK) codestage.

On the ARMv7 version, no problem, I modify the obscured values directly via functions internal to the codestage, and for the fields, I use the unity.h from shmoo.

So I come to my problem, when I want to mod the game in ARM64v8, nothing works anymore for the obscured values, yet it's exactly the same code. I do not understand anything.

So if a more experienced modder could guide me so that I can modify a simple get_

I would like to return an obscured value with this method:

// Hook Method
int (*old_CoinMod)(void *instance);
int CoinMod(void *instance)
{
    if(instance != nullptr)
    {
        if(HackCoin) // Toggle
        {

            // COIN
            /// => I need to return a obscuredint value
           
            // Tried with UnityStuff ( not work) because work just for field
            SetObscuredIntValue( instance, 999);
        }

    }
    return old_CoinMod(instance);
}

// Hook
// public static ObscuredInt get_Coin
A64HookFunction((void*)getAbsoluteAddress(targetLibName, DataManager::get_Coin) , (void*)CoinMod, (void**)&old_CoinMod);

And when I want to use the internal method, which however works on the ARMv7 version, I have an error message in the LOGCAT:

NullReferenceException: Object reference not set to an instance of an object.
      at CodeStage.AntiCheat.ObscuredTypes.ObscuredInt.InternalDecrypt () [0x00000] in <00000000000000000000000000000000>:0

If anyone has a method, please give me a boost, or if they have a formidable one, but don't want to share it, I'm a taker even by private message

thanks in advance.

 

[ziz59]

up

 

[HekaHeka709]

Show the method from dnSpy?

 

[ziz59]

Show the method from dnSpy?

public static ObscuredInt Coin
    {
        [Token(Token = "0x6003528")]
        [Address(RVA = "0x26C5238", Offset = "0x26C5238", VA = "0x26C5238")]
        get
        {
            return default(ObscuredInt);
        }
    }

 

[CHEATS GAMES]

I already tried with static but it doesn't work for me either

 

[ziz59]

I already tried with static but it doesn't work for me either

on ARMv7 it work perfect for me, but not on ARM64, why i dont know, because for BoolObscured, not problem, but for Int, not work

 

[derzost2]

on ARMv7 it work perfect for me, but not on ARM64, why i dont know, because for BoolObscured, not problem, but for Int, not work

I faced the same problem, did you manage to solve it somehow?
Maybe it will help you

Hook not working on ARM64v8 - Platinmods.com - Android & iOS MODs, Mobile Games & Apps

Good evening. I ran into a problem, I'm modifying the game Jurassic World Alive, the previous version worked on ARMv7 and there were no problems, after updating ARMv7 it stopped running. Therefore, I began to make hooks on ARM64v8, everything works fine on Nox x64, and as soon as I launch...

platinmods.com

 

[ziz59]

I faced the same problem, did you manage to solve it somehow?
Maybe it will help you

Hook not working on ARM64v8 - Platinmods.com - Android & iOS MODs, Mobile Games & Apps

Good evening. I ran into a problem, I'm modifying the game Jurassic World Alive, the previous version worked on ARMv7 and there were no problems, after updating ARMv7 it stopped running. Therefore, I began to make hooks on ARM64v8, everything works fine on Nox x64, and as soon as I launch...

platinmods.com

thnaks, i hve checked your problem, but mine is not the same, i use LGL mod menu, with A64hook, the menu correctly find the library, my problem is my hook function for armV7 is exactly same for Arm64 , excepted certain field (it changed on ARM64)

So or all hook + codestagebypass + hook obscuredtype on armv7 work fine !!!
=> in ARM 64, all normal hook, bypass codestage and obscured Bool work fine, just obscuredint not work, because bloked by internaldecrypt(), i dont know why , it same xactly same native function in armv7 and arm64.

i search but idk

 

[derzost2]

public static ObscuredInt Coin
    {
        [Token(Token = "0x6003528")]
        [Address(RVA = "0x26C5238", Offset = "0x26C5238", VA = "0x26C5238")]
        get
        {
            return default(ObscuredInt);
        }
    }

I missed that you have a static method, everything is simple, there is no instance in static methods, so skip the first argument
Try like this

// Hook Method
static int (*old_CoinMod)();
static int CoinMod()
{
    if(HackCoin) // Toggle
    {
        //SetObscuredIntValue( instance, 999); //Set static??
        SetObscuredIntValue(999); //I think that the set is also static

