Jump to content

[IDA Tutorial] How to deal with/hack vectors


469 posts in this topic

Recommended Posts

Posted

This is a tutorial that is pretty advanced and because of that, I expect you to have a grip on regular IDA (normal instructions I mean, MOV, SUB, STR, etc). Of course it is not a requirement, you could just be viewing this tutorial out of curiosity. But it would really help to know some basic IDA before trying to hack vectors.

 

But what the hell is a vector? A vector is an instruction prefixed with "V". For example: VSTR, VMOV, VSUB, VCVT (convert), VLDR, etc. It is the instruction that you get when you set a watchpoint on a memory address that holds a float value. You will know that it is a float when iGameGuardian displays the number like "500.000000". Most of the time you be hacking VSTR, VSUB, and VCVT, at least in my experience.

 

Hidden Content

    Since there is no R7 type register for vectors, we have to find different ways to hack them. If IDA drops you off at a

    VSTR S0, [R0, #20]
    you cannot just change it to

    VSTR S7, [R0, #20]
    because in most cases, it would just make the game crash.

     

    So what the hell can we do? The best way to hack a VSTR is to NOP it (except for when hacking cooldown, but I will get to that). This is extremely effective when hacking your health because instead of storing your health value in a normal, unhacked game, the game won't be able to store your health at all which results in infinite health for you :snoop: But sometimes both enemy health and your health are linked and you have to unlink them. I'll cover that at the end of this tutorial.

     

    If you are hacking cooldown for some sort of skill, you cannot just NOP the VSTR (instructions for cooldown are most always VSTR) because once the timer starts, it will never count down, resulting in an infinite timer for skills. To combat this, either you can:

    1. Find a register that holds the value of zero and store that register into R0+20 or

    2. Move zero into an already existing register and store that register into R0+20.

     

    If you are going with option one, you'll have to set a breakpoint on your offset and examine the registers to see what they hold (reg re for LLDB and info r for GDB). Just for the sake of this tutorial, we'll say that R3 holds the value of zero. Now that you know that, you can change

    VSTR S0, [R0, #20]
    to a regular
    STR R3, [R0, #20]
    . If you know basic IDA, you should understand why/how that works.

     

    If you are going with option two, it will be just a tiny bit more complicated. You'll have to hack the instruction above the VSTR with a MOV R0, #0. Then you'll have to store R0 into R0+20. If that is confusing, look at this:

     

    Here are the instructions before any modification:

    VCVT.F32.F64 S0, D2
    VSTR S0, [R0, #20]
    
    And change that to:

    MOV R0, #0
    STR R0, [R0, #20]
    
    What this does is instead of the game converting a 64 bit float value into a 32 bit float value then store that value into R0+20, the game will now move the value of zero into R0 then store R0 (zero) into R0+20, resulting in a timer of zero seconds, which means instant cooldown. This is what you might know as "no skill cooldown".

     

    VSTR's are really the only instructions that you hack differently than everything else. You hack VSUB's with NOP's, you can hack VMOV's the normal way you hack a MOV (but with common sense), etc. It is not really hard once you get the hang of it.

     

    About unlinking vectors:

    I'm not entirely sure about this, but to unlink vectors you could try this:

    1. Set a breakpoint on your offset.

    2. Let the enemy hit you, and your breakpoint should hit. Now type "bt", which means "backtrace". Copy the backtrace onto notepad or something convienent and label it "my health backtrace".

    3. Now continue, but this time you hurt the enemy, and your breakpoint should hit. Do a backtrace again and copy it onto notepad and label it "enemy health backtrace".

    4. See which frame first differs between the two backtraces (you'll know what I mean by frame when you backtrace) and NOP the branch that connects them.

     

    That's it! :) If you want to see some examples of me hacking vectors, check these links out: http://iosgods.com/topic/7615-offsetsdragon-slayer-v110/

    http://iosgods.com/topic/7152-offsets-not-str-r7-for-everything-pindestructible-v301/

    http://iosgods.com/topic/7501-offsetsblood-and-glory-immortals-v110/

 

Please let me know if you have any questions. :)

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Our picks

    • Heroes vs. Hordes v5.0.1 +6 Jailed Cheats [God Mode]
      Modded/Hacked App: Heroes vs. Hordes By Swift Games UG haftungsbeschraenkt
      Bundle ID: com.swiftgames.roguelikesurvival
      iTunes Store Link: https://apps.apple.com/us/app/heroes-vs-hordes/id1608898173?uo=4


      Hack Features:
      - Free iAP
      - Infinite Currency/Resources
      - Instant Kill


      Jailbreak required hack(s): https://iosgods.com/forum/5-game-cheats-hack-requests/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/

        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 341 replies
    • Heroes vs. Hordes v5.0.1 +6 [God Mode]
      Modded/Hacked App: Heroes vs. Hordes By Swift Games UG haftungsbeschraenkt
      Bundle ID: com.swiftgames.roguelikesurvival
      iTunes Store Link: https://apps.apple.com/us/app/heroes-vs-hordes/id1608898173?uo=4


      Hack Features:
      - Free iAP
      - God Mode
      - Infinite Currency/Resources
      - Instant Kill
      - Kill All Enemies
      - Fast Enemies
      - Freeze Enemies
      - Poison Enemies


      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/forum/79-no-jailbreak-section/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/


        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 305 replies
    • Brick Out - Shoot the ball v25.0619.00 +5 Jailed Cheats [Currency Hack]
      Modded/Hacked App: Brick Out - Shoot the ball By Puzzle1Studio,inc.
      Bundle ID: com.puzzle1studio.ap.brickoutshoottheball
      iTunes Store Link: https://apps.apple.com/us/app/brick-out-shoot-the-ball/id1489900957?uo=4


      Mod Requirements:
      - Non-Jailbroken/Jailed or Jailbroken iPhone/iPad/iPod Touch.
      - Sideloadly / Cydia Impactor or alternatives.
      - A Computer Running Windows/macOS/Linux with iTunes installed.


      Hack Features:
      - No Ads
      - Free Revives


      Jailbreak required hack(s): https://iosgods.com/forum/5-game-cheats-hack-requests/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/


        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 110 replies
    • Brick Out - Shoot the ball v25.0619.00 +5 [Currency Hack]
      Modded/Hacked App: Brick Out - Shoot the ball By Puzzle1Studio,inc.
      Bundle ID: com.puzzle1studio.ap.brickoutshoottheball
      iTunes Store Link: https://apps.apple.com/us/app/brick-out-shoot-the-ball/id1489900957?uo=4


      Mod Requirements:
      - Jailbroken iPhone/iPad/iPod Touch.
      - iGameGod / Filza / iMazing or any other file managers for iOS.
      - Cydia Substrate, Substitute or libhooker depending on your jailbreak.
      - PreferenceLoader (from Cydia, Sileo or Zebra).


      Hack Features:
      - No Ads
      - Add 10000 Rubies
      - Free Revives


      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/forum/79-no-jailbreak-section/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/


        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 113 replies
    • Tap Away 3D v159.5.4 +12 Jailed Cheats [Infinite Moves]
      Modded/Hacked App: Tap Away 3D By Popcore GmbH
      Bundle ID: com.jctswbglsm.SwipeAway
      iTunes Store Link: https://apps.apple.com/us/app/tap-away-3d/id1568058543?uo=4


      Mod Requirements:
      - Non-Jailbroken/Jailed or Jailbroken iPhone/iPad/iPod Touch.
      - Sideloadly / Cydia Impactor or alternatives.
      - A Computer Running Windows/macOS/Linux with iTunes installed.


      Hack Features:
      - No Ads
      - Infinite Moves
      - Freeze Challenge Moves
      - Disable Timer for Challenge


      Jailbreak required hack(s): https://iosgods.com/forum/5-game-cheats-hack-requests/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/

        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 59 replies
    • Tap Away 3D v159.5.4 +12 [Infinite Moves]
      Modded/Hacked App: Tap Away 3D By Popcore GmbH
      Bundle ID: com.jctswbglsm.SwipeAway
      iTunes Store Link: https://apps.apple.com/us/app/tap-away-3d/id1568058543?uo=4


      Mod Requirements:
      - Jailbroken iPhone/iPad/iPod Touch.
      - iGameGod / Filza / iMazing or any other file managers for iOS.
      - Cydia Substrate, Substitute or libhooker depending on your jailbreak.
      - PreferenceLoader (from Cydia, Sileo or Zebra).


      Hack Features:
      - No Ads
      - Add Coins
      - Add Tokens
      - Make Me VIP
      - Spawn Bomb
      - Spawn Coin Block
      - Spawn Bomb
      - Spawn Coin Block
      - Spawn Special Blocks
      - Unlock All Puzzles
      - Unlock All Skins
      - Unlock All Challenges
      - Infinite Moves
      - Freeze Challenge Moves
      - Disable Timer for Challenge


      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/forum/79-no-jailbreak-section/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/

        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 55 replies
    • Tetris v7.3.0 +3 [Freeze Falldown]
      Modded/Hacked App: Tetris® By Playstudios, Inc.
      Bundle ID: com.n3twork.tetris
      iTunes Store Link: https://apps.apple.com/us/app/tetris/id1491074310?uo=4


      Mod Requirements:
      - Jailbroken iPhone/iPad/iPod Touch.
      - iGameGod / Filza / iMazing or any other file managers for iOS.
      - Cydia Substrate, Substitute or libhooker depending on your jailbreak.
      - PreferenceLoader (from Cydia, Sileo or Zebra).


      Hack Features:
      - No Ads
      - Freeze Falldown


      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/forum/79-no-jailbreak-section/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/


        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 52 replies
    • Pocket Land! v0.113.2 +3 Jailed Cheats [Currency Hack]
      Modded/Hacked App: Pocket Land! By GRAND-ATTIC LIMITED
      Bundle ID: gs.hadi.pocketisland
      iTunes Store Link: https://apps.apple.com/us/app/pocket-land/id6446137216?uo=4


      Mod Requirements:
      - Non-Jailbroken/Jailed or Jailbroken iPhone/iPad/iPod Touch.
      - Sideloadly / Cydia Impactor or alternatives.
      - A Computer Running Windows/macOS/Linux with iTunes installed.


      Hack Features:
      - Freeze Currency
      - Freeze Resources


      Jailbreak required hack(s): https://iosgods.com/forum/5-game-cheats-hack-requests/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/


        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 75 replies
    • Pocket Land! v0.113.2 +3 [Currency Hack]
      Modded/Hacked App: Pocket Land! By GRAND-ATTIC LIMITED
      Bundle ID: gs.hadi.pocketisland
      iTunes Store Link: https://apps.apple.com/us/app/pocket-land/id6446137216?uo=4


      Mod Requirements:
      - Jailbroken iPhone/iPad/iPod Touch.
      - iGameGod / Filza / iMazing or any other file managers for iOS.
      - Cydia Substrate, Substitute or libhooker depending on your jailbreak.
      - PreferenceLoader (from Cydia, Sileo or Zebra).


      Hack Features:
      - Freeze Currency
      - Freeze Resources
      - Upgrade without Resources (Dont Abuse)


      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/forum/79-no-jailbreak-section/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/


        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 42 replies
    • Brave Merge - Battle & Defense v1.6.7 [Currency Hack/Debug Menu +50 Options]
      Modded/Hacked App: Brave Merge - Battle & Defense By SayGames LTD
      Bundle ID: com.brave.merge
      iTunes Store Link: https://apps.apple.com/us/app/brave-merge-battle-defense/id6444832814?uo=4


      Mod Requirements:
      - Non-Jailbroken/Jailed or Jailbroken iPhone/iPad/iPod Touch.
      - Sideloadly / Cydia Impactor or alternatives.
      - A Computer Running Windows/macOS/Linux with iTunes installed.


      Hack Features:
      - Debug Menu (Open settings then click support button to open the Debug Menu)


      Jailbreak required hack(s): https://iosgods.com/forum/5-game-cheats-hack-requests/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/


        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 59 replies
    • Brave Merge - Battle & Defense v1.6.7 [Currency Hack/Debug Menu +50 Options]
      Modded/Hacked App: Brave Merge - Battle & Defense By SayGames LTD
      Bundle ID: com.brave.merge
      iTunes Store Link: https://apps.apple.com/us/app/brave-merge-battle-defense/id6444832814?uo=4


      Mod Requirements:
      - Jailbroken iPhone/iPad/iPod Touch.
      - iGameGod / Filza / iMazing or any other file managers for iOS.
      - Cydia Substrate, Substitute or libhooker depending on your jailbreak.
      - PreferenceLoader (from Cydia, Sileo or Zebra).


      Hack Features:
      - Debug Menu


      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/forum/79-no-jailbreak-section/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/


        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 87 replies
    • Tetris v7.3.0 +3 Jailed Cheats [Freeze Falldown]
      Modded/Hacked App: Tetris® By Playstudios, Inc.
      Bundle ID: com.n3twork.tetris
      iTunes Store Link: https://apps.apple.com/us/app/tetris/id1491074310?uo=4


      Mod Requirements:
      - Non-Jailbroken/Jailed or Jailbroken iPhone/iPad/iPod Touch.
      - Sideloadly / Cydia Impactor or alternatives.
      - A Computer Running Windows/macOS/Linux with iTunes installed.


      Hack Features:
      - No Ads
      - Freeze Falldown


      Jailbreak required hack(s): https://iosgods.com/forum/5-game-cheats-hack-requests/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/


        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 63 replies
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines