Jump to content

12 posts in this topic

Recommended Posts

Posted

I've finally had enough time to sit down and finish my attempt to hack this game....finally got my GDB working again...and now i'm a bit lost. Basically I was aiming for a Spend Some/Get Some kind of thing but at this point i'd even take just loading all the currency in..

 

sne0z5.jpg

 

GDB pointed me to this offset string where the end result of my currency is being set.

I didn't really want to bother the Set Point plus a lot of the strings didnt seem editable in my favor( I could be wrong)

 

 

I looked at the only tutorial i could find on here for actually finding the offset you need to edit but in this case it wasnt helpful.( though it was for my other game)

 

should i post the entire function for some one to analyze or just the main strings around this?

Posted

yeah full function because this offset is wrong 

alright give me a seconds to pull it up...thanks...

yeah full function because this offset is wrong 

var_4C          = -0x4C
var_48          = -0x48
 var_34          = -0x34
 var_30          = -0x30
 var_2C          = -0x2C
 var_28          = -0x28
 var_24          = -0x24
var_18          = -0x18
__text:00257160
__text:00257160                 PUSH            {R4-R7,LR}
__text:00257162                 ADD             R7, SP, #0xC
__text:00257164                 PUSH.W          {R8,R10,R11}
__text:00257168                 SUB.W           R4, SP, #0x40
__text:0025716C                 BIC.W           R4, R4, #0xF
__text:00257170                 MOV             SP, R4
__text:00257172                 VST1.64         {D8-D11}, [R4@128]!
__text:00257176                 VST1.64         {D12-D15}, [R4@128]
__text:0025717A                 SUB             SP, SP, #0x50
__text:0025717C                 MOV             R4, R0
__text:0025717E                 MOV             R0, R1
__text:00257180                 BL              _cJSON_Parse
__text:00257184                 MOV             R5, R0
__text:00257186                 MOV             R0, #(___gxx_personality_sj0_ptr - 0x257194)
__text:0025718E                 LDR             R1, =(GCC_except_table49_10 - 0x257196)
__text:00257190                 ADD             R0, PC ; ___gxx_personality_sj0_ptr
__text:00257192                 ADD             R1, PC ; GCC_except_table49_10
__text:00257194                 LDR             R0, [R0] ; ___gxx_personality_sj0
__text:00257196                 STR             R0, [sP,#0x68+var_34]
__text:00257198                 ADD             R0, SP, #0x68+var_4C
__text:0025719A                 STR             R1, [sP,#0x68+var_30]
__text:0025719C                 LDR             R1, =(sub_257258 - 0x2571AC)
__text:0025719E                 STR             R7, [sP,#0x68+var_2C]
__text:002571A0                 ORR.W           R1, R1, #1
__text:002571A4                 STR.W           SP, [sP,#0x68+var_24]
__text:002571A8                 ADD             R1, PC ; sub_257258
__text:002571AA                 STR             R1, [sP,#0x68+var_28]
__text:002571AC                 BLX.W           __Unwind_SjLj_Register
__text:002571B0                 CMP             R5, #0
__text:002571B2                 BEQ             loc_25723C
__text:002571B4                 MOVW            R2, #(:lower16:(aResult - 0x2571C6)) ; "result"
__text:002571B8                 ADD             R6, SP, #0x68+var_58
__text:002571BA                 MOVT.W          R2, #(:upper16:(aResult - 0x2571C6)) ; "result"
__text:002571BE                 MOV.W           R0, #0xFFFFFFFF
__text:002571C2                 ADD             R2, PC  ; "result"
__text:002571C4                 STR             R0, [sP,#0x68+var_48]
__text:002571C6                 MOV             R0, R6
__text:002571C8                 MOV             R1, R5
__text:002571CA                 STR             R5, [sP,#0x68+var_5C]
__text:002571CC                 BL              __Z13GetJSONStringP5cJSONPKc ; GetJSONString(cJSON *,char const*)
__text:002571D0                 MOVS            R0, #1
__text:002571D2                 STR             R0, [sP,#0x68+var_48]
__text:002571D4                 ADD.W           R0, R4, #8
__text:002571D8                 MOV             R1, R6
__text:002571DA                 STR             R4, [sP,#0x68+var_60]
__text:002571DC                 BLX.W           __ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEaSERKS5_ ; std::__1::basic_string<char,std::__1::char_traits<char>,std::__1::allocator<char>>::operator=(std::__1::basic_string<char,std::__1::char_traits<char>,std::__1::allocator<char>> const&)
__text:002571E0                 LDRB.W          R0, [sP,#0x68+var_58]
__text:002571E4                 TST.W           R0, #1
__text:002571E8                 BEQ             loc_2571EE
__text:002571EA                 LDR             R0, [sP,#0x68+var_50]
__text:002571EC                 B               loc_2571F4
__text:002571EE ; ---------------------------------------------------------------------------
__text:002571EE
__text:002571EE loc_2571EE                              ; CODE XREF: sVCSpendMsgData::ParseData(char const*,CMaterial *)+88j
__text:002571EE                 ADD             R0, SP, #0x68+var_58
__text:002571F0                 ORR.W           R0, R0, #1
__text:002571F4
__text:002571F4 loc_2571F4                              ; CODE XREF: sVCSpendMsgData::ParseData(char const*,CMaterial *)+8Cj
__text:002571F4                 LDR             R4, [sP,#0x68+var_5C]
__text:002571F6                 MOV             R1, #(aSuccess_1 - 0x257202) ; "success"
__text:002571FE                 ADD             R1, PC  ; "success"
__text:00257200                 BLX.W           _strcasecmp
__text:00257204                 CBNZ            R0, loc_257236
__text:00257206                 MOVW            R1, #(:lower16:(aBalance - 0x257216)) ; "balance"
__text:0025720A                 MOVS            R0, #2
__text:0025720C                 MOVT.W          R1, #(:upper16:(aBalance - 0x257216)) ; "balance"
__text:00257210                 STR             R0, [sP,#0x68+var_48]
__text:00257212                 ADD             R1, PC  ; "balance"
__text:00257214                 MOV             R0, R4
__text:00257216                 MOVS            R2, #1
__text:00257218                 BL              __Z10GetJSONIntP5cJSONPKcb ; GetJSONInt(cJSON *,char const*,bool)
__text:0025721C                 MOV             R1, #(__ZN10CGameWorld12s_pGameWorldE_ptr - 0x25722A)
__text:00257224                 LDR             R2, [sP,#0x68+var_60]
__text:00257226                 ADD             R1, PC ; __ZN10CGameWorld12s_pGameWorldE_ptr
__text:00257228                 LDR             R1, [R1] ; CGameWorld::s_pGameWorld
__text:0025722A                 STR             R0, [R2,#4]
__text:0025722C                 LDR             R1, [R1]
__text:0025722E                 LDR.W           R1, [R1,#0x134]
__text:00257232                 STR.W           R0, [R1,#0x3E8]
__text:00257236
__text:00257236 loc_257236                              ; CODE XREF: sVCSpendMsgData::ParseData(char const*,CMaterial *)+A4j
__text:00257236                 ADD             R0, SP, #0x68+var_58
__text:00257238                 BLX.W           __ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEED1Ev ; std::__1::basic_string<char,std::__1::char_traits<char>,std::__1::allocator<char>>::~basic_string()
__text:0025723C
__text:0025723C loc_25723C                              ; CODE XREF: sVCSpendMsgData::ParseData(char const*,CMaterial *)+52j
__text:0025723C                 ADD             R0, SP, #0x68+var_4C
__text:0025723E                 BLX.W           __Unwind_SjLj_Unregister
__text:00257242                 ADD             R4, SP, #0x68+var_18
__text:00257244                 VLD1.64         {D8-D11}, [R4@128]!
__text:00257248                 VLD1.64         {D12-D15}, [R4@128]
__text:0025724C                 SUB.W           R4, R7, #-var_18
 MOV             SP, R4
POP.W           {R8,R10,R11}
POP             {R4-R7,PC}
 End of function sVCSpendMsgData::ParseData(char const*,CMaterial *)
Posted

That's what I was thinking when I started browsing the functions but my GDB kept sending me there

its the wrong function

but you can edit some things here already..

In what way would I be able to tell I'm in the right function if my GDB directs me to this one every time?
Posted

That's what I was thinking when I started browsing the functions but my GDB kept sending me there

In what way would I be able to tell I'm in the right function if my GDB directs me to this one every time?

do you have aslr on or off?

Posted (edited)

Off...first thing I did after I cracked it....

then thats weird , then it is the right function but you used the wrong value 

in other words , you found the visual part not the part with real numbers

Updated by iOSv64

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Our picks

    • Lollipop 3: Match 3 Puzzles v25.0619.00 [ +5 Cheats ] Auto Win
      Modded/Hacked App: Lollipop 3: Match 3 Puzzles By Puzzle1Studio,inc.
      Bundle ID: com.puzzle1studio.ap.lollipopsweetheroesmatch3
      iTunes Store Link: https://apps.apple.com/us/app/lollipop-3-match-3-puzzles/id1634326372?uo=4
       

      🤩 Hack Features

      - Coins

      - Lives

      - Booster

      - Moves

      - Auto Win 
        • Winner
        • Like
      • 7 replies
    • Lollipop 3: Match 3 Puzzles v25.0619.00 [ +5 Jailed ] Auto Win
      Modded/Hacked App: Lollipop 3: Match 3 Puzzles By Puzzle1Studio,inc.
      Bundle ID: com.puzzle1studio.ap.lollipopsweetheroesmatch3
      iTunes Store Link: https://apps.apple.com/us/app/lollipop-3-match-3-puzzles/id1634326372?uo=4

       

       

      📌 Mod Requirements

      - Non-Jailbroken/Jailed or Jailbroken iPhone or iPad.
      - Sideloadly or alternatives.
      - Computer running Windows/macOS/Linux with iTunes installed.

       

      🤩 Hack Features

      - Coins

      - Lives

      - Booster

      - Moves

      - Auto Win 

       

      ⬇️ iOS Hack Download IPA Link


      Hidden Content

      Download via the iOSGods App
        • Winner
        • Like
      • 11 replies
    • Arena Heroes: Online RPG v1.10.30 [ +2 Cheats ] Skill CD
      Modded/Hacked App: Arena Heroes: Online RPG By INFUSION GAMES OU
      Bundle ID: com.infusiongames.fighting.rpg.adventure.multiplayer.wars.pvp.battles.arena.heroes
      iTunes Store Link: https://apps.apple.com/us/app/arena-heroes-online-rpg/id6448993010?uo=4
       

      🤩 Hack Features

      - DMG [ When Enemy Turn Disable ]
      - Skill CD



      DMG Not Tested With Dungeon & Arena 
        • Agree
        • Haha
        • Winner
        • Like
      • 22 replies
    • Arena Heroes: Online RPG v1.10.30 [ +2 Jailed ] Skill CD
      Modded/Hacked App: Arena Heroes: Online RPG By INFUSION GAMES OU
      Bundle ID: com.infusiongames.fighting.rpg.adventure.multiplayer.wars.pvp.battles.arena.heroes
      iTunes Store Link: https://apps.apple.com/us/app/arena-heroes-online-rpg/id6448993010?uo=4


      🤩 Hack Features

      - DMG [ When Enemy Turn Disable ]
      - Skill CD



      DMG Not Tested With Dungeon & Arena 
        • Informative
        • Winner
        • Like
      • 15 replies
    • 20 Minutes Till Dawn v6.6.2 [ +12+++ Cheats ] Coins Freeze
      Modded/Hacked App: 20 Minutes Till Dawn By QI YU SG. PTE. LTD.
      Bundle ID: com.flanne.erabit.20minutes.tilldawn.shooting.roguelike.iap.ios
      iTunes Store Link: https://apps.apple.com/us/app/20-minutes-till-dawn/id1635123906?uo=4


      Hack Features:
      - Coins Freeze 

      - Hero Unlocked 

      - Guns Unlocked 

      - Never Die 

      - Ammo Max 

      - No Reload 

      - Rune Unlocked

      - Rune LvL Max

      - Pickup Range [ Linked Rune ] Just Equip

      - DMG Easy Kill [ Linked Rune ] Just Equip

      - Skill CD [ Linked Rune ] Just Equip

      - HP Drop [ Linked Rune ] Just Equip

      - Knockback [ Linked Rune ] Just Equip

      + More Read Status Rune


      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/forum/79-no-jailbreak-section/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
        • Informative
        • Agree
        • Winner
        • Like
      • 31 replies
    • 20 Minutes Till Dawn v6.6.2 [ +12+++ Jailed ] Coins Freeze
      Modded/Hacked App: 20 Minutes Till Dawn By QI YU SG. PTE. LTD.
      Bundle ID: com.flanne.erabit.20minutes.tilldawn.shooting.roguelike.iap.ios
      iTunes Store Link: https://apps.apple.com/us/app/20-minutes-till-dawn/id1635123906?uo=4


      Mod Requirements:
      - Non-Jailbroken/Jailed or Jailbroken iPhone/iPad/iPod Touch.
      - Sideloadly / Cydia Impactor or alternatives.
      - A Computer Running Windows/macOS/Linux with iTunes installed.


      Hack Features:

      - Coins Freeze 

      - Hero Unlocked 

      - Guns Unlocked 

      - Never Die 

      - Ammo Max 

      - No Reload 

      - Rune Unlocked

      - Rune LvL Max

      - Pickup Range [ Linked Rune ] Just Equip

      - DMG Easy Kill [ Linked Rune ] Just Equip

      - Skill CD [ Linked Rune ] Just Equip

      - HP Drop [ Linked Rune ] Just Equip

      - Knockback [ Linked Rune ] Just Equip

      + More Read Status Rune

       
      Jailbreak required hack(s): https://iosgods.com/forum/5-game-cheats-hack-requests/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/


      iOS Hack Download IPA Link:

      Hidden Content

      Download via the iOSGods App
        • Informative
        • Agree
        • Winner
        • Like
      • 17 replies
    • Stick Cricket Clash v1.9.7 [ +3 Jailed ] Currency Freeze
      Modded/Hacked App: Stick Cricket Clash By Stick Sports Ltd
      Bundle ID: com.sticksports.stickcricketclash
      iTunes Store Link: https://apps.apple.com/us/app/stick-cricket-clash/id6444344271?uo=4


      Hack Features:
      - Currency Freeze
      - Score [ Win All Match ]
      - Ads Reward 


      Jailbreak required hack(s): https://iosgods.com/forum/5-game-cheats-hack-requests/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
        • Haha
        • Winner
        • Like
      • 13 replies
    • Stick Cricket Clash v1.9.7 [ +3 Cheats ] Currency Freeze
      Modded/Hacked App: Stick Cricket Clash By Stick Sports Ltd
      Bundle ID: com.sticksports.stickcricketclash
      iTunes Store Link: https://apps.apple.com/us/app/stick-cricket-clash/id6444344271?uo=4



      Hack Features:
      - Currency Freeze
      - Score Win All Match
      - Ads Reward 



      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/forum/79-no-jailbreak-section/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
        • Informative
        • Agree
        • Thanks
        • Winner
        • Like
      • 40 replies
    • Backpack Rush v1.602.207 [ +20 Cheats ] Currency Max
      Modded/Hacked App: Backpack Rush By Noodle Games Limited
      Bundle ID: com.onicore.backpack.rush
      iTunes Store Link: https://apps.apple.com/us/app/backpack-rush/id6736857029?uo=4

      Hack Features:
      - ADS Ticket

      - Gems

      - Gold

      - Energy

      - Silver Coins [ Merge Weapons ]

      - Summon Coins

      - Heroic Water [ Hero Up ]

      - Meteor Essence [ Gear Refining ]

      - Talent Book +2

      - Core Evo Stone [ Pet Evo Up ]

      - Fish Hook [ Obtain Gear During A Voyage ]

      - Pickaxe [ Mine ]

      - Blueprint [ Outfit Equip UP ]

      - Fragment [ Gear Up ]

      - Fragment [ Pet UP ]

      - Dungeon Keys +3

      - Spin

      - Enemy Status [ HP ATK 0 ] Easy Kill

      - DMG [ Outfit Just Equip & Unequip ]

      - HP [ Outfit Just Equip & Unequip ]


      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/forum/79-no-jailbreak-section/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 34 replies
    • Backpack Rush v1.602.207 [ +20 Jailed ] Currency Max
      Modded/Hacked App: Backpack Rush By Noodle Games Limited
      Bundle ID: com.onicore.backpack.rush
      iTunes Store Link: https://apps.apple.com/us/app/backpack-rush/id6736857029?uo=4

      Hack Features:

      - ADS Ticket

      - Gems

      - Gold

      - Energy

      - Silver Coins [ Merge Weapons ]

      - Summon Coins

      - Heroic Water [ Hero Up ]

      - Meteor Essence [ Gear Refining ]

      - Talent Book +2

      - Core Evo Stone [ Pet Evo Up ]

      - Fish Hook [ Obtain Gear During A Voyage ]

      - Pickaxe [ Mine ]

      - Blueprint [ Outfit Equip UP ]

      - Fragment [ Gear Up ]

      - Fragment [ Pet UP ]

      - Dungeon Keys +3

      - Spin

      - Enemy Status [ HP ATK 0 ] Easy Kill

      - DMG [ Outfit Just Equip & Unequip ]

      - HP [ Outfit Just Equip & Unequip ]

       
      Jailbreak required hack(s): https://iosgods.com/forum/5-game-cheats-hack-requests/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 26 replies
    • Candy Pop Story : Match 3 v1.21.0618 [ +3 Cheats ] Auto Win
      Modded/Hacked App: Candy Pop Story : Match 3 By F.O.G LIMITED
      Bundle ID: com.gamoper.candysweetstory.ios
      App Store Link: https://apps.apple.com/us/app/candy-pop-story-match-3/id6670773988?uo=4


      🤩 Hack Features

      - Auto Win
      - Coins
      - Moves
      -
        • Thanks
      • 3 replies
    • Candy Pop Story : Match 3 v1.21.0618 [ +3 Jailed ] Auto Win
      Modded/Hacked App: Candy Pop Story : Match 3 By F.O.G LIMITED
      Bundle ID: com.gamoper.candysweetstory.ios
      App Store Link: https://apps.apple.com/us/app/candy-pop-story-match-3/id6670773988?uo=4
       

      🤩 Hack Features

      - Auto Win
      - Coins
      - Moves
        • Winner
      • 4 replies
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines