scatrmynd

Does this still work? Does it work with iOS 14?

thank you

thanks again

sweet!

cool

so awesome

iDevice: Jailbroken (checkra1n) iPhone 7 w/iOS 14.4 How can I change the returned value of a method to an expected string? Below is the method as seen in dnSpy... public string MatchEndReason { [Token(Token = "0x6002EC5")] [Address(RVA = "0x15D2450", Offset = "0x15D2450", VA = "0x1015D2450")] [Attribute(Name = "CompilerGeneratedAttribute", RVA = "0x1A7C30", Offset = "0x1A7C30")] get { return null; } [Token(Token = "0x6002EC6")] [Address(RVA = "0x15D2458", Offset = "0x15D2458", VA = "0x1015D2458")] [Attribute(Name = "CompilerGeneratedAttribute", RVA = "0x1A7C40", Offset = "0x1A7C40")] set { } } The corresponding strings in global-metadata.dat include "PointsCaptured", "OpponentsDestroyed", "TimeWasUp", and "LeftGame" (all without quotes). If I leave the game, I want to change the MatchEndReason from "LeftGame" to any of the other match end reasons so I can get an ad view for rewards. Below are the corresponding ARM64 functions from IDA Pro... il2cpp:00000001015D2450 ; DATA XREF: __data:0000000104871DC8↓o il2cpp:00000001015D2450 LDR X0, [X0,#0x20] il2cpp:00000001015D2454 RET il2cpp:00000001015D2458 ; DATA XREF: __data:0000000104871DD0↓o il2cpp:00000001015D2458 STR X1, [X0,#0x20] il2cpp:00000001015D245C RET If I just try to patch LDR X0,[X0,#0x20] to a corresponding string list number for the Match End Reason (i.e. patch to MOV X0, #1 by hex-editing the binary at that offset to 200080D2), the game just crashes. I'm guessing it's looking for the actual string, but I don't know how to assign a string to a register. Any insight you can provide would be greatly appreciated.

the kids will love it

great tips

Thank you

Thank you for the guide

you are a machine!

good work

brilliant

I'll answer here in case it helps anyone else... Open Filza > Tap the window-switcher icon that is in the bottom right corner > Tap the Apps Manager icon that is in the bottom left corner > Tap the circled "i" next to the app you are trying to modify > Tap the hyperlink next to "Bundle" > Tap TennisClash.app > Tap Frameworks > Tap UnityFramework.framework > LONG PRESS on UnityFrameWork > Tap "Open with" > Tap on the icon for "Hex Editor" > Search for an offset that @EVO1 provided > Overwrite the bytes in the UnityFrameWork file with the corresponding bytes provided by @EVO1 Alternatively, you can try the Live Offset Patcher, which is part of iGameGod

great tut

thanks

thanks

What is your iPhone model?

thank you broseph

cool hack

nice hack

Thanks again!

There is no jailbreak for iOS 15 yet. You will have to look for hacks that can be applied to regular jailed phones. Be sure to turn off automatic iOS updates.

On your jailbroken phone, open Cydia (or equivalent), search for "Filza File Manager", install it.