Jump to content

6 posts in this topic

Recommended Posts

Posted (edited)

I want to find IDA address by LLDB.
New puzzle. Convert memory address to IDA address in any way
I found the correct memory address through other ways, but the value of this memory address does not change through the game, so the watchpoint will not be HIT when i set watchpoint, finally unable to find the IDA address.
I have tried to change the memory data, but watchpoint still does not HIT
I am grateful for any help

Edit:The Game Name is "Knives Out By NetEase Games"

Features::Characters become larger(easy to shoot)

search for 0.78(F64) with IGG ,then tap "neaby" and search for 1(auto or F64,in my case search use auto type),then search for 1.000(F64) ,you will get four or five results, change the last one(1.0000) to 5.000, characters will 5 times the size compared to the original.

 @DiDA 

 @shmoo 

 @xiaov 

 @Mayaxaya 

 @Joka 

Updated by Curtain
  • Like 1
  • Haha 1
Posted
19 hours ago, jayvee said:

modify it using memory editor? im sure your watchpoint hits as long as there is changes made

In general, the conditions of breakpoints triggered by the operation of the game changes, so modify the memory value can not trigger a breakpoint ,I have already tried.

Posted

but watchpoint triggers as long as theres a changes on that address. watchpoint and breakpoint are different thing

Posted (edited)
9 hours ago, Curtain said:

In general, the conditions of breakpoints triggered by the operation of the game changes, so modify the memory value can not trigger a breakpoint ,I have already tried.

I understand what you're saying. I've had this happen to me before, but it hasn't happened in a long time.

 

Player size must be held in some instance variable of the player class. Since your watchpoint isn't hitting because the value never changes, I believe your best bet would be to find any function that is apart of the player class, and find the register where the this/self pointer is stored. Set a breakpoint on any LDR or STR instruction with the register where the this pointer is stored, and let it hit. Then you can examine the instance variables of that object by doing

<register>+0xnumber

. Lets say you find R0 as the register thats holding the this pointer. In GDB, you would do

x/i $r0+0x4

to access the first instance variable, then

x/i $r0+0x8

to access the second, and so on. Keep counting by 0x4. You want to keep doing this until GDB spits out 1.0. The great thing about GDB is that you can tell what kind of format you want it to put the number in. In your case it would be a float, so you would do

x/f $r0+0x4

and so on until you see 1.0.

 

You can also see strings this way :D Just do

x/s $r0+0x4

. It doesn't apply to what you're doing right now, but its just a tip for things later on. GDB is amazing. Its like a weapon

 

Once you do find the register/number combination that gives back 1.0, write it down. Do a hex search in IDA for

LDR Rx, [<your register/number combination>

, for 0<=x<=12. Then if you dont come up with any results, do

VLDR Sx, [<your register/number combination>]

, for 0<=x<=18.

 

Its very far fetched but it may work. Good luck! And great idea about changing player size.

Updated by Guest
additional info
Posted
On 1/16/2018 at 2:55 PM, Guest said:

I understand what you're saying. I've had this happen to me before, but it hasn't happened in a long time.

 

Player size must be held in some instance variable of the player class. Since your watchpoint isn't hitting because the value never changes, I believe your best bet would be to find any function that is apart of the player class, and find the register where the this/self pointer is stored. Set a breakpoint on any LDR or STR instruction with the register where the this pointer is stored, and let it hit. Then you can examine the instance variables of that object by doing


<register>+0xnumber

. Lets say you find R0 as the register thats holding the this pointer. In GDB, you would do


x/i $r0+0x4

to access the first instance variable, then


x/i $r0+0x8

to access the second, and so on. Keep counting by 0x4. You want to keep doing this until GDB spits out 1.0. The great thing about GDB is that you can tell what kind of format you want it to put the number in. In your case it would be a float, so you would do


x/f $r0+0x4

and so on until you see 1.0.

 

You can also see strings this way :D Just do


x/s $r0+0x4

. It doesn't apply to what you're doing right now, but its just a tip for things later on. GDB is amazing. Its like a weapon

 

Once you do find the register/number combination that gives back 1.0, write it down. Do a hex search in IDA for


LDR Rx, [<your register/number combination>

, for 0<=x<=12. Then if you dont come up with any results, do


VLDR Sx, [<your register/number combination>]

, for 0<=x<=18.

 

Its very far fetched but it may work. Good luck! And great idea about changing player size.

Dont understand :( 

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Our picks

    • Hungry Shark World v7.1.1 [ +9 Cheats ] Currency Max
      Modded/Hacked App: Hungry Shark World By Ubisoft
      Bundle ID: com.ubisoft.hungrysharkworld
      iTunes Store Link: https://apps.apple.com/us/app/hungry-shark-world/id1046846443?uo=4


      Hack Features:
      - ADS NO

      - Gems

      - Coins 

      - Pearls 

      - Premium Pass

      - Health Auto Drain [ OFF ]

      - Boost Max 

      - Score Multi 

      - Revive Max 


      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/forum/79-no-jailbreak-section/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 71 replies
    • Hungry Shark Evolution v13.1.0 [ +9 Cheats ] Never Die
      Modded/Hacked App: Hungry Shark Evolution By Ubisoft
      Bundle ID: com.fgol.HungrySharkEvolution
      iTunes Store Link: https://apps.apple.com/us/app/hungry-shark-evolution/id535500008?uo=4



      Hack Features:

      - ADS NO

      - Gems Unlimited 

      - Coins Unlimited 

      - Health [ Auto Drain OFF ]

      - Booster Freeze 

      - Speed Hack 

      - Wall Break [ Only For Small Shark ]

      - Score Multi 

      - Invincible [ After Respawn ] Never Die
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 74 replies
    • Hungry Dragon by Hungry Shark v5.5.1 [ +7 Cheats ] Currency Max
      Modded/Hacked App: Hungry Dragon By Ubisoft
      Bundle ID: com.ubisoft.hungrydragon
      iTunes Store Link: https://apps.apple.com/us/app/hungry-dragon/id1163163344?uo=4

      Hack Features:
      - Currency Max
      - ADS NO 
      - Pet Unlocked 
      - Revive Cost 0
      - EAT Radius 
      - Booster Max 
      - Life [ Auto Drain OFF ]
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 17 replies
    • Hungry Dragon: by Hungry Shark v5.5.1 [ +7 Jailed ] Currency Max
      Modded/Hacked App: Hungry Dragon: by Hungry Shark By Ubisoft
      Bundle ID: com.ubisoft.hungrydragon
      iTunes Store Link: https://apps.apple.com/us/app/hungry-dragon-by-hungry-shark/id1163163344?uo=4

      Hack Features:

      - Currency Unlimited
      - NO ADS
      - Pet Unlocked
      - Revive Cost 0
      - EAT Radius
      - Booster Max
      - HP [ Auto Drain OFF ]
        • Informative
        • Agree
        • Thanks
        • Winner
        • Like
      • 13 replies
    • CarX Highway Racing v1.75.6 [ +6 Jailed ] Easy Win
      Modded/Hacked App: CarX Highway Racing By KAR IKS TEKHNOLODZHIS, OOO
      Bundle ID: com.CarXTech.highWayRacing
      iTunes Store Link: https://apps.apple.com/us/app/carx-highway-racing/id1236730191?uo=4


      Hack Features:

      - Auto ADS Disable

      - Mechanic Max

      - Police NO

      - Traffic NO

      - Rivals NO

      - Easy Drive Always
        • Informative
        • Agree
        • Haha
        • Winner
        • Like
      • 13 replies
    • CarX Highway Racing v1.75.6 [ +6 Cheats ] Easy Win
      Modded/Hacked App: CarX Highway Racing By KAR IKS TEKHNOLODZHIS, OOO
      Bundle ID: com.CarXTech.highWayRacing
      iTunes Store Link: https://apps.apple.com/us/app/carx-highway-racing/id1236730191?uo=4

      Hack Features:
      - Auto ADS Disable

      - Mechanic Max

      - Police NO

      - Traffic NO

      - Rivals NO

      - Easy Drive Always
        • Agree
        • Haha
        • Like
      • 8 replies
    • Dream Master-Travel Puzzle  v3.80 [ +5 Cheats ] Auto Win
      Modded/Hacked App: Dream Master-Travel Puzzle By F.O.G LIMITED
      Bundle ID: com.match.busters.free.ios
      iTunes Store Link: https://apps.apple.com/us/app/dream-master-travel-puzzle/id6636480682?uo=4


