-
Posts
4,939 -
Joined
-
Last visited
Everything posted by Ted2
-
Help/Support Iosgods iap cracker w/darkest dungeon dlc
Ted2 replied to mince's topic in Help & Support
Try reinstall the game -
No, iFunbox randomly opened port 25 at that time, thats why
-
Make a proper topic
-
Yes, the value you substract from your watchpoints, but this time you add it.
-
w s e command is for a watchpoint. Breakpoint is: ' b 0xIDAOffset + Current ASLR slide'
-
Godmode has more ways. Hack your current health, hack the damage you take, hack the enemy damage amount. You can find them by strings & xrefing on them. If you're able to find it with gameplayer, use the address & set a watchpoint. See where it brings you & try hack it.
-
I think you actually have to xref in order to get to the right function. But to make sure: set a breakpoint on the function & see if it hits, read registers of it & backtrace.
-
Try in this function MOV W0, W29 //Huge Value RET //Skip the rest But maybe you have to xref the sub_x functions. You can also set a breakpoint on this function to figure out which register holds the damage value. Also, for godmode it's not always just RET. Mostly health is stored as a float, which means you mostly hack floats. But on unity games everything is diffrent
- 1 reply
-
- 1
-
-
Offset - Hacked Hex @"k01":@{ @"offsets": @[@"0x1010C5F0C", @"0x1010C5FCC"], //Offsets @"patched": @[@"0x00F0271E", @"0x09F0271E"], //Patched Offsets @"desc": @"You can't die", // Short feature description appears when you long press @"label": @"Godmode" },
-
-
Installed using iTunes? make sure u 'su' 'password' too
-
LSR Logical Shift Right. This instruction is a preferred synonym for MOV instructions with shifted register operands. STP Store Pair of Registers. AND, ORR, EOR, BIC, and ORN Logical AND, OR, Exclusive OR, Bit Clear, and OR NOT. The AND, EOR, and ORR instructions perform bitwise AND, Exclusive OR, and OR operations on the values in Rn and Operand2. Don't ask me what it means, I never had to use one of those instructions to hack something. Source: http://infocenter.arm.com/help/index.jsp?topic=/com.arm.doc.dui0489f/Cihdafai.html You may change STR W9, [X0,#0x78] to STR W23, [X0,#0x78]
-
No lol
-
Just try again
-
Tutorial How to hack games using ida pro / ida pro tutorial
Ted2 replied to monkeyhunter's topic in Tutorials
gg -
Hi, I saw that people commented in the request of the game about the fact they weren't able to play the game due the Beta Limited. I was pretty sure it was just a simple license check, so I thought let's show you guys how to disable it Requirements: - Apktool (or any tool where you can decompile the apk with) - A text editor which can read smali files (sublime, notepad++ etc) Alright so it's pretty simple & is always the same file (from my experience) Go to: /smali/com/google/android/vending/licensing/LicenseValidator.smali or /smali_classes2/com/google/android/vending/licensing/LicenseValidator.smali --> Some apps have 2 classes.dex files nowadays Open that file in your text editor. Search for 'handleRespone' as a method: Now inside this method, 'mPolicy' & under that you see 'allowAcces()Z' --> ()Z means BOOLEAN in smali Now you can bypass the license check in two ways: 1. Return allowAccess to true (0x1) 2. comment out the jump (if-eqz v0, :cond_0) I prefer option two, since I don't have to type 2 lines of code How it should look like after patch: Original Code: Patched Code: Hope you learned something Credits: - @Ted2
-
Other Managed to make IGGM work on Electra 1.0.0 - 1.0.2
Ted2 replied to AidanFaris's topic in General Talk
Make a tutorial for the people who can't, if you don't mind! -
Can't wait to read it