Aaron Then

Thanks

Thanks

Thanks

Thanks

Thanks

Thanks

Thanks

It doesnt seems to work for everyone.....its not working for me....ive tried both igg and gameplayer......

Thanks

Be careful guys, I've just got banned from the first feature which it says freeze

Thanks

thanks

Thanks

thanks

thanks

thanks

Hidden Objects: Mystery Crimes by Storm8 Studios https://appsto.re/my/aCGlO.i just trying learn hack with ida......i can use igg to hack the energy in this game.....wanted to practice in IDA

I'm sorry, I'm still a noob....those line looks complicated to me.....just change STR to NOP ?

i have found this 2 line but with has SUB but with SP, i don't think i can manage to hack that.....another line has no SUB....pls advice if theres any hackable things in this 2 line: LINE 1 ; EnergyUsedChangeEvent - (id)csv ; Attributes: bp-based frame ; id __cdecl -[EnergyUsedChangeEvent csv](struct EnergyUsedChangeEvent *self, SEL) __EnergyUsedChangeEvent_csv_ var_18= -0x18 var_14= -0x14 var_10= -0x10 PUSH {R4-R7,LR} ADD R7, SP, #0xC SUB SP, SP, #0x14 MOV R1, #(off_354998 - 0xC7A3E) MOV R12, #(_OBJC_IVAR_$_EnergyUsedChangeEvent.remainingEnergy - 0xC7A48) ; int remainingEnergy; MOV LR, #(_OBJC_IVAR_$_EnergyUsedChangeEvent.sceneItems - 0xC7A54) ; NSString *sceneItems; MOVW R9, #:lower16:(_OBJC_IVAR_$_EnergyUsedChangeEvent.usedEnergy - 0xC7A52) ; int usedEnergy; ADD R1, PC ; off_354998 MOVT.W R9, #:upper16:(_OBJC_IVAR_$_EnergyUsedChangeEvent.usedEnergy - 0xC7A52) ; int usedEnergy; MOVW R5, #:lower16:(_OBJC_IVAR_$_EnergyUsedChangeEvent.sceneId - 0xC7A50) ; int sceneId; ADD R12, PC ; int remainingEnergy; MOVT.W R5, #:upper16:(_OBJC_IVAR_$_EnergyUsedChangeEvent.sceneId - 0xC7A50) ; int sceneId; LDR R1, [R1] ; int version; ADD R5, PC ; int sceneId; ADD R9, PC ; int usedEnergy; ADD LR, PC ; NSString *sceneItems; LDR.W R3, [R12] ; int remainingEnergy; LDR.W R4, [R9] ; int usedEnergy; MOVW R9, #:lower16:(selRef_stringWithFormat_ - 0xC7A6C) LDR.W R12, [LR] ; NSString *sceneItems; MOVT.W R9, #:upper16:(selRef_stringWithFormat_ - 0xC7A6C) LDR R5, [R5] ; int sceneId; ADD R9, PC ; selRef_stringWithFormat_ LDR R2, [R1] ; int version; LDR.W LR, [R0,R3] LDR R6, [R0,R4] LDR R5, [R0,R5] LDR.W R12, [R0,R12] LDR R3, [R0,R2] MOV R2, #(off_354994 - 0xC7A8A) LDR.W R1, [R9] ; "stringWithFormat:" ADD R2, PC ; off_354994 LDR R2, [R2] ; int time; LDR R2, [R2] ; int time; LDR R4, [R0,R2] MOV R0, #(classRef_NSString - 0xC7A9A) ADD R0, PC ; classRef_NSString LDR R0, [R0] ; _OBJC_CLASS_$_NSString MOV R2, #(cfstr_DDEuDDD - 0xC7AAA) ; "%d,%d,eu,%d,%d,%d,%@" STMEA.W SP, {R4,R6} ADD R2, PC ; "%d,%d,eu,%d,%d,%d,%@" STR R5, [SP,#0x20+var_18] STR.W LR, [SP,#0x20+var_14] STR.W R12, [SP,#0x20+var_10] BLX _objc_msgSend ADD SP, SP, #0x14 POP {R4-R7,PC} ; End of function -[EnergyUsedChangeEvent csv] LINE 2 ; EnergyUsedChangeEvent - (int)usedEnergy ; int __cdecl -[EnergyUsedChangeEvent usedEnergy](struct EnergyUsedChangeEvent *self, SEL) __EnergyUsedChangeEvent_usedEnergy_ MOV R1, #(_OBJC_IVAR_$_EnergyUsedChangeEvent.usedEnergy - 0xC7AC8) ; int usedEnergy; ADD R1, PC ; int usedEnergy; LDR R1, [R1] ; int usedEnergy; LDR R0, [R0,R1] BX LR ; End of function -[EnergyUsedChangeEvent usedEnergy]

Thanks

Its been awhile trying to solve this problem.......anyone out there pls help 1. Removed ASLR and thin binary from http://armconverter.com/binarytools/ 2. Set permission to 0777 and owner are set to root 3. Sign binary with ldid and got this mobile$ cd /var /mobile iPad:/var mobile$ ldid -s hiddenobjects ./minimal/mapping.h(54): _assert(false); errno=2 4. Replaced original binary without hacking anything just to try out the binary 5. Rebooted device I believes I've done all the necessary procedure or I've missed out something. Just FYI I'm on Ipad Air 1 with ios 8.3

As u know I'm still new, trying to learn from error.....I don't know what is autolipoing meant......and I'm not sure my device on which arm too....I just assume 64 since it's a iPad Air I've loaded in arm64 and have this offset: 000000010016D140 ADD X1, X1, #unk_1009F3754@PAGEOFF

It is for LLDB.....I'm using it debugserver your.comp.ip.add:23 --attach=PID process connect connect://your.device.ip.add:23 try deferent port if can't, 1234, 8081

It should be --attach=PID But u type --attach-PID maybe thats why.....

Mine should be arm64.....iPad Air 1 wifi