Jump to content

IDA/GDB issue code inject crash ,help


Go to solution Solved by Oxytyramine,

19 posts in this topic

Recommended Posts

Posted (edited)

hey everybody,i need your help,please

I tried to hack Simcity via GDB/IDA .i found the offset is

0x498324  

orig:str r4, [r6, #152]

hack: str r7,[r6,#152]

as usually,i changed it to str r7,[r6,#152],   set *0x498324=E5867098

press c  enter return device make money change ,then app crash :wallbash: 

 

so,i tried to set $r4=oxVALUE,work now,

 

my quesion is :

1.is it possible to code inject directly like change r4 value ? if it is possible ,how to do.

2.why r4 to r7 will crash.

 

Hardware watchpoint 3: *257995816

Old value = 30
New value = 29
0x00498324 in g_s3e_code ()
3: x/i $pc 0x498324: 98 40 86 e5 str r4, [r6, #152]
2: $r0 = 484640170
1: x/i $pc 0x498324: 98 40 86 e5 str r4, [r6, #152]
(gdb) info r
r0 0x1ce305aa 484640170
r1 0xc6ef3720 -957401312
r2 0x88c110 8962320
r3 0x0 0
r4 0x1d 29
r5 0x88c118 8962328
r6 0xf60b390 257995664
r7 0x1 1
r8 0x6ce500cb 1826947275
r9 0x52ae977f 1387173759
r10 0x30317681 808547969
r11 0x0 0
r12 0x0 0
sp 0x52d1ab8 86842040
lr 0x4982d4 4817620
pc 0x498324 4817700
cpsr 0x280d0010 671940624
(gdb) set $r4=0x999999
warning: Unrecognized osabi 0 in arm_set_osabi_from_host_info
(gdb) c
Continuing.
warning: Unrecognized osabi 0 in arm_set_osabi_from_host_info
warning: Unrecognized osabi 0 in arm_set_osabi_from_host_info
Hardware watchpoint 3: *257995816

Old value = 29
New value = 10066329 :p 
0x00498324 in g_s3e_code ()
3: x/i $pc 0x498324: 98 40 86 e5 str r4, [r6, #152]
2: $r0 = 484640170
1: x/i $pc 0x498324: 98 40 86 e5 str r4, [r6, #152]
(gdb) c
Continuing.
game running image

 

symbolstub1:004982AC ; ---------------------------------------------------------------------------
__symbolstub1:004982AC
__symbolstub1:004982AC loc_4982AC ; CODE XREF: sub_49828C+14j
__symbolstub1:004982AC ADD R4, R0, #0xA0
__symbolstub1:004982B0 ADD R5, R0, #0x98
__symbolstub1:004982B4 MOV R0, R5
__symbolstub1:004982B8 MOV R1, R4
__symbolstub1:004982BC BL loc_496AC4
__symbolstub1:004982C0 CMP R0, R7
__symbolstub1:004982C4 BCC loc_4982A4
__symbolstub1:004982C8 MOV R0, R5
__symbolstub1:004982CC MOV R1, R4
__symbolstub1:004982D0 BL loc_496AC4
__symbolstub1:004982D4 LDR R5, =0x3F3E38
__symbolstub1:004982D8 ADD R5, PC, R5
__symbolstub1:004982DC LDR R10, [R5]
__symbolstub1:004982E0 CMP R10, #0
__symbolstub1:004982E4 RSB R4, R7, R0
__symbolstub1:004982E8 BNE loc_4982F4
__symbolstub1:004982EC BL sub_3C39EC
__symbolstub1:004982F0 LDR R10, [R5]
__symbolstub1:004982F4
__symbolstub1:004982F4 loc_4982F4 ; CODE XREF: sub_49828C+5Cj
__symbolstub1:004982F4 LDR R1, =0x3F3E0C
__symbolstub1:004982F8 LDR R2, =0x3F3E04
__symbolstub1:004982FC LDR R3, =0x3F3DFC
__symbolstub1:00498300 ADD R1, PC, R1
__symbolstub1:00498304 ADD R2, PC, R2
__symbolstub1:00498308 ADD R3, PC, R3
__symbolstub1:0049830C LDR R9, [R1]
__symbolstub1:00498310 MOV R12, #0
__symbolstub1:00498314 LDR R8, [R2]
__symbolstub1:00498318 LDR R1, =0xC6EF3720
__symbolstub1:0049831C LDR R0, [R3]
__symbolstub1:00498320 MOV R3, R12
__symbolstub1:00498324 STR R4, [R6,#0x98]
__symbolstub1:00498328
__symbolstub1:00498328 loc_498328 ; CODE XREF: sub_49828C+E0j
__symbolstub1:00498328 ADD R3, R3, #0x9E000000
__symbolstub1:0049832C ADD R3, R3, #0x374000
__symbolstub1:00498330 ADD R3, R3, #0x3980
__symbolstub1:00498334 ADD R3, R3, #0x39
__symbolstub1:00498338 ADD R11, R10, R12,LSL#4
__symbolstub1:0049833C ADD R2, R9, R12,LSR#5
__symbolstub1:00498340 ADD R5, R12, R3
__symbolstub1:00498344 EOR R2, R11, R2
__symbolstub1:00498348 EOR R2, R2, R5
__symbolstub1:0049834C ADD R4, R4, R2
__symbolstub1:00498350 ADD R5, R4, R3
__symbolstub1:00498354 ADD R11, R8, R4,LSL#4
__symbolstub1:00498358 ADD R2, R0, R4,LSR#5
__symbolstub1:0049835C EOR R2, R11, R2
__symbolstub1:00498360 EOR R2, R2, R5
__symbolstub1:00498364 CMP R3, R1
__symbolstub1:00498368 ADD R12, R12, R2
__symbolstub1:0049836C BNE loc_498328
__symbolstub1:00498370 MOV R2, #0
__symbolstub1:00498374 LDR R1, [R6,#0xBC]
__symbolstub1:00498378 ORR R2, R2, R12
__symbolstub1:0049837C MOV R3, R4
__symbolstub1:00498380 CMP R1, #0
__symbolstub1:00498384 STRD R2, [R6,#0xA0]
__symbolstub1:00498388 BEQ loc_4982A4
__symbolstub1:0049838C CMP R7, R1
__symbolstub1:00498390 MOVCS R7, R1
__symbolstub1:00498394 MOV R0, R7
__symbolstub1:00498398 RSB R7, R7, R1
__symbolstub1:0049839C STR R7, [R6,#0xBC]
__symbolstub1:004983A0 LDMFD SP!, {R3-R11,PC}
__symbolstub1:004983A0 ; End of function sub_49828C
__symbolstub1:004983A0
__symbolstub1:004983A0 ; 

Updated by zzmutu
Posted

Did u try set $r4=$r7 wothout 0x dude 0x is for when u set it to a new hex like set *0xoffset=0xhex

Or try set $r4=99999

i set $r4=0x99999 only 

 

whether "$r4=0x999" or "$r4=$r7"

how converted to just like [0xoffset,0xhex]

in this way ,make a patcher.

Posted

U mean u want to make it a tweak or a patcher?

yes,i think so 

 

because i learned code inject tut from DIDA/airmax  etc

 

they always found offset /funtion/data

 

then done such as :

 

offset:0xaddress

 

STR R4, [R6,#0x98] ----------->STR  R7, [R6,#0x98]

 

tweak like this:writeData(0xoffset, 0xhex)

 

because once run ,app will crash

_________________​_________________​_________________

if i want to change register value,(set $r4=0xhex  or set $r4=$r7) 

 

which is my offset and hex for make a patcher.

 

 

 

 

 

i am so sorry for pool english.

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Our picks

    • The Battle Cats v14.3.0 [ Cat Food + More
      Modded/Hacked App: The Battle Cats By ponos corporation
      Bundle ID: jp.co.ponos.battlecatsen
      App Store Link: https://apps.apple.com/us/app/the-battle-cats/id850057092?uo=4


      🤩 DIY Features

      - Cat Food

      - Cat EXP

      Booster - Energy & Other Things Same Method Use To Get Unlimited Everything
        • Thanks
        • Like
      • 2 replies
    • Gunfire Ops - War shooter v1.0.9 [+3 Jailed Cheats]
      Modded/Hacked App: Gunfire Ops - War shooter By VIVA GAMES S.L.
      Bundle ID: com.vivastudios.sniper.crisis.tactical.shooter
      App Store Link: https://apps.apple.com/us/app/gunfire-ops-war-shooter/id6476885406?uo=4



      🤩 Hack Features

      - Never Die
      - Add Currency (Enable and switch page)
      - No Reload

      • 0 replies
    • Gunfire Ops - War shooter v1.0.9 [+3 Cheats]
      Modded/Hacked App: Gunfire Ops - War shooter By VIVA GAMES S.L.
      Bundle ID: com.vivastudios.sniper.crisis.tactical.shooter
      App Store Link: https://apps.apple.com/us/app/gunfire-ops-war-shooter/id6476885406?uo=4



      🤩 Hack Features

      - Never Die
      - Add Currency (Enable and switch page)
      - No Reload
      • 0 replies
    • Zombie Drift Survival Racing v1.3.1 [+6 Jailed Cheats]
      Modded/Hacked App: Zombie Drift Survival Racing By NOSURRENDER YAZILIM VE TICARET ANONIM SIRKETI
      Bundle ID: com.nosurrenderstudio.rougelikesurvival
      App Store Link: https://apps.apple.com/us/app/zombie-drift-survival-racing/id6702024869?uo=4



      🤩 Hack Features

      - Never Die
      - One Hit Kill
      - Debug Menu
      • 2 replies
    • Zombie Drift Survival Racing v1.3.1 [+6 Cheats]
      Modded/Hacked App: Zombie Drift Survival Racing By NOSURRENDER YAZILIM VE TICARET ANONIM SIRKETI
      Bundle ID: com.nosurrenderstudio.rougelikesurvival
      App Store Link: https://apps.apple.com/us/app/zombie-drift-survival-racing/id6702024869?uo=4

       

      🤩 Hack Features

      - Never Die
      - One Hit Kill
      - Debug Menu
       
      • 0 replies
    • Omega Royale - Tower Defense v1.4.0 [+2 Jailed Cheats]
      Modded/Hacked App: Omega Royale - Tower Defense By Tower Pop Oy
      Bundle ID: com.towerpop.omegaroyale
      iTunes Store Link: https://apps.apple.com/us/app/omega-royale-tower-defense/id6447241072?uo=4

       

      🚀 Hack Features

      - Omega ViP Active
      - Always Can Cast Skill (Even when it's on cooldown)


      🍏 Jailbreak iOS hacks: https://iosgods.com/forum/5-game-cheats-hack-requests/
      🤖 Modded Android APKs: https://iosgods.com/forum/68-android-section/
      • 31 replies
    • Omega Royale - Tower Defense v1.4.0 [+2 Cheats]
      Modded/Hacked App: Omega Royale - Tower Defense By Tower Pop Oy
      Bundle ID: com.towerpop.omegaroyale
      iTunes Store Link: https://apps.apple.com/us/app/omega-royale-tower-defense/id6447241072?uo=4


       

      🚀 Hack Features

      - Omega ViP Active
      - Always Can Cast Skill (Even when it's on cooldown)


      🍏 For Non-Jailbroken & No Jailbreak required hacks: https://iosgods.com/forum/79-no-jailbreak-section/
      🤖 Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      • 32 replies
    • Three Kingdoms All-Star : Idle v1.4 +3 Cheat
      Modded/Hacked App: Three Kingdoms All-Star : Idle By Highbrow
      Bundle ID: com.highbrow.games.tki
      iTunes Store Link: https://apps.apple.com/us/app/three-kingdoms-all-star-idle/id6737404289?uo=4

       


      🤩 Hack Features

      - No Skill Cooldown
      • 22 replies
    • Matchington Mansion Cheats v1.179.0 +5
      Modded/Hacked App: Matchington Mansion By Magic Tavern, Inc.
      Bundle ID: com.matchington.mansion
      iTunes Store Link: https://apps.apple.com/us/app/matchington-mansion/id1216575026?uo=4

       

      📌 Mod Requirements

      - Jailbroken iPhone or iPad.
      - iGameGod / Filza / iMazing.
      - Cydia Substrate, ElleKit, Substitute or libhooker depending on your jailbreak (from Sileo, Cydia or Zebra).

       

      🤩 Hack Features

      - Infinite Moves
      - Infinite Lives
      - Infinite Booster
      - Infinite Coin (Spend some/ Get some)
      - Infinite Stars (Complete task without needing Stars)

       

      Non-Jailbroken Hack: https://iosgods.com/topic/75130-matchington-mansion-v11750-jailed-cheats-3/

       

      ⬇️ iOS Hack Download Link: https://iosgods.com/topic/75127-matchington-mansion-cheats-v11770-5/
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 795 replies
    • The Sims FreePlay Cheats v5.92.0 +5
      Modded/Hacked App: The Sims™ FreePlay By Electronic Arts
      Bundle ID: com.ea.sims3deluxe.ipad.inc
      iTunes Store Link: https://itunes.apple.com/us/app/the-sims-freeplay/id466965151?mt=8&uo=4&at=1010lce4


      Hack Features:
      - Infinite Simcash
      - Infinite SP
      - Infinite LSP
      - Max ViP Point
      - Unlock Everything


      Hack Download Link: https://iosgods.com/topic/72103-arm64-the-sims-freeplay-cheats-v5414-4-iosgods-exclusive/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 3,289 replies
    • HomeScapes v7.9.5 Jailed Cheats +3
      Modded/Hacked App: Homescapes By PLR Worldwide Sales Limited
      Bundle ID: com.playrix.gardenscapes-sweethome
      iTunes Store Link: https://apps.apple.com/us/app/homescapes/id1195621598?uo=4

       

      📌 Mod Requirements

      - Non-Jailbroken/Jailed or Jailbroken iPhone or iPad.
      - Sideloadly or alternatives.
      - Computer running Windows/macOS/Linux with iTunes installed.

       

      🤩 Hack Features

      - Infinite Moves
      - Infinite Boosters
      - Infinite Coins (Spend some)
      - Infinite Lives (Won't substract when you failed level)
      - Complete tasks without needing stars - Game Breaking for sure
      - Unlock Season Pass (by @NoFearGG) -- Go click the purchase button. It'll look like nothing happened. Leave season pass area. And go back. It'll show unlocked. And be saved that way


      🍏 Jailbreak iOS hacks: https://iosgods.com/topic/75434-homescapes-cheats-v776-5/

       

      ⬇️ iOS Hack Download IPA Link: https://iosgods.com/topic/71443-homescapes-v776-jailed-cheats-3/
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 2,422 replies
    • AXIS BLADE v1.1.1 +3 cheats [ Dmg x Def ]
      Modded/Hacked App: AXIS BLADE By AWESOMEPIECE<br style="background-color:#1e1f25;color:rgba(255,255,255,0.81);font-size:14px;">
      Bundle ID: com.awesomepiece.axisblade<br style="background-color:#1e1f25;color:rgba(255,255,255,0.81);font-size:14px;">
      iTunes Store Link: https://apps.apple.com/us/app/axis-blade/id6736382225

       

       

       

      📌 Mod Requirements

      - Jailbroken iPhone or iPad.
      - iGameGod / Filza / iMazing.
      - Cydia Substrate, ElleKit, Substitute or libhooker depending on your jailbreak (from Sileo, Cydia or Zebra).

       

      🤩 Hack Features

      - Damage Multiplier
      - Defense Multiplier
      - No Wall Damage

       

      ⬇️ iOS Hack Download Link


      Hidden Content

      Download Hack







       

      📖 iOS Installation Instructions

      STEP 1: Download the .deb hack file from the link above. Use Safari, Google Chrome or other iOS browsers to download.
      STEP 2: Once the file has downloaded, tap on it and then you will be prompted on whether you want to open the deb with iGameGod or copy it to Filza.
      STEP 3: If needed, tap on the downloaded file again, then select ‘Normal Install’ from the options on your screen.
      STEP 4: Let iGameGod/Filza finish the cheat installation. If it doesn’t install successfully, see the note below.
      STEP 5: Open the game, log in to your iOSGods account when asked, then toggle on the features you want and enjoy!

       

      NOTE: If you have any questions or problems, read our Jailbreak iOS Hack Troubleshooting & Frequently Asked Questions & Answers topic. If you still haven't found a solution, post your issue below and we'll do our best to help! If the hack does work for you, please post your feedback below and help out other fellow members that are encountering issues.

       

      🙌 Credits

      - @KyosukeNanbu

       

      More iOS App Hacks
      If you’re looking for Non-Jailbroken & No Jailbreak required iOS IPA hacks, visit the iOS Game Cheats & Hacks or the iOSGods App for a variety of modded games and apps for non-jailbroken iOS devices.

      Modded Android APKs
      Need modded apps or games for Android? Check out the latest custom APK mods, cheats & more in our Android Section.
        • Like
      • 27 replies
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines