Jump to content

Archangel04

ViP Pro
  • Posts

    3,498
  • Joined

  • Last visited

Everything posted by Archangel04

  1. I used ADD X29, SP, #0x200 with the offset taken from cursor placed before ADD. I applied this using CI template and armconverter site. However, there is no effect when I use it. Do i need to crack/thin binary to use CI patchers? If so, how do i fix the crash (KERN_INVALID_ADDRESS acc to crashreporter)
  2. the BL function leads to __text:000000010013AC3C sub_10013AC3C ; CODE XREF: sub_1000842C4+30p __text:000000010013AC3C ; sub_10008DCD0+16D0p ... __text:000000010013AC3C __text:000000010013AC3C var_20 = -0x20 __text:000000010013AC3C var_10 = -0x10 __text:000000010013AC3C __text:000000010013AC3C STP X20, X19, [SP,#var_20]! __text:000000010013AC40 STP X29, X30, [SP,#0x20+var_10] __text:000000010013AC44 ADD X29, SP, #0x20+var_10 __text:000000010013AC48 MOV X19, X0 __text:000000010013AC4C BL sub_10013AB7C __text:000000010013AC50 MOV X0, X19 __text:000000010013AC54 LDP X29, X30, [SP,#0x20+var_10] __text:000000010013AC58 LDP X20, X19, [SP+0x20+var_20],#0x20 __text:000000010013AC5C RET __text:000000010013AC5C ; End of function sub_10013AC3C
  3. In IDA, i got this offset from LLDB on modding money (this watchpoint ocurred while increasing value) __text:000000010015B3F8 sub_10015B3F8 ; CODE XREF: sub_10001EFA0+718p __text:000000010015B3F8 ; sub_10008DCD0+18B4p ... __text:000000010015B3F8 __text:000000010015B3F8 var_30 = -0x30 __text:000000010015B3F8 var_20 = -0x20 __text:000000010015B3F8 var_10 = -0x10 __text:000000010015B3F8 __text:000000010015B3F8 STP X22, X21, [SP,#var_30]! __text:000000010015B3FC STP X20, X19, [SP,#0x30+var_20] __text:000000010015B400 STP X29, X30, [SP,#0x30+var_10] __text:000000010015B404 ADD X29, SP, #0x20 __text:000000010015B408 MOV X19, X1 __text:000000010015B40C MOV X20, X0 __text:000000010015B410 LDR X21, [X20,#0x200] __text:000000010015B414 CBZ X21, loc_10015B42C __text:000000010015B418 MOV X0, X21 __text:000000010015B41C BL sub_10013AC3C __text:000000010015B420 MOV X0, X21 __text:000000010015B424 BL __ZdlPv ; operator delete(void *) __text:000000010015B428 STR XZR, [X20,#0x200] Should i replace __text:000000010015B404 ADD X29, SP, #0x20 with __text:000000010015B404 LDR X29, R7 I got this offset on selling some random stuff in shop. Does replacing it mean i get R7 whenever i sell something? Assuming that this is infact the function for selling stuff
  4. So, I got offsets for Galaxy on Fire v1.12 and I wanna make a patcher for it. I have the moddable functions. The only problem is that any cracked/thinned binary causes app to crash with EXEC_BAD_ACCESS and subtype KERN_INVALID_ADDRESS (basically some stuff necessary for it to work got killed with patch). Will offsets from cracked binary in IDA work with the game? Like if i make a patcher, will it still work or will there be an error? Also, I got an ASLR value of f0000 (or so). So i delete f0000 from all offsets i got right? I did that and got the functions but im not sure if they r the right ones. (Im using a non-thinned version of binary in 64 bit mode in ida)
  5. In windows, if you see computer, it shows iPhone in devices. Copy photos from there. May or may not work, im not sure
  6. If it fails to attach and says csnt find, use process id from "ps ax" or "pidof appname" or igg. thats if you still get error
  7. Close it and reopen it in Mach-O format (the other one) with ARM64. You opened it in binary Also, after you do that wait for the bar to turn blue (mostly) atleast brown part
  8. he is using mterminal Lewk try this tutorial http://iphonedevwiki.net/index.php/Theos/Setup/iOS Install iOS 8 SDKs (follow it exactly as it says)
  9. Which device
  10. Did you "trust" in settings
  11. The mach_portal stayed open? Is that what you are saying? Also which phone are you using
  12. wanna see
  13. For your next one, try adding a few more layers to make it more realistic. Like "bricks" in the castle walls with a bit of a shadow as well Also, the sun needs to be changed a bit. I would suggest moving it to the corner with only. part of it visible and making it bright white without edges. just show it white at the core and moving towadds blue outward. Or reddish orange for sunset. The sky is rarely ever purely blue and needs some variation (like clouds)
  14. 1) If its for 9.2 to 9.3.3, how will you use it to jailbreak 10.1.1 2)There is a very unstable jailbreak for 10.1.1 which youre better off not using till we get a more stable version Asking for 10.1.1 not 9.3.3
  15. Please upload and send me your debugserver if you are using it on iOS 9.3.3
  16. il take a look if i can get lldb to start
  17. Hey guys, I am using iPad Air jailbroken with iOS 9.3.3 and trying to use LLDB from @DiDA's tutorial at https://iosgods.com/topic/5380-working-on-ios-9-how-to-get-lldb-working-on-windows/ My laptop is Windows 7 and whenever i try to attach process from PUTTY, i get the error iPad:~ root# debugserver 127.0.0.1:23 --attach=742 debugserver-@(#)PROGRAM:debugserver PROJECT:debugserver-320.2.89 for arm64. Attaching to process 742... error: failed to attach process 742: unable to start the exception thread Exiting. iPad:~ root# So far, I have downloaded from given links. Set permissions for debugserver (its in /usr/bin/) and tried debugserver with BOTH MTerminal and Putty
  18. Bro, wait for the jailbreak to arrive.
  19. So i can use original binary with lldb? and then use mshook to hook into offset without cracking/thinning binary?
  20. Kay thanks for the replies il try the first Any way to use GDB without crack/thin?
  21. 10 topics or 10 posts? 10 topics is asking for spam
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines