tinyapps.org / blog

Hacking Tower Swap with Cheat Engine or Bit Slicer #

Environment

Bit Slicer

  1. Open Tower Swap in Firefox and press Play (optionally go offline once game has loaded)

  2. Press Shift+Esc to open Firefox's Process Manager and find the Tower Swap tab process ID (e.g., 696)

  3. Launch Bit Slicer → from the drop-down menu at top left, select the process ID found in step 2 (e.g., "FirefoxCP Isolated Web Content (696)")

  4. Enter the current number of swaps in Tower Swap (e.g., 5) in the box at top right and press Return

  5. Make a move in Tower Swap to change the number of swaps to 4 → enter 4 in the box at top right and press Return

  6. Repeat step 5 until only two addresses remain

  7. Double click value for first address → change value to desired number of swaps → press Return (if the number of swaps does not change, repeat using the second address)

Cheat Engine4

  1. Install Rosetta 2 if missing (optionally back up for offline use)

  2. Open Tower Swap in Firefox and press Play (optionally go offline once game has loaded)

  3. Press Shift+Esc to open Firefox's Process Manager and find the Tower Swap tab process ID (e.g., 696)

  4. In Terminal, convert the process ID from decimal to hex via printf '%x\n' 696 → 2b8

  5. Launch Cheat Engine → File → Open Process → click Processes tab → click process matching hex value (e.g., "000002B8-FirefoxCP Isolated Web Content") → click Open

  6. Enter the current number of swaps in Tower Swap (e.g., 5) in "Value:" → click "First Scan"

  7. Make a move in Tower Swap to change the number of swaps to 4 → enter 4 for "Value:" → click Next Scan

  8. Repeat step 8 until only two addresses remain

  9. Double click first address → double click the decimal value in the bottom pane → change value to desired number of swaps → click OK

Footnotes

  1. Failure to disable SIP returns "Search Failure: FirefoxCP Isolated Web Content's memory cannot be searched due to system protections." in Bit Slicer and "Error while opening this process. Have you disabled 'System Integrity Protection (SIP) yet?" in Cheat Engine. ↩

  2. "Target Choice: Web browsers like Safari and Google Chrome may opt into security protections preventing them from being accessed by Bit Slicer." → "This filtering can be disabled however by executing the following command in Terminal and re-launching Bit Slicer: defaults write com.zgcoder.BitSlicer ZGRemoveRootlessProcessesKey -bool NO" ↩

  3. Unlike Cheat Engine, Bit Slicer is: signed and notorized, a Universal 2 binary (i.e., Apple silicon-native), and not time-limited trialware. Both projects maintain GitHub repositories: CE | BS. ↩

  4. H/T: Piepop101 ↩

/mac | Aug 07, 2023

Subscribe or visit the archives.