Jump to content

10 posts in this topic

Recommended Posts

Posted (edited)

I've found a string in my game for "HealthRegen" and what I want to do is to change the value of the Health that is regened to a giant number.

So I thought to get the registers of that specific place and change some stuff for an unlinked godmode. (Enemies don't regen)

  Reveal hidden contents

 

Updated by bbReakMe
Posted

It is also the same with OHK.

__text:000000010145CEF8 sub_10145CEF8                           ; DATA XREF: __const:00000001028F9BB0↓o
__text:000000010145CEF8
__text:000000010145CEF8 var_10          = -0x10
__text:000000010145CEF8 var_s0          =  0
__text:000000010145CEF8
__text:000000010145CEF8                 STP             X20, X19, [SP,#-0x10+var_10]!
__text:000000010145CEFC                 STP             X29, X30, [SP,#0x10+var_s0]
__text:000000010145CF00                 ADD             X29, SP, #0x10
__text:000000010145CF04                 MOV             X19, X0
__text:000000010145CF08                 LDR             X8, [X19,#8]
__text:000000010145CF0C                 LDR             X20, [X8]
__text:000000010145CF10                 ADRP            X0, #aAttackpower@PAGE ; "AttackPower"
__text:000000010145CF14                 ADD             X0, X0, #aAttackpower@PAGEOFF ; "AttackPower"
__text:000000010145CF18                 BL              sub_102089C74
__text:000000010145CF1C                 MOV             X1, X0
__text:000000010145CF20                 MOV             X0, X20
__text:000000010145CF24                 MOV             X2, #0
__text:000000010145CF28                 BL              sub_100AD0780
__text:000000010145CF2C                 LDR             X8, [X19,#8]
__text:000000010145CF30                 LDR             X0, [X8,#8]
__text:000000010145CF34                 MOV             W1, #7
__text:000000010145CF38                 MOV             X2, #0
__text:000000010145CF3C                 LDP             X29, X30, [SP,#0x10+var_s0]
__text:000000010145CF40                 LDP             X20, X19, [SP+0x10+var_10],#0x20
__text:000000010145CF44                 B               sub_100A732C4
__text:000000010145CF44 ; End of function sub_10145CEF8
__text:000000010145CF44

 

Posted

I think you actually have to xref in order to get to the right function.

 

But to make sure: set a breakpoint on the function & see if it hits, read registers of it & backtrace.

Posted
  On 3/10/2018 at 10:12 PM, Ted2 said:

I think you actually have to xref in order to get to the right function.

 

But to make sure: set a breakpoint on the function & see if it hits, read registers of it & backtrace.

Expand  

Is putting a breakpoint on a function possible with LLDB?

w s e -- 0xFUNCTIONGOESHERE

 

Posted
  On 3/10/2018 at 10:14 PM, bbReakMe said:

Is putting a breakpoint on a function possible with LLDB?

w s e -- 0xFUNCTIONGOESHERE

 

Expand  

w s e command is for a watchpoint.

 

Breakpoint is: ' b 0xIDAOffset + Current ASLR slide'

Posted
  On 3/10/2018 at 10:15 PM, Ted2 said:

w s e command is for a watchpoint.

 

Breakpoint is: ' b 0xIDAOffset + Current ASLR slide'

Expand  

Just to be sure, ASLR slide is the output of image list?

Posted
  On 3/10/2018 at 10:20 PM, Ted2 said:

Yes, the value you substract from your watchpoints, but this time you add it.

Expand  

And the IDA offset is where there is the sub_blablabla

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines