-
Posts
3,498 -
Joined
-
Last visited
Everything posted by Archangel04
-
I used ADD X29, SP, #0x200 with the offset taken from cursor placed before ADD. I applied this using CI template and armconverter site. However, there is no effect when I use it. Do i need to crack/thin binary to use CI patchers? If so, how do i fix the crash (KERN_INVALID_ADDRESS acc to crashreporter)
-
the BL function leads to __text:000000010013AC3C sub_10013AC3C ; CODE XREF: sub_1000842C4+30p __text:000000010013AC3C ; sub_10008DCD0+16D0p ... __text:000000010013AC3C __text:000000010013AC3C var_20 = -0x20 __text:000000010013AC3C var_10 = -0x10 __text:000000010013AC3C __text:000000010013AC3C STP X20, X19, [SP,#var_20]! __text:000000010013AC40 STP X29, X30, [SP,#0x20+var_10] __text:000000010013AC44 ADD X29, SP, #0x20+var_10 __text:000000010013AC48 MOV X19, X0 __text:000000010013AC4C BL sub_10013AB7C __text:000000010013AC50 MOV X0, X19 __text:000000010013AC54 LDP X29, X30, [SP,#0x20+var_10] __text:000000010013AC58 LDP X20, X19, [SP+0x20+var_20],#0x20 __text:000000010013AC5C RET __text:000000010013AC5C ; End of function sub_10013AC3C
-
In IDA, i got this offset from LLDB on modding money (this watchpoint ocurred while increasing value) __text:000000010015B3F8 sub_10015B3F8 ; CODE XREF: sub_10001EFA0+718p __text:000000010015B3F8 ; sub_10008DCD0+18B4p ... __text:000000010015B3F8 __text:000000010015B3F8 var_30 = -0x30 __text:000000010015B3F8 var_20 = -0x20 __text:000000010015B3F8 var_10 = -0x10 __text:000000010015B3F8 __text:000000010015B3F8 STP X22, X21, [SP,#var_30]! __text:000000010015B3FC STP X20, X19, [SP,#0x30+var_20] __text:000000010015B400 STP X29, X30, [SP,#0x30+var_10] __text:000000010015B404 ADD X29, SP, #0x20 __text:000000010015B408 MOV X19, X1 __text:000000010015B40C MOV X20, X0 __text:000000010015B410 LDR X21, [X20,#0x200] __text:000000010015B414 CBZ X21, loc_10015B42C __text:000000010015B418 MOV X0, X21 __text:000000010015B41C BL sub_10013AC3C __text:000000010015B420 MOV X0, X21 __text:000000010015B424 BL __ZdlPv ; operator delete(void *) __text:000000010015B428 STR XZR, [X20,#0x200] Should i replace __text:000000010015B404 ADD X29, SP, #0x20 with __text:000000010015B404 LDR X29, R7 I got this offset on selling some random stuff in shop. Does replacing it mean i get R7 whenever i sell something? Assuming that this is infact the function for selling stuff
-
So, I got offsets for Galaxy on Fire v1.12 and I wanna make a patcher for it. I have the moddable functions. The only problem is that any cracked/thinned binary causes app to crash with EXEC_BAD_ACCESS and subtype KERN_INVALID_ADDRESS (basically some stuff necessary for it to work got killed with patch). Will offsets from cracked binary in IDA work with the game? Like if i make a patcher, will it still work or will there be an error? Also, I got an ASLR value of f0000 (or so). So i delete f0000 from all offsets i got right? I did that and got the functions but im not sure if they r the right ones. (Im using a non-thinned version of binary in 64 bit mode in ida)
-
If it fails to attach and says csnt find, use process id from "ps ax" or "pidof appname" or igg. thats if you still get error
-
Help/Support IDA help. MSHOOK, Functions window problem
Archangel04 replied to Luke's topic in Help & Support
Close it and reopen it in Mach-O format (the other one) with ARM64. You opened it in binary Also, after you do that wait for the bar to turn blue (mostly) atleast brown part -
he is using mterminal Lewk try this tutorial http://iphonedevwiki.net/index.php/Theos/Setup/iOS Install iOS 8 SDKs (follow it exactly as it says)
-
Which device
-
Did you "trust" in settings
-
Help/Support How to Create a mod menu for in app games
Archangel04 replied to KoQo's topic in Help & Support
How good are you at C -
The mach_portal stayed open? Is that what you are saying? Also which phone are you using
-
wanna see
-
For your next one, try adding a few more layers to make it more realistic. Like "bricks" in the castle walls with a bit of a shadow as well Also, the sun needs to be changed a bit. I would suggest moving it to the corner with only. part of it visible and making it bright white without edges. just show it white at the core and moving towadds blue outward. Or reddish orange for sunset. The sky is rarely ever purely blue and needs some variation (like clouds)
-
1) If its for 9.2 to 9.3.3, how will you use it to jailbreak 10.1.1 2)There is a very unstable jailbreak for 10.1.1 which youre better off not using till we get a more stable version Asking for 10.1.1 not 9.3.3
-
Please upload and send me your debugserver if you are using it on iOS 9.3.3
-
il take a look if i can get lldb to start
-
Hey guys, I am using iPad Air jailbroken with iOS 9.3.3 and trying to use LLDB from @DiDA's tutorial at https://iosgods.com/topic/5380-working-on-ios-9-how-to-get-lldb-working-on-windows/ My laptop is Windows 7 and whenever i try to attach process from PUTTY, i get the error iPad:~ root# debugserver 127.0.0.1:23 --attach=742 debugserver-@(#)PROGRAM:debugserver PROJECT:debugserver-320.2.89 for arm64. Attaching to process 742... error: failed to attach process 742: unable to start the exception thread Exiting. iPad:~ root# So far, I have downloaded from given links. Set permissions for debugserver (its in /usr/bin/) and tried debugserver with BOTH MTerminal and Putty
-
Help/Support Unable To Open Sandbox (iFunbox)
Archangel04 replied to ImMods's topic in Help & Support
Bro, wait for the jailbreak to arrive. -
Help/Support App w/Thinned/Cracked Binary Crashes
Archangel04 replied to Archangel04's topic in Help & Support
So i can use original binary with lldb? and then use mshook to hook into offset without cracking/thinning binary? -
Help/Support App w/Thinned/Cracked Binary Crashes
Archangel04 replied to Archangel04's topic in Help & Support
Kay thanks for the replies il try the first Any way to use GDB without crack/thin? -
Help/Support App w/Thinned/Cracked Binary Crashes
Archangel04 replied to Archangel04's topic in Help & Support
Can anyone help me out ? -
Request [Vip] One piece Thousand Storm
Archangel04 replied to Mr Pirates's topic in Filled iOS App Requests
Image? -
10 topics or 10 posts? 10 topics is asking for spam