Tutorial IDA tutorial - Bypassing fake update warning

AndnixSH

PMT Elite Modder
Original poster
Staff member
Modding-Team
Jun 27, 2017
4,680
296,968
1,213
Modding World
GEqcSpi.png


Sometime you'll meet fake bugs in some games. This fake update warning didn't help much because it's easy to bypass. I'll show you how to bypass it easly

The game is The Evolution Sandbox.

You need:
- IDA Pro
- 7-zip or Winrar to open APK file
- Basic knowledge of IDA hacking

Video tutorial:

Start disassemble the ARM version libcocos2d.so file

Press CTRL+F, search UpdateWarningScreen and open up UpdateWarningScreen::Create(void)
Because I know this is the right function to look for right hehehe.

Highlight _ZN19UpdateWarningScreen… and press X to XREF to see which function are calling this function. There are 2 functions. Double-click to view the code.

MxNJFY3.png


Press F5 to view Pseudocode to understand the code easier

It looks very intersting. It checks for Lucky Patcher, signature or other hacking related stuff. I assume checkSignature detected tampered APK.

Ochhn1j.png


I'm too lazy to look deeper into it so I'll NOP the loc_xxxxxx instead. Highlight the loc_xxxxxx and press X to XREF. Hmm there is only 2 loc_xxxxx in one function and it's right here, highlighted in yellow

ivUIU76.png


Go to the offsets you found and replace them with NOP (40 46 in THUMB) in hex editor. NOP means No Operation

hGh58PT.png


When you re-disassemble the modified .so file, you'll see the changes.

o3PQF0s.png


The fake update warning won't appear anymore. Enjoy playing the modded game.

Credit:
AndnixSH#
 
Last edited:

UdayBaap

Solid & Active Platinian
Apr 26, 2020
60
81
33
30
pune, maharashtra, india
Having same problem for 2 games, i modded with dnspy, searched for signature check there but diddnt found any, not even in dex.

There is no libcoco file, what to do, plz help
 

AndnixSH

PMT Elite Modder
Original poster
Staff member
Modding-Team
Jun 27, 2017
4,680
296,968
1,213
Modding World
any new tutorial to remove or disabled anticheat unity game nowaday?
No, we don't share new tutorials because developers will fix the bypass quick. I may or may not share even the game is dead or the anti-cheat/game security is deprecated
 
  • Like
Reactions: Comando

ziz59

Approved Modder
Approved Modder
Nov 7, 2020
122
2,145
193
43
fr
Hi AndnixSH,

Great Tutorial, i try to isable popup warning of this game DoubleUcasino, but i not success, possible yu help me ?

DUC_pop.png


Version of APK 6.45.0 (changed to 562, 7.16.1)

I have search this text :

warning.png


occurence.png


I share my apk if you need to help me, yhx by advance !!!

Link :

MY APK OLD VERSION
 

AndnixSH

PMT Elite Modder
Original poster
Staff member
Modding-Team
Jun 27, 2017
4,680
296,968
1,213
Modding World
Hi AndnixSH,

Great Tutorial, i try to isable popup warning of this game DoubleUcasino, but i not success, possible yu help me ?


Version of APK 6.45.0 (changed to 562, 7.16.1)

I have search this text :




I share my apk if you need to help me, yhx by advance !!!

Link :

MY APK OLD VERSION
Off-topic, and I'm no longer movitated to help with modding anymore, only make tutorials
You are close enough, you just need to learn more IDA modding
 
  • Like
Reactions: ziz59