Jump to content

[IDA Tutorial] How to deal with/hack vectors


Guest

439 posts in this topic

Recommended Posts

This is a tutorial that is pretty advanced and because of that, I expect you to have a grip on regular IDA (normal instructions I mean, MOV, SUB, STR, etc). Of course it is not a requirement, you could just be viewing this tutorial out of curiosity. But it would really help to know some basic IDA before trying to hack vectors.

 

But what the hell is a vector? A vector is an instruction prefixed with "V". For example: VSTR, VMOV, VSUB, VCVT (convert), VLDR, etc. It is the instruction that you get when you set a watchpoint on a memory address that holds a float value. You will know that it is a float when iGameGuardian displays the number like "500.000000". Most of the time you be hacking VSTR, VSUB, and VCVT, at least in my experience.

 

Hidden Content

    Since there is no R7 type register for vectors, we have to find different ways to hack them. If IDA drops you off at a

    VSTR S0, [R0, #20]
    you cannot just change it to

    VSTR S7, [R0, #20]
    because in most cases, it would just make the game crash.

     

    So what the hell can we do? The best way to hack a VSTR is to NOP it (except for when hacking cooldown, but I will get to that). This is extremely effective when hacking your health because instead of storing your health value in a normal, unhacked game, the game won't be able to store your health at all which results in infinite health for you :snoop: But sometimes both enemy health and your health are linked and you have to unlink them. I'll cover that at the end of this tutorial.

     

    If you are hacking cooldown for some sort of skill, you cannot just NOP the VSTR (instructions for cooldown are most always VSTR) because once the timer starts, it will never count down, resulting in an infinite timer for skills. To combat this, either you can:

    1. Find a register that holds the value of zero and store that register into R0+20 or

    2. Move zero into an already existing register and store that register into R0+20.

     

    If you are going with option one, you'll have to set a breakpoint on your offset and examine the registers to see what they hold (reg re for LLDB and info r for GDB). Just for the sake of this tutorial, we'll say that R3 holds the value of zero. Now that you know that, you can change

    VSTR S0, [R0, #20]
    to a regular
    STR R3, [R0, #20]
    . If you know basic IDA, you should understand why/how that works.

     

    If you are going with option two, it will be just a tiny bit more complicated. You'll have to hack the instruction above the VSTR with a MOV R0, #0. Then you'll have to store R0 into R0+20. If that is confusing, look at this:

     

    Here are the instructions before any modification:

    VCVT.F32.F64 S0, D2
    VSTR S0, [R0, #20]
    
    And change that to:

    MOV R0, #0
    STR R0, [R0, #20]
    
    What this does is instead of the game converting a 64 bit float value into a 32 bit float value then store that value into R0+20, the game will now move the value of zero into R0 then store R0 (zero) into R0+20, resulting in a timer of zero seconds, which means instant cooldown. This is what you might know as "no skill cooldown".

     

    VSTR's are really the only instructions that you hack differently than everything else. You hack VSUB's with NOP's, you can hack VMOV's the normal way you hack a MOV (but with common sense), etc. It is not really hard once you get the hang of it.

     

    About unlinking vectors:

    I'm not entirely sure about this, but to unlink vectors you could try this:

    1. Set a breakpoint on your offset.

    2. Let the enemy hit you, and your breakpoint should hit. Now type "bt", which means "backtrace". Copy the backtrace onto notepad or something convienent and label it "my health backtrace".

    3. Now continue, but this time you hurt the enemy, and your breakpoint should hit. Do a backtrace again and copy it onto notepad and label it "enemy health backtrace".

    4. See which frame first differs between the two backtraces (you'll know what I mean by frame when you backtrace) and NOP the branch that connects them.

     

    That's it! :) If you want to see some examples of me hacking vectors, check these links out: http://iosgods.com/topic/7615-offsetsdragon-slayer-v110/

    http://iosgods.com/topic/7152-offsets-not-str-r7-for-everything-pindestructible-v301/

    http://iosgods.com/topic/7501-offsetsblood-and-glory-immortals-v110/

 

Please let me know if you have any questions. :)

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Unfortunately, your content contains terms that we do not allow. Please edit your content to remove the highlighted words below. For more information, please read our Posting Guidelines.
Reply to this topic... Posting Guidelines

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Our picks

    • WAR OF THE VISIONS FFBE Cheats v8.6.0 +3 [ Multiply Damage & Defense ]
      Modded/Hacked App: FINAL FANTASY BE:WOTV By SQUARE ENIX Co., Ltd.
      Bundle ID: com.square-enix.WOTVffbeww
      iTunes Store Link: https://apps.apple.com/us/app/final-fantasy-be-wotv/id1484937345?uo=4


      Hack Features:
      - Multiply Attack
      - Multiply Defense
      - Full Map Movement


      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/topic/173485-final-fantasy-bewotv-v730-jailed-cheats-3/


      iOS Hack Download Link: https://iosgods.com/topic/173483-war-of-the-visions-ffbe-cheats-v740-3-multiply-damage-defense/
      • 124 replies
    • Slash & Girl - Endless Run By Shenzhen Qingtian IE Technology Co., Ltd v7.9.981 Cheats +4
      Modded/Hacked App: Slash & Girl - Endless Run By Shenzhen Qingtian IE Technology Co., Ltd
      Bundle ID: com.slash.girl.redfish
      iTunes Store Link: https://apps.apple.com/vn/app/slash-girl-endless-run/id1484766098?uo=4

      Mod Requirements:
      - Non-Jailbroken/Jailed or Jailbroken iPhone/iPad/iPod Touch.
      - Sideloadly / Cydia Impactor or alternatives.
      - A Computer Running Windows/macOS/Linux with iTunes installed.


      Hack Features:
      - No die
      - One hit
      - Freeze combo
      - Freeze lighting
      • 3 replies
    • Slash & Girl - Endless Run By Shenzhen Qingtian IE Technology Co., Ltd v7.9.981 Cheats +7
      Modded/Hacked App: Slash & Girl - Endless Run By Shenzhen Qingtian IE Technology Co., Ltd
      Bundle ID: com.slash.girl.redfish
      iTunes Store Link: https://apps.apple.com/vn/app/slash-girl-endless-run/id1484766098?uo=4

      Mod Requirements:
      - Jailbroken iPhone/iPad/iPod Touch.
      - iGameGod / Filza / iMazing / or any other file managers for iOS.
      - Cydia Substrate, Substitute or libhooker depending on your jailbreak.
      - PreferenceLoader (from Cydia, Sileo or Zebra).
       

      Hack Features:
      - No die
      - One hit
      - Earn more currencies
      - Custom score
      - Freeze combo
      - Freeze lighting
      - Jump height
      • 32 replies
    • Blood Knight : 3D Idle RPG v2.98 Cheats +1
      Modded/Hacked App: Blood Knight : 3D Idle RPG By SUPERBOX. Inc
      Bundle ID: com.superbox.ios.blood
      iTunes Store Link: https://apps.apple.com/us/app/blood-knight-3d-idle-rpg/id6443827240?uo=4

       


      Mod Requirements:
      - Non-Jailbroken/Jailed or Jailbroken iPhone/iPad/iPod Touch.
      - Sideloadly / Cydia Impactor or alternatives.
      - A Computer Running Windows/macOS/Linux with iTunes installed.


      Hack Features:
      - High damage
      • 78 replies
    • Blood Knight : 3D Idle RPG v2.98 Cheats +1
      Modded/Hacked App: Blood Knight : 3D Idle RPG By SUPERBOX. Inc
      Bundle ID: com.superbox.ios.blood
      iTunes Store Link: https://apps.apple.com/us/app/blood-knight-3d-idle-rpg/id6443827240?uo=4

       


      Mod Requirements:
      - Jailbroken iPhone/iPad/iPod Touch.
      - iGameGod / Filza / iMazing or any other file managers for iOS.
      - Cydia Substrate, Substitute or libhooker depending on your jailbreak.
      - PreferenceLoader (from Cydia, Sileo or Zebra).


      Hack Features:
      - High damage
      • 37 replies
    • [ Dead by Daylight TW ] 黎明死線M - Envoy v1.0.32 +27 Cheats
      Modded/Hacked App: 黎明死線M - Envoy [ Dead by Daylight Mobile TW ] By Envoy Interactive Entertainment Co., Ltd.
      Bundle ID: com.netease.dbdtw
      iTunes Store Link: https://apps.apple.com/tw/app/%E9%BB%8E%E6%98%8E%E6%AD%BB%E7%B7%9Am-envoy/id1504610184?uo=4


      Hack Features:
      - No Skill Check
      - No Killer Attack/Miss Cooldown
      - Custom Speed
      - Killer Location Cham
      - Survivor Location Cham
      - Generator Cham
      - Totems Cham
      - Chest Cham
      - Portal Cham
      - Hatch Cham
      - Hooks Cham
      - Trap Cham
      - Escape Switch Cham
      - Normal Pallet Cham
      - Dream Pallet Cham
      - Lockers Cham
      - Survivor Trap Immunity
      - Instant Window Vault*
      - Instant Destroy Pallets*
      - Instant Pickup Downed Players*
      - Custom FOV
      - Disable Footsteps - use as a survivor.
      - No Nurse Fatigue
      - Instant Nurse Teleport
      - Nurse Teleport Through Anything
      - Better Aim Assist
      - No Heartbeat

      * Under one switch


      iOS Hack Download Link: https://iosgods.com/topic/164639-dead-by-daylight-tw-%E9%BB%8E%E6%98%8E%E6%AD%BB%E7%B7%9Am-envoy-v1024-27-cheats/
        • Like
      • 95 replies
    • OUTERPLANE - Strategy Anime v1.1.92 Cheats +4
      Modded/Hacked App: OUTERPLANE - Strategy Anime By Smilegate Holdings, Inc.
      Bundle ID: com.smilegate.outerplane.stove.ios
      iTunes Store Link: https://apps.apple.com/us/app/outerplane-strategy-anime/id1630880836?uo=4

       

      Mod Requirements:
      - Jailbroken iPhone/iPad/iPod Touch.
      - iGameGod / Filza / iMazing or any other file managers for iOS.
      - Cydia Substrate, ElleKit, Substitute or libhooker depending on your jailbreak.
      - PreferenceLoader (from Cydia, Sileo or Zebra).


      Hack Features:
      - God mode
      - OHK
      - Unlimited AP
      - No CD skill
      • 71 replies
    • Boomerang RPG v1.0.18 Cheats +3
      Modded/Hacked App: Boomerang RPG By SuperPlanet corp.
      Bundle ID: com.superplanet.boomerang
      iTunes Store Link: https://apps.apple.com/us/app/boomerang-rpg/id6472151756?uo=4


      Mod Requirements:
      - Non-Jailbroken/Jailed or Jailbroken iPhone/iPad/iPod Touch.
      - Sideloadly / Cydia Impactor or alternatives.
      - A Computer Running Windows/macOS/Linux with iTunes installed.


      Hack Features:
      - God mode
      - High damage
      - Fast attack
      • 18 replies
    • Boomerang RPG v1.0.18 Cheats +3
      Modded/Hacked App: Boomerang RPG By SuperPlanet corp.
      Bundle ID: com.superplanet.boomerang
      iTunes Store Link: https://apps.apple.com/us/app/boomerang-rpg/id6472151756?uo=4


      Mod Requirements:
      - Jailbroken iPhone/iPad/iPod Touch.
      - iGameGod / Filza / iMazing or any other file managers for iOS.
      - Cydia Substrate, ElleKit, Substitute or libhooker depending on your jailbreak.
      - PreferenceLoader (from Cydia, Sileo or Zebra).


      Hack Features:
      - God mode
      - Fast attack
      - High damage
      • 59 replies
    • 菇勇者傳說-送3000抽 v2.0.13 Cheats +2
      Modded/Hacked App: 菇勇者傳說-送3000抽 By JOY MOBILE NETWORK PTE. LTD.
      Bundle ID: com.mxdzz.tw.ios
      iTunes Store Link: https://apps.apple.com/tw/app/%E8%8F%87%E5%8B%87%E8%80%85%E5%82%B3%E8%AA%AA-%E9%80%813000%E6%8A%BD/id6466405648?uo=4

       

      Mod Requirements:
      - Non-Jailbroken/Jailed or Jailbroken iPhone/iPad/iPod Touch.
      - Sideloadly / Cydia Impactor or alternatives.
      - A Computer Running Windows/macOS/Linux with iTunes installed.


      Hack Features:
      - God mode
      - OHK
      • 56 replies
    • BiliBili - HD Anime, Videos v2.81.0 Cheats +4
      Modded/Hacked App: BiliBili - HD Anime, Videos By BALABOOM PTE LTD
      Bundle ID: com.bstar.intl
      iTunes Store Link: https://apps.apple.com/vn/app/bilibili-hd-anime-videos/id1548857482?uo=4

       


      Mod Requirements:
      - Non-Jailbroken/Jailed or Jailbroken iPhone/iPad/iPod Touch.
      - Sideloadly / Cydia Impactor or alternatives.
      - A Computer Running Windows/macOS/Linux with iTunes installed.


      Hack Features:
      - No ads
      - Minimize watermark
      - Watch 4k
      - Can download 4k
      • 101 replies
    • BiliBili - HD Anime, Videos v2.81.0 Cheats +4
      Modded/Hacked App: BiliBili - HD Anime, Videos By BALABOOM PTE LTD
      Bundle ID: com.bstar.intl
      iTunes Store Link: https://apps.apple.com/vn/app/bilibili-hd-anime-videos/id1548857482?uo=4

       

      Mod Requirements:
      - Jailbroken iPhone/iPad/iPod Touch.
      - iGameGod / Filza / iMazing or any other file managers for iOS.
      - Cydia Substrate, Substitute or libhooker depending on your jailbreak.
      - PreferenceLoader (from Cydia, Sileo or Zebra).


      Hack Features:
      - No ads
      - Minimize watermark
      - Watch 4k
      - Can download 4k
      • 51 replies
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines