Help/Support help me change offset freeze hp in game!

vinhthai222006 · August 11, 2017

10 hours ago, Ted2 said:

Asking cz1993 won't help. Breakpoint on your function, so you can read the registers.

I do not know this command on lldb. Please give me instructions.

2 hours ago, Aswag1 said:

Ok, here is the breakdown of what the code is doing:

FCMP S0, #0.0 <-- this is comparing the health to see if your health (S0) is equal to 0.0

B.LS loc__ <-- B.LS (Branch if Less) means that if the value in S0 is less than 0.0, it will branch to this loc__

STR XZR <-- If the value is not less than 0.0, then the health is stored in XZR register

At loc__1001F2040 we see this:

STR WZR

MOVI V0, #0

This moves the value of 0 into the health register, thus making the player dead

Help me change??

Ted2 · August 11, 2017

1 minute ago, vinhthai222006 said:

I do not know this command on lldb. Please give me instructions.

b 0xoffset.

when game freezes

register read

be sure to add current aslr slide to the offset instead of substrCt

vinhthai222006 · August 11, 2017

Just now, Ted2 said:

b 0xoffset.

when game freezes

register read

be sure to add current aslr slide to the offset instead of substrCt

Do you think I need to break any offset?

vinhthai222006 · August 12, 2017

5 hours ago, NoHax said:

Change the FCMP S0, #1.0

You have to have the .0 on the end.

The most you can change it to is 31.0

i'm using arm64.Conversion Failed!

Updated August 12, 2017 by vinhthai222006

vinhthai222006 · August 12, 2017

4 hours ago, Ted2 said:

b 0xoffset.

when game freezes

register read

be sure to add current aslr slide to the offset instead of substrCt

(lldb) register read
General Purpose Registers:
        x0 = 0x0000000010004005
        x1 = 0x0000000007000806
        x2 = 0x0000000000000000
        x3 = 0x0000000000000c00
        x4 = 0x0000000000001e03
        x5 = 0x00000000ffffffff
        x6 = 0x0000000000000000
        x7 = 0x0000000000000000
        x8 = 0x00000000fffffbbf
        x9 = 0x0000000007000000
       x10 = 0x0000000007000100
       x11 = 0x000000000003f3a4
       x12 = 0x0000000000000000
       x13 = 0x0000000000000000
       x14 = 0x0000000000000000
       x15 = 0x0000000000000000
       x16 = 0xffffffffffffffe1
       x17 = 0x00000001857456c4  CoreFoundation`-[__NSArrayM count]
       x18 = 0x0000000000000000
       x19 = 0x0000000000000000
       x20 = 0x00000000ffffffff
       x21 = 0x0000000000001e03
       x22 = 0x0000000000000c00
       x23 = 0x000000016fd7ac18
       x24 = 0x0000000007000806
       x25 = 0x0000000000000000
       x26 = 0x0000000007000806
       x27 = 0x0000000010004004
       x28 = 0x0000000000000001
        fp = 0x000000016fd7ab10
        lr = 0x00000001966c0cf8  libsystem_kernel.dylib`mach_msg + 72
        sp = 0x000000016fd7aac0
        pc = 0x00000001966c0e7c  libsystem_kernel.dylib`mach_msg_trap + 8
      cpsr = 0x60000000

Ted2 · August 12, 2017

How much health did you have when u the breakpoint freezed?

convert that number to a hex number & search in ur head utcome of register read

August 14, 2017

@vinhthai222006 ^

K_K · August 14, 2017

What is this game ? Sometimes you don't always go to the right address you have to test it to make sure. I've gone to an address before and it wasn't use the bt feature and have a look through them. Trial and error .

vinhthai222006 · August 15, 2017

14 hours ago, Zimon said:

@vinhthai222006 ^

help!

14 hours ago, K_K said:

What is this game ? Sometimes you don't always go to the right address you have to test it to make sure. I've gone to an address before and it wasn't use the bt feature and have a look through them. Trial and error .

Frontline Commando: D-Day By Glu Games Inc v3.0.6

help me fix!