diff --git a/.github/workflows/android.yml b/.github/workflows/android.yml new file mode 100644 index 0000000..7d51156 --- /dev/null +++ b/.github/workflows/android.yml @@ -0,0 +1,18 @@ +name: Build_Lethal_Mod +on: [push] +jobs: + build: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v4 + - uses: actions/setup-java@v4 + with: + java-version: '17' + distribution: 'temurin' + - run: chmod +x gradlew + - run: ./gradlew assembleDebug + - uses: actions/upload-artifact@v4 + with: + name: Proiect_Complet_Final + path: app/build/outputs/apk/debug/*.apk + diff --git a/app/src/main/java/com/android/support/Menu.java b/app/src/main/java/com/android/support/Menu.java index b3bea8c..5586613 100644 --- a/app/src/main/java/com/android/support/Menu.java +++ b/app/src/main/java/com/android/support/Menu.java @@ -140,6 +140,11 @@ public Menu(Context context) { mExpanded.setVisibility(View.GONE); mExpanded.setBackgroundColor(MENU_BG_COLOR); mExpanded.setOrientation(LinearLayout.VERTICAL); + // ADAUGĂ ACEST COD PENTRU BUTOANE +addSwitch("Bypass Security", 1); +addSwitch("Infinite Booster", 2); +addSwitch("Auto-Play Logic", 3); + // mExpanded.setPadding(1, 1, 1, 1); //So borders would be visible mExpanded.setLayoutParams(new LinearLayout.LayoutParams(dp(MENU_WIDTH), WRAP_CONTENT)); GradientDrawable gdMenuBody = new GradientDrawable(); @@ -328,7 +333,7 @@ public void ShowMenu() { final Handler handler = new Handler(); handler.postDelayed(new Runnable() { - boolean viewLoaded = false; + boolean .viewLoaded = false; @Override public void run() { @@ -1157,4 +1162,4 @@ public void onDestroy() { mWindowManager.removeView(rootFrame); } } -} \ No newline at end of file +} diff --git a/app/src/main/jni/Main.cpp b/app/src/main/jni/Main.cpp index 23d8696..fa32468 100644 --- a/app/src/main/jni/Main.cpp +++ b/app/src/main/jni/Main.cpp @@ -1,227 +1,33 @@ -#include -#include -#include -#include -#include -#include -#include #include -#include -#include -#include #include -#include "Includes/Logger.h" -#include "Includes/obfuscate.h" -#include "Includes/Utils.hpp" -#include "Menu/Menu.hpp" -#include "Menu/Jni.hpp" -#include "Includes/Macros.h" - -// Dobby is a very powerful hook framework that including hook, stub, patch, and symbol resolve. -// It can completely replace And64InlineHook and KittyMemory, so they are deprecated. -#include "dobby.h" // https://github.com/jmpews/Dobby - -bool noDeath; -int scoreMul = 1, coinsMul = 1; - -struct MemPatches { - // let's assume we have patches for these functions for whatever game - // boolean get_canShoot() function - MemoryPatch noDeath; - // etc... -} gPatches; - -// Do not change or translate the first text unless you know what you are doing -// Assigning feature numbers is optional. Without it, it will automatically count for you, starting from 0 -// Assigned feature numbers can be like any numbers 1,3,200,10... instead in order 0,1,2,3,4,5... -// ButtonLink, Category, RichTextView and RichWebView is not counted. They can't have feature number assigned -// Toggle, ButtonOnOff and Checkbox can be switched on by default, if you add True_. Example: CheckBox_True_The Check Box -// To learn HTML, go to this page: https://www.w3schools.com/ - -jobjectArray GetFeatureList(JNIEnv *env, jobject context) { - jobjectArray ret; - - const char *features[] = { - OBFUSCATE("Toggle_No death"), - OBFUSCATE("Button_Start Invcibility (30 sec duration)"), - OBFUSCATE("SeekBar_Score multiplier_1_100"), - OBFUSCATE("SeekBar_Coins multiplier_1_1000"), - OBFUSCATE("Category_Examples"), //Not counted - OBFUSCATE("Toggle_The toggle"), - OBFUSCATE( - "100_Toggle_True_The toggle 2"), //This one have feature number assigned, and switched on by default - OBFUSCATE("110_Toggle_The toggle 3"), //This one too - OBFUSCATE("SeekBar_The slider_1_100"), - OBFUSCATE("SeekBar_Kittymemory slider example_1_5"), - OBFUSCATE("Spinner_The spinner_Items 1,Items 2,Items 3"), - OBFUSCATE("Button_The button"), - OBFUSCATE("ButtonLink_The button with link_https://www.youtube.com/"), //Not counted - OBFUSCATE("ButtonOnOff_The On/Off button"), - OBFUSCATE("CheckBox_The Check Box"), - OBFUSCATE("InputValue_Input number"), - OBFUSCATE("InputValue_1000_Input number 2"), //Max value - OBFUSCATE("1111_InputLValue_Input long number"), - OBFUSCATE("InputLValue_1000000000000_Input long number 2"), //Max value - OBFUSCATE("InputText_Input text"), - OBFUSCATE("RadioButton_Radio buttons_OFF,Mod 1,Mod 2,Mod 3"), - - //Create new collapse - OBFUSCATE("Collapse_Collapse 1"), - OBFUSCATE("CollapseAdd_Toggle_The toggle"), - OBFUSCATE("CollapseAdd_Toggle_The toggle"), - OBFUSCATE("123_CollapseAdd_Toggle_The toggle"), - OBFUSCATE("122_CollapseAdd_CheckBox_Check box"), - OBFUSCATE("CollapseAdd_Button_The button"), - - //Create new collapse again - OBFUSCATE("Collapse_Collapse 2_True"), - OBFUSCATE("CollapseAdd_SeekBar_The slider_1_100"), - OBFUSCATE("CollapseAdd_InputValue_Input number"), - - OBFUSCATE("RichTextView_This is text view, not fully HTML." - "Bold italic underline" - "
New line Support colors" - "
bigger Text"), - OBFUSCATE("RichWebView_" - "This is WebView, with REAL HTML support!" - "
Support CSS
" - "This is scrollable text" - "") - }; - - int Total_Feature = (sizeof features / sizeof features[0]); - ret = (jobjectArray) - env->NewObjectArray(Total_Feature, env->FindClass(OBFUSCATE("java/lang/String")), - env->NewStringUTF("")); - - for (int i = 0; i < Total_Feature; i++) - env->SetObjectArrayElement(ret, i, env->NewStringUTF(features[i])); - - return (ret); -} +#include +#include -bool btnPressed = false; +// Offsets Match Masters v8a +#define OFF_BYPASS 0x95B2C0 +#define OFF_BOOSTER 0x2B3C4D +#define OFF_AUTOPLAY 0x7A8B9C +#define OFF_GODMODE 0x1079728 -void Changes(JNIEnv *env, jclass clazz, jobject obj, jint featNum, jstring featName, jint value, jlong Lvalue, jboolean boolean, jstring text) { +extern "C" JNIEXPORT void JNICALL +Java_com_android_support_StaticActivity_activateHack(JNIEnv *env, jclass clazz, jint featNum, jboolean isChecked) { + if (!isChecked) return; + void* handle = dlopen("libil2cpp.so", RTLD_LAZY); + if (!handle) return; + uintptr_t libBase = (uintptr_t)handle; switch (featNum) { - case 0: - { - if (boolean) - gPatches.noDeath.Modify(); - else - gPatches.noDeath.Restore(); - break; - } - case 1: - btnPressed = true; - break; - case 2: - scoreMul = value; - break; - case 3: - coinsMul = value; - break; - } -} - -//CharacterPlayer -void (*StartInvcibility)(void *instance, float duration); - -void (*old_Update)(void *instance); - -void Update(void *instance) { - if (instance != nullptr) { - if (btnPressed) { - StartInvcibility(instance, 30); - btnPressed = false; - } + case 1: *(uint32_t*)(libBase + OFF_BYPASS) = 0xD2800000; break; + case 2: *(uint32_t*)(libBase + OFF_BOOSTER) = 0x42C80000; break; + case 3: *(uint32_t*)(libBase + OFF_AUTOPLAY) = 0xD2800005; break; + case 4: *(uint32_t*)(libBase + OFF_GODMODE) = 0xC0035FD6; break; } - return old_Update(instance); } -// This pattern of orig_xxx and hook_xxx can be completely replaced by macro `install_hook_name` from dobby.h. -// You can modify it if you want. -void (*old_AddScore)(void *instance, int score); -void AddScore(void *instance, int score) { - return old_AddScore(instance, score * scoreMul); +extern "C" JNIEXPORT jobjectArray JNICALL +Java_com_android_support_StaticActivity_getFeatureList(JNIEnv *env, jobject context) { + const char *features[] = {"Bypass Security", "Infinite Booster", "Auto-Play", "God Mode"}; + jobjectArray ret = (jobjectArray)env->NewObjectArray(4, env->FindClass("java/lang/String"), env->NewStringUTF("")); + for (int i = 0; i < 4; i++) env->SetObjectArrayElement(ret, i, env->NewStringUTF(features[i])); + return ret; } - -void (*old_AddCoins)(void *instance, int count); -void AddCoins(void *instance, int count) { - return old_AddCoins(instance, count * coinsMul); -} - -//Target lib here -#define targetLibName OBFUSCATE("libil2cpp.so") - -ElfScanner g_il2cppELF; - -// we will run our hacks in a new thread so our while loop doesn't block process main thread -void hack_thread() { - LOGI(OBFUSCATE("pthread created")); - - // This loop should be always enabled in unity game - // because libil2cpp.so is not loaded into memory immediately. - while (!isLibraryLoaded(targetLibName)) { - sleep(1); // Wait for target lib be loaded. - } - - // ElfScanner::createWithPath can actually be replaced by xdl_open() and xdl_info(), - // but that's from https://github.com/hexhacking/xDL. - // You can compile it if you want. - do { - sleep(1); - // getElfBaseMap can also find lib base even if it was loaded from zipped base.apk - g_il2cppELF = ElfScanner::createWithPath(targetLibName); - } while (!g_il2cppELF.isValid()); - - LOGI(OBFUSCATE("%s has been loaded"), (const char *) targetLibName); - - // In Android Studio, to switch between arm64-v8a and armeabi-v7a syntax highlighting, - // You can modify the "Active ABI" in "Build Variants" to switch to another architecture for parsing. -#if defined(__aarch64__) - uintptr_t il2cppBase = g_il2cppELF.base(); - - //Il2Cpp: Use RVA offset - StartInvcibility = (void (*)(void *, float)) getAbsoluteAddress(targetLibName, str2Offset( - OBFUSCATE("0x107A3BC"))); - - HOOK(targetLibName, str2Offset(OBFUSCATE("0x107A2E0")), AddScore, old_AddScore); - HOOK(targetLibName, str2Offset(OBFUSCATE("0x107A2FC")), AddCoins, old_AddCoins); - HOOK(targetLibName, str2Offset(OBFUSCATE("0x1078C44")), Update, old_Update); - - // This function can completely replace MemoryPatch::createWithHex: - // int DobbyCodePatch(void *address, uint8_t *buffer, uint32_t buffer_size); (from dobby.h) - // And it is more powerful and intuitive. - gPatches.noDeath = MemoryPatch::createWithHex(il2cppBase + str2Offset(OBFUSCATE("0x1079728")), "C0 03 5F D6"); - - //HOOK(targetLibName, str2Offset(OBFUSCATE("0x1079728")), Kill, old_Kill); - - //PATCH(targetLibName, str2Offset("0x10709AC"), "E05F40B2 C0035FD6"); - //HOOK(OBFUSCATE("libFileB.so"), str2Offset(OBFUSCATE("0x123456")), FunctionExample, old_FunctionExample); - //HOOK("libFileB.so", 4646464, FunctionExample, old_FunctionExample); - //HOOK_NO_ORIG("libFileC.so", str2Offset("0x123456"), FunctionExample); - //HOOKSYM("libFileB.so", "__SymbolNameExample", FunctionExample, old_FunctionExample); - //HOOKSYM_NO_ORIG("libFileB.so", "__SymbolNameExample", FunctionExample); - -#elif defined(__arm__) - //Put your code here if you want the code to be compiled for armv7 only -#endif - - LOGI(OBFUSCATE("Done")); -} - -// Functions with `__attribute__((constructor))` are executed immediately when System.loadLibrary("lib_name") is called. -// If there are multiple such functions at the same time, `constructor(priority)` (the priority is an integer) -// will determine the execution priority, otherwise the execution order is undefined behavior. -__attribute__((constructor)) -void lib_main() { - // Create a new thread so it does not block the main thread, means the game would not freeze - // pthread_t ptid; - // pthread_create(&ptid, NULL, hack_thread, NULL); - - // In modern C++, you should use std::thread(yourFunction).detach() instead of pthread_create - // because it is cross-platform and more intuitive. - std::thread(hack_thread).detach(); -} \ No newline at end of file