Jump to content

How to deal with fixed value in memory with LLDB


Curtain
 Share

6 posts in this topic

Recommended Posts

I want to find IDA address by LLDB.
New puzzle. Convert memory address to IDA address in any way
I found the correct memory address through other ways, but the value of this memory address does not change through the game, so the watchpoint will not be HIT when i set watchpoint, finally unable to find the IDA address.
I have tried to change the memory data, but watchpoint still does not HIT
I am grateful for any help

Edit:The Game Name is "Knives Out By NetEase Games"

Features::Characters become larger(easy to shoot)

search for 0.78(F64) with IGG ,then tap "neaby" and search for 1(auto or F64,in my case search use auto type),then search for 1.000(F64) ,you will get four or five results, change the last one(1.0000) to 5.000, characters will 5 times the size compared to the original.

 @DiDA 

 @shmoo 

 @xiaov 

 @Mayaxaya 

 @Joka 

Updated by Curtain
  • Like 1
  • Haha 1
Link to comment
Share on other sites

19 hours ago, jayvee said:

modify it using memory editor? im sure your watchpoint hits as long as there is changes made

In general, the conditions of breakpoints triggered by the operation of the game changes, so modify the memory value can not trigger a breakpoint ,I have already tried.

Link to comment
Share on other sites

9 hours ago, Curtain said:

In general, the conditions of breakpoints triggered by the operation of the game changes, so modify the memory value can not trigger a breakpoint ,I have already tried.

I understand what you're saying. I've had this happen to me before, but it hasn't happened in a long time.

 

Player size must be held in some instance variable of the player class. Since your watchpoint isn't hitting because the value never changes, I believe your best bet would be to find any function that is apart of the player class, and find the register where the this/self pointer is stored. Set a breakpoint on any LDR or STR instruction with the register where the this pointer is stored, and let it hit. Then you can examine the instance variables of that object by doing

<register>+0xnumber

. Lets say you find R0 as the register thats holding the this pointer. In GDB, you would do

x/i $r0+0x4

to access the first instance variable, then

x/i $r0+0x8

to access the second, and so on. Keep counting by 0x4. You want to keep doing this until GDB spits out 1.0. The great thing about GDB is that you can tell what kind of format you want it to put the number in. In your case it would be a float, so you would do

x/f $r0+0x4

and so on until you see 1.0.

 

You can also see strings this way :D Just do

x/s $r0+0x4

. It doesn't apply to what you're doing right now, but its just a tip for things later on. GDB is amazing. Its like a weapon

 

Once you do find the register/number combination that gives back 1.0, write it down. Do a hex search in IDA for

LDR Rx, [<your register/number combination>

, for 0<=x<=12. Then if you dont come up with any results, do

VLDR Sx, [<your register/number combination>]

, for 0<=x<=18.

 

Its very far fetched but it may work. Good luck! And great idea about changing player size.

Updated by Guest
additional info
Link to comment
Share on other sites

On 1/16/2018 at 2:55 PM, Guest said:

I understand what you're saying. I've had this happen to me before, but it hasn't happened in a long time.

 

Player size must be held in some instance variable of the player class. Since your watchpoint isn't hitting because the value never changes, I believe your best bet would be to find any function that is apart of the player class, and find the register where the this/self pointer is stored. Set a breakpoint on any LDR or STR instruction with the register where the this pointer is stored, and let it hit. Then you can examine the instance variables of that object by doing

<register>+0xnumber

. Lets say you find R0 as the register thats holding the this pointer. In GDB, you would do

x/i $r0+0x4

to access the first instance variable, then

x/i $r0+0x8

to access the second, and so on. Keep counting by 0x4. You want to keep doing this until GDB spits out 1.0. The great thing about GDB is that you can tell what kind of format you want it to put the number in. In your case it would be a float, so you would do

x/f $r0+0x4

and so on until you see 1.0.

 

You can also see strings this way :D Just do

x/s $r0+0x4

. It doesn't apply to what you're doing right now, but its just a tip for things later on. GDB is amazing. Its like a weapon

 

Once you do find the register/number combination that gives back 1.0, write it down. Do a hex search in IDA for

LDR Rx, [<your register/number combination>

, for 0<=x<=12. Then if you dont come up with any results, do

VLDR Sx, [<your register/number combination>]

, for 0<=x<=18.

