Tutorial Megathread: Modding Features

[nowhere_222]

Hey it's me again your good boy nowhere
Today i will share some tutorial (not really completed as of now)
But as done some for y'all if you want to learn some :)) (Pretty much beginner features)

I will try to cover all soon so my good people who wants to start modding can have something to start with

Here is a few example of features you can make easily on games:

FREEZE CURRENCY:

Spoiler: Screenshot

1 HIT KILL:

Spoiler: Screenshot

GODMOD:

Spoiler: Screenshot

Forgot to mention but void Attack needs to be found on Enemy / Monster class.

1 HIT KILL PARAMETER:

Spoiler: Screenshot

FREEZE TIMER:

Spoiler: Screenshot

FREE AD BUFF:

Spoiler: Screenshot

FREE ENHANCE:

Spoiler: Screenshot

HOOK PARAMETER VALUE WITH HEX PATCHING:

Spoiler: Screenshot

 

[AASIM_456]

 

[nowhere_222]

Updated

 

[Geng]

yes sir

 

[gxblinbxi]

Following this thread

 

[ariefnewbie08]

I want to learn how to mod, but i have no pc or laptop :/

 

[anonymous067280]

just need to buy a pc now

 

[nowhere_222]

I will add soon Freeze Timer & Free Ad Buff

 

[nowhere_222]

Updated

 

[Hussain Rahul]

Nice

 

[nowhere_222]

Adding soon Free Enhance

 

[nowhere_222]

Updated

Adding soon Free Enhance

 

[Definitely a name]

I don't know what it is but this looks impressive

 

[Backshift]

Always great to see others sharing knowledge!

Couple tips for you

//Freeze Timer
public void StartTimer(float duration, Action onTimedOut)

This function has the return type void, meaning it does not return anything, you dont need to use nop if you only want to exit the function, can simply use 1E FF 2F E1 on its own, having nop there makes no difference since the processor will see nop and skip it due to it being no operation and bx lr anyway.

A few of your other examples say to return values to the parameters, they are just data sent to the function that the function needs to do its work, you cant "return to a parameter" you can edit the values in the parameter in the current function but not "return to it" in the context you say in your post.

Your freeze currency hex is 02 00 a0 e1 1e ff 2f e1 which in arm is:

mov r0, r2
bx lr

and would translate in code to something like this:

public void SpendCurrency(string currencyType, long amount)
{
    return amount;
}

SpendCurrency is a void function though, so it doesnt actually work like you expect it to since it cant return anything.

Hope that helps, Happy Modding!

 

[CodeJutsu]

Always great to see others sharing knowledge!

Couple tips for you

//Freeze Timer
public void StartTimer(float duration, Action onTimedOut)

This function has the return type void, meaning it does not return anything, you dont need to use nop if you only want to exit the function, can simply use 1E FF 2F E1 on its own, having nop there makes no difference since the processor will see nop and skip it due to it being no operation and bx lr anyway.

A few of your other examples say to return values to the parameters, they are just data sent to the function that the function needs to do its work, you cant "return to a parameter" you can edit the values in the parameter in the current function but not "return to it" in the context you say in your post.

Your freeze currency hex is 02 00 a0 e1 1e ff 2f e1 which in arm is:

mov r0, r2
bx lr

and would translate in code to something like this:

public void SpendCurrency(string currencyType, long amount)
{
    return amount;
}

SpendCurrency is a void function though, so it doesnt actually work like you expect it to since it cant return anything.

Hope that helps, Happy Modding!

I could always learn from this guy even though what you did is simple corrections but it's fundamentally necessary, would love to see more of your info, i think there is a hidden gem there lol

 

[Juneitor]

Always great to see others sharing knowledge!

Couple tips for you

//Freeze Timer
public void StartTimer(float duration, Action onTimedOut)

This function has the return type void, meaning it does not return anything, you dont need to use nop if you only want to exit the function, can simply use 1E FF 2F E1 on its own, having nop there makes no difference since the processor will see nop and skip it due to it being no operation and bx lr anyway.

A few of your other examples say to return values to the parameters, they are just data sent to the function that the function needs to do its work, you cant "return to a parameter" you can edit the values in the parameter in the current function but not "return to it" in the context you say in your post.

Your freeze currency hex is 02 00 a0 e1 1e ff 2f e1 which in arm is:

mov r0, r2
bx lr

and would translate in code to something like this:

public void SpendCurrency(string currencyType, long amount)
{
    return amount;
}

SpendCurrency is a void function though, so it doesnt actually work like you expect it to since it cant return anything.

Hope that helps, Happy Modding!

I try to do it hook the parameters, it's work for me

 

[Backshift]

I try to do it hook the parameters, it's work for me

Well yeah, if you are function hooking with a hook library, that takes care of allocating new memory with however much space you need and patching the original function to jump there to run your custom logic before jumping back to the original function after the jump. Which you can still do directly in arm in the binary, but you are limited to the size of the original function, if you do it directly in the binary you would have to find some free space, such as an unused function like a debug function or some junk the game doesn't use, then you could jump to that unused function write you logic there and jump back manually yourself. These days everyone on android is hooking since there are frameworks already and templates/ready to use code available.

I was talking in the context of nowhere's hex patches, one proper way to edit the value in the parameters without hooking would be to xref (cross reference) in IDA/Ghidra etc back to where your target function is called from and then edit the value being put into the register being used just before the function is called, that way when the function is called it will already have your custom value in the parameter.

 

[nowhere_222]

Updated

 

[M4K4R0V]

Yo

 

[mbetixz]

add some cooldown time or time cd