    }
    return old_CoinMod();
}

// Hook
// public static ObscuredInt get_Coin
A64HookFunction((void*)getAbsoluteAddress(targetLibName, DataManager::get_Coin) , (void*)CoinMod, (void**)&old_CoinMod);

I already tried with static but it doesn't work for me either

Info from another programming language, but the essence is the same

 

[ziz59]

I missed that you have a static method, everything is simple, there is no instance in static methods, so skip the first argument
Try like this

// Hook Method
static int (*old_CoinMod)();
static int CoinMod()
{
    if(HackCoin) // Toggle
    {
        //SetObscuredIntValue( instance, 999); //Set static??
        SetObscuredIntValue(999); //I think that the set is also static

    }
    return old_CoinMod();
}

// Hook
// public static ObscuredInt get_Coin
A64HookFunction((void*)getAbsoluteAddress(targetLibName, DataManager::get_Coin) , (void*)CoinMod, (void**)&old_CoinMod);

Info from another programming language, but the essence is the same
View attachment 475876

I will test :)

 

[ziz59]

I missed that you have a static method, everything is simple, there is no instance in static methods, so skip the first argument
Try like this

// Hook Method
static int (*old_CoinMod)();
static int CoinMod()
{
    if(HackCoin) // Toggle
    {
        //SetObscuredIntValue( instance, 999); //Set static??
        SetObscuredIntValue(999); //I think that the set is also static

    }
    return old_CoinMod();
}

// Hook
// public static ObscuredInt get_Coin
A64HookFunction((void*)getAbsoluteAddress(targetLibName, DataManager::get_Coin) , (void*)CoinMod, (void**)&old_CoinMod);

Info from another programming language, but the essence is the same
View attachment 475876

tested not work, same problem for "
NullReferenceException: Object reference not set to an instance of an object.
at CodeStage.AntiCheat.ObscuredTypes.ObscuredInt.InternalDecrypt () [0x00000] in <00000000000000000000000000000000>:0
"

 

[derzost2]

tested not work, same problem for "
NullReferenceException: Object reference not set to an instance of an object.
at CodeStage.AntiCheat.ObscuredTypes.ObscuredInt.InternalDecrypt () [0x00000] in <00000000000000000000000000000000>:0
"

u can show dump?
try this

// Hook Method
static void* (*old_CoinMod)();
static void* CoinMod()
{
    if(HackCoin) // Toggle
    {
        //SetObscuredIntValue( instance, 999); //Set static??
        SetObscuredIntValue(999); //I think that the set is also static

    }
    return old_CoinMod();
}

// Hook
// public static ObscuredInt get_Coin
A64HookFunction((void*)getAbsoluteAddress(targetLibName, DataManager::get_Coin) , (void*)CoinMod, (void**)&old_CoinMod);

 

[CHEATS GAMES]

Its anticheat.. disable

 

[ziz59]

Its anticheat.. disable

codestage is bypaased bro :)

 

[nekrasov]

codestage is bypaased bro :)

Do you find the way how to do it? I mean hook obscured method like ObscuredInt?

 

[pentarix1996]

Good night. I wanted to take the opportunity to ask a question I have about ARMv7 and ARM64v8.

When working with hexadecimal data, how is it calculated?

For example, I found this value in C# on ARMv7 and ARM64. But I don't understand how they obtained those values, if for example I want to obtain 0l or 1l (for boolean values)

C#:
return 99l;

ARMv7:

63 00 A0 E3 00 10 A0 E3 1E FF 2F E1

ARM64:

60 0C 80 52 C0 03 5F D6

 

[nekrasov]

Good night. I wanted to take the opportunity to ask a question I have about ARMv7 and ARM64v8.

When working with hexadecimal data, how is it calculated?

For example, I found this value in C# on ARMv7 and ARM64. But I don't understand how they obtained those values, if for example I want to obtain 0l or 1l (for boolean values)

C#:
return 99l;

ARMv7:

63 00 A0 E3 00 10 A0 E3 1E FF 2F E1

ARM64:

60 0C 80 52 C0 03 5F D6

Good guestion, as far as I know not the all values can be in short ARMV7 form.

You can get ARM codes here: Best ARM Converter

 

[Sunghera]

What game is this? Let me have a try