Jump to content

[IDA Tutorial] How to deal with/hack vectors


469 posts in this topic

Recommended Posts

Posted

This is a tutorial that is pretty advanced and because of that, I expect you to have a grip on regular IDA (normal instructions I mean, MOV, SUB, STR, etc). Of course it is not a requirement, you could just be viewing this tutorial out of curiosity. But it would really help to know some basic IDA before trying to hack vectors.

 

But what the hell is a vector? A vector is an instruction prefixed with "V". For example: VSTR, VMOV, VSUB, VCVT (convert), VLDR, etc. It is the instruction that you get when you set a watchpoint on a memory address that holds a float value. You will know that it is a float when iGameGuardian displays the number like "500.000000". Most of the time you be hacking VSTR, VSUB, and VCVT, at least in my experience.

 

Hidden Content

    Since there is no R7 type register for vectors, we have to find different ways to hack them. If IDA drops you off at a

    VSTR S0, [R0, #20]
    you cannot just change it to

    VSTR S7, [R0, #20]
    because in most cases, it would just make the game crash.

     

    So what the hell can we do? The best way to hack a VSTR is to NOP it (except for when hacking cooldown, but I will get to that). This is extremely effective when hacking your health because instead of storing your health value in a normal, unhacked game, the game won't be able to store your health at all which results in infinite health for you :snoop: But sometimes both enemy health and your health are linked and you have to unlink them. I'll cover that at the end of this tutorial.

     

    If you are hacking cooldown for some sort of skill, you cannot just NOP the VSTR (instructions for cooldown are most always VSTR) because once the timer starts, it will never count down, resulting in an infinite timer for skills. To combat this, either you can:

    1. Find a register that holds the value of zero and store that register into R0+20 or

    2. Move zero into an already existing register and store that register into R0+20.

     

    If you are going with option one, you'll have to set a breakpoint on your offset and examine the registers to see what they hold (reg re for LLDB and info r for GDB). Just for the sake of this tutorial, we'll say that R3 holds the value of zero. Now that you know that, you can change

    VSTR S0, [R0, #20]
    to a regular
    STR R3, [R0, #20]
    . If you know basic IDA, you should understand why/how that works.

     

    If you are going with option two, it will be just a tiny bit more complicated. You'll have to hack the instruction above the VSTR with a MOV R0, #0. Then you'll have to store R0 into R0+20. If that is confusing, look at this:

     

    Here are the instructions before any modification:

    VCVT.F32.F64 S0, D2
    VSTR S0, [R0, #20]
    
    And change that to:

    MOV R0, #0
    STR R0, [R0, #20]
    
    What this does is instead of the game converting a 64 bit float value into a 32 bit float value then store that value into R0+20, the game will now move the value of zero into R0 then store R0 (zero) into R0+20, resulting in a timer of zero seconds, which means instant cooldown. This is what you might know as "no skill cooldown".

     

    VSTR's are really the only instructions that you hack differently than everything else. You hack VSUB's with NOP's, you can hack VMOV's the normal way you hack a MOV (but with common sense), etc. It is not really hard once you get the hang of it.

     

    About unlinking vectors:

    I'm not entirely sure about this, but to unlink vectors you could try this:

    1. Set a breakpoint on your offset.

    2. Let the enemy hit you, and your breakpoint should hit. Now type "bt", which means "backtrace". Copy the backtrace onto notepad or something convienent and label it "my health backtrace".

    3. Now continue, but this time you hurt the enemy, and your breakpoint should hit. Do a backtrace again and copy it onto notepad and label it "enemy health backtrace".

    4. See which frame first differs between the two backtraces (you'll know what I mean by frame when you backtrace) and NOP the branch that connects them.

     

    That's it! :) If you want to see some examples of me hacking vectors, check these links out: http://iosgods.com/topic/7615-offsetsdragon-slayer-v110/

    http://iosgods.com/topic/7152-offsets-not-str-r7-for-everything-pindestructible-v301/

    http://iosgods.com/topic/7501-offsetsblood-and-glory-immortals-v110/

 

Please let me know if you have any questions. :)

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Our picks

    • Tsukuyomi: The Divine Hunter v1.0.3 +3 Jailed Cheats [ Damage & Defence ]
      Modded/Hacked App: Tsukuyomi: The Divine Hunter By COLOPL, Inc.
      Bundle ID: jp.colopl.mask
      App Store Link: https://apps.apple.com/us/app/tsukuyomi-the-divine-hunter/id6505051119?uo=4

       
       

      🤩 Hack Features

      - Damage Multiplier
      - Defence Multiplier
      - God Mode
        • Thanks
      • 4 replies
    • Eterspire - Fantasy MMORPG v52.0 +2 Jailed Cheats [ Damage & Defence ]
      Modded/Hacked App: Eterspire - Fantasy MMORPG By Stonehollow Workshop LLC
      Bundle ID: com.stonehollow-workshop.Eterspire
      iTunes Store Link: https://apps.apple.com/us/app/eterspire-fantasy-mmorpg/id1658183817?uo=4

       
       

      🤩 Hack Features

      - Damage Multiplier
      - Defence Multiplier
        • Informative
        • Like
      • 20 replies
    • Eterspire - Fantasy MMORPG v52.0 +2 Cheats [ Damage & Defence ]
      Modded/Hacked App: Eterspire - Fantasy MMORPG By Stonehollow Workshop LLC
      Bundle ID: com.stonehollow-workshop.Eterspire
      iTunes Store Link: https://apps.apple.com/us/app/eterspire-fantasy-mmorpg/id1658183817?uo=4

       
       

      🤩 Hack Features

      - Damage Multiplier
      - Defence Multiplier
        • Agree
        • Thanks
        • Winner
        • Like
      • 75 replies
    • Thronefall - A Little Kingdom v2.12.4 +5 Jailed Cheats [ Damage & Defence ]
      Modded/Hacked App: Thronefall - A Little Kingdom By Doghowl Games Ltd
      Bundle ID: com.doghowlgames.thronefall
      App Store Link: https://apps.apple.com/us/app/thronefall-a-little-kingdom/id6744029320?uo=4

       


      🤩 Hack Features

      - Damage Multiplier
      - Defence Multiplier
      - God Mode
      - Unlimited Coins -> Will increase instead of decrease.
      - Free In-App Purchases
        • Agree
        • Thanks
        • Winner
        • Like
      • 9 replies
    • Thronefall - A Little Kingdom v2.12.4 +5 Cheats [ Damage & Defence ]
      Modded/Hacked App: Thronefall - A Little Kingdom By Doghowl Games Ltd
      Bundle ID: com.doghowlgames.thronefall
      App Store Link: https://apps.apple.com/us/app/thronefall-a-little-kingdom/id6744029320?uo=4

       


      🤩 Hack Features

      - Damage Multiplier
      - Defence Multiplier
      - God Mode
      - Unlimited Coins -> Will increase instead of decrease.
      - Free In-App Purchases
        • Agree
        • Thanks
        • Winner
        • Like
      • 9 replies
    • Tsukuyomi: The Divine Hunter v1.0.3 +3 Cheats [ Damage & Defence ]
      Modded/Hacked App: Tsukuyomi: The Divine Hunter By COLOPL, Inc.
      Bundle ID: jp.colopl.mask
      App Store Link: https://apps.apple.com/us/app/tsukuyomi-the-divine-hunter/id6505051119?uo=4

       


      🤩 Hack Features

      - Damage Multiplier
      - Defence Multiplier
      - God Mode
        • Thanks
        • Like
      • 4 replies
    • Racing Kingdom v0.36.14 +2 Jailed Cheats [ Auto Win ]
      Modded/Hacked App: Racing Kingdom By SUPERGEARS OYUN YAZILIM TEKNOLOJI VE PAZARLAMA ANONIM SIRKETI
      Bundle ID: com.supergears.racingkingdom
      iTunes Store Link: https://apps.apple.com/us/app/racing-kingdom/id6468027706?uo=4

       


      🚀 Hack Features

      - Auto Win
      - Freeze Rival


      🍏 Jailbreak iOS hacks: [Mod Menu Hack] Racing Kingdom v0.33.6 +2 Cheats [ Auto Win ] - ViP Cheats - iOSGods
      🤖 Modded Android APK(s): https://iosgods.com/forum/68-android-section/
        • Informative
        • Agree
        • Winner
        • Like
      • 17 replies
    • Racing Kingdom v0.36.14 +2 Cheats [ Auto Win ]
      Modded/Hacked App: Racing Kingdom By SUPERGEARS OYUN YAZILIM TEKNOLOJI VE PAZARLAMA ANONIM SIRKETI
      Bundle ID: com.supergears.racingkingdom
      iTunes Store Link: https://apps.apple.com/us/app/racing-kingdom/id6468027706?uo=4

       
       

      🚀 Hack Features

      - Auto Win
      - Freeze Rival


      🍏 For Non-Jailbroken & No Jailbreak required hacks: [IPA Mod Menu] Racing Kingdom v0.33.6 +2 Jailed Cheats [ Auto Win ] - ViP Non-Jailbroken Hacks & Cheats - iOSGods
      🤖 Modded Android APK(s): https://iosgods.com/forum/68-android-section/
        • Informative
        • Agree
        • Thanks
        • Winner
        • Like
      • 51 replies
    • Nightfall: Kingdom Frontier TD v1.0.389 +8 Jailed Cheats [ Currencies ]
      Modded/Hacked App: Nightfall: Kingdom Frontier TD By Fansipan Limited
      Bundle ID: com.fansipan.nightfall.tower.simulation.strategy.td.game
      iTunes Store Link: https://apps.apple.com/us/app/nightfall-kingdom-frontier-td/id6621272416?uo=4


      Hack Features:
      - God Mode
      - Unlimited In-Game Coins -> Will increase instead of decrease.
      - Unlimited Currencies -> Will increase instead of decrease.
      - No Ads
      - Add 1K Currency -> Head over to Settings and toggle the Discord button. [ VIP ]
      - Unlock All Features -> Head over to Settings and toggle the Discord button. [ VIP ]
      - Unlock All / Everything ->  Head over to Settings and toggle the Discord button. [ VIP ]
      - Complete Tutorial -> Head over to Settings and toggle the Discord button. [ VIP ]


      Jailbreak required hack(s): [Mod Menu Hack] Nightfall: Kingdom Frontier TD v1.0.41 +8 Cheats [ Unlimited Currencies ] - Free Jailbroken Cydia Cheats - iOSGods
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 86 replies
    • Nightfall: Kingdom Frontier TD v1.0.389 +8 Cheats [ Currencies ]
      Modded/Hacked App: Nightfall: Kingdom Frontier TD By Fansipan Limited
      Bundle ID: com.fansipan.nightfall.tower.simulation.strategy.td.game
      iTunes Store Link: https://apps.apple.com/us/app/nightfall-kingdom-frontier-td/id6621272416?uo=4


      Hack Features:
      - God Mode
      - Unlimited In-Game Coins -> Will increase instead of decrease.
      - Unlimited Currencies -> Will increase instead of decrease.
      - No Ads
      - Add 1K Currency -> Head over to Settings and toggle the Discord button. [ VIP ]
      - Unlock All Features -> Head over to Settings and toggle the Discord button. [ VIP ]
      - Unlock All / Everything ->  Head over to Settings and toggle the Discord button. [ VIP ]
      - Complete Tutorial -> Head over to Settings and toggle the Discord button. [ VIP ]


      Non-Jailbroken & No Jailbreak required hack(s): [IPA Mod Menu] Nightfall: Kingdom Frontier TD v1.0.41 +8 Jailed Cheats [ Unlimited Currencies ] - Free Non-Jailbroken IPA Cheats - iOSGods
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 102 replies
    • Royal Match v29297 +10 Jailed Cheats [ Coins + More ]
      Modded/Hacked App: Royal Match By Dream Games Teknoloji Anonim Sirketi
      Bundle ID: com.dreamgames.royalmatch
      iTunes Store Link: https://apps.apple.com/us/app/royal-match/id1482155847?uo=4


      Mod Requirements:
      - Non-Jailbroken/Jailed or Jailbroken iPhone/iPad/iPod Touch.
      - Sideloadly / Cydia Impactor or alternatives.
      - A Computer Running Windows/macOS/Linux with iTunes installed.


      Hack Features:
      - Freeze Coins
      - Freeze Lives
      - Freeze Stars
      - Freeze Boosters
      - Freeze Time
      - Freeze Moves
      - Unlock VIP Badges
      - Unlock VIP Name Styles
      - Unlock VIP Frames
      - Auto Win -> Quit the level.


      Jailbreak required hack(s): [Mod Menu Hack] Royal Match v26455 +11 Cheats [ Unlimited Coins + More ] - Free Jailbroken Cydia Cheats - iOSGods
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 368 replies
    • Royal Match v29297 +10 Cheats [ Coins + More ]
      Modded/Hacked App: Royal Match By Dream Games Teknoloji Anonim Sirketi
      Bundle ID: com.dreamgames.royalmatch
      iTunes Store Link: https://apps.apple.com/us/app/royal-match/id1482155847?uo=4


      Mod Requirements:
      - Jailbroken iPhone/iPad/iPod Touch.
      - iGameGod / Filza / iMazing or any other file managers for iOS.
      - Cydia Substrate, ElleKit, Substitute or libhooker depending on your jailbreak.
      - PreferenceLoader (from Cydia, Sileo or Zebra).


      Hack Features:
      - Freeze Coins
      - Freeze Lives
      - Freeze Stars
      - Freeze Boosters
      - Freeze Time
      - Freeze Moves
      - Unlock VIP Badges
      - Unlock VIP Name Styles
      - Unlock VIP Frames
      - Auto Win -> Quit the level.


      Non-Jailbroken & No Jailbreak required hack(s): [IPA Mod Menu] Royal Match v26455 +11 Jailed Cheats [ Unlimited Coins + More ] - Free Non-Jailbroken IPA Cheats - iOSGods
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 455 replies
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines