Help/Support help me change offset freeze hp in game!

[vinhthai222006 6.2k iPhone 5s 10.3.3]

10 hours ago, Ted2 said:

Asking cz1993 won't help. Breakpoint on your function, so you can read the registers.

 

I do not know this command on lldb. Please give me instructions.

 

2 hours ago, Aswag1 said:

Ok, here is the breakdown of what the code is doing:

FCMP S0, #0.0 <-- this is comparing the health to see if your health (S0) is equal to 0.0

B.LS loc__ <-- B.LS (Branch if Less) means that if the value in S0 is less than 0.0, it will branch to this loc__

STR XZR <-- If the value is not less than 0.0, then the health is stored in XZR register

 

At loc__1001F2040 we see this:

STR WZR  

MOVI V0, #0

This moves the value of 0 into the health register, thus making the player dead

Help me change??

[Ted2 39.2k iPhone 13 Pro 16.0 Donor]

1 minute ago, vinhthai222006 said:

 

I do not know this command on lldb. Please give me instructions.

 

b 0xoffset.

when game freezes

register read

 

be sure to add current aslr slide to the offset instead of substrCt

[vinhthai222006 6.2k iPhone 5s 10.3.3]

Just now, Ted2 said:

b 0xoffset.

when game freezes

register read

 

be sure to add current aslr slide to the offset instead of substrCt

Do you think I need to break any offset?

[vinhthai222006 6.2k iPhone 5s 10.3.3]

5 hours ago, NoHax said:

Change the FCMP S0, #1.0

You have to have the .0 on the end. 

The most you can change it to is 31.0

i'm using arm64.Conversion Failed! 

Updated August 12, 2017 by vinhthai222006

[vinhthai222006 6.2k iPhone 5s 10.3.3]

4 hours ago, Ted2 said:

b 0xoffset.

when game freezes

register read

 

be sure to add current aslr slide to the offset instead of substrCt

(lldb) register read
General Purpose Registers:
        x0 = 0x0000000010004005
        x1 = 0x0000000007000806
        x2 = 0x0000000000000000
        x3 = 0x0000000000000c00
        x4 = 0x0000000000001e03
        x5 = 0x00000000ffffffff
        x6 = 0x0000000000000000
        x7 = 0x0000000000000000
        x8 = 0x00000000fffffbbf
        x9 = 0x0000000007000000
       x10 = 0x0000000007000100
       x11 = 0x000000000003f3a4
       x12 = 0x0000000000000000
       x13 = 0x0000000000000000
       x14 = 0x0000000000000000
       x15 = 0x0000000000000000
       x16 = 0xffffffffffffffe1
       x17 = 0x00000001857456c4  CoreFoundation`-[__NSArrayM count]
       x18 = 0x0000000000000000
       x19 = 0x0000000000000000
       x20 = 0x00000000ffffffff
       x21 = 0x0000000000001e03
       x22 = 0x0000000000000c00
       x23 = 0x000000016fd7ac18
       x24 = 0x0000000007000806
       x25 = 0x0000000000000000
       x26 = 0x0000000007000806
       x27 = 0x0000000010004004
       x28 = 0x0000000000000001
        fp = 0x000000016fd7ab10
        lr = 0x00000001966c0cf8  libsystem_kernel.dylib`mach_msg + 72
        sp = 0x000000016fd7aac0
        pc = 0x00000001966c0e7c  libsystem_kernel.dylib`mach_msg_trap + 8
      cpsr = 0x60000000

 

[Ted2 39.2k iPhone 13 Pro 16.0 Donor]

How much health did you have when u the breakpoint freezed?

 

convert that number to a hex number & search in ur head utcome of register read

[Guest]

@vinhthai222006 ^

[K_K 167.3k iPhone 13 Pro Max 15.1]

What is this game ? Sometimes you don't always go to the right address you have to test it to make sure. I've gone to an address before and it wasn't  use the bt feature and have a look through them. Trial and error .

[vinhthai222006 6.2k iPhone 5s 10.3.3]

14 hours ago, Zimon said:

@vinhthai222006 ^

help!

14 hours ago, K_K said:

What is this game ? Sometimes you don't always go to the right address you have to test it to make sure. I've gone to an address before and it wasn't  use the bt feature and have a look through them. Trial and error .

Frontline Commando: D-Day By Glu Games Inc v3.0.6

help me fix!

[K_K 167.3k iPhone 13 Pro Max 15.1]

1 hour ago, vinhthai222006 said:

help!

Frontline Commando: D-Day By Glu Games Inc v3.0.6

help me fix!

What feature u trying to hack ?