Cheat Engine

[panraven]

hi,

[complete title: How to target last copy of mono/assembly in browser unity and use mono-feature?]

In web browser environment, when patching unity game bytecode cheat, it usually need to apply a second time, since there are 2 copy of the bytecode assembly in memory, and only the last one is actual running.

It seems the same happen for the jit compiled code.

Here a pic I'm trying to make a cheat for AkaneIro in FireFox Unity.
(see the magnified part)
The assembler list is in 2nd copy of the function Player:isInAttackRange, I assemble a line "jmp Player:isInAttackRange" at last (addr 90222fb2). It show the symbol/label "Player:isInAttackRange" is refer to 1st copy , by the big relative offset of the jump command.

The same cheat using mono feature is working on a local version of AkaneIro. Is there some way to make mono-feature target the 2nd/last mono assembly?
eg. in aa script:
usemono(last) ?

Thanks~

ps: I knew it can be use normal aobscan with a more restrictive aob string without mono-feature, at worst applied a 2nd time. But I want to explore for the possibility of a more update-resisting way of making cheat on browser unity game~

[Dark Byte]

You could fall back on the lua aobcan function which returns all results

As for mono features in the browser: It apparently doesn't use mono.dll, else the mono menu item would show.
So first off, figure out if there is a mono library and what it's called.
Once found, check the names, and if they deviate from the normal mono library function names (e.g a prefix of some kind) then ce's mono collector dll will need to be recompiled with these new function names, and possibly modified calling convention

[panraven]

hi,
the dll in browser environment is mono-1-vc.dll, it seems it just work exactly like standard mono.dll.

And, I guess I find a possible solution from monoscript.lua.

The function mono_setCurrentDomain(...) allow to set the target domain/assembly.

thanks~

ADDED: here added an aa command useDomain, it has the same effect as useMono to initialize the mono-feature, and also set the target domain.

usage:(in aa script)
useDomain(parameter)

Valid parameter:
1-9 , specify the target domain index
first, the first domain, =1
last, the last available domain
other case including no parameter , same as last, should be the best one unless in special condition.

The aa command tested and worked on web browser version (2 domain, last is the actual running domain) and standalone version (1 domain) of AkaneIro.