 

Its very far fetched but it may work. Good luck! And great idea about changing player size.

Dont understand :( 

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Unfortunately, your content contains terms that we do not allow. Please edit your content to remove the highlighted words below. For more information, please read our Posting Guidelines.
Reply to this topic... Posting Guidelines

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

  • Our picks

    • [Grandchase KR] 그랜드체이스 Cheats v1.63.4 +3
      Modded/Hacked App: 그랜드체이스 by Kakao Games Corp.
      Bundle ID: com.kakaogames.grdchase
      iTunes Store Link: https://apps.apple.com/kr/app/%EA%B7%B8%EB%9E%9C%EB%93%9C%EC%B2%B4%EC%9D%B4%EC%8A%A4/id1312734855?uo=4&at=1010lce4


      Hack Features:
      - Multiply Attack
      - Multiply Defense
      - Instant Skills


      iOS Hack Download Link: https://iosgods.com/topic/132809-arm64-%EA%B7%B8%EB%9E%9C%EB%93%9C%EC%B2%B4%EC%9D%B4%EC%8A%A4-grandchase-kr-cheats-all-versions-3/
      • 85 replies
    • Toy Blast Cheats (All Versions) +6
      Modded/Hacked App: Toy Blast By Peak Games
      Bundle ID: net.peakgames.amy
      iTunes Store Link: https://itunes.apple.com/us/app/toy-blast/id890378044?mt=8&uo=4&at=1010lce4



      Hack Features:
      - Infinite Hearts
      - Infinite Coins
      - Infinite Boosters
      - Never Lose
      - High Score
      - Always 3 Stars


      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/topic/73056-arm64-toy-blast-v5431-jailed-cheats-3/


      Hack Download Link: https://iosgods.com/topic/73037-arm64-toy-blast-cheats-v5475-6/



      Credits:
      - @Laxus
      • 602 replies
    • MARVEL Contest of Champions v38.0.0 +11++ Amazing Cheats!
      Modded/Hacked App: MARVEL Contest of Champions By Kabam
      Bundle ID: com.kabam.marvelbattle
      iTunes Link: https://itunes.apple.com/us/app/marvel-contest-of-champions/id896112560?mt=8&uo=4&at=1010lce4


      Hack Features
      - Enemy/AI Doesn't Attack
      - Special Attack/Skill Always Available
      - No Knockbacks When Hit
      - No Knockdowns When Hit
      - Enemy Doesn't Block
      - Auto Win - Whoever Attacks first, loses. Disable AI Doesn't Attack for this to work.
      - One Hit Kill / High Damage - Linked. Attack first or use with Enemy Doesn't Attack.

      Non-Jailbroken version of this hack: https://iosgods.com/topic/44075-marvel-contest-of-champions-v1311-2-cheats-for-jailed-devices/
        • Agree
        • Thanks
        • Like
      • 3,040 replies
    • MARVEL Contest of Champions v38.0.0 Hacks +5
      Hacked App: MARVEL Contest of Champions By Kabam
      iTunes Link: https://itunes.apple.com/us/app/marvel-contest-of-champions/id896112560?mt=8&uo=4&at=1010lce4
      Bundle ID: com.kabam.marvelbattle


      Hack Features
      - Enemy Doesn't Attack (working online/offline)
      - Enemy Doesn't Block
      - No Knockbacks - Disables yourself/enemy from getting thrown backwards when you hit or get hit
      - No Knockdowns - Disables yourself or the enemy from getting knocked down when hit

      Non-Jailbroken version of this hack: https://iosgods.com/topic/44075-marvel-contest-of-champions-v1311-2-cheats-for-jailed-devices/
      ViP version of this hack with more features: https://iosgods.com/topic/48646-marvel-contest-of-champions-v1400-7-amazing-cheats/
      Join Contest of Champions Discussions Club: https://iosgods.com/clubs/29-marvel-contest-of-champions-club/

        • Like
      • 6,078 replies
    • Tanks A Lot - 3v3 Brawls Cheats v4.901 +6
      Modded/Hacked App: Tanks A Lot - 3v3 Brawls by BoomBit, Inc.
      Bundle ID: com.boombitgames.TanksALot
      iTunes Store Link: https://apps.apple.com/us/app/tanks-a-lot-3v3-brawls/id1344713773?uo=4&at=1010lce4


      Hack Features:
      - God Mode
      - Infinite Ammo
      - No Reload
      - Speed Hacks
      - Disable Enemy Shield
      - No Skill Cooldown


      Hack Download Link: https://iosgods.com/topic/76001-arm64-tanks-a-lot-3v3-brawls-cheats-v190-6/
        • Agree
        • Winner
        • Like
      • 1,864 replies
    • DomiNation Asia By NEXON Company v11.1180.1181 - [ Currencies Freeze & More ]
      Modded/Hacked App: ドミネーションズ -文明創造- (DomiNations) By NEXON Company
      Bundle ID: com.nexon.dominations.asia
      iTunes Store Link: https://itunes.apple.com/jp/app/ドミネーションズ-文明創造-dominations/id1012778321


      Hack Features:
      - Unlimited Crowns/Food/Oil/Gold -> Resources will add instead of subtracting. Works with Crowns. Read note inside the feature for more information! This does not work for speeding up buildings.
      - All Achievements Unlocked 
      - Freeze Crowns/Food/Oil/Gold -> Freezes Resources so they do not decrease when used! This does not work for speeding up buildings.
      - No Citizen Cost 
      - 0 Cost to Speed Up Training Troops
      - 0 Cost to Speed Up Tactics
      - 0 Food Cost to Train Troops
      - 0 Food Cost to Upgrade Troops
      - No Timer to Upgrade Troops
      - 0 Food Cost to Train Spells
      - 0 General Train Cost
      - No General Train CoolDown
      - 0 Food Cost to Build Wonder
      - 0 Food Cost to Research Troops
      - 0 Food Cost to Upgrade Tactics
      - No Timer to Library Research
      - No Timer to Upgrade Spells
      - 0 Cost to Upgrade Buildings
      - 0 Workers Required to Upgrade
      - 0 Crown Cost For Peace

      This hack works on the latest x64 or ARM64 & ARM64e iDevices: iPhone 5s, 6, 6 Plus, 6s, 6s Plus, 7, 7 Plus, 8, 8 Plus, X, Xr, Xs, Xs Max, 11, 11 Pro, 11 Pro Max, 12, 12 Pro, 12 Pro Max, 12 Mini, 13, 13 Pro, 13 Pro Max, 13 Mini, 14, 14 Plus, 14 Pro, 14 Pro Max, SE, iPod Touch 6G, 7G, iPad Air, Air 2, iPad Pro & iPad Mini 2, 3, 4, 5, 6 and later.


      Global hack(s): https://iosgods.com/topic/50401-ultrahack-dominations-v6660661-40-cheats-iosgods-exclusive/?tab=comments#comment-1582742
        • Winner
        • Like
      • 850 replies
    • [Service] Harry Potter: Hogwarts Mystery (All Versions) - Coins & Gems
      Modded/Hacked App: Harry Potter: Hogwarts Mystery by Jam City, Inc.
      Bundle ID: com.tinyco.potter
      iTunes Store Link: https://itunes.apple.com/us/app/harry-potter-hogwarts-mystery/id1333256716


      Hack Features:
      ~30,000 Coins added to your account
      ~30,000 Gems added to your account


      Jailbreak required hack: https://iosgods.com/topic/68743-harry-potter-hogwarts-mystery-v1160-unlimited-gems-for-jailed/

      No Jailbreak required hack: https://app.iosgods.com/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
        • Agree
        • Thanks
        • Like
      • 708 replies
    • Harry Potter: Hogwarts Mystery v4.8.1 - [ Unlimited Energy & More ]
      Modded/Hacked App: Harry Potter: Hogwarts Mystery By Jam City, Inc.
      Bundle ID: com.tinyco.potter
      iTunes Store Link: https://apps.apple.com/us/app/harry-potter-hogwarts-mystery/id1333256716


      Hack Features:
      - Unlimited Energy
      - Max Attributes Level
      - Free Shop - Energy & Some Pets 
      - Max Creature Mastery Level
      - Unlimited Gems - Do Task And You'll Gain Gems
      - Feeding Button Enabled
        • Like
      • 291 replies
    • Harry Potter: Hogwarts Mystery v4.8.1 - [ Unlimited Energy & More ]
      Modded/Hacked App: Harry Potter: Hogwarts Mystery By Jam City, Inc.
      Bundle ID: com.tinyco.potter
      iTunes Store Link: https://apps.apple.com/us/app/harry-potter-hogwarts-mystery/id1333256716


      Hack Features:
      - Unlimited Energy
      - Max Attributes Level
      - Free Shop - Energy & Some Pets 
      - Max Creature Mastery Level
      - Unlimited Gems - Do Task And You'll Gain Gems
      - Feeding Button Enabled
        • Agree
        • Like
      • 646 replies
    • [ViP Hack] WarFriends v5.6.0 +6 Cheats
      Modded/Hacked App: WarFriends: PvP Shooter Game By Chillingo Ltd
      Bundle ID: com.chillingo.warfriends
      iTunes Link: https://itunes.apple.com/us/app/warfriends-pvp-shooter-game/id979873043


      Hack Features:
      - Debug Menu -> Most/Everything from previous hack has been patched/removed. However, it will still show you some in-game stuff.
      - Free Weapon Upgrades. Instant Weapon Upgrade Delivery Times!
      - Unlimited Clips/Ammo -> Works online & offline
      - No Weapon Reload / Unlimited Ammo in Clip -> Works online & offline
      - One Hit Kill Enemies / High Damage -> Buggy Online, works well offline. Linked with enemy, so hit them first.
      - Gun Fire Rate x1000 -> Shoot bullets really, really fast. Works online too, linked to enemy. One Hit Kill Alternative if you can aim.
      This hack is an In-Game Mod Menu (iGMM). In order to activate the Mod Menu, tap your screen with 3 fingers simultaneously.

       

      Non-Jailbroken Version of this hack: https://iosgods.com/topic/44193-warfriends-v140-3-cheats-ios-10/
        • Like
      • 1,712 replies
    • Tap Titans 2 v5.25.2 +3 [ iOS 16 Supported ]
      Modded/Hacked App: Tap Titans 2 By Game Hive Corporation
      Bundle ID: com.gamehivecorp.taptitans2
      iTunes Store Link: https://itunes.apple.com/us/app/tap-titans-2/id1120294802

      Hack Features:
      - Freeze Gold -> Gold Won't Subtract
      - Freeze Mana -> Mana Won't Subtract
      - x10 Gold Drop -> Drop More Gold than Usual
      Only works on x64 or ARM64 iDevices: iPhone 5s, 6, 6 Plus, 6s, 6s Plus, 7, 7 Plus, 8, 8 Plus, X, SE, iPod Touch 6G, iPad Air, Air 2, Pro & iPad Mini 2, 3, 4 and later.


      Jailbroken version of this hack: https://iosgods.com/topic/58609-iosgods-vip-tap-titans-2-v210-6-cheats/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
        • Agree
        • Haha
        • Winner
        • Like
      • 1,556 replies
    • Tap Titans 2 By Game Hive Corp. v5.25.2 [Custom Gold +MORE]
      Modded/Hacked App: Tap Titans 2 by Game Hive Corporation
      Bundle ID: com.gamehivecorp.taptitans2
      iTunes Store Link: https://itunes.apple.com/us/app/tap-titans-2/id1120294802


      Hack Features:
      - Custom Gold ( type your custom amount enable do a few taps collect some gold then disable )
      - Custom DPS  ( type your custom amount wait for NAN then disable )
      - Custom mana ( type your custom amount use skill)

      - ALL FEATURES BELOW REQUIRE NOT ENOUGH MANA AND SKILL UNLOCKED 

      TO USE ENABLE THE HACK SET MANA TO 0 WIT CUSTOM MANA THEN TAP SKILL BUTTON WATCH THE VIDEO TO SEE 

      - Use swipe perk for free 

      - Use doom perk for free 

      - Use make it rain perk free

      - Use clan make it rain perk free

      - Use double damage perk free 

       


      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/forum/79-no-jailbreak-section/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
        • Winner
        • Like
      • 3,304 replies
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best possible user experience without cookies. You can accept or decline our non-essential cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines