Jump to content

How to Find Offsets of Game In Ios(with Pictures)


23 posts in this topic

Recommended Posts

Updated (edited)

 

Sorry If this has a Bad english as it was in german language i used google translate to covert.If u want anything to edited fell free to tell me.

 

 

Requirements

 

OpenSSH

iGameGuardian

Gnu Debugger

Cracked,Thinned and Aslr Removed Ipa File

 

In PC:

Ida Pro

Putty

Itools Or ifunBox

 

Last but not least, a game is missing. In my tutorial I take Plants vs Zombies

 

 

 

 

So Lets start

 

Plug in your device to the computer and start iTools .

In the selection menu on the left side chooses their apps and searches from the list PvZ .

Clicking on the folder icon opens a new window.

MLJjZf5.jpg

 

In the new window opens her PvZ.app and searches for the file PvZ(without extension)

This file you copied you on your computer, the best you have to create a new folder.

Now start their IDA and click New

0UlYf36.jpg

It opens directly a window in which you must select your PvZ file. ( CAUTION: Selects the bottom right All Files (*) ! From)

After you have selected the PvZ file, opens a new window where you have to set the processor types.

Just take the settings from the following screen:

L4VJCG7.jpg

Click OK and confirm the following query with Yes. A short time later, a new window opens, which can be closed with a click on OK.

Now, IDA works, recognizable by the number of consecutive numbers on the left.

You must now wait until there idle stands. In the meantime we will devote ourselves to the game and the value to be chopped.

You can now start Plants vs Zombies and begin a level and pauses it directly.

EJxMOku.png

 

Then you press on your home button and start iGameGuardian

There selects her PvZ and acknowledged the query by pressing Select.

Now you can start it on the bottom with your search Search Press.

pOfrYHP.jpg

At this point I have long wondered whether I go into detail, or not ... but I decided against it because iGameGuardian a kind Cheat Engine is and anyone who deals with such an issue, in fact, the necessary knowledge of the use With such programs.

So you are looking for your solar value and filter until you have the right address.

MH8jqXG.jpg

If you have the address, you can putty start.

QFQL3t7.jpg

You enter the IP from your device and click Open.

The following window will open

7vC2mp4.jpg

When login as: you give root a and password you give Alpine a

(Input on password are not visible!)

Input history:

root <ENTER> alpine <ENTER>

NACsWqJ.jpg

So should your putty window look.

Now you start the GNU debugger by her gdb eingebt and confirms the input with Enter.

ok1mEMO.jpg

Now you have the debugger to attach PvZ process, so give her the following:

att PvZ

(In case sensitive eighth! Att pvz would not work)

Putty is now working a little, but does not take long.

OKSRCZ7.jpg

So now the putty window should look.

Now you created a watch point to the address that we with iGameGuardian found.

To do this, type the following:

watch * 0xADRESSE <ENTER> (your in iGameGuardian found address. * 0x must always stand in front!)

display / i $ pc <ENTER>

display $ r0 <ENTER> (optional)

display $ r1 <ENTER> (optional)

display $ r2 <ENTER> (optional)

display $ r3 <ENTER> (optional)

display $ r4 <ENTER> (optional)

$ r0 to r12 are $ register, similar to eax, esi, edi, etc.

Due to the optional input of display $ r0 is a brake after only displayed, which values the Register.

These registers One can also by entering after Brake however

info r

display.

g0tnLVX.jpg

 

If you now switch to the PvZ game, it will see that it is still paused by GDB.

To make the game now continue to run, you need to putty just a c (for continue) and confirm with Enter

4Oou5t4.jpg

Now you have to go back to the game and collect a sun.

The game might not run smoothly through the debugger or by the watchpoint ...

Once you've collected a sun, the game is automatically paused by GDB.

If you look at putty, you should see something like this:

1UTwg0o.jpg

As you can see, my old value 40 and the new 55.

The command that is run is

cmp r1, r2

, and is located at the address

0x120D18

 

To display the Speicherbereicht, give her the following:

x / 20x 0xADRESSE (your address)

2eNQ4Dg.jpg

 

You can now work with these bytes.

 

You are now changing to IDA (should now be finished)

SFbPR9N.jpg

Bottom left should now idle are

in the upper window you right-click and select Text View.

Now click at the top of Search -> sequence of bytes ..

In the search box you give now Bytes of putty, in my case, this would look like:

XrSzLZh.jpg

The first 8 bytes should initially rich, respected, however, note that the bytes have to be entered in reverse order, making a hook at Find all occurences .

Then click Ok.

The result list should now only be an entry, which you select directly with a double-click.

You should now land here:

xESaWkC.jpg

 

Here is R1 compared with R2, then comes a JUMP because BLT for Branch if lowerthan (jump if less) stands.

2 lines below you see

mov R1, # 0x2706

The Hex value 2706 (decimal = 9990) is written to R1, but this command is not executed because the Branch (jump) is about, so the instruction is mov R1, # 0x2706 simply getting Skipped

The simplest solution to this problem is an NOP.

You either nopped the CMP command or the BLT command.

If the CMP command is genopped, the BLT command has no result, so it does not jump and what happens when the BLT command nopped, I probably do not need to explain;)

You can now click 1 time on the CMP instruction and goes to IDA up on the tab Hex View-A

6apKgTv.jpg

 

You now see the bytes of the CMP command and before that the address 00075D18.

For you, however, the address marked with the arrow is important: 00074D18

You now start your favorite hex editor and jump to offset 74D18.

There should you directly jump out the bytes of the CMP instruction: 02 00 51 E1

After you start the ARM ASM converter and convert nop

 

For you, the 4 byte value is the important one.

Back in HexEditor her now changes the bytes from

02 00 51 E1

in

00 00 A0 E1

fvSBa7v.jpg

 

Save a file, but before you create a backup.

Before you now push the changed PvZ file back on your device, you must close putty and close the possibly running PvZ process on your device.

Now you can copy the file to your device, of course, in the same folder from which you have copied it before;)

If you now collect a sun, you get 9990 Suns credited.

 

 

Credits:

Google For translating

Infamous-Ash For compiling

Maker:DNA FROM HOG

Updated by Amuyea
  • Like 7
  • Winner 3
  • Thanks 2
  • Agree 1
Posted (edited)

@ Good Job!

Can you give me the link for the original TuT please?

Updated by AxCE
Posted (edited)

- Tutorial from 2013

- Zahir and Evilg00d made a better tutorial

- You didn't even credit DNA from HoG

 

@

Updated by castix

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Our picks

    • Zombie Drift Survival Racing v1.3.1 [+6 Jailed Cheats]
      Modded/Hacked App: Zombie Drift Survival Racing By NOSURRENDER YAZILIM VE TICARET ANONIM SIRKETI
      Bundle ID: com.nosurrenderstudio.rougelikesurvival
      App Store Link: https://apps.apple.com/us/app/zombie-drift-survival-racing/id6702024869?uo=4



      🤩 Hack Features

      - Never Die
      - One Hit Kill
      - Debug Menu
      • 0 replies
    • Zombie Drift Survival Racing v1.3.1 [+6 Cheats]
      Modded/Hacked App: Zombie Drift Survival Racing By NOSURRENDER YAZILIM VE TICARET ANONIM SIRKETI
      Bundle ID: com.nosurrenderstudio.rougelikesurvival
      App Store Link: https://apps.apple.com/us/app/zombie-drift-survival-racing/id6702024869?uo=4

       

      🤩 Hack Features

      - Never Die
      - One Hit Kill
      - Debug Menu
       
      • 0 replies
    • Omega Royale - Tower Defense v1.4.0 [+2 Jailed Cheats]
      Modded/Hacked App: Omega Royale - Tower Defense By Tower Pop Oy
      Bundle ID: com.towerpop.omegaroyale
      iTunes Store Link: https://apps.apple.com/us/app/omega-royale-tower-defense/id6447241072?uo=4

       

      🚀 Hack Features

      - Omega ViP Active
      - Always Can Cast Skill (Even when it's on cooldown)


      🍏 Jailbreak iOS hacks: https://iosgods.com/forum/5-game-cheats-hack-requests/
      🤖 Modded Android APKs: https://iosgods.com/forum/68-android-section/
      • 31 replies
    • Omega Royale - Tower Defense v1.4.0 [+2 Cheats]
      Modded/Hacked App: Omega Royale - Tower Defense By Tower Pop Oy
      Bundle ID: com.towerpop.omegaroyale
      iTunes Store Link: https://apps.apple.com/us/app/omega-royale-tower-defense/id6447241072?uo=4


       

      🚀 Hack Features

      - Omega ViP Active
      - Always Can Cast Skill (Even when it's on cooldown)


      🍏 For Non-Jailbroken & No Jailbreak required hacks: https://iosgods.com/forum/79-no-jailbreak-section/
      🤖 Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      • 32 replies
    • Three Kingdoms All-Star : Idle v1.4 +3 Cheat
      Modded/Hacked App: Three Kingdoms All-Star : Idle By Highbrow
      Bundle ID: com.highbrow.games.tki
      iTunes Store Link: https://apps.apple.com/us/app/three-kingdoms-all-star-idle/id6737404289?uo=4

       


      🤩 Hack Features

      - No Skill Cooldown
      • 19 replies
    • Matchington Mansion Cheats v1.179.0 +5
      Modded/Hacked App: Matchington Mansion By Magic Tavern, Inc.
      Bundle ID: com.matchington.mansion
      iTunes Store Link: https://apps.apple.com/us/app/matchington-mansion/id1216575026?uo=4

       

      📌 Mod Requirements

      - Jailbroken iPhone or iPad.
      - iGameGod / Filza / iMazing.
      - Cydia Substrate, ElleKit, Substitute or libhooker depending on your jailbreak (from Sileo, Cydia or Zebra).

       

      🤩 Hack Features

      - Infinite Moves
      - Infinite Lives
      - Infinite Booster
      - Infinite Coin (Spend some/ Get some)
      - Infinite Stars (Complete task without needing Stars)

       

      Non-Jailbroken Hack: https://iosgods.com/topic/75130-matchington-mansion-v11750-jailed-cheats-3/

       

      ⬇️ iOS Hack Download Link: https://iosgods.com/topic/75127-matchington-mansion-cheats-v11770-5/
      • 795 replies
    • The Sims FreePlay Cheats v5.92.0 +5
      Modded/Hacked App: The Sims™ FreePlay By Electronic Arts
      Bundle ID: com.ea.sims3deluxe.ipad.inc
      iTunes Store Link: https://itunes.apple.com/us/app/the-sims-freeplay/id466965151?mt=8&uo=4&at=1010lce4


      Hack Features:
      - Infinite Simcash
      - Infinite SP
      - Infinite LSP
      - Max ViP Point
      - Unlock Everything


      Hack Download Link: https://iosgods.com/topic/72103-arm64-the-sims-freeplay-cheats-v5414-4-iosgods-exclusive/
        • Informative
        • Thanks
        • Like
      • 3,289 replies
    • HomeScapes v7.9.5 Jailed Cheats +3
      Modded/Hacked App: Homescapes By PLR Worldwide Sales Limited
      Bundle ID: com.playrix.gardenscapes-sweethome
      iTunes Store Link: https://apps.apple.com/us/app/homescapes/id1195621598?uo=4

       

      📌 Mod Requirements

      - Non-Jailbroken/Jailed or Jailbroken iPhone or iPad.
      - Sideloadly or alternatives.
      - Computer running Windows/macOS/Linux with iTunes installed.

       

      🤩 Hack Features

      - Infinite Moves
      - Infinite Boosters
      - Infinite Coins (Spend some)
      - Infinite Lives (Won't substract when you failed level)
      - Complete tasks without needing stars - Game Breaking for sure
      - Unlock Season Pass (by @NoFearGG) -- Go click the purchase button. It'll look like nothing happened. Leave season pass area. And go back. It'll show unlocked. And be saved that way


      🍏 Jailbreak iOS hacks: https://iosgods.com/topic/75434-homescapes-cheats-v776-5/

       

      ⬇️ iOS Hack Download IPA Link: https://iosgods.com/topic/71443-homescapes-v776-jailed-cheats-3/
        • Agree
        • Like
      • 2,422 replies
    • AXIS BLADE v1.1.1 +3 cheats [ Dmg x Def ]
      Modded/Hacked App: AXIS BLADE By AWESOMEPIECE<br style="background-color:#1e1f25;color:rgba(255,255,255,0.81);font-size:14px;">
      Bundle ID: com.awesomepiece.axisblade<br style="background-color:#1e1f25;color:rgba(255,255,255,0.81);font-size:14px;">
      iTunes Store Link: https://apps.apple.com/us/app/axis-blade/id6736382225

       

       

       

      📌 Mod Requirements

      - Jailbroken iPhone or iPad.
      - iGameGod / Filza / iMazing.
      - Cydia Substrate, ElleKit, Substitute or libhooker depending on your jailbreak (from Sileo, Cydia or Zebra).

       

      🤩 Hack Features

      - Damage Multiplier
      - Defense Multiplier
      - No Wall Damage

       

      ⬇️ iOS Hack Download Link


      Hidden Content

      Download Hack







       

      📖 iOS Installation Instructions

      STEP 1: Download the .deb hack file from the link above. Use Safari, Google Chrome or other iOS browsers to download.
      STEP 2: Once the file has downloaded, tap on it and then you will be prompted on whether you want to open the deb with iGameGod or copy it to Filza.
      STEP 3: If needed, tap on the downloaded file again, then select ‘Normal Install’ from the options on your screen.
      STEP 4: Let iGameGod/Filza finish the cheat installation. If it doesn’t install successfully, see the note below.
      STEP 5: Open the game, log in to your iOSGods account when asked, then toggle on the features you want and enjoy!

       

      NOTE: If you have any questions or problems, read our Jailbreak iOS Hack Troubleshooting & Frequently Asked Questions & Answers topic. If you still haven't found a solution, post your issue below and we'll do our best to help! If the hack does work for you, please post your feedback below and help out other fellow members that are encountering issues.

       

      🙌 Credits

      - @KyosukeNanbu

       

      More iOS App Hacks
      If you’re looking for Non-Jailbroken & No Jailbreak required iOS IPA hacks, visit the iOS Game Cheats & Hacks or the iOSGods App for a variety of modded games and apps for non-jailbroken iOS devices.

      Modded Android APKs
      Need modded apps or games for Android? Check out the latest custom APK mods, cheats & more in our Android Section.
      • 27 replies
    • AXIS BLADE v1.1.1 +3 cheats [ Dmg x Def ]
      Modded/Hacked App: AXIS BLADE By AWESOMEPIECE<br style="background-color:#1e1f25;color:rgba(255,255,255,0.81);font-size:14px;">
      Bundle ID: com.awesomepiece.axisblade<br style="background-color:#1e1f25;color:rgba(255,255,255,0.81);font-size:14px;">
      iTunes Store Link: https://apps.apple.com/us/app/axis-blade/id6736382225

       

      📌 Mod Requirements

      - Non-Jailbroken/Jailed or Jailbroken iPhone or iPad.
      - Sideloadly or alternatives.
      - Computer running Windows/macOS/Linux with iTunes installed.

       

      🤩 Hack Features

      - Damage Multiplier
      - Defense Multiplier
      - No Wall Damage
       

       

      ⬇️ iOS Hack Download IPA Link


      Hidden Content

      Download IPA Hack







       

      📖 PC Installation Instructions

      STEP 1: Download the pre-hacked .IPA file from the link above to your computer. To download from the iOSGods App, see our iOSGods App IPA Download Tutorial which includes a video example.
      STEP 2: Download Sideloadly and install it on your Windows or Mac.
      STEP 3: Open Sideloadly on your computer, connect your iOS device, and wait until your device name appears in Sideloadly.
      STEP 4: Once your iDevice is recognized, drag the modded .IPA file you downloaded and drop it into the Sideloadly application.
      STEP 5: Enter your Apple Account email, then press “Start.” You’ll then be asked to enter your password. Go ahead and provide the required information.
      STEP 6: Wait for Sideloadly to finish sideloading/installing the hacked IPA. If there are issues during installation, please read the note below.
      STEP 7: Once the installation is complete and you see the app on your Home Screen, you will need to go to Settings -> General -> Profiles / VPN & Device Management. Once there, tap on the email you entered from step 6, and then tap on 'Trust [email protected]'.
      STEP 8: Now go to your Home Screen and open the newly installed app and everything should work fine. You may need to follow further per app instructions inside the hack's popup in-game.

      NOTE: iOS/iPadOS 16 and later, you must enable Developer Mode. For free Apple Developer accounts, you will need to repeat this process every 7 days. If you have any questions or problems, read our Sideloadly FAQ section of the topic and if you don't find a solution, please post your issue below and we'll do our best to help! If the hack does work for you, post your feedback below and help out other fellow members that are encountering issues.

       

      🙌 Credits

      - @KyosukeNanbu

       
        • Like
      • 35 replies
    • War Commander: Rogue Assault v9.3.0 +2 Jailed Cheats
      Modded/Hacked App: War Commander: Rogue Assault By KIXEYE Inc
      Bundle ID: com.kixeye.warcommanderrogueassault
      iTunes Store Link: https://apps.apple.com/us/app/war-commander-rogue-assault/id695948278?uo=4


      Mod Requirements:
      - Non-Jailbroken/Jailed or Jailbroken iPhone/iPad/iPod Touch.
      - Sideloadly / Cydia Impactor or alternatives.
      - A Computer Running Windows/macOS/Linux with iTunes installed.


      Hack Features:
      - Damage Multiplier
      - Never Die


      Jailbreak required hack(s): 


      iOS Hack Download IPA Link:

      Hidden Content

      Download via the iOSGods App








      PC Installation Instructions:
      STEP 1: If necessary, uninstall the app if you have it installed on your iDevice. Some hacked IPAs will install as a duplicate app. Make sure to back it up so you don't lose your progress.
      STEP 2: Download the pre-hacked .IPA file from the link above to your computer. To download from the iOSGods App, see this tutorial topic.
      STEP 3: Download Sideloadly and install it on your PC.
      STEP 4: Open/Run Sideloadly on your computer, connect your iOS Device, and wait until your device name shows up.
      STEP 5: Once your iDevice appears, drag the modded .IPA file you downloaded and drop it inside the Sideloadly application.
      STEP 6: You will now have to enter your iTunes/Apple ID email login, press "Start" & then you will be asked to enter your password. Go ahead and enter the required information.
      STEP 7: Wait for Sideloadly to finish sideloading/installing the hacked IPA. If there are issues during installation, please read the note below.
      STEP 8: Once the installation is complete and you see the app on your Home Screen, you will need to go to Settings -> General -> Profiles/VPN & Device Management. Once there, tap on the email you entered from step 6, and then tap on 'Trust [email protected]'.
      STEP 9: Now go to your Home Screen and open the newly installed app and everything should work fine. You may need to follow further per app instructions inside the hack's popup in-game.

      NOTE: iOS/iPadOS 16 and later, you must enable Developer Mode. For free Apple Developer accounts, you will need to repeat this process every 7 days. Jailbroken iDevices can also use Sideloadly/Filza/IPA Installer to normally install the IPA with AppSync. If you have any questions or problems, read our Sideloadly FAQ section of the topic and if you don't find a solution, please post your issue down below and we'll do our best to help! If the hack does work for you, post your feedback below and help out other fellow members that are encountering issues.


      Credits:
      - AlyssaX64


      Cheat Video/Screenshots:

      N/A
      • 47 replies
    • (Tower Of Saviors) 神魔之塔 v2025.211 +4 Jailed Cheats
      Modded/Hacked App: 神魔之塔 By Mad Head Limited
      Bundle ID: com.madhead.tos.zh
      iTunes Store Link: https://apps.apple.com/us/app/%E7%A5%9E%E9%AD%94%E4%B9%8B%E5%A1%94/id583798880?uo=4


      Mod Requirements:
      - Non-Jailbroken/Jailed or Jailbroken iPhone/iPad/iPod Touch.
      - Sideloadly / Cydia Impactor or alternatives.
      - A Computer Running Windows/macOS/Linux with iTunes installed.


      Hack Features:
      - Damage Multiplier
      - Defense Multiplier
      - Weak Enemies
      - Dumb Enemies


      Jailbreak required hack(s): 


      iOS Hack Download IPA Link:

      Hidden Content

      Download via the iOSGods App








      PC Installation Instructions:
      STEP 1: If necessary, uninstall the app if you have it installed on your iDevice. Some hacked IPAs will install as a duplicate app. Make sure to back it up so you don't lose your progress.
      STEP 2: Download the pre-hacked .IPA file from the link above to your computer. To download from the iOSGods App, see this tutorial topic.
      STEP 3: Download Sideloadly and install it on your PC.
      STEP 4: Open/Run Sideloadly on your computer, connect your iOS Device, and wait until your device name shows up.
      STEP 5: Once your iDevice appears, drag the modded .IPA file you downloaded and drop it inside the Sideloadly application.
      STEP 6: You will now have to enter your iTunes/Apple ID email login, press "Start" & then you will be asked to enter your password. Go ahead and enter the required information.
      STEP 7: Wait for Sideloadly to finish sideloading/installing the hacked IPA. If there are issues during installation, please read the note below.
      STEP 8: Once the installation is complete and you see the app on your Home Screen, you will need to go to Settings -> General -> Profiles/VPN & Device Management. Once there, tap on the email you entered from step 6, and then tap on 'Trust [email protected]'.
      STEP 9: Now go to your Home Screen and open the newly installed app and everything should work fine. You may need to follow further per app instructions inside the hack's popup in-game.

      NOTE: iOS/iPadOS 16 and later, you must enable Developer Mode. For free Apple Developer accounts, you will need to repeat this process every 7 days. Jailbroken iDevices can also use Sideloadly/Filza/IPA Installer to normally install the IPA with AppSync. If you have any questions or problems, read our Sideloadly FAQ section of the topic and if you don't find a solution, please post your issue down below and we'll do our best to help! If the hack does work for you, post your feedback below and help out other fellow members that are encountering issues.


      Credits:
      - AlyssaX64


      Cheat Video/Screenshots:

      N/A
        • Haha
      • 90 replies
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines