【Game Reverse】Analysis of Encrypted Coordinates

There are many ways to store coordinates in this game.

For example, DOUBLE stored in plain text, various types of encryption.

We don't know which ones are useful to us, which ones are just auxiliary UI or data that fell into the LUA virtual machine pit.

Then decide according to the size of the effect, try them one by one.

It is best to find an address that has an effect after modification, of course it is only local. This kind of game coordinates cannot be verified by the game without the server.

We use CE to search for changing values ​​(because encrypted data cannot be scanned with plaintext exact values)

Get the following addresses
insert image description here
and modify them together.
Before modification
insert image description here
After modification,
insert image description here
we can see that the real coordinates of the upper left corner have not changed before and after modification.

But the game characters have achieved "teleportation". Of course, this teleportation is local. As long as we operate and walk, it will be corrected back to the real coordinates, but at least it proves that this coordinates are real and effective, at least it can let us see The screen of the modified coordinates.

Then we scan these coordinates

Modify one by one

Just find the coordinate address that plays a key role

This address is the breakthrough point for us to find the surrounding arrays or character objects in the future.

Of course, we need to find the encryption and decryption CALL of the coordinates through the source of the plaintext coordinates and the whereabouts of the coordinates.

Finally, the filtered
encrypted coordinates
insert image description here
and when we "teleport" past any operation, such as clicking on the ground, the real person has found his way from the original position.

Guess you like

Origin blog.csdn.net/douluo998/article/details/129986882