Jump to content

1 post in this topic

Recommended Posts

Posted

So after using dnspy for a while and hacking quite a few unity games, i wanted to try no unity games/sub_xxx with IDA,

target game: Dead by Daylight

I'm able to find the functions i want using strings,

here is the target string: __cstring:00000001046AE9B4    00000029    C    GameplayModifierType.RevealKillerInRange

(There are many similar strings for different objects, - traps, hooks, survivors; since the game has built in chams, i believe these are the functions to enable the chams for each entity/object.)

After xref'ing the string, here are the results: https://imgur.com/a/Ga80yqQ ,

as you can see, there are many results, giving us the idea that this is a useful string so far.

Then pressing ok,  we can now see that there is a sub_x right below the function (reinforcing the idea of this being a useful string):

ADRP            X1, #aGameplaymodifi_19@PAGE ; "GameplayModifierType.RevealKillerInRang"...
ADD             X1, X1, #aGameplaymodifi_19@PAGEOFF ; "GameplayModifierType.RevealKillerInRang"...
ADD             X0, SP, #0x30
MOV             W2, #1
BL              sub_1024EBB80
LDR             X1, [SP,#0x30]
LDR             W2, [SP,#0x38]
ADD             X0, X21, #0x6CC
BL              sub_104000738

In fact.. there are 2 sub_x's, this is my first issue... Which sub_x should i open? both? or is one preferred? Let me know!

For the sake of the Help/support Topic, i will just choose and open the first sub_x (BL              sub_1024EBB80)

here are the visuals..: https://imgur.com/a/ZNxvAGZ 

If you cannot zoom in on the image, i will paste it all here:

Top box :

; Attributes: bp-based frame

sub_1024EBB80
STP             X20, X19, [SP,#-0x20]!
STP             X29, X30, [SP,#0x10]
ADD             X29, SP, #0x10
MOV             X19, X0
CBZ             X1, loc_1024EBBBC

Bottom left box:

MOV             X3, X2
MOV             W2, #0
MOV             W4, #1
MOV             W5, #0xFFFFFFFF
MOV             X0, X19
BL              sub_1024EC234
MOV             X0, X19
LDP             X29, X30, [SP,#0x10]
LDP             X20, X19, [SP+0],#0x20
RET

Bottom right box:

loc_1024EBBBC
STR             XZR, [X19]
STR             WZR, [X19,#8]
MOV             X0, X19
LDP             X29, X30, [SP,#0x10]
LDP             X20, X19, [SP+0],#0x20
RET
; End of function sub_1024EBB80

Here, i'm not sure what to modify, yes i know what MOV, STR, BL, LDR, RET, ADD, SUB etc mean, i've done a lot of research but can't seem to find my answers, so can anyone tell me what i should change in this?

Next, i believe we can go into the next sub, (BL              sub_1024EC234)

which will take us to this: (I will put IDA into text view so i can copy'n paste it all)

__text:00000001024EC234 sub_1024EC234                           ; CODE XREF: sub_1024EB8C8+1C0↑p
__text:00000001024EC234                                         ; sub_1024EBB80+28↑p
__text:00000001024EC234                 STP             X28, X27, [SP,#-0x40]!
__text:00000001024EC238                 STP             X22, X21, [SP,#0x10]
__text:00000001024EC23C                 STP             X20, X19, [SP,#0x20]
__text:00000001024EC240                 STP             X29, X30, [SP,#0x30]
__text:00000001024EC244                 ADD             X29, SP, #0x30
__text:00000001024EC248                 SUB             SP, SP, #0x410
__text:00000001024EC24C                 MOV             X19, X5
__text:00000001024EC250                 MOV             X22, X3
__text:00000001024EC254                 MOV             X20, X1
__text:00000001024EC258                 MOV             X21, X0
__text:00000001024EC25C                 ADRP            X8, #___stack_chk_guard_ptr@PAGE
__text:00000001024EC260                 LDR             X8, [X8,#___stack_chk_guard_ptr@PAGEOFF]
__text:00000001024EC264                 LDR             X8, [X8]
__text:00000001024EC268                 STUR            X8, [X29,#-0x38]
__text:00000001024EC26C                 CBNZ            W2, loc_1024EC298
__text:00000001024EC270                 CBZ             W4, loc_1024EC298
__text:00000001024EC274                 ADD             X1, SP, #8
__text:00000001024EC278                 ADD             X3, SP, #4
__text:00000001024EC27C                 MOV             W2, #0x400
__text:00000001024EC280                 MOV             X0, X20
__text:00000001024EC284                 BL              sub_1024EF2C8
__text:00000001024EC288                 CBZ             W0, loc_1024EC334
__text:00000001024EC28C                 ADD             X20, SP, #8
__text:00000001024EC290                 LDR             W8, [SP,#4]
__text:00000001024EC294                 ADD             W2, W8, #1
__text:00000001024EC298
__text:00000001024EC298 loc_1024EC298                           ; CODE XREF: sub_1024EC234+38↑j
__text:00000001024EC298                                         ; sub_1024EC234+3C↑j
__text:00000001024EC298                 LDRB            W9, [X20]
__text:00000001024EC29C                 CBZ             W9, loc_1024EC340
__text:00000001024EC2A0
__text:00000001024EC2A0 loc_1024EC2A0                           ; CODE XREF: sub_1024EC234+108↓j
__text:00000001024EC2A0                 MOV             W8, #0
__text:00000001024EC2A4                 ADD             X10, X20, #1
__text:00000001024EC2A8                 ADRP            X11, #unk_105B60264@PAGE
__text:00000001024EC2AC                 ADD             X11, X11, #unk_105B60264@PAGEOFF
__text:00000001024EC2B0                 MOV             X12, X9
__text:00000001024EC2B4
__text:00000001024EC2B4 loc_1024EC2B4                           ; CODE XREF: sub_1024EC234+A8↓j
__text:00000001024EC2B4                 SXTB            W13, W12
__text:00000001024EC2B8                 SUB             W13, W13, #0x61 ; 'a'
__text:00000001024EC2BC                 CMP             W13, #0x1A
__text:00000001024EC2C0                 CSET            W13, CC
__text:00000001024EC2C4                 SUB             W12, W12, W13,LSL#5
__text:00000001024EC2C8                 EOR             W12, W8, W12
__text:00000001024EC2CC                 AND             W12, W12, #0xFF
__text:00000001024EC2D0                 LDR             W12, [X11,W12,UXTW#2]
__text:00000001024EC2D4                 EOR             W8, W12, W8,LSR#8
__text:00000001024EC2D8                 LDRB            W12, [X10],#1
__text:00000001024EC2DC                 CBNZ            W12, loc_1024EC2B4
__text:00000001024EC2E0                 ADD             X10, X20, #1
__text:00000001024EC2E4                 MOV             W12, #0xFFFFFFFF
__text:00000001024EC2E8                 ADRP            X11, #unk_105B62664@PAGE
__text:00000001024EC2EC                 ADD             X11, X11, #unk_105B62664@PAGEOFF
__text:00000001024EC2F0
__text:00000001024EC2F0 loc_1024EC2F0                           ; CODE XREF: sub_1024EC234+F4↓j
__text:00000001024EC2F0                 EOR             W9, W12, W9
__text:00000001024EC2F4                 AND             W9, W9, #0xFF
__text:00000001024EC2F8                 LDR             W9, [X11,W9,UXTW#2]
__text:00000001024EC2FC                 EOR             W9, W9, W12,LSR#8
__text:00000001024EC300                 AND             W12, W9, #0xFF
__text:00000001024EC304                 LDR             W12, [X11,W12,UXTW#2]
__text:00000001024EC308                 EOR             W9, W12, W9,LSR#8
__text:00000001024EC30C                 AND             W12, W9, #0xFF
__text:00000001024EC310                 LDR             W12, [X11,W12,UXTW#2]
__text:00000001024EC314                 EOR             W9, W12, W9,LSR#8
__text:00000001024EC318                 AND             W12, W9, #0xFF
__text:00000001024EC31C                 LDR             W12, [X11,W12,UXTW#2]
__text:00000001024EC320                 EOR             W12, W12, W9,LSR#8
__text:00000001024EC324                 LDRB            W9, [X10],#1
__text:00000001024EC328                 CBNZ            W9, loc_1024EC2F0
__text:00000001024EC32C                 MVN             W9, W12
__text:00000001024EC330                 B               loc_1024EC344
__text:00000001024EC334 ; ---------------------------------------------------------------------------
__text:00000001024EC334
__text:00000001024EC334 loc_1024EC334                           ; CODE XREF: sub_1024EC234+54↑j
__text:00000001024EC334                 MOV             W2, #0
__text:00000001024EC338                 LDRB            W9, [X20]
__text:00000001024EC33C                 CBNZ            W9, loc_1024EC2A0
__text:00000001024EC340
__text:00000001024EC340 loc_1024EC340                           ; CODE XREF: sub_1024EC234+68↑j
__text:00000001024EC340                 MOV             W8, #0
__text:00000001024EC344
__text:00000001024EC344 loc_1024EC344                           ; CODE XREF: sub_1024EC234+FC↑j
__text:00000001024EC344                 AND             W5, W8, #0xFFFF
__text:00000001024EC348                 AND             W6, W9, #0xFFFF
__text:00000001024EC34C                 MOV             X3, X22
__text:00000001024EC350                 MOV             X4, X19
__text:00000001024EC354                 MOV             X0, X21
__text:00000001024EC358                 MOV             X1, X20
__text:00000001024EC35C                 BL              sub_1024ECA2C
__text:00000001024EC360                 LDUR            X8, [X29,#-0x38]
__text:00000001024EC364                 ADRP            X9, #___stack_chk_guard_ptr@PAGE
__text:00000001024EC368                 LDR             X9, [X9,#___stack_chk_guard_ptr@PAGEOFF]
__text:00000001024EC36C                 LDR             X9, [X9]
__text:00000001024EC370                 CMP             X9, X8
__text:00000001024EC374                 B.NE            loc_1024EC390
__text:00000001024EC378                 ADD             SP, SP, #0x410
__text:00000001024EC37C                 LDP             X29, X30, [SP,#0x30]
__text:00000001024EC380                 LDP             X20, X19, [SP,#0x20]
__text:00000001024EC384                 LDP             X22, X21, [SP,#0x10]
__text:00000001024EC388                 LDP             X28, X27, [SP+0],#0x40
__text:00000001024EC38C                 RET

 

Here, there are another 2 sub_x (the final ones in the string) let me know if you want me to show them too but i was afraid this topic is too long.. haha

and if anyone knows what i cant change to enable the built in chams, please let me know!

and thank you for your time.

 

 

 

 

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Our picks

    • Cup Quest - Hero's Journey v1.3 [+3 Cheats]
      Modded/Hacked App: Cup Quest - Hero's Journey By DOGSTER TECHNOLOGIES PRIVATE LIMITED
      Bundle ID: com.felicity.cupquest
      App Store Link: https://apps.apple.com/us/app/cup-quest-heros-journey/id6742395137?uo=4



      🤩 Hack Features

      - One Hit Kill
      - Add Currency
      - Unlock Double Speed
        • Like
      • 2 replies
    • Cup Quest - Hero's Journey v1.3 [+3 Jailed Cheats]
      Modded/Hacked App: Cup Quest - Hero's Journey By DOGSTER TECHNOLOGIES PRIVATE LIMITED
      Bundle ID: com.felicity.cupquest
      App Store Link: https://apps.apple.com/us/app/cup-quest-heros-journey/id6742395137?uo=4



      🤩 Hack Features

      - One Hit Kill
      - Add Currency
      - Unlock Double Speed
      • 1 reply
    • Idle Dungeon Manager v1.7.6 [ +5 Cheats ] Currency Max
      Modded/Hacked App: Idle Dungeon Manager By ColdFire Games GmbH
      Bundle ID: com.coldfiregames.dungeon.manager.tycoon.idle.game
      App Store Link: https://apps.apple.com/us/app/idle-dungeon-manager/id1538761888?uo=4


      🤩 Hack Features

      - ADS NO [ Rewards Free ]

      - Currency

      - Resources

      - Stars

      - ATK HP SH [ Hero Up ] Tested Not
        • Agree
        • Like
      • 0 replies
    • Idle Dungeon Manager v1.7.6 [ +5 Jailed ] Currency Max
      Modded/Hacked App: Idle Dungeon Manager By ColdFire Games GmbH
      Bundle ID: com.coldfiregames.dungeon.manager.tycoon.idle.game
      App Store Link: https://apps.apple.com/us/app/idle-dungeon-manager/id1538761888?uo=4
       

      🤩 Hack Features

      - ADS NO [ Rewards Free ]

      - Currency

      - Resources

      - Stars

      - ATK HP SH [ Hero Up ] Tested Not
        • Like
      • 0 replies
    • Knights of Pen and Paper 3 v1.4.1 [+5 Cheats]
      Modded/Hacked App: Knights of Pen and Paper 3 By Northica Oy
      Bundle ID: com.northicagames.kopp3
      App Store Link: https://apps.apple.com/us/app/knights-of-pen-and-paper-3/id6462194230?uo=4



      🤩 Hack Features

      - High Gold Gain (Enable and Win Fight)
      - Always Can Claim Achievements
      - Auto Win (Enable inside battle)
      - Level Up Characters (Enable and your heroes levels up)
      - Max Level Equipments (Enable and all equipments will be max level)

        • Like
      • 0 replies
    • Knights of Pen and Paper 3 v1.4.1 [+5 Jailed Cheats]
      Modded/Hacked App: Knights of Pen and Paper 3 By Northica Oy
      Bundle ID: com.northicagames.kopp3
      App Store Link: https://apps.apple.com/us/app/knights-of-pen-and-paper-3/id6462194230?uo=4



      🤩 Hack Features

      - High Gold Gain (Enable and Win Fight)
      - Always Can Claim Achievements
      - Auto Win (Enable inside battle)
      - Level Up Characters (Enable and your heroes levels up)
      - Max Level Equipments (Enable and all equipments will be max level)

        • Thanks
      • 1 reply
    • Eternium Cheats v1.34.12 +11
      Modded/Hacked App: Eternium By Making Fun, Inc.
      Bundle ID: com.makingfun.mageandminions
      iTunes Store Link: https://apps.apple.com/us/app/eternium/id579931356?uo=4

       

      📌 Mod Requirements

      - Jailbroken iPhone or iPad.
      - iGameGod / Filza / iMazing.
      - Cydia Substrate, ElleKit, Substitute or libhooker depending on your jailbreak (from Sileo, Cydia or Zebra).

       

      🤩 Hack Features

      - 5K Gems When Completed Stage
      - Infinite Gold
      - Infinite Cosmetic
      - Infinite Yellow Stone
      - Multiply Attack (Linked with Enemy)
      - No Skills Cooldown
      - No Consumable Cooldown
      - Multiply Attack Speed
      - Instant Regen Health
      - Always Crit
      - Material Drops (When you killed an Enemy it will drop materials for crafts)



      ⬇️ iOS Hack Download Link: https://iosgods.com/topic/194526-eternium-cheats-v13355-6/
        • Informative
        • Winner
        • Like
      • 34 replies
    • June’s Journey: Hidden Objects v3.34.4 Jailed Cheats +2
      Modded/Hacked App: June’s Journey: Hidden Objects By wooga gmbh
      Bundle ID: net.wooga.junes-journey-hidden-object-mystery-game
      iTunes Store Link: https://apps.apple.com/us/app/junes-journey-hidden-objects/id1200391796?uo=4


      Hack Features:
      - Infinite Currencies
      - Instant Hint


      iOS Hack Download IPA Link: https://iosgods.com/topic/176104-june%E2%80%99s-journey-hidden-objects-v2946-jailed-cheats-2/
        • Informative
        • Agree
        • Thanks
        • Winner
        • Like
      • 42 replies
    • Township: Farm & City Building v27.0.1 Jailed Cheats +2
      Modded/Hacked App: Township by PLR Worldwide Sales Limited
      Bundle ID: com.playrix.township-ios
      iTunes Store Link: https://apps.apple.com/us/app/township/id638689075?uo=4&at=1010lce4


      Hack Features:
      - Freeze Currencies

      EDIT: Please be aware that this maybe cause your account banned, please use with caution and don’t abuse


      iOS Hack Download Link: https://iosgods.com/topic/116584-arm64-township-farm-city-building-v852-jailed-cheats-2/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 1,672 replies
    • My Cafe — Restaurant game Cheats v2025050.0.733 +3
      Modded/Hacked App: My Cafe — Restaurant Game By Melsoft
      Bundle ID: com.Melesta.MyCafe
      iTunes Store Link: https://apps.apple.com/us/app/my-cafe-restaurant-game/id1068204657?uo=4

       

      📌 Mod Requirements

      - Jailbroken iPhone or iPad.
      - iGameGod / Filza / iMazing.
      - Cydia Substrate, ElleKit, Substitute or libhooker depending on your jailbreak (from Sileo, Cydia or Zebra).

       

      🤩 Hack Features

      - Increase Game Speed
      - No Timer to Buy Energy
      - Custom Dice Value


      Notes:
      - DO NOT BUY VIP FOR OTHER FEATURES, IT HAS BEEN PATCHED AND NO LONGER WORK

       

      Non-Jailbroken Hack: https://iosgods.com/topic/134272-my-cafe-%E2%80%94-restaurant-game-v20250205684-3-cheats/

       

      ⬇️ iOS Hack Download Link: https://iosgods.com/topic/130634-my-cafe-%E2%80%94-restaurant-game-cheats-v20250300691-3/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 655 replies
    • RollerCoaster Tycoon Touch Cheats v3.43.0 +5
      Modded/Hacked App: RollerCoaster Tycoon® Touch™ By Atari, Interactive
      Bundle ID: com.atari.mobile.rctempire
      iTunes Store Link: https://apps.apple.com/us/app/rollercoaster-tycoon-touch/id1164507836?uo=4

       

      📌 Mod Requirements

      - Jailbroken iPhone or iPad.
      - iGameGod / Filza / iMazing.
      - Cydia Substrate, ElleKit, Substitute or libhooker depending on your jailbreak (from Sileo, Cydia or Zebra).

       

      🤩 Hack Features

      - Infinite Currencies
      - Instant Max Level (Complete some task - Only use when you finished Tutorial and get to Level 8 at least)
      - VIP Member
      - Card only need 1 to be upgraded

       

      Non-Jailbroken Hack: https://iosgods.com/topic/74948-rollercoaster-tycoon-touch-v3413-jailed-cheats-4/

       

      ⬇️ iOS Hack Download Link: https://iosgods.com/topic/73710-rollercoaster-tycoon-touch-cheats-v3420-5/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 1,107 replies
    • Dragons & Diamonds v2.0.60 [ +9 Jailed ] Auto Win
      Modded/Hacked App: Dragons & Diamonds By Kiloo
      Bundle ID: com.kiloo.dragonsanddiamonds
      iTunes Store Link: https://apps.apple.com/us/app/dragons-diamonds/id1223359380?uo=4

      Hack Features:

      - Gems

      - Gold

      - Energy

      - Battle Cost 0

      - Play Any LvL

      - HP [ Hit Enemy ]

      - DMG

      - Auto Win [ Just One Hit ]

      - Enemy Freeze


      Jailbreak required hack(s): https://iosgods.com/forum/5-game-cheats-hack-requests/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
        • Agree
        • Haha
        • Winner
        • Like
      • 9 replies
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines