Jump to content

11 posts in this topic

Recommended Posts

Posted (edited)

I'm very new into this game, yet I have some knowledge (programming and basic reverse-engineering).

I just dumped some data for a game (American Dad! Apocalypse Soon). It's an Unity game, so I used IL2CPPDump/I'm viewing the classes with dotPeek.

There are many methods including get and set methods. Basiclly every method has its own RVA and offset.

 

How would I change the behaviour of a method?

Say I want get_XYZValue() to return 1337 (or set_XYZValue(int x) to set x to 1337) and the offset is 0x17EC0809. Would I just override 17EC0809 with 0x539 or maybe 20A78052 (MOV W0, #1337) or is it more than that?

I tried the second approach with some functions using iOSGods Live Offset Patcher, yet it sadly didn't affect anything.

 

I appreciate any answer! Thanks.

Updated by Aarivex
Posted

Make sure that you have chosen the correct register to move a value into, and make sure it doesn’t get changed afterwards. This can be achieved by putting a RET statement right after it.

  • Like 1
Posted (edited)
13 hours ago, bR34Kr said:

Make sure that you have chosen the correct register to move a value into, and make sure it doesn’t get changed afterwards. This can be achieved by putting a RET statement right after it.

Thanks for your answer.

I already know about RET, but how would you fit both MOV and RET in one single HEX and how could I get the current register? Do I need to debug it, or would fridump do the job?

And does that mean that the offset of a method is just pointing to the corresponding ARM code that is being executed, just like you'd inspect an method inside IDA?

Updated by Aarivex
Posted

If you are using in game Menu patching   your hack is  0x20A78052C0035FD6.

If you are just patching binary for ipa sideloading the hack is 20A78052C0035FD6.

Posted (edited)
On 11/4/2019 at 5:01 PM, Aarivex said:

I already know about RET, but how would you fit both MOV and RET in one single HEX and how could I get the current register? Do I need to debug it, or would fridump do the job?

Yeah, you can fit both MOV and RET in a function as long as the function is at least 4 bytes in size.

Updated by DADi
  • Like 1
Posted
13 hours ago, DADi said:

Yeah, you can fit both MOV and RET in a function as long as the function is at least 4 bytes in size.

I got some answers on /r/jailbreakdevelopers that told me that I need the RVA and the ASLR slide, so it makes sense now to me.

Thanks for your answers!

What confused me was that why overriding a method address with ARM HEX instructions would work, but I got some insight there now that I know that you can "replace" the original function with your own and how the offset works using _dyld_get_image_vmaddr_slide(0).

Posted
51 minutes ago, Aarivex said:

I got some answers on /r/jailbreakdevelopers that told me that I need the RVA and the ASLR slide, so it makes sense now to me.

Thanks for your answers!

What confused me was that why overriding a method address with ARM HEX instructions would work, but I got some insight there now that I know that you can "replace" the original function with your own and how the offset works using _dyld_get_image_vmaddr_slide(0).

Ah, perhaps this would be of help to you. http://armconverter.com/mshookgenerator/

Posted
43 minutes ago, DADi said:

Ah, perhaps this would be of help to you. http://armconverter.com/mshookgenerator/

I already know that tool, but I can write that code on my own :D

I wrote this bit of code, which sadly doesn't affect anything:

#include <mach-o/dyld.h>
#include <substrate.h>
  
void *func = (void *)(_dyld_get_image_vmaddr_slide(0) + 0x101AA8924);
int (*original) (); // or int (*original) (void *self);
int replacement() { // or int replacement (void *self);
	return 10; 
}

%ctor {
	MSHookFunction(lvlFunc, (void *)replacement, (void **)&original);
}

whereas this code leads to an crash:

#include <mach-o/dyld.h>
#include <substrate.h>

int (*old_get_Level)(void *self);
int get_Level(void *self) {
	return 10;
}
  
%ctor {
	MSHookFunction((void *)(_dyld_get_image_vmaddr_slide(0) + 0x101AA8924), (void*)get_Level, (void**)&old_get_Level);
}

Not just with get_Level, but also with some methods inside a battle - f.e. MaxHealth or UnitHealth.

Posted

Is your offset an instrtuction inside the function? MSHookFunction only works on functions.

And also the function needs to be bigger than 8 bytes in order to use MSHookFunction on it from what I recall.

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Unfortunately, your content contains terms that we do not allow. Please edit your content to remove the highlighted words below. For more information, please read our Posting Guidelines.
Reply to this topic... Posting Guidelines

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Our picks

    • Idle Fantasy Magic School:TD v1.2.2 [ +3 Cheats ] Gems Max
      Modded/Hacked App: Idle Fantasy Magic School:TD By Shenzhen Blackstream Interactive Entertainment Co., Ltd.
      Bundle ID: com.blackstream.iosidlemagicschool
      iTunes Store Link: https://apps.apple.com/us/app/idle-fantasy-magic-school-td/id6465575604?uo=4


      Hack Features:
      - ADS NO [ Rewards Free ]
      - Gems
      - DMG [ Check Hero Status ]
      • 16 replies
    • Idle Fantasy Magic School:TD v1.2.2 [ +3 Jailed ] Gems Max
      Modded/Hacked App: Idle Fantasy Magic School:TD By Shenzhen Blackstream Interactive Entertainment Co., Ltd.
      Bundle ID: com.blackstream.iosidlemagicschool
      iTunes Store Link: https://apps.apple.com/us/app/idle-fantasy-magic-school-td/id6465575604?uo=4


      Mod Requirements:
      - Non-Jailbroken/Jailed or Jailbroken iPhone/iPad/iPod Touch.
      - Sideloadly / Cydia Impactor or alternatives.
      - A Computer Running Windows/macOS/Linux with iTunes installed.


      Hack Features:
      - ADS NO [ Rewards Free ]
      - Gems
      - DMG [ Check Hero Status ]



      Jailbreak required hack(s): https://iosgods.com/forum/5-game-cheats-hack-requests/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/


      iOS Hack Download IPA Link:

      Hidden Content

      Download via the iOSGods App








      PC Installation Instructions:
      STEP 1: If necessary, uninstall the app if you have it installed on your iDevice. Some hacked IPAs will install as a duplicate app. Make sure to back it up so you don't lose your progress.
      STEP 2: Download the pre-hacked .IPA file from the link above to your computer. To download from the iOSGods App, see this tutorial topic.
      STEP 3: Download Sideloadly and install it on your PC.
      STEP 4: Open/Run Sideloadly on your computer, connect your iOS Device, and wait until your device name shows up.
      STEP 5: Once your iDevice appears, drag the modded .IPA file you downloaded and drop it inside the Sideloadly application.
      STEP 6: You will now have to enter your iTunes/Apple ID email login, press "Start" & then you will be asked to enter your password. Go ahead and enter the required information.
      STEP 7: Wait for Sideloadly to finish sideloading/installing the hacked IPA. If there are issues during installation, please read the note below.
      STEP 8: Once the installation is complete and you see the app on your Home Screen, you will need to go to Settings -> General -> Profiles/VPN & Device Management. Once there, tap on the email you entered from step 6, and then tap on 'Trust [email protected]'.
      STEP 9: Now go to your Home Screen and open the newly installed app and everything should work fine. You may need to follow further per app instructions inside the hack's popup in-game.

      NOTE: iOS/iPadOS 16 and later, you must enable Developer Mode. For free Apple Developer accounts, you will need to repeat this process every 7 days. Jailbroken iDevices can also use Sideloadly/Filza/IPA Installer to normally install the IPA with AppSync. If you have any questions or problems, read our Sideloadly FAQ section of the topic and if you don't find a solution, please post your issue down below and we'll do our best to help! If the hack does work for you, post your feedback below and help out other fellow members that are encountering issues.


      Credits:
      - @Ik_Ik


      Cheat Video/Screenshots:

      N/A
      • 15 replies
    • Angry Birds 2 Cheats v3.27.4 +1 [ Infinite Currencies ]
      Modded/Hacked App: Angry Birds 2 By Rovio Entertainment Oyj
      Bundle ID: com.rovio.baba
      iTunes Store Link: https://apps.apple.com/us/app/angry-birds-2/id880047117?uo=4


      Hack Features:
      - Infinite Currencies ( Spend some/ Get some )


      Non-Jailbroken & No Jailbreak required hack(s):  https://iosgods.com/topic/70081-angry-birds-2-v2600-jailed-cheats-2/


      Hack Download Link: https://iosgods.com/topic/72039-angry-birds-2-cheats-v2600-1-infinite-currencies/
      • 1,943 replies
    • LAST CLOUDIA Cheats v5.13.1 +5
      Modded/Hacked App: LAST CLOUDIA By AIDIS Inc.
      Bundle ID: com.aidis.lastcloudiaen
      iTunes Store Link: https://apps.apple.com/us/app/last-cloudia/id1473588527?uo=4


      Hack Features:
      - God Mode
      - Infinite MP
      - Infinite SP
      - Infinite Ether


      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/topic/147069-last-cloudia-v1160-jailed-cheats-1/


      iOS Hack Download Link: https://iosgods.com/topic/147068-last-cloudia-cheats-all-versions-1/
      • 469 replies
    • Smurfs' Village Cheats v2.76.0 +1 [ Freeze Currencies ]
      Modded/Hacked App: Smurfs' Village By Garden City Games Ltd
      Bundle ID: com.capcommobile.smurfs
      iTunes Store Link: https://apps.apple.com/us/app/smurfs-village/id399648212?uo=4

       

      🔧 Mod Requirements

      - Jailbroken iPhone or iPad.
      - iGameGod / Filza / iMazing.
      - Cydia Substrate, ElleKit, Substitute or libhooker depending on your jailbreak (from Cydia, Sileo or Zebra).

       

      🚀 Hack Features

      - Freeze Currencies


      🍏 For Non-Jailbroken & No Jailbreak required hacks: https://iosgods.com/topic/75947-smurfs-village-v2741-jailed-cheats-1-freeze-currencies/

       

      📥 iOS Hack Download Link: https://iosgods.com/topic/75948-smurfs-village-cheats-v2741-1-freeze-currencies/
      • 440 replies
    • [ Last Cloudia TW ] 最後的克勞迪亞 Cheats v5.13.1 +5
      Modded/Hacked App: 最後的克勞迪亞 By Hong Kong Bao Chuan Software Technology Limited
      Bundle ID: com.boltrend.cloudia
      iTunes Store Link: https://apps.apple.com/tw/app/%E6%9C%80%E5%BE%8C%E7%9A%84%E5%85%8B%E5%8B%9E%E8%BF%AA%E4%BA%9E/id1530784975?uo=4



      Hack Features:
      - God Mode
      - Infinite MP
      - Infinite SP
      - Infinite Ether


      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/topic/139142-last-cloudia-tw-%E6%9C%80%E5%BE%8C%E7%9A%84%E5%85%8B%E5%8B%9E%E8%BF%AA%E4%BA%9E-v161-jailed-cheats-4/


      iOS Hack Download Link: https://iosgods.com/topic/139140-last-cloudia-tw-%E6%9C%80%E5%BE%8C%E7%9A%84%E5%85%8B%E5%8B%9E%E8%BF%AA%E4%BA%9E-cheats-all-versions-4/
      • 391 replies
    • Dragon City - Breed & Battle! Cheats v25.3.3 +4
      Modded/Hacked App: Dragon City - Breed & Battle! By Socialpoint
      Bundle ID: es.socialpoint.dragoncity
      iTunes Store Link: https://apps.apple.com/us/app/dragon-city-breed-battle/id561941526?uo=4


      Hack Features:
      - One Hit Kill
      - God Mode 
      - Auto-Battle Unlocked

      This hack is using the new iOSGods Auto Updater. The hack will automatically update itself to the current app version you have installed on your iDevice.
      Note:
      Everything is linked with enemies, please use it carefully

      This hack works on the latest x64 or ARM64 & ARM64e iDevices: iPhone 5s, 6, 6 Plus, 6s, 6s Plus, 7, 7 Plus, 8, 8 Plus, X, Xr, Xs, Xs Max, 11, 11 Pro, 11 Pro Max, 12, 12 Pro, 12 Pro Max, 12 Mini, 13, 13 Pro, 13 Pro Max, 13 Mini, 14, 14 Plus, 14 Pro, 14 Pro Max, SE, iPod Touch 6G, 7G, iPad Air, Air 2, iPad Pro & iPad Mini 2, 3, 4, 5, 6 and later.


      iOS Hack Download Link: https://iosgods.com/topic/129371-dragon-city-mobile-cheats-auto-updating-3-god-mode-one-hit-kill/
      • 2,154 replies
    • Candy Crush Saga v1.298.2 Jailed Cheats +3
      Modded/Hacked App: Candy Crush Saga By King.com Limited
      Bundle ID: com.midasplayer.apps.candycrushsaga
      iTunes Store Link: https://apps.apple.com/us/app/candy-crush-saga/id553834731?uo=4


      Hack Features:
      - Infinite Life
      - Infinite Booster
      - Infinite Move


      Jailbreak required hack(s): https://iosgods.com/topic/190447-candy-crush-saga-cheats-v12941-3/


      iOS Hack Download IPA Link: https://iosgods.com/topic/190448-candy-crush-saga-v12941-jailed-cheats-3/
      • 61 replies
    • CSR 2 Drag Racing Car Games v5.6.1 - [ Gold, Cash, Keys & More ]
      Modded/Hacked App: CSR 2 - Realistic Drag Racing By Zynga Inc.
      Bundle ID: com.naturalmotion.customstreetracer2
      iTunes Store Link: https://apps.apple.com/us/app/csr-2-realistic-drag-racing/id887947640?uo=4

       

      📌 Mod Requirements

      - Jailbroken iPhone or iPad.
      - iGameGod / Filza / iMazing.
      - Cydia Substrate, ElleKit, Substitute or libhooker depending on your jailbreak (from Sileo, Cydia or Zebra).

       

      🤩 Hack Features

      - Custom Gold Amount -> Enter the amount of gold you want inside the iOSGods Mod Menu!
      - Custom Cash Amount -> Enter the amount of cash you want inside the iOSGods Mod Menu!
      - Custom Keys Amount -> Enter the amount of keys you want inside the iOSGods Mod Menu!
      - Anti-Ban -> Also unbans previously banned accounts and lets you play online according to feedback.
      - No Fuel Consumption
      - Instant Part Delivery
      - Instant Car Delivery
      - Gold Increase
      - Cash Increase
      - Keys Increase
      - Buy Anything For 1 Gold
      - Buy Anything For 1 Cash

       

      Non-Jailbroken Hack: https://iosgods.com/topic/168529-csr-2-drag-racing-car-games-v551-4-jailed-cheats/

       

      ⬇️ iOS Hack Download Link: https://iosgods.com/topic/73095-csr-2-drag-racing-car-games-v561-gold-cash-keys-more/.
      • 5,698 replies
    • Battle Legion - Mass Battler Cheats v4.2.4 +4
      Modded/Hacked App: Battle Legion - Mass Battler By GODSPEED GAMING SOLUTIONS PRIVATE LIMITED
      Bundle ID: com.traplight.battleslides
      iTunes Store Link: https://apps.apple.com/us/app/battle-legion-mass-battler/id1435133042?uo=4

       

      📌 Mod Requirements

      - Jailbroken iPhone or iPad.
      - iGameGod / Filza / iMazing.
      - Cydia Substrate, ElleKit, Substitute or libhooker depending on your jailbreak (from Sileo, Cydia or Zebra).

       

      🤩 Hack Features

      - Multiply Attack
      - Multiply Defense
      - Instant Win
      - Enemies Don't Move
      - Enemies Don't Attack

       

      ⬇️ iOS Hack Download Link: https://iosgods.com/topic/129669-battle-legion-mass-battler-cheats-v424-4/
      • 561 replies
    • SAS: Zombie Assault 4 v2.2.2 +2 Jailed Cheats [ God Mode ]
      Modded/Hacked App: SAS: Zombie Assault 4 By Ninja Kiwi Limited
      Bundle ID: com.ninjakiwi.sasza4
      iTunes Store Link: https://apps.apple.com/us/app/sas-zombie-assault-4/id899159669?uo=4

       


      🤩 Hack Features

      - God Mode
      - High Damage
      • 0 replies
    • SAS: Zombie Assault 4 v2.2.2 +2 Cheats [ God Mode ]
      Modded/Hacked App: SAS: Zombie Assault 4 By Ninja Kiwi Limited
      Bundle ID: com.ninjakiwi.sasza4
      iTunes Store Link: https://apps.apple.com/us/app/sas-zombie-assault-4/id899159669?uo=4

       
       

      🤩 Hack Features

      - God Mode
      - High Damage
      • 1 reply
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines