Jump to content

How to find what to hack in IDA? (sub_xxx)


CodeName9

1 post in this topic

Recommended Posts

Posted

So after using dnspy for a while and hacking quite a few unity games, i wanted to try no unity games/sub_xxx with IDA,

target game: Dead by Daylight

I'm able to find the functions i want using strings,

here is the target string: __cstring:00000001046AE9B4    00000029    C    GameplayModifierType.RevealKillerInRange

(There are many similar strings for different objects, - traps, hooks, survivors; since the game has built in chams, i believe these are the functions to enable the chams for each entity/object.)

After xref'ing the string, here are the results: https://imgur.com/a/Ga80yqQ ,

as you can see, there are many results, giving us the idea that this is a useful string so far.

Then pressing ok,  we can now see that there is a sub_x right below the function (reinforcing the idea of this being a useful string):

ADRP            X1, #aGameplaymodifi_19@PAGE ; "GameplayModifierType.RevealKillerInRang"...
ADD             X1, X1, #aGameplaymodifi_19@PAGEOFF ; "GameplayModifierType.RevealKillerInRang"...
ADD             X0, SP, #0x30
MOV             W2, #1
BL              sub_1024EBB80
LDR             X1, [SP,#0x30]
LDR             W2, [SP,#0x38]
ADD             X0, X21, #0x6CC
BL              sub_104000738

In fact.. there are 2 sub_x's, this is my first issue... Which sub_x should i open? both? or is one preferred? Let me know!

For the sake of the Help/support Topic, i will just choose and open the first sub_x (BL              sub_1024EBB80)

here are the visuals..: https://imgur.com/a/ZNxvAGZ 

If you cannot zoom in on the image, i will paste it all here:

Top box :

; Attributes: bp-based frame

sub_1024EBB80
STP             X20, X19, [SP,#-0x20]!
STP             X29, X30, [SP,#0x10]
ADD             X29, SP, #0x10
MOV             X19, X0
CBZ             X1, loc_1024EBBBC

Bottom left box:

MOV             X3, X2
MOV             W2, #0
MOV             W4, #1
MOV             W5, #0xFFFFFFFF
MOV             X0, X19
BL              sub_1024EC234
MOV             X0, X19
LDP             X29, X30, [SP,#0x10]
LDP             X20, X19, [SP+0],#0x20
RET

Bottom right box:

loc_1024EBBBC
STR             XZR, [X19]
STR             WZR, [X19,#8]
MOV             X0, X19
LDP             X29, X30, [SP,#0x10]
LDP             X20, X19, [SP+0],#0x20
RET
; End of function sub_1024EBB80

Here, i'm not sure what to modify, yes i know what MOV, STR, BL, LDR, RET, ADD, SUB etc mean, i've done a lot of research but can't seem to find my answers, so can anyone tell me what i should change in this?

Next, i believe we can go into the next sub, (BL              sub_1024EC234)

which will take us to this: (I will put IDA into text view so i can copy'n paste it all)

__text:00000001024EC234 sub_1024EC234                           ; CODE XREF: sub_1024EB8C8+1C0↑p
__text:00000001024EC234                                         ; sub_1024EBB80+28↑p
__text:00000001024EC234                 STP             X28, X27, [SP,#-0x40]!
__text:00000001024EC238                 STP             X22, X21, [SP,#0x10]
__text:00000001024EC23C                 STP             X20, X19, [SP,#0x20]
__text:00000001024EC240                 STP             X29, X30, [SP,#0x30]
__text:00000001024EC244                 ADD             X29, SP, #0x30
__text:00000001024EC248                 SUB             SP, SP, #0x410
__text:00000001024EC24C                 MOV             X19, X5
__text:00000001024EC250                 MOV             X22, X3
__text:00000001024EC254                 MOV             X20, X1
__text:00000001024EC258                 MOV             X21, X0
__text:00000001024EC25C                 ADRP            X8, #___stack_chk_guard_ptr@PAGE
__text:00000001024EC260                 LDR             X8, [X8,#___stack_chk_guard_ptr@PAGEOFF]
__text:00000001024EC264                 LDR             X8, [X8]
__text:00000001024EC268                 STUR            X8, [X29,#-0x38]
__text:00000001024EC26C                 CBNZ            W2, loc_1024EC298
__text:00000001024EC270                 CBZ             W4, loc_1024EC298
__text:00000001024EC274                 ADD             X1, SP, #8
__text:00000001024EC278                 ADD             X3, SP, #4
__text:00000001024EC27C                 MOV             W2, #0x400
__text:00000001024EC280                 MOV             X0, X20
__text:00000001024EC284                 BL              sub_1024EF2C8
__text:00000001024EC288                 CBZ             W0, loc_1024EC334
__text:00000001024EC28C                 ADD             X20, SP, #8
__text:00000001024EC290                 LDR             W8, [SP,#4]
__text:00000001024EC294                 ADD             W2, W8, #1
__text:00000001024EC298
__text:00000001024EC298 loc_1024EC298                           ; CODE XREF: sub_1024EC234+38↑j
__text:00000001024EC298                                         ; sub_1024EC234+3C↑j
__text:00000001024EC298                 LDRB            W9, [X20]
__text:00000001024EC29C                 CBZ             W9, loc_1024EC340
__text:00000001024EC2A0
__text:00000001024EC2A0 loc_1024EC2A0                           ; CODE XREF: sub_1024EC234+108↓j
__text:00000001024EC2A0                 MOV             W8, #0
__text:00000001024EC2A4                 ADD             X10, X20, #1
__text:00000001024EC2A8                 ADRP            X11, #unk_105B60264@PAGE
__text:00000001024EC2AC                 ADD             X11, X11, #unk_105B60264@PAGEOFF
__text:00000001024EC2B0                 MOV             X12, X9
__text:00000001024EC2B4
__text:00000001024EC2B4 loc_1024EC2B4                           ; CODE XREF: sub_1024EC234+A8↓j
__text:00000001024EC2B4                 SXTB            W13, W12
__text:00000001024EC2B8                 SUB             W13, W13, #0x61 ; 'a'
__text:00000001024EC2BC                 CMP             W13, #0x1A
__text:00000001024EC2C0                 CSET            W13, CC
__text:00000001024EC2C4                 SUB             W12, W12, W13,LSL#5
__text:00000001024EC2C8                 EOR             W12, W8, W12
__text:00000001024EC2CC                 AND             W12, W12, #0xFF
__text:00000001024EC2D0                 LDR             W12, [X11,W12,UXTW#2]
__text:00000001024EC2D4                 EOR             W8, W12, W8,LSR#8
__text:00000001024EC2D8                 LDRB            W12, [X10],#1
__text:00000001024EC2DC                 CBNZ            W12, loc_1024EC2B4
__text:00000001024EC2E0                 ADD             X10, X20, #1
__text:00000001024EC2E4                 MOV             W12, #0xFFFFFFFF
__text:00000001024EC2E8                 ADRP            X11, #unk_105B62664@PAGE
__text:00000001024EC2EC                 ADD             X11, X11, #unk_105B62664@PAGEOFF
__text:00000001024EC2F0
__text:00000001024EC2F0 loc_1024EC2F0                           ; CODE XREF: sub_1024EC234+F4↓j
__text:00000001024EC2F0                 EOR             W9, W12, W9
__text:00000001024EC2F4                 AND             W9, W9, #0xFF
__text:00000001024EC2F8                 LDR             W9, [X11,W9,UXTW#2]
__text:00000001024EC2FC                 EOR             W9, W9, W12,LSR#8
__text:00000001024EC300                 AND             W12, W9, #0xFF
__text:00000001024EC304                 LDR             W12, [X11,W12,UXTW#2]
__text:00000001024EC308                 EOR             W9, W12, W9,LSR#8
__text:00000001024EC30C                 AND             W12, W9, #0xFF
__text:00000001024EC310                 LDR             W12, [X11,W12,UXTW#2]
__text:00000001024EC314                 EOR             W9, W12, W9,LSR#8
__text:00000001024EC318                 AND             W12, W9, #0xFF
__text:00000001024EC31C                 LDR             W12, [X11,W12,UXTW#2]
__text:00000001024EC320                 EOR             W12, W12, W9,LSR#8
__text:00000001024EC324                 LDRB            W9, [X10],#1
__text:00000001024EC328                 CBNZ            W9, loc_1024EC2F0
__text:00000001024EC32C                 MVN             W9, W12
__text:00000001024EC330                 B               loc_1024EC344
__text:00000001024EC334 ; ---------------------------------------------------------------------------
__text:00000001024EC334
__text:00000001024EC334 loc_1024EC334                           ; CODE XREF: sub_1024EC234+54↑j
__text:00000001024EC334                 MOV             W2, #0
__text:00000001024EC338                 LDRB            W9, [X20]
__text:00000001024EC33C                 CBNZ            W9, loc_1024EC2A0
__text:00000001024EC340
__text:00000001024EC340 loc_1024EC340                           ; CODE XREF: sub_1024EC234+68↑j
__text:00000001024EC340                 MOV             W8, #0
__text:00000001024EC344
__text:00000001024EC344 loc_1024EC344                           ; CODE XREF: sub_1024EC234+FC↑j
__text:00000001024EC344                 AND             W5, W8, #0xFFFF
__text:00000001024EC348                 AND             W6, W9, #0xFFFF
__text:00000001024EC34C                 MOV             X3, X22
__text:00000001024EC350                 MOV             X4, X19
__text:00000001024EC354                 MOV             X0, X21
__text:00000001024EC358                 MOV             X1, X20
__text:00000001024EC35C                 BL              sub_1024ECA2C
__text:00000001024EC360                 LDUR            X8, [X29,#-0x38]
__text:00000001024EC364                 ADRP            X9, #___stack_chk_guard_ptr@PAGE
__text:00000001024EC368                 LDR             X9, [X9,#___stack_chk_guard_ptr@PAGEOFF]
__text:00000001024EC36C                 LDR             X9, [X9]
__text:00000001024EC370                 CMP             X9, X8
__text:00000001024EC374                 B.NE            loc_1024EC390
__text:00000001024EC378                 ADD             SP, SP, #0x410
__text:00000001024EC37C                 LDP             X29, X30, [SP,#0x30]
__text:00000001024EC380                 LDP             X20, X19, [SP,#0x20]
__text:00000001024EC384                 LDP             X22, X21, [SP,#0x10]
__text:00000001024EC388                 LDP             X28, X27, [SP+0],#0x40
__text:00000001024EC38C                 RET

 

Here, there are another 2 sub_x (the final ones in the string) let me know if you want me to show them too but i was afraid this topic is too long.. haha

and if anyone knows what i cant change to enable the built in chams, please let me know!

and thank you for your time.

 

 

 

 

Archived

This topic is now archived and is closed to further replies.

  • Our picks

    • Pew Pew Slime - Idle RPG v28 Jailed Cheats +2
      Modded/Hacked App: Pew Pew Slime - Idle RPG By X-LEGEND ENTERTAINMENT CO., LTD.
      Bundle ID: com.xlegend.pewpewslime.global
      App Store Link: https://apps.apple.com/us/app/pew-pew-slime-idle-rpg/id6739420338?uo=4

       

      📌 Mod Requirements

      - Non-Jailbroken/Jailed or Jailbroken iPhone or iPad.
      - Sideloadly or alternatives.
      - Computer running Windows/macOS/Linux with iTunes installed.

       

      🤩 Hack Features

      - God Mode
      - Multiply Attack

      After in-game press Activate Cheat 1 time, then turn it off. Now you can use, if it not work after you relaunch the game next time, repeat the process

      For Multiply Attack do not set max value ortherwise it will revert back to default value, example max value is 10 set 9.8 or 9.9

       

      ⬇️ iOS Hack Download IPA Link: https://iosgods.com/topic/202589-pew-pew-slime-idle-rpg-v26-jailed-cheats-2/
      • 9 replies
    • SuperStar STARSHIP Cheats v3.28.0 +3
      Modded/Hacked App: SuperStar STARSHIP By Dalcomsoft Inc.
      Bundle ID: com.dalcomsoft.sss
      iTunes Store Link: https://apps.apple.com/us/app/superstar-starship/id1480181152?uo=4


      Hack Features:
      - Never Lose
      - Auto Dance
      - Always S.Perfect


      iOS Hack Download Link: https://iosgods.com/topic/164185-superstar-starship-cheats-v378-3/
      • 149 replies
    • TAP! DIG! MY MUSEUM! v1.10.8 [ +6 Cheats ] Currency Max
      Modded/Hacked App: TAP! DIG! MY MUSEUM! By ORIDIO, INC.
      Bundle ID: jp.oridio.museum
      App Store Link: https://apps.apple.com/us/app/tap-dig-my-museum/id1460645640?uo=4

      🤩 Hack Features

      - ADS NO / Rewards Free
      - Premium Active
      - Unlimited Gems
      - Unlimited Coins
      - Unlimited Coins Earn / Upgrade Tool
      - Unlimited Coins Earn / Sell Fossil
      • 0 replies
    • TAP! DIG! MY MUSEUM! v1.10.8 [ +6 Jailed ] Currency Max
      Modded/Hacked App: TAP! DIG! MY MUSEUM! By ORIDIO, INC.
      Bundle ID: jp.oridio.museum
      App Store Link: https://apps.apple.com/us/app/tap-dig-my-museum/id1460645640?uo=4

      🤩 Hack Features

      - ADS NO / Rewards Free
      - Premium Active
      - Unlimited Gems
      - Unlimited Coins
      - Unlimited Coins Earn / Upgrade Tool
      - Unlimited Coins Earn / Sell Fossil
      • 2 replies
    • Renovation Day: House Makeover v2.16.0 Jailed Cheats +2
      Modded/Hacked App: Renovation Day: House Makeover By SayGames LTD
      Bundle ID: com.playfocus.renovation
      App Store Link: https://apps.apple.com/us/app/renovation-day-house-makeover/id6741324757?uo=4

       

      📌 Mod Requirements

      - Non-Jailbroken/Jailed or Jailbroken iPhone or iPad.
      - Sideloadly or alternatives.
      - Computer running Windows/macOS/Linux with iTunes installed.

       

      🤩 Hack Features

      - Free / Freeze Resources (not iAP)
      - No Ads

       

      ⬇️ iOS Hack Download IPA Link: https://iosgods.com/topic/202977-renovation-day-house-makeover-v2160-jailed-cheats-2/
      • 2 replies
    • Pocket Champs PVP Racing Games Cheats v7.2.10 +2
      Modded/Hacked App: Pocket Champs: 3D Racing Games By MADBOX
      Bundle ID: com.pocketchamps.game
      iTunes Store Link: https://apps.apple.com/us/app/pocket-champs-3d-racing-games/id1542776143?uo=4


      Hack Features:
      - Free Store (not Free iAP) -- Negative value will reset to 0 on launch
      - Infinite Coins & Gems

      iOS Hack Download Link: https://iosgods.com/topic/165006-pocket-champs-3d-racing-games-cheats-v318-2/
      • 212 replies
    • Potion Punch 2 Cheats v2.9.92 +1
      Modded/Hacked App: Potion Punch 2 by Monstronauts Inc.
      Bundle ID: com.monstronauts.potionpunch2
      iTunes Store Link: https://apps.apple.com/us/app/potion-punch-2/id1463550435?uo=4&at=1010lce4


      Hack Features:
      - Infinite Currencies
      - Free iAP (Turn this on and use with Free iAP Tweak)


      iOS Hack Download Link: https://iosgods.com/topic/112395-arm64-potion-punch-2-cheats-v102-2/
      • 98 replies
    • Cooking Craze: Restaurant Game Cheats v2.10.0 +1
      Modded/Hacked App: Cooking Craze: Restaurant Game By Big Fish Games, Inc
      Bundle ID: com.bigfishgames.cookingempireuniversalf2p
      iTunes Store Link: https://apps.apple.com/us/app/cooking-craze-restaurant-game/id1029094059?uo=4

       

      🔧 Mod Requirements

      - Jailbroken iPhone or iPad.
      - iGameGod / Filza / iMazing.
      - Cydia Substrate, ElleKit, Substitute or libhooker depending on your jailbreak (from Cydia, Sileo or Zebra).

       

      🚀 Hack Features

      - Free Store (not Free iAP)


      🍏 For Non-Jailbroken & No Jailbreak required hacks: https://iosgods.com/topic/191693-cooking-craze-restaurant-game-v240-jailed-cheats-1/

       

      📥 iOS Hack Download Link: https://iosgods.com/topic/191694-cooking-craze-restaurant-game-cheats-v250-1/
      • 8 replies
    • Demon Hunter Idle Cheats v1.17.1 +3
      Modded/Hacked App: Demon Hunter Idle By MOBIRIX
      Bundle ID: com.mobirix.mbpdh
      iTunes Store Link: https://apps.apple.com/us/app/demon-hunter-idle/id6472879858?uo=4


      Hack Features:
      - Multiply Attack
      - Multiply Defense
      - Freeze Currencies*

      *NOTE: Do not abuse or buy ViP for just this cheat


      iOS Hack Download Link: https://iosgods.com/topic/183710-demon-hunter-idle-cheats-v102-3/
      • 193 replies
    • AdVenture Capitalist Cheats v9.18.1 +1
      Modded/Hacked App: AdVenture Capitalist By Hyper Hippo Publishing Ltd.
      Bundle ID: com.kongregate.mobile.adventurecapitalist
      iTunes Store Link: https://apps.apple.com/us/app/adventure-capitalist/id927006017?uo=4


      Hack Features:
      - Freeze Currencies

       
      Free Non-Jailbroken Hack:  https://iosgods.com/topic/82751-adventure-capitalist-v940-jailed-cheats-1/


      Hack Download Link: https://iosgods.com/topic/78370-adventure-capitalist-cheats-v940-1/
      • 1,197 replies
    • Toca Boca World Modded v1.120 +1
      Modded/Hacked App: Toca Boca World By Toca Boca AB
      Bundle ID: com.tocaboca.tocalifeworld
      iTunes Store Link: https://apps.apple.com/us/app/toca-boca-world/id1208138685?uo=4


      Mod Requirements:
      - Jailbroken iPhone/iPad/iPod Touch.
      - iFile / Filza / iFunBox / iTools or any other file managers for iOS.
      - Cydia Substrate (from Cydia).
      - PreferenceLoader (from Cydia).


      Hack Features:
      - Everything Purchased


      Non-Jailbroken & No Jailbreak required hack(s): 


      Hack Download Link:

      Hidden Content

      Download Hack








      Installation Instructions:
      STEP 1: Download the .deb Cydia hack file from the link above.
      STEP 2: Copy the file over to your iDevice using any of the file managers mentioned above or skip this step if you're downloading from your iDevice.
      STEP 3: Using iFile or Filza, browse to where you saved the downloaded .deb file and tap on it.
      STEP 4: Once you tap on the file, you will then need to press on 'Installer' or 'Install' from the options on your screen.
      STEP 5: Let iFile / Filza finish the cheat installation. Make sure it successfully installs, otherwise see the note below.
      STEP 6: Now open your iDevice settings and scroll down until you see the settings for this cheat and tap on it. If the hack is a Mod Menu, the cheat features can be toggled in-game.
      STEP 7: Turn on the features you want and play the game. You may need to follow further instructions inside the hack's popup in-game.

       

      NOTE: If you have any questions or problems, read our Troubleshooting topic & Frequently Asked Questions topic. If you still haven't found a solution, post your issue down below and we'll do our best to help! If the hack does work for you, post your feedback below and help out other fellow members that are encountering issues.


      Credits:
      - @Laxus


      Cheat Video/Screenshots:

      N/A

       
      • 1,643 replies
    • Solo Knight Cheats v1.1.700 +4
      Modded/Hacked App: Solo Knight by qi liu
      Bundle ID: com.Shimmer.SoloKnightIOS
      iTunes Store Link: https://apps.apple.com/us/app/solo-knight/id1466765612?uo=4&at=1010lce4


      Hack Features:
      - God Mode
      - Instant Skill
      - Infinite MP
      - Fast Attack


      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/topic/132679-arm64-solo-knight-v10103-jailed-cheats-3/


      iOS Hack Download Link: https://iosgods.com/topic/132677-arm64-solo-knight-cheats-v10103-4/
      • 487 replies
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines