Help/Support Grabbing Dynamic Offsets

Affe2626 · March 24, 2017

Hi, I've just started to code tweaks to iOS but I wonder how I could get the base address to later add offsets onto.

The game I've taken as a test app is "Ballz".

When I search the offset for coins/points or whatever it is it gives me like 4 addresses so I took them all but they obviously change on startup so it's impossible to write a tweak which writes to memory. Is there also any way to get patterns/signatures for getting addresses? Like this: "xF4/xT6/xYO/xUG/xET/xIT"

Edit: I searched up my address with GameGem.

Updated March 24, 2017 by Affe2626

ProNab · March 24, 2017

use lldb to set watchpoint on the address you found using gamegem, the offset which lldb gives u will be the one used in ida. Search for that offset in ida and look around it for arm headers which you can change to give yourself unlimited coins etc

Affe2626 · March 24, 2017

use lldb to set watchpoint on the address you found using gamegem, the offset which lldb gives u will be the one used in ida. Search for that offset in ida and look around it for arm headers which you can change to give yourself unlimited coins etc

Okay, not home right now and I don't have access to a PC here. Can I do something through just my phone?

Thanks, I'll try that.

ProNab · March 24, 2017

Okay, not home right now and I don't have access to a PC here. Can I do something through just my phone?

Thanks, I'll try that.

nope, you need a pc

Affe2626 · March 24, 2017

nope, you need a pc

Ok, thanks for help. Leaving this open since I don't know if it works and there's probably more ways of doing it

Updated March 24, 2017 by Affe2626

ProNab · March 24, 2017

Ok, thanks for help. Leaving this open since I don't know if it works and theres probably more ways of doing it

March 25, 2017

Hi, I've just started to code tweaks to iOS but I wonder how I could get the base address to later add offsets onto.

The game I've taken as a test app is "Ballz".

When I search the offset for coins/points or whatever it is it gives me like 4 addresses so I took them all but they obviously change on startup so it's impossible to write a tweak which writes to memory. Is there also any way to get patterns/signatures for getting addresses? Like this: "xF4/xT6/xYO/xUG/xET/xIT"

Edit: I searched up my address with GameGem.

Those are memory addresses; they are supposed to change every time you run the game. The static offset you're looking for is the IDA offset, or more specifically the address in the actual executable that handles whatever you want to hack. On your computer start up LLDB and set a watchpoint for each of those four memory addresses you got and do something to change the value of what you want to hack

Affe2626 · March 25, 2017

15 hours ago, shmoo said:

Those are memory addresses; they are supposed to change every time you run the game. The static offset you're looking for is the IDA offset, or more specifically the address in the actual executable that handles whatever you want to hack. On your computer start up LLDB and set a watchpoint for each of those four memory addresses you got and do something to change the value of what you want to hack

Ty, yea I use the word offset instead of address sometimes for an unknown reason