Help/Support Figuring out what to change the function to?

Enoch · December 1, 2019

Alright so I started using il2cpp (thanks to DADi) and I'm able to find the RVA's of what I want to change. But after watching many youtube videos (all for android, to see if there's much of a difference), many tutorials on here, I have gotten no where.

Well, I've gotten some places but I'm stuck.

When looking at these tutorials they don't explain how to change the function or why they are changing the function to their selected value.

Example:

https://prnt.sc/q4ms08

https://prnt.sc/q4mtbe

So what I'm trying to do is change the hit damage of the weapon. So I found it:

https://prnt.sc/q4mtnh

I go to ARM converter and convert -

STP             D9, D8, [SP,#-0x30]

and the HEX I get is "E9233D6D". So I go into HxD and look it up and look up the RVA to make sure it matches, it does.

Now I'm stuck, how do I know what to change it to? The tutorials don't explain why or how they got or decided on what to change it to.

Rook · December 1, 2019

The tutorial you're looking at is for ARMv7, which is similar, but the instruction set is different for ARM64.

You can try chhanging it to 00E0BF12C0035FD6.

Enoch · December 1, 2019

2 minutes ago, DADi said:

The tutorial you're looking at is for ARMv7, which is similar, but the instruction set is different for ARM64.

You can try chhanging it to 00E0BF12C0035FD6.

Thank you, I will try that. But how did you get that value? I’m trying to figure it out so I can dwindle down on asking.

Rook · December 1, 2019

1 minute ago, ZoZo03XX said:

Thank you, I will try that. But how did you get that value? I’m trying to figure it out so I can dwindle down on asking.

It's what most cheaters use to modify a function and make it return a high value.

Updated December 1, 2019 by DADi

Rook · December 1, 2019

I suggest you use Live Offset Patcher: https://iosgods.com/topic/102594-release-custom-live-offset-patcher-v21-custom-offsets-injection-in-igmenu/?do=findComment&comment=3534705

Enoch · December 1, 2019

38 minutes ago, DADi said:

I suggest you use Live Offset Patcher: https://iosgods.com/topic/102594-release-custom-live-offset-patcher-v21-custom-offsets-injection-in-igmenu/?do=findComment&comment=3534705

0090261EC0035FD6 worked. The offset above you gave was knocking it down to 0% so I used to offset that you used in the video.

Ted2 · December 1, 2019

Modifying a STP is useless. But what DiDA says is correct, most cheaters would set a high value & then return the function.

So for example: MOV W0, #0xffffff RET, would 'RET'urn FFFFFF(16777215).

If for some reason the game would crash on something like this, you would be looking for a LDR or a STR that's Loading/Storing something from/into a variable (for example something like: LDR W8, [X0,#0x10A], where 0x10A could hold for example the damage variable.