      🤩 Hack Features

      - Auto Win

      - Coins [ Disable After Hack ]

      - Stars [ Disable After Hack ]

      - Lives 0 Play Unlimited

      - Booster


      🍏 For Non-Jailbroken & No Jailbreak required hacks: https://iosgods.com/forum/79-no-jailbreak-section/
      🤖 Modded Android APKs: https://iosgods.com/forum/68-android-section/
        • Thanks
      • 12 replies
    • Dream Master-Travel Puzzle  v3.80 [ +5 Jailed ] Auto Win
      Modded/Hacked App: Dream Master-Travel Puzzle By F.O.G LIMITED
      Bundle ID: com.match.busters.free.ios
      iTunes Store Link: https://apps.apple.com/us/app/dream-master-travel-puzzle/id6636480682?uo=4

       

      🤩 Hack Features

      - Auto Win

      - Coins [ Disable After Hack ]

      - Stars [ Disable After Hack ]

      - Lives 0 Play Unlimited

      - Booster


      🍏 Jailbreak iOS hacks: https://iosgods.com/forum/5-game-cheats-hack-requests/
      🤖 Modded Android APKs: https://iosgods.com/forum/68-android-section/

       

      ⬇️ iOS Hack Download IPA Link


      Hidden Content

      Download via the iOSGods App
        • Winner
        • Like
      • 15 replies
    • Stick Cricket Clash v2.1.3 [ +3 Jailed ] Currency Freeze
      Modded/Hacked App: Stick Cricket Clash By Stick Sports Ltd
      Bundle ID: com.sticksports.stickcricketclash
      iTunes Store Link: https://apps.apple.com/us/app/stick-cricket-clash/id6444344271?uo=4


      Hack Features:
      - Currency Freeze
      - Score [ Win All Match ]
      - Ads Reward 


      Jailbreak required hack(s): https://iosgods.com/forum/5-game-cheats-hack-requests/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
        • Haha
        • Winner
        • Like
      • 23 replies
    • Stick Cricket Clash v2.1.3 [ +3 Cheats ] Currency Freeze
      Modded/Hacked App: Stick Cricket Clash By Stick Sports Ltd
      Bundle ID: com.sticksports.stickcricketclash
      iTunes Store Link: https://apps.apple.com/us/app/stick-cricket-clash/id6444344271?uo=4



      Hack Features:
      - Currency Freeze
      - Score Win All Match
      - Ads Reward 



      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/forum/79-no-jailbreak-section/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
        • Informative
        • Agree
        • Thanks
        • Winner
        • Like
      • 45 replies
    • Poker Hero - Joker Legend v1.8.9 [ +6 Cheats ] Easy Win
      Modded/Hacked App: Poker Hero - Joker Legend By Gemini Network
      Bundle ID: com.gemini.dash.deck
      iTunes Store Link: https://apps.apple.com/us/app/poker-hero-joker-legend/id6498983199?uo=4


      Hack Features:
      - Energy Freeze 

      - ATK Power [ Choose 1 Card Only Win Battle ]

      - Spell Power 

      - Always FullHouse [ Select Any Cards ]

      - Always Flush [ Select Any Cards ]

      - Always Straight [ Select Any Cards ]


      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/forum/79-no-jailbreak-section/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 73 replies
    • Poker Hero - Joker Legend v1.8.9 [ +6 Jailed ] Easy Win
      Modded/Hacked App: Poker Hero - Joker Legend By Gemini Network
      Bundle ID: com.gemini.dash.deck
      iTunes Store Link: https://apps.apple.com/us/app/poker-hero-joker-legend/id6498983199?uo=4



      Hack Features:

      - Energy Freeze 

      - ATK Power [ Choose 1 Card Only Win Battle ]

      - Spell Power 

      - Always FullHouse [ Select Any Cards ]

      - Always Flush [ Select Any Cards ]

      - Always Straight [ Select Any Cards ]


      Jailbreak required hack(s): https://iosgods.com/forum/5-game-cheats-hack-requests/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
        • Informative
        • Haha
        • Winner
        • Like
      • 39 replies
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines