Jump to content

1347

Senior Member
  • Posts

    187
  • Joined

  • Last visited

Posts posted by 1347

  1. #import <substrate.h> #import <dlfcn.h> #import <mach-o/dyld.h> #import <string.h> #import <stdio.h> #import <UIKit/UIKit.h> int (*old_get_Gem)(); int new_get_Gem() { return 99999; } int (*old_get_Coin)(); int new_get_Coin() { return 300000000; } // 根据镜像名称获取镜像的偏移基址 intptr_t get_image_vmaddr_slide(const char * image_name) { uint32_t count = _dyld_image_count(); for (int i = 0; i < count; i++) { const char *path = _dyld_get_image_name(i); const char *name = strrchr(path, '/'); // printf("name = %s, path = %s", name, path); if (name != NULL && strcmp(image_name, name) == 0) { return _dyld_get_image_vmaddr_slide(i); } } return -1; } static void didFinishLaunching(CFNotificationCenterRef center, void *observer, CFStringRef name, const void *object, CFDictionaryRef info) { dispatch_after(dispatch_time(DISPATCH_TIME_NOW, (int64_t)(0.1 * NSEC_PER_SEC)), dispatch_get_main_queue(), ^{ intptr_t base_addr = get_image_vmaddr_slide("/UnityFramework"); printf("didFinishLaunching-base_addr = 0x%lx", base_addr); MSHookFunction((void *)(base_addr + 0x1E15468), (void *)&new_get_Gem, (void **)&old_get_Gem); MSHookFunction((void *)(base_addr + 0x1E1545C), (void *)&new_get_Coin, (void **)&old_get_Coin); }); } void launchEvent() { CFNotificationCenterAddObserver(CFNotificationCenterGetLocalCenter(), NULL, &didFinishLaunching, (CFStringRef)UIApplicationDidFinishLaunchingNotification, NULL, CFNotificationSuspensionBehaviorDrop); } __attribute__((constructor)) static void initialize() { launchEvent(); }

  2. 20 hours ago, xxbatman9898 said:

    BC浮点值大多数寄存器位用于十进制值尝试使用x寄存器和mov而不是fmov

    I am a novice. I will only modify some simple instructions. Can you copy me a copy of the code I use to learn?  I know this requirement is excessive.  Thank you very much for your answers!  Sorry English is not my language.

  3. On 6/11/2020 at 10:06 PM, xxbatman9898 said:

    I will have to find the offsets and send them to rook for merging tomorrow after work. I may just be able to send him the related functions in ida

    1011F5CB8   App.Core.Perks.PerkDescription$$GetBonusForLevel  

    Please tell me how you modified it to a very large value... I used 00F0271EC0035FD6 and only returned 31.0

×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines