-
Posts
290 -
Joined
-
Last visited
Everything posted by Elreys
-
Hi DiDA I tried your AutoLipo Template for Code Injection 2.7, To convert it to a MHPatch, the compiling to a den file was successful but the Game is not affected, It's possible to use this Tenplate for 1 Q: MSPatch or generally it's not a good Idea?2Q: I'ts correct to ran the Template on a existing Project? 3Q: If I use the template in the postinst all value are wrong it's this also correct? If I tried the Tweak without the Preference works fine. Thanks
-
Hi Guys, i toke more Time to understand MSHook now its solved, i found all Function and Class for this Game, Thanks for yours wonderfull Tuts
-
Go
-
Thks
-
Hi Danny sorry but this Change Crash the Game, thanks anyway
-
App AngryBirds Fight! 3.2.xx Offset: 31768 I try to hack my Energie, CMP R0, #0 __text:00035748 IT NE __text:0003574A STRNE.W R0, [R4,#0x380] __text:0003574E STR.W R1, [R4,#0x384] ->Move R1 Value to R4 and add 0x384 - = R4 its my Actual Energie Value My Hack: STR.W R7,[R4,#0x388] i See on display the Change but in the game is not affected!! __text:00035752 LDR.W R0, [R4,#0x388] __text:00035756 CMP R0, #0 __text:00035758 IT NE __text:0003575A STRNE.W R0, [R4,#0x37C] __text:0003575E STR.W R2, [R4,#0x388] __text:00035762 LDR R0, [R4] __text:00035764 LDR.W R1, [R0,#0x1A8] __text:00035768 MOV R0, R4 What i can try to hack my Energie Thanks Guys.
-
Thanks Wonderfull Tutorial shmoo i work a the moment only for interesting on the Angry Birds Fight, its really hard to hack without this instruction.
-
Help/Support Best iOS Setup to work with LLDB and IDA
Elreys replied to Elreys's topic in Help & Support
Hi DiDa thanks, you mean ldid -s i tried also your online tool thin and remove aslr, but every time i try to start the app , the crash? I forget to tell you my Ipad ist Air 1. I see the explanation shows 2 Method with ldid -s are they big difference? -
Hi Guys So I like to understand exactly what us happen with the new App debug technic , first my Technical info: iOS 8.3/4 Debugserver iosgods Lldb iosgods Appsync unified LinkEditor aslr tool jack I can tell you with my old System I create successfully I tweak for the Spider-Man Game , Ida address works fine, with lldb and removing ASLR also without problem. So now my questions? Why it's impossible to remove ASLR with the new GameApp ? IDA address are completely different, I know if I thin the app sometimes works fine. But generally please help me to understand what changed really, I'm a little bit confuse with Armv7 and arm64 ? Are all App 64 if they are downloaded and installed to IPad e.x? I hope you can follow me question Thanks ELREYS
-
Big Issues Guys, after i downgrade the Substrate i have probelm to attach my Game, with LLDB segment fault 11, how i can do a rollback?
-
hi
-
Hi Guys, 1. I see a lot of Games they are impossible to disable the ASLR without a crash, so i read one post about a rebase method in IDA, how i can do that in IDA, did you have a tutorial or more information about this, 2. I read also that exists on method to find the right offset if i subtract GG address, but how i can do that, did you have again a tutorial or more information. Thanks Guys Have a good Hack days;)
-
Help/Support Disassembled code in IDA does not match that in GDB/LLDB
Elreys replied to infernusdoleo's topic in Help & Support
Hey infernusdoleo , how you did a rebase in IDA Pro? I have the same problem on my Reversed App, wrong offset and wrong llldb address please if you have time write me back, Thanks ELREYS -
ok
-
thks