Forwarded from GL-DEV2
PB 4.1
0x10A4A4A70 VNG GUObject
0x104A847E0 VNG GName
0x10A7A7370 KR GUObject
0x104cdd26c KR GName
0x10A5DF0F0 GL GUObject
0x104b4449c GL GName
GL-DEV
by @abrhmanm
Forwarded from GL-DEV2
SDK ( internal & external)
https://github.com/saudgl/-Pubg-4.1-IOS-SDK-GL/
https://github.com/saudgl/-Pubg-4.1-IOS-SDK-GL/
GitHub
GitHub - saudgl/-Pubg-4.1-IOS-SDK-GL
Contribute to saudgl/-Pubg-4.1-IOS-SDK-GL development by creating an account on GitHub.
Forwarded from GL-DEV2
PB 4.1.0
// GL
GWorld Fun: 0x102A4A8F8
GWorld Data: 0x10AA91690
// KR
GWorld Fun: 0x102BE48DC
GWorld Data: 0x10AC75D90
// TW:
GWorld Fun: 0x1029878D8
GWorld Data: 0x10A947410
// VN
GWorld Fun: 0x102BBB8D7
GWorld Data: 0x10AC4CC90
// KR:
GName Fun: 0x104C630A0
GName Data: 0x10A5CE5E8
// TW:
GName Fun: 0x104C3A12C
GName Data: 0x10A5A84E8
// VN:
GName Fun: 0x104A0682C
GName Data: 0x10A7C2F58
@Pubg_dev
By @englishdick
❤1
Forwarded from GL-DEV2
Note: for PB 4 , if you direct hook process event for rendering
Will crash caz they detected hook.
For pass temporary for test , run it on lobby . But will get ban later
and same if you hook memcpy . even hook it now useless . Caz they use their own memcpy fun
Will crash caz they detected hook.
For pass temporary for test , run it on lobby . But will get ban later
and same if you hook memcpy . even hook it now useless . Caz they use their own memcpy fun
Forwarded from GL-DEV2
PB 4.1 GL
GName Fun 0x104b4449c
GName Data 0x10a3adf90
GWorld Fun 0x102a28b7c
GWorld data 0x10a7f6540
GUObject 0x10a5df0f0
LineOfsignt 0x1060481cc
ActorArray Decry 0x1061ac278
Proces event 0x104ce6c38
GL-DEV
by @saudgl
Forwarded from GL-DEV2
PB 4.1
HUD Fun 0x103455d98
Engine Data 0x10a7f5340
CanvasMap Data 0x10a42f218
by @saudgl GL-Dev
Forwarded from GL-DEV2
PB 4.1
Yaw: 0x888
Roll: 0x890
Pitch: 0x880
by @saudgl GL-Dev
Forwarded from GL-DEV2
PB 4.1
GL
gobject 0x10A5DF0F0
gname_func 0x104B4449C
gname_data 0x10A3ADF90
gworld_func 0x102A28B7C
gworld_data 0x10A7F6540
VNG
gobject 0x10A4A4A70
gname_func 0x104A847E0
gname_data 0x10A273940
gworld_func 0x10296A060
gworld_data 0x10A6BBEC0
TW
gobject 0x10A7863F0
gname_func 0x104CB6438
gname_data 0x10A554FD0
gworld_func 0x102B9BEE0
gworld_data 0x10A99D840
KR
gobject 0x10A7A7370
gname_func 0x104CDD26C
gname_data 0x10A575F30
gworld_func 0x102BC2D14
gworld_data 0x10A9BE7C0
@pubg_dev
by @Dlbren92
Forwarded from GL-DEV2
decryptStringsPB41.txt
525.9 KB
PB4.1 file name name (anogs) : here i decrypt string from game to read , and shows who call for it and the second caller for it .
Forwarded from GL-DEV2
BG!MI 4.1
GNmae Fun: 0x1044bd208
GNmae Data: 0x1099016e0
GWorld Fun: 0x1023a9ff8
GWorld Data: 0x109d42940
GUObject: 0x109b2b4f0
LineOfsignt : 0x1059C1124
ActorArray Decry: 0x105B25158
By @saudgl , @pubg_dev
Forwarded from GL-DEV2
GL 4.1
kUWorld = "0x102a28b7c";
kGNames = "0x104b4449c";
hookHUD = "0x1088c0248";
kGetHUD = "103455d98";
kDrawText = "0x106528a50";
kDrawLine = "0x1061449c8";
kDrawRectFilled = "0x106144938";
kDrawCircleFilled = "0x106528ebc";
kEngine = "0x10a7f5340";
kBonePos = "0x10319c128";
kProjectWorldLocationToScreen = "0x1060ee128";
by @saudgl GL-DEV
Forwarded from GL-DEV2
//GL
if([bundleIdentifier isEqualToString:@"com.tencent.ig"]){
kUWorld = "0x10689C790";
kGNames = "0x104B4449C";
hookHUD = "0x1088C0248";
kGetHUD ="0x103455D98";
kDrawText ="0x106528A50";
kDrawLine ="0x1061449C8";
kDrawRectFilled ="0x106144938";
kDrawCircleFilled ="0x106528EBC";
kEngine = "0x10A7F5340";
kBonePos = "0x10319C128";
kProjectWorldLocationToScreen = "0x1060EE128";
}
// Korean
if([bundleIdentifier isEqualToString:@"com.pubg.krmobile"]){
kDrawText = "0x1066C1820";
kDrawLine = "";0x106083A30
kDrawCircleFilled = "0x1066C1C8C";
kUWorld = "0x106A35560";
kBonePos = "0x1033362C0";
kProjectWorldLocationToScreen = "0x01062DD708";
}
// VNG
if([bundleIdentifier isEqualToString:@"vn.vng.pubgmobile"]){
kDrawText = "0x106468D94";
kDrawLine = "0x106083A30";
kDrawCircleFilled = "0x106469200";
kUWorld = "0x1067DCAD4";
kBonePos = "0x1030DD60C";
kProjectWorldLocationToScreen = "0x106084C7C";
}
by胡图图 @ioshututunb
❤2
Forwarded from GL-DEV2
strcmpAno41GLOutputs.mm
178.8 KB
here the hook Logs of all calls in Anogs 4.1 GL .
❤1
Forwarded from GL-DEV2
GL-DEV2
strcmpAno41GLOutputs.mm
for who needs to solve the resign app detected , look at __text , __TEXT and who look to edit data section look at __DATA .
to avoid re-sign app detection you must hook :
1- __LINKEDIT , return real orignal size
2- team ID , return real iteam is which is for now 4.1 =5A4RE8SF68
3- Bundle ID , com.ten...
4- Entitlements , This gives a dictionary containing things like: aps-environment, keychain-access-groups .. etc
5- Certificate Common Name , shows all Certificate Chain Information
note they may use App’s Code Signature Validity . like
1- __LINKEDIT , return real orignal size
2- team ID , return real iteam is which is for now 4.1 =5A4RE8SF68
3- Bundle ID , com.ten...
4- Entitlements , This gives a dictionary containing things like: aps-environment, keychain-access-groups .. etc
5- Certificate Common Name , shows all Certificate Chain Information
note they may use App’s Code Signature Validity . like
SecStaticCodeRef staticCode = NULL;
SecCodeCopySelf(kSecCSDefaultFlags, (SecCodeRef*)&staticCode);
OSStatus status = SecStaticCodeCheckValidity(staticCode, kSecCSCheckAllArchitectures, NULL);
❤3
PB GL 4.2
GNameFun 0x104c0f1e8
GNameData 0x10a0557e0
GWorldFun 0x102a5125c
GWorldData 0x10a4a1960
GUObject 0x10a288b80
LineOfsignt 0x105e55198
ActorArray Decry fun 0x105fba638
Process event fun 0x104db1904
HUD fun 1034aaf1c
Engine Data 0x10a4a0768
CanvasMap Data 0x10a0d7d38
By @saudgl , @pubg_dev
❤1