Cheat Engine Forum Index Cheat Engine
The Official Site of Cheat Engine
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 


Memory address for BlueStacks running CandyCrush
Goto page Previous  1, 2, 3, 4, 5  Next
 
Post new topic   Reply to topic    Cheat Engine Forum Index -> General Discussions
View previous topic :: View next topic  
Author Message
Zaladine
Expert Cheater
Ban
Reputation: 3

Joined: 14 Oct 2012
Posts: 129
Location: Djokdja, Indonesia

PostPosted: Fri Sep 20, 2013 1:50 pm    Post subject: Reply with quote

gabarito wrote:
1 - What do you mean with Player time elapsed timer value stored RIGHT AFTER time limit? 0x59D9D2C0 is not the right after 0x59D9D2BC. I thought it was 0x59D9D2BD.
And, if so, you mean I have to add address manually, pressing corresponding button?

It's because the data-type value at address 0x59D9D2BC is float number, and float numbers occupy 4 bytes.
So in our case here, Time Limit occupies address 0x59D9D2BC, 0x59D9D2BD, 0x59D9D2BE, and 0x59D9D2BF. That is exactly 4 bytes.

So the address right after 0x59D9D2BC, at which a float number was stored, IS indeed 0x59D9D2C0...


gabarito wrote:
2 - At present stage, I have no moves limit nor moves made. How to use GroupScan? I have just Time Limit.

Group scan should be as follows:
Code:
4:(n move) 4:-1 f:(time limit in seconds) f:*

- n moves = how many steps have taken...
- f:* is time elapsed. We use wildcard (*) since the value keep increasing...


gabarito wrote:
3 - What do you mean about Memory Dump? Is it Memovy View button? If so, the window shows just "????" values.

Yes, it is indeed Memory View windows.

The reason why it shows "????" was because you haven't yet select any process (File > Open Process).

To view the memory dump directly on certain address: Right click on the address (in table), and choose "Browse this memory region". Or simply press Ctrl+B while selecting the address.

This is quite basic CE usage...


gabarito wrote:
4 - Do I have to press First Scan and Next (filtering) using wich values?

Do 'First Scan' with above (question number 2) GroupScan string. This usually return very few result in CE's Found Address window.

Following screenshot should make all clear...

Please focus on GroupScan string/value. And i promise you it was 'First Scan' without further needs of 'Next Scan'...

It was stage 20 with 1 minute time limit re-visited. I froze the 'Elapsed Time' to 15, leaving 45 seconds left as shown on screen...



zaladine_gamehacking_-_bluestacks__candy_crush_saga__timer.jpg
 Description:
 Filesize:  333.05 KB
 Viewed:  39071 Time(s)

zaladine_gamehacking_-_bluestacks__candy_crush_saga__timer.jpg


Back to top
View user's profile Send private message
gabarito
Newbie cheater
Reputation: 0

Joined: 03 Sep 2013
Posts: 24

PostPosted: Fri Sep 20, 2013 2:24 pm    Post subject: Reply with quote

WOW!!!

Wonderful! It worked! Many thanks, man!
Very Happy Very Happy Very Happy



P.S.:
There are some thingies going on here, because not every time I can find those address. Sometimes I have to restart BlueStacks because CE returns no address. None. It happens even when I'm looking for address from stages without time and float values within. I restart BlueStacks and, BINGO, it works. But sometimes, it doesn't work... I don't know why.
But it's enough. When I restart BlueStacks one, two, three times, then CE can find the address correctly.
Back to top
View user's profile Send private message
Zaladine
Expert Cheater
Ban
Reputation: 3

Joined: 14 Oct 2012
Posts: 129
Location: Djokdja, Indonesia

PostPosted: Fri Sep 20, 2013 3:26 pm    Post subject: Reply with quote

Current BlueStacks is the problem... It's heavy...
The later version should be much better...

_________________
... to boldly go where no eagle has gone before ...
Back to top
View user's profile Send private message
gabarito
Newbie cheater
Reputation: 0

Joined: 03 Sep 2013
Posts: 24

PostPosted: Sat Sep 21, 2013 5:36 am    Post subject: Reply with quote

I could find out that It's possible to save the current state of the game just saving two files:

%AllUsersProfile%\%AppData%\BlueStacks\Android\Data.sparsefs\Store
and
%AllUsersProfile%\%AppData%\BlueStacks\Android\SDCard.sparsefs\Store

They keep the current level and lives remaining.
Is there a way to hack those files to open all levels of the game?
Or to reset the lives remaining?

If I change BlueStacks Date/Time to reset lives, it may occur that a number of minutes to wait until get more lives increase too much. How to deal with that?

I think, above is the last questions about all this game.
Back to top
View user's profile Send private message
lailton22
How do I cheat?
Reputation: 0

Joined: 21 Sep 2013
Posts: 1

PostPosted: Sat Sep 21, 2013 6:24 pm    Post subject: Table .CT about BlueStacks running CandyCrush? Reply with quote

Hi friends,

Gabarito,
You have the table .CT this solution about BlueStacks running CandyCrush?

Thanks.
Back to top
View user's profile Send private message Send e-mail
gabarito
Newbie cheater
Reputation: 0

Joined: 03 Sep 2013
Posts: 24

PostPosted: Sat Sep 21, 2013 7:08 pm    Post subject: Reply with quote

We are using CandyCrush through emulation. We have to scan the whole Physical memory. I'm not sure, but I guess there is no CT table, because address are changing every time we start BlueStacks.

Do you know the answer of any question I've made?
Back to top
View user's profile Send private message
Zaladine
Expert Cheater
Ban
Reputation: 3

Joined: 14 Oct 2012
Posts: 129
Location: Djokdja, Indonesia

PostPosted: Sun Sep 22, 2013 2:08 pm    Post subject: Reply with quote

gabarito wrote:
Is there a way to hack those files to open all levels of the game?
Or to reset the lives remaining?
If I change BlueStacks Date/Time to reset lives, it may occur that a number of minutes to wait until get more lives increase too much. How to deal with that?

As a big fan of memory hacking, i prefer to find those values within the memory than in physical storage.
If they are exist, then they should be in the memory. The problem is to find the right addresses...

That being said, both remaining lives and levels in this game are very much hackable via memory hacking...
They, however, are quite tricky to hacked especially the level thingy...

Wink


gabarito wrote:
We are using CandyCrush through emulation. We have to scan the whole Physical memory. I'm not sure, but I guess there is no CT table, because address are changing every time we start BlueStacks.

Quite true for this time being...

_________________
... to boldly go where no eagle has gone before ...
Back to top
View user's profile Send private message
gabarito
Newbie cheater
Reputation: 0

Joined: 03 Sep 2013
Posts: 24

PostPosted: Sun Sep 29, 2013 7:26 am    Post subject: Reply with quote

Zaladine wrote:

That being said, both remaining lives and levels in this game are very much hackable via memory hacking...
They, however, are quite tricky to hacked especially the level thingy...

Wink


I was going on level 134 when I decided to restore a system image. I thought just saving that two files I said above, i. e., %AllUsersProfile%\%AppData%\BlueStacks\Android\Data.sparsefs\Store
and
%AllUsersProfile%\%AppData%\BlueStacks\Android\SDCard.sparsefs\Store
would be enough to retake at the same level.

I was wrong...
Crying or Very sad Crying or Very sad Crying or Very sad

Something happened that I cannot retake that 134 level anymore... When I copy those files to their folders and restart BlueStacks, the files change and go back to level 1! Very sad...

Before I make restore, I could copy the files and everything was fine, i. e., I could keep the current level active. So, I thought that the trick was just save the files in another folder and copy back later. But it seems that is not the only things to do. Maybe more files, or the whole Android folder.

So, I ask for help to restore my old 134 level, or better, open all levels, through memory hacking or file hacking.

Anyone?
Zaladine?
Back to top
View user's profile Send private message
Zaladine
Expert Cheater
Ban
Reputation: 3

Joined: 14 Oct 2012
Posts: 129
Location: Djokdja, Indonesia

PostPosted: Sun Sep 29, 2013 5:27 pm    Post subject: Reply with quote

BlueStacks, as far as i know, is root-ed already so you can use a tool named Titanium Backup for backup purposes. Its usage is quite 'techy' but is actually easy, allowing you to save both apps and data as compressed files which then can be ported between devices and restored completely, also using the same tool... You may want to check it later, and there's bunch of its tutorial on google or youtube and prevent such thing happen again...



Now, on to Candy Crush Saga level hack...
Before we start, please note that i take no responsibilities for any damage caused by the method i'll explain, thus i urge anyone to use it as SINGLE PLAYER hack. Please, don't brag the outcome to friends over facebook or anything...

Unlocking the levels in Candy Crush Saga is indeed can be accomplished by merely memory hacking. However, it still sounds dumb enough that the hack will not be very clean tho it's perfectly working... So here's how i did it:

First, i start a new fresh Candy Crush Saga (i voluntarily wipe my game progress to write this step-by-step tut). I played it in normal way for 5 levels, and have my progress recorded as follows:

Code:

Level | Score      | Stars
------+------------+------
  01  | 7120       |   3
  02  | 39160      |   3
  03  | 8900       |   3
  04  | 18480      |   3
  05  | 8840       |   2
  06  | playing... |   -


By some research beforehand, i found that the record stored in memory in this sequence:
Level 1 Score (4 bytes), Level 1 Rank Completion (4 bytes), Level 2 Score (4 bytes), Level 2 Rank Completion (4 bytes), Level 3 Score (4 bytes), Level 3 Rank Completion (4 bytes), and so on...
Those values are stored next to one and another...

So in CheatEngine, i used GroupScan command and looks for my record accordingly, that is put the string:
Code:
4:7120 4:3 4:39160 4:3 4:8900 4:3 4:18480 4:3 4:8840 4:2

within the search field, and found some result...



There were 6 found addresses, and there should be only one is the real one so i have to test each one of them... At this point, inspecting the memory dump is handy...



Funny thing is, it turn out that the real address that hold the Lives is just few bytes before, so i took this advantage by using the live address as a test point: If the lives in the game changed by my modification, that the address for levels record will be the one after it...



The live count was 76, and if you pay attention to the screen-shots, just 8 bytes right after it held the value of how many levels have played (in this case, it was 5)...

The next thing i did was modifying addresses after my legit levels completion record. I made it as if i completed playing to level 10. I wanted them to hold as lowest record as possible (scores=0 and completion rank = 1 star), so it would be easier for me to break it the next time i play...



I then checked the result on levels map...


I checked how was my record doing at level 6...


It was working so the next thing to do was to continue modifying those record addresses. I made it simple by set all scores to 0 and completion rank to 1... I manually modified them all the way down for hundreds of times.

At this point, however, we have to stop modifying if the target addresses' value is not equal to 0. The reason is those addresses could belong to other processes and since hacking BlueStacks is currently available only via Physical Memory process, we could damage them and landed on windows blue screen of death (it happened to me couple times)... So be very careful then...



The modification done for about 250 level records, and in order to make it in effect, i exited to main menu and got back to level maps. And following was what i got:


I suspected that the reason i landed on seemingly undefined level is because there are 'gates' on each levels sections (the one at which we have to unlock them by premium keys or 3 stages challenge which limited to only 1 challenge stage per 24 hours).

Fortunately, to make the game 'approve' the levels leap is simply by exiting the game and re-run it. Only then, the undefined level will be revealed and the previous levels are available to play...

I did these tedious steps (spamming the 0 score and 1 completion rank as much as possible, and exit and re-run the game to make it in effect) for few times. Till i landed on the last available level:

Of course from level 6 all the way to level 425 held 0 as their score record and 1 stars as completion rank. Rendered them available to play, yet easy to defeat...

and the spoiler for level 425 as current last level is something like this:


That's how i unlocked the levels in Candy Crush Saga... Yet, despite of how long this tut might be, i still recommend anyone to avoid this hack since it's seriously ruin the fun. What's worse: you'll miss the chance of getting those item boosters this way...

Again, use it at your own risk. Stay in single player hacking...

CMIIW as always... Smile

_________________
... to boldly go where no eagle has gone before ...
Back to top
View user's profile Send private message
gabarito
Newbie cheater
Reputation: 0

Joined: 03 Sep 2013
Posts: 24

PostPosted: Sun Sep 29, 2013 7:48 pm    Post subject: Reply with quote

Wonderful!
Amazing!
Sensational!

Zaladine, it's a really excellent job!

It was very sad to lost all 134 levels, but now I can try to go there again. I like the game and it's a good hobby between work time and coffee breaks. So, I'll try your very detailed tutorial later, paying attention for your advices.

Once again, congrats for your skills and smartness. Also for your patience to do so many tasks manually and for facing BSODs (Blue Screen Of Death).

Many thanks.
Candy Crush's fans appreciate your job.

Very Happy Smile Very Happy Smile Very Happy Smile Very Happy Smile Very Happy Smile


.
Back to top
View user's profile Send private message
gabarito
Newbie cheater
Reputation: 0

Joined: 03 Sep 2013
Posts: 24

PostPosted: Tue Oct 01, 2013 12:48 pm    Post subject: Reply with quote

Zaladine, I'm trying to duplicate your steps here.
I could find 4 addresses with my last game's results. They were:

Code:
Level    Score   Star
100      80320   1
101      123540   2
102      121920   2
103      201760   3
104      147320   1

4:80320 4:1 4:123540 4:2 4:121920 4:2 4:201760 4:3 4:147320 4:1



I found 4 addresses:

[I tryed to put ImageShack images, but the forum said I'm not allowed to post URL's...]
[See image attached below]

Below 5C2AD2DC are my scores and stars from level 1 and ahead.
I suspect that 5C2AD28C is the address of Lives. But I change it, but the Lives keeps the same, 4, that is the current Life at the game.
I watched all others grouped addresses. They seems to be the same set of values, but changing what I think is the Life, doesn't change the Lives at the game.
Also, below it we see 96, supposed to be the current level, but I'd finished 104 and am going to 105, not 96.

Maybe I'm at the wrong place.

I tryed to isolate the grouped addresses twice and got the same result.

What do you recommend?



MemoryDump.png
 Description:
 Filesize:  51.27 KB
 Viewed:  38351 Time(s)

MemoryDump.png


Back to top
View user's profile Send private message
Zaladine
Expert Cheater
Ban
Reputation: 3

Joined: 14 Oct 2012
Posts: 129
Location: Djokdja, Indonesia

PostPosted: Tue Oct 01, 2013 3:51 pm    Post subject: Reply with quote

Most likely you were modifying the wrong addresses...

My previous step-by-step levels and lives hack is actually work in sync, meaning we can work the other way around like following illustration...

I have 4 lives with 49 being my current level, and we wanna hack the remaining lives. Here's simple how:

    1. Run Candy Crush Saga on BlueStacks... Run CE and attach to Physical Memory...
    2. Perform Grouped Scan with this string: "4:4 4:0 4:48" (4 is the current lives, 0 is some kind of pad value, 48 is the current level -1)... We'll get several found addresses...
    3. Enter the level (49). Just enter the level, we don't need to play at all...
    4. While the game still in play, get back to CE and perform filtering scan with this string: "4:3 4:0 4:48" (only modify the lives by -1).
    5. Now our previous found addresses will definitely cut down to, most likely, less than 5 addresses.
    6. At this point, just add them all to the table. Delete the addresses which hold padding value and current level value (the ones which values are 0 and 48, so the table will consist only addresses with 3 as their value).
    7. Quit the level (not the game), by touching back button.
    8. The addresses values will most likely turn back to 4. It won't matter if they don't, just continue to the next step...
    9. Now perform manual trial to those addresses one at a time. Pay attention to your lives in BlueStacks on each modified lives value.
    10. There should be only one valid address in the table, so delete the others.
    11. Almost always, several bytes after this valid address are the valid level completion records addresses...

That's all... If things go wrong, just restart the gameand perform above steps. It won't be difficult at all...

The important thing is about how the game handle players' remaining lives:
When in levels map, the lives value in memory is the same as it shown at the upper left corner of the GUI. But when players enter a level, this remaining lives value get decremented at the same time. This is most likely to prevent players from cheating by intentionally quit the level when they think they won't able to complete it. By reducing the live, at early levels, such cheating action won't escape them from 1 live penalty...

Good luck, and please stick to single player hacking... Smile

_________________
... to boldly go where no eagle has gone before ...
Back to top
View user's profile Send private message
gabarito
Newbie cheater
Reputation: 0

Joined: 03 Sep 2013
Posts: 24

PostPosted: Tue Oct 01, 2013 8:22 pm    Post subject: Reply with quote

Thank you for your advices and patience.
I'm trying and going ahead.

The way I can get more lives is following your first steps, searching for scores and stars. I found out that the few addresses returned have almost the same values, but just only one, the right one, reflects to the others. And none of them reflects immediately the Lives at Map screen. I have to quit BlueStacks and restart it again to see that the Lives had changed. I don't know if you can see the Lives number changes at real time. I can't. Maybe because I use WinXP?

Because I don't know the correct address to change, I make changes for all of them, normally only 3 or 4 addresses. So, I change the Lives number for all of them, quit and restart BlueStacks. For this reason, the other addresses mirrored are gone and just the right one remains, as you can see at image 1 attached, pointed by an arrow.

So, this step is over. I know how to handle Lives.

Now, the remaining levels. The same thing: I search scores and stars had done. 3 or 4 addresses are returned. I change all of them below the last level, to score 500 and stars to 3. I want to reach Level 134, where my mistake deleted all levels. I did it. But the Map shows just the station levels, not the detailed map, as you can see at image 2. You said to quit and restart the game to get the datailed map, because of the gates and challenges along the way. I did that, but I got just the incomplete map.

How to get the detailed map? This way, incomplete map, it's not possible to enter the level.



Addresses1.png
 Description:
Image 1
 Filesize:  53.19 KB
 Viewed:  38217 Time(s)

Addresses1.png



Map.png
 Description:
Image 2
 Filesize:  458.15 KB
 Viewed:  38217 Time(s)

Map.png


Back to top
View user's profile Send private message
Zaladine
Expert Cheater
Ban
Reputation: 3

Joined: 14 Oct 2012
Posts: 129
Location: Djokdja, Indonesia

PostPosted: Wed Oct 02, 2013 2:29 am    Post subject: Reply with quote

gabarito wrote:
Now, the remaining levels. The same thing: I search scores and stars had done. 3 or 4 addresses are returned. I change all of them below the last level, to score 500 and stars to 3. I want to reach Level 134, where my mistake deleted all levels. I did it. But the Map shows just the station levels, not the detailed map, as you can see at image 2. You said to quit and restart the game to get the datailed map, because of the gates and challenges along the way. I did that, but I got just the incomplete map.

How to get the detailed map? This way, incomplete map, it's not possible to enter the level.

Now, this is the point where i could not give better answers, cause it's been always working for me by simply quit and re-run the game, after the state you've mentioned earlier...

This level hacking is indeed tricky, that there is no certain way to do it (at least as far as i know). We sometimes need to quit and re-run the game several times, have to redo the whole process because it's not reach the desired level in one hacking trial, and so too there are sometimes depends on our luck (it happened to me, that i kinda stuck at certain level around 150s and have to quit and re-run the game before the next level record values are available to modified, aka zero values)...

I'll try to simulate your condition later, and retry the hacking method... At the mean time, sorry to say that you may have to try the hacking method repeatedly until the desired result comes up...

Smile

_________________
... to boldly go where no eagle has gone before ...
Back to top
View user's profile Send private message
gabarito
Newbie cheater
Reputation: 0

Joined: 03 Sep 2013
Posts: 24

PostPosted: Thu Oct 03, 2013 6:55 am    Post subject: Reply with quote

I tried to unlock the map running the last gate available, that have 3 challenges. It was useless. When I fulfill the last challenge, the map remains locked and I'm prompt to fulfill 3 more challenges, as if I had done nothing.

I'm trying to find out which files it changes when running the game. There is a file called Map, but I'd watched no changes in it. This another approach, watching files changing. Have you ever think to try out?

Now I'm more confortable to navigate through the Memory Viewer and I can get addresses changing on the fly, to locating what variable I need to change. Good tool!

When you have any solution about to unlock the main map, please tell us.

The Saga goes on.
Very Happy



Edit:


More infos.

At picture1 we can see my track. I'd run the game without hacking until level 104. Scores and Stars are real ones. Level 105 and forward I filled the addresses with Score 100 (or 200) and Stars 3. Score at 104 is 147320. After play for a while the last Gate (just after Level 110) I noticed new Scores, at 119 and 126. Previously I had filled that with 200 and 300, not that numbers. The last filled address is Level 130.



LockedMap1.png
 Description:
Picture 1
 Filesize:  588.89 KB
 Viewed:  37910 Time(s)

LockedMap1.png


Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    Cheat Engine Forum Index -> General Discussions All times are GMT - 6 Hours
Goto page Previous  1, 2, 3, 4, 5  Next
Page 2 of 5

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group

CE Wiki   IRC (#CEF)   Twitter
Third party websites