tinyapps.org / blog

Hacking Tower Swap with Cheat Engine or Bit Slicer #

Environment

• Apple silicon (M1) Mac

• macOS 13.4.1 Ventura with SIP disabled¹

• Mozilla Firefox 116.0.1

• Bit Slicer 1.7.12 or Cheat Engine 7.4.3 for Mac²

• Tower Swap version 55 in single player mode (i.e., not logged in)

Bit Slicer

1. Open Tower Swap in Firefox and press Play (optionally go offline once game has loaded)

2. Press Shift+Esc to open Firefox's Process Manager and find the Tower Swap tab process ID (e.g., 696)

3. Launch Bit Slicer → from the drop-down menu at top left, select the process ID found in step 2 (e.g., "FirefoxCP Isolated Web Content (696)")

4. Enter the current number of swaps in Tower Swap (e.g., 5) in the box at top right and press Return

5. Make a move in Tower Swap to change the number of swaps to 4 → enter 4 in the box at top right and press Return

6. Repeat step 5 until only two addresses remain

7. Double click value for first address → change value to desired number of swaps → press Return (if the number of swaps does not change, repeat using the second address)

Cheat Engine³

1. Install Rosetta 2 if missing (optionally back up for offline use)

2. Open Tower Swap in Firefox and press Play (optionally go offline once game has loaded)

3. Press Shift+Esc to open Firefox's Process Manager and find the Tower Swap tab process ID (e.g., 696)

4. In Terminal, convert the process ID from decimal to hex via printf '%x\n' 696 → 2b8

5. Launch Cheat Engine → File → Open Process → click Processes tab → click process matching hex vaule (e.g., "000002B8-FirefoxCP Isolated Web Content") → click Open

6. Enter the current number of swaps in Tower Swap (e.g., 5) in "Value:" → click "First Scan"

7. Make a move in Tower Swap to change the number of swaps to 4 → enter 4 for "Value:" → click Next Scan

8. Repeat step 8 until only two addresses remain

9. Double click first address → double click the decimal value in the bottom pane → change value to desired number of swaps → click OK

Footnotes

1. Failure to disable SIP returns "Search Failure: FirefoxCP Isolated Web Content's memory cannot be searched due to system protections." in Bit Slicer and "Error while opening this process. Have you disabled 'System Integrity Protection (SIP) yet?" in Cheat Engine. ↩

2. Unlike Cheat Engine, Bit Slicer is: signed and notorized, a Universal 2 binary (i.e., Apple silicon-native), and not time-limited trialware. Both projects maintain GitHub repositories: CE | BS. ↩

3. H/T: Piepop101 ↩

/mac | Aug 07, 2023

Subscribe or visit the archives.