Jump to content
kando

How search value false or true?

Recommended Posts

How search boolean value with gg plz

Ex: value buyable:true

i need change this value to

buyable:false

How do i write that in gg

 

Share this post


Link to post
Share on other sites

Sometimes true and false is stored as

1 or 0

And

True or false

 

You just have to figure out how its stored.

Share this post


Link to post
Share on other sites
On 7/1/2020 at 11:52 AM, Emarkx said:

Sometimes true and false is stored as

1 or 0

And

True or false

 

You just have to figure out how its stored.

thanks for your reply

I know that the data is stored as

True

And

False

Just what I do not know how to replace

False 

With 

True

Via gg

 

Share this post


Link to post
Share on other sites

You have to do a hex search for the actual word "true" 

Share this post


Link to post
Share on other sites

If you are talking about a boolean in a lib then

ARM8 64bit search

        true = 20008052r
        false = 00008052r

ARM7 32bit search
        true = 0100A0E3r
        false = 0000A0E3r

but there will most likely be thousands of results, best to attempt to debug it with Termux/gdb if your looking in the lib, if the value is not in a lib but in a normal range they really could use anything for a bool, if you are lucky 0 for false 1 for true and often located near related values or pointed to from the same list of pointers
    

Edited by BadCase

Share this post


Link to post
Share on other sites
On 7/5/2020 at 1:38 AM, BadCase said:

If you are talking about a boolean in a lib then

ARM8 64bit search

        true = 20008052r
        false = 00008052r

ARM7 32bit search
        true = 0100A0E3r
        false = 0000A0E3r

but there will most likely be thousands of results, best to attempt to debug it with Termux/gdb if your looking in the lib, if the value is not in a lib but in a normal range they really could use anything for a bool, if you are lucky 0 for false 1 for true and often located near related values or pointed to from the same list of pointers
    

Hey mate I sent you multiple messages, could you please check? Thanks!

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×
×
  • Create New...