Jump to content

Ted2

Senior Member
  • Posts

    4,939
  • Joined

  • Last visited

Everything posted by Ted2

  1. Download 'MTerminal' not 'MobileTerminal'
  2. iPhone 6 or 6s ios 9.3.3 is beast.. I got a 6s, working sick
  3. Ah, like that. Don't know About that man
  4. Those offsets you find with iGG are always diffrent. You'll need to use lldb to get the ida offset & make a modmenu or patcher out of it so you can controll it
  5. can't you just reinstall the .ipa (without removing ofcourse)
  6. Hi, so I set a breakpoint on gdb, when I shoot ammo it stopped but it doesn't show me any registers etc.. I did tv with @xiaov last time & then it did.. Has it got any other commands for that, cause when I type 'info break' it tells me it has been hit 2 times already thankyou
  7. Hi, I was trying to see if I could hack a game with ammo in it, since I've never played games like this lol So I used lldb to set watchpoints from iGG adress, got a ida offset & removed aslr from it. Then I loaded it in IDA, got the same instructions as lldb gave me, but for me it doesn't seem usefull at all. 1. It is a loc_..... 2. The sub_x function is long as hell & only used once The loc_ function is this: loc_1526D0 ; CODE XREF: sub_150320+26F8�j __text:001526D0 LDR R0, [R10,#0x88] __text:001526D4 MOV R1, R0 __text:001526D8 VLDR S0, [R1,#0x9C] __text:001526DC VCVT.F64.F32 D2, S0 __text:001526E0 LDR R1, [R10,#0x1CC] __text:001526E4 VMOV S0, R1 __text:001526E8 VCVT.F32.S32 S0, S0 __text:001526EC VCVT.F64.F32 D3, S0 __text:001526F0 LDR R1, [R10,#0x88] __text:001526F4 VLDR S0, [R1,#0xA4] __text:001526F8 VCVT.F64.F32 D4, S0 __text:001526FC VMUL.F64 D3, D3, D4 __text:00152700 VADD.F64 D2, D2, D3 __text:00152704 VCVT.F32.F64 S0, D2 __text:00152708 VSTR S0, [R0,#0xA8] __text:0015270C LDR R0, [R10,#0x88] __text:00152710 VLDR S0, [R0,#0xA8] __text:00152714 VCVT.F64.F32 D3, S0 <------------> lldb drops me here __text:00152718 LDR R0, [R10,#0x88] __text:0015271C VLDR S0, [R0,#0xA0] __text:00152720 VCVT.F64.F32 D2, S0 __text:00152724 VCMP.F64 D2, D3 __text:00152728 VMRS APSR_nzcv, FPSCR __text:0015272C BVS loc_15274C __text:00152730 BGE loc_15274C __text:00152734 LDR R0, [R10,#0x88] __text:00152738 MOV R1, R0 __text:0015273C VLDR S0, [R1,#0xA0] __text:00152740 VCVT.F64.F32 D2, S0 __text:00152744 VCVT.F32.F64 S0, D2 __text:00152748 VSTR S0, [R0,#0xA8] I suppose for hacking ammo I need a LDR, STR or a SUB right? The function just looks strange to me, but maybe it is good one.. Anyone knows if this can be a usefull function at all?
  8. I was running this first: ldid -s 'BinaryName' After that I tried ldid -S 'BinaryName'
  9. Hi, When I wanna sign a binary, i'm getting this error: ./minimal/mapping.h(54): _assert(false); errno=2 Never had this before, I've reinstalled theos a month ago tho.. Anyone know what to do? Thanks
  10. Oh btw u should show function cause now we don't know how fuction looks like & we can't tell what goes wrong xx
  11. Mov r0, r7 changed both gold & cash? but mov r0, r6 didn't?
  12. It's hard to get the settings option for NJB
  13. My code is for argument 2.
  14. What argument do you wanna change?
  15. Do it like this: %hook PromoteViewController -(void)goBuyViews:(int)arg1 numbercoins:(int)arg2 { if(GetPrefBool(@"key1")) { return; //returns void to null// %orig (arg1, -10); //when return a arg, change the arg to what you wanna return// } return %orig; }
  16. let me join ur tv when u try
  17. Stop making a new topic every time. Just answer us (me this time) in your own topic. Does iTunes recognize ur phone?
  18. Using your cable
  19. Take over Joka's club & access Joka's account & take a shower at like this time..
  20. MTerminal would work fine.
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines