Jump to content

How to find what to hack in IDA? (sub_xxx)


CodeName9

1 post in this topic

Recommended Posts

Posted

So after using dnspy for a while and hacking quite a few unity games, i wanted to try no unity games/sub_xxx with IDA,

target game: Dead by Daylight

I'm able to find the functions i want using strings,

here is the target string: __cstring:00000001046AE9B4    00000029    C    GameplayModifierType.RevealKillerInRange

(There are many similar strings for different objects, - traps, hooks, survivors; since the game has built in chams, i believe these are the functions to enable the chams for each entity/object.)

After xref'ing the string, here are the results: https://imgur.com/a/Ga80yqQ ,

as you can see, there are many results, giving us the idea that this is a useful string so far.

Then pressing ok,  we can now see that there is a sub_x right below the function (reinforcing the idea of this being a useful string):

ADRP            X1, #aGameplaymodifi_19@PAGE ; "GameplayModifierType.RevealKillerInRang"...
ADD             X1, X1, #aGameplaymodifi_19@PAGEOFF ; "GameplayModifierType.RevealKillerInRang"...
ADD             X0, SP, #0x30
MOV             W2, #1
BL              sub_1024EBB80
LDR             X1, [SP,#0x30]
LDR             W2, [SP,#0x38]
ADD             X0, X21, #0x6CC
BL              sub_104000738

In fact.. there are 2 sub_x's, this is my first issue... Which sub_x should i open? both? or is one preferred? Let me know!

For the sake of the Help/support Topic, i will just choose and open the first sub_x (BL              sub_1024EBB80)

here are the visuals..: https://imgur.com/a/ZNxvAGZ 

If you cannot zoom in on the image, i will paste it all here:

Top box :

; Attributes: bp-based frame

sub_1024EBB80
STP             X20, X19, [SP,#-0x20]!
STP             X29, X30, [SP,#0x10]
ADD             X29, SP, #0x10
MOV             X19, X0
CBZ             X1, loc_1024EBBBC

Bottom left box:

MOV             X3, X2
MOV             W2, #0
MOV             W4, #1
MOV             W5, #0xFFFFFFFF
MOV             X0, X19
BL              sub_1024EC234
MOV             X0, X19
LDP             X29, X30, [SP,#0x10]
LDP             X20, X19, [SP+0],#0x20
RET

Bottom right box:

loc_1024EBBBC
STR             XZR, [X19]
STR             WZR, [X19,#8]
MOV             X0, X19
LDP             X29, X30, [SP,#0x10]
LDP             X20, X19, [SP+0],#0x20
RET
; End of function sub_1024EBB80

Here, i'm not sure what to modify, yes i know what MOV, STR, BL, LDR, RET, ADD, SUB etc mean, i've done a lot of research but can't seem to find my answers, so can anyone tell me what i should change in this?

Next, i believe we can go into the next sub, (BL              sub_1024EC234)

which will take us to this: (I will put IDA into text view so i can copy'n paste it all)

__text:00000001024EC234 sub_1024EC234                           ; CODE XREF: sub_1024EB8C8+1C0↑p
__text:00000001024EC234                                         ; sub_1024EBB80+28↑p
__text:00000001024EC234                 STP             X28, X27, [SP,#-0x40]!
__text:00000001024EC238                 STP             X22, X21, [SP,#0x10]
__text:00000001024EC23C                 STP             X20, X19, [SP,#0x20]
__text:00000001024EC240                 STP             X29, X30, [SP,#0x30]
__text:00000001024EC244                 ADD             X29, SP, #0x30
__text:00000001024EC248                 SUB             SP, SP, #0x410
__text:00000001024EC24C                 MOV             X19, X5
__text:00000001024EC250                 MOV             X22, X3
__text:00000001024EC254                 MOV             X20, X1
__text:00000001024EC258                 MOV             X21, X0
__text:00000001024EC25C                 ADRP            X8, #___stack_chk_guard_ptr@PAGE
__text:00000001024EC260                 LDR             X8, [X8,#___stack_chk_guard_ptr@PAGEOFF]
__text:00000001024EC264                 LDR             X8, [X8]
__text:00000001024EC268                 STUR            X8, [X29,#-0x38]
__text:00000001024EC26C                 CBNZ            W2, loc_1024EC298
__text:00000001024EC270                 CBZ             W4, loc_1024EC298
__text:00000001024EC274                 ADD             X1, SP, #8
__text:00000001024EC278                 ADD             X3, SP, #4
__text:00000001024EC27C                 MOV             W2, #0x400
__text:00000001024EC280                 MOV             X0, X20
__text:00000001024EC284                 BL              sub_1024EF2C8
__text:00000001024EC288                 CBZ             W0, loc_1024EC334
__text:00000001024EC28C                 ADD             X20, SP, #8
__text:00000001024EC290                 LDR             W8, [SP,#4]
__text:00000001024EC294                 ADD             W2, W8, #1
__text:00000001024EC298
__text:00000001024EC298 loc_1024EC298                           ; CODE XREF: sub_1024EC234+38↑j
__text:00000001024EC298                                         ; sub_1024EC234+3C↑j
__text:00000001024EC298                 LDRB            W9, [X20]
__text:00000001024EC29C                 CBZ             W9, loc_1024EC340
__text:00000001024EC2A0
__text:00000001024EC2A0 loc_1024EC2A0                           ; CODE XREF: sub_1024EC234+108↓j
__text:00000001024EC2A0                 MOV             W8, #0
__text:00000001024EC2A4                 ADD             X10, X20, #1
__text:00000001024EC2A8                 ADRP            X11, #unk_105B60264@PAGE
__text:00000001024EC2AC                 ADD             X11, X11, #unk_105B60264@PAGEOFF
__text:00000001024EC2B0                 MOV             X12, X9
__text:00000001024EC2B4
__text:00000001024EC2B4 loc_1024EC2B4                           ; CODE XREF: sub_1024EC234+A8↓j
__text:00000001024EC2B4                 SXTB            W13, W12
__text:00000001024EC2B8                 SUB             W13, W13, #0x61 ; 'a'
__text:00000001024EC2BC                 CMP             W13, #0x1A
__text:00000001024EC2C0                 CSET            W13, CC
__text:00000001024EC2C4                 SUB             W12, W12, W13,LSL#5
__text:00000001024EC2C8                 EOR             W12, W8, W12
__text:00000001024EC2CC                 AND             W12, W12, #0xFF
__text:00000001024EC2D0                 LDR             W12, [X11,W12,UXTW#2]
__text:00000001024EC2D4                 EOR             W8, W12, W8,LSR#8
__text:00000001024EC2D8                 LDRB            W12, [X10],#1
__text:00000001024EC2DC                 CBNZ            W12, loc_1024EC2B4
__text:00000001024EC2E0                 ADD             X10, X20, #1
__text:00000001024EC2E4                 MOV             W12, #0xFFFFFFFF
__text:00000001024EC2E8                 ADRP            X11, #unk_105B62664@PAGE
__text:00000001024EC2EC                 ADD             X11, X11, #unk_105B62664@PAGEOFF
__text:00000001024EC2F0
__text:00000001024EC2F0 loc_1024EC2F0                           ; CODE XREF: sub_1024EC234+F4↓j
__text:00000001024EC2F0                 EOR             W9, W12, W9
__text:00000001024EC2F4                 AND             W9, W9, #0xFF
__text:00000001024EC2F8                 LDR             W9, [X11,W9,UXTW#2]
__text:00000001024EC2FC                 EOR             W9, W9, W12,LSR#8
__text:00000001024EC300                 AND             W12, W9, #0xFF
__text:00000001024EC304                 LDR             W12, [X11,W12,UXTW#2]
__text:00000001024EC308                 EOR             W9, W12, W9,LSR#8
__text:00000001024EC30C                 AND             W12, W9, #0xFF
__text:00000001024EC310                 LDR             W12, [X11,W12,UXTW#2]
__text:00000001024EC314                 EOR             W9, W12, W9,LSR#8
__text:00000001024EC318                 AND             W12, W9, #0xFF
__text:00000001024EC31C                 LDR             W12, [X11,W12,UXTW#2]
__text:00000001024EC320                 EOR             W12, W12, W9,LSR#8
__text:00000001024EC324                 LDRB            W9, [X10],#1
__text:00000001024EC328                 CBNZ            W9, loc_1024EC2F0
__text:00000001024EC32C                 MVN             W9, W12
__text:00000001024EC330                 B               loc_1024EC344
__text:00000001024EC334 ; ---------------------------------------------------------------------------
__text:00000001024EC334
__text:00000001024EC334 loc_1024EC334                           ; CODE XREF: sub_1024EC234+54↑j
__text:00000001024EC334                 MOV             W2, #0
__text:00000001024EC338                 LDRB            W9, [X20]
__text:00000001024EC33C                 CBNZ            W9, loc_1024EC2A0
__text:00000001024EC340
__text:00000001024EC340 loc_1024EC340                           ; CODE XREF: sub_1024EC234+68↑j
__text:00000001024EC340                 MOV             W8, #0
__text:00000001024EC344
__text:00000001024EC344 loc_1024EC344                           ; CODE XREF: sub_1024EC234+FC↑j
__text:00000001024EC344                 AND             W5, W8, #0xFFFF
__text:00000001024EC348                 AND             W6, W9, #0xFFFF
__text:00000001024EC34C                 MOV             X3, X22
__text:00000001024EC350                 MOV             X4, X19
__text:00000001024EC354                 MOV             X0, X21
__text:00000001024EC358                 MOV             X1, X20
__text:00000001024EC35C                 BL              sub_1024ECA2C
__text:00000001024EC360                 LDUR            X8, [X29,#-0x38]
__text:00000001024EC364                 ADRP            X9, #___stack_chk_guard_ptr@PAGE
__text:00000001024EC368                 LDR             X9, [X9,#___stack_chk_guard_ptr@PAGEOFF]
__text:00000001024EC36C                 LDR             X9, [X9]
__text:00000001024EC370                 CMP             X9, X8
__text:00000001024EC374                 B.NE            loc_1024EC390
__text:00000001024EC378                 ADD             SP, SP, #0x410
__text:00000001024EC37C                 LDP             X29, X30, [SP,#0x30]
__text:00000001024EC380                 LDP             X20, X19, [SP,#0x20]
__text:00000001024EC384                 LDP             X22, X21, [SP,#0x10]
__text:00000001024EC388                 LDP             X28, X27, [SP+0],#0x40
__text:00000001024EC38C                 RET

 

Here, there are another 2 sub_x (the final ones in the string) let me know if you want me to show them too but i was afraid this topic is too long.. haha

and if anyone knows what i cant change to enable the built in chams, please let me know!

and thank you for your time.

 

 

 

 

Archived

This topic is now archived and is closed to further replies.

  • Our picks

    • Music Wars Rockstar: Rap Life v1.4.5 Jailed Cheats +4
      Modded/Hacked App: Music Wars Rockstar: Rap Life By Music Wars LLC
      Bundle ID: com.mwcompany.MusicWarsRockstar
      iTunes Store Link: https://apps.apple.com/us/app/music-wars-rockstar-rap-life/id1623455289?uo=4

      Mod Requirements:
      - Non-Jailbroken/Jailed or Jailbroken iPhone/iPad/iPod Touch.
      - Sideloadly / Cydia Impactor or alternatives.
      - A Computer Running Windows/macOS/Linux with iTunes installed.


      Hack Features:
      - Unlimited money
      - Unlimited creativity
      - Unlimited health
      - Unlimited happiness
      • 368 replies
    • Idle World ! Cheats (Auto Update) +3
      Modded/Hacked App: Idle World ! By FUNCELL GAMES PRIVATE LIMITED
      Bundle ID: com.chitralekha.evolution
      App Store Link: https://apps.apple.com/us/app/idle-world/id1410042592?uo=4

       

      📌 Mod Requirements

      - Jailbroken iPhone or iPad.
      - iGameGod / Filza / iMazing.
      - Cydia Substrate, ElleKit, Substitute or libhooker depending on your jailbreak (from Sileo, Cydia or Zebra).

       

      🤩 Hack Features

      - Infinite Energy
      - Infinite Diamond
      - No Ads

       

      Non-Jailbroken Hack: https://iosgods.com/topic/95736-idle-world-v766-jailed-cheats-4/

       

      ⬇️ iOS Hack Download Link: https://iosgods.com/topic/95734-idle-world-cheats-auto-update-3/
      • 139 replies
    • Mr Autofire Cheats v4.5.4 +3 [ God Mode & More ]
      Modded/Hacked App: Mr Autofire By Lightheart Entertainment Oy
      Bundle ID: games.lightheart.mrautofire
      iTunes Store Link: https://apps.apple.com/us/app/mr-autofire/id1483457500?uo=4

       

      📌 Mod Requirements

      - Jailbroken iPhone or iPad.
      - iGameGod / Filza / iMazing.
      - Cydia Substrate, ElleKit, Substitute or libhooker depending on your jailbreak (from Sileo, Cydia or Zebra).

       

      🤩 Hack Features

      - God Mode 
      - One Hit Kill
      - Free Store

       

      Non-Jailbroken Hack: https://iosgods.com/topic/134805-mr-autofire-v380-jailed-cheats-1/

       

      ⬇️ iOS Hack Download Link: https://iosgods.com/topic/134788-mr-autofire-cheats-v380-3-god-mode-more/
      • 645 replies
    • DEAD TRIGGER: Survival Shooter Cheats v2.3.1 +6
      Modded/Hacked App: DEAD TRIGGER: Survival Shooter By MADFINGER Games, a.s.
      Bundle ID: com.madfingergames.deadtrigger
      iTunes Store Link: https://itunes.apple.com/us/app/dead-trigger-survival-shooter/id533079551?mt=8&uo=4&at=1010lce4


      Hack Features:
      - Infinite Ammo
      - No Reload
      - Free Store (Buy Stuffs Without Money)
      - God Mode
      - One Shot
      - Aimbot
      - No Spread


      Hack Download Link: https://iosgods.com/topic/75047-arm64-dead-trigger-survival-shooter-cheats-v200-6/
      • 724 replies
    • BitLife - Life Simulator Cheats v3.23 +2
      Modded/Hacked App: BitLife - Life Simulator by Candywriter, LLC
      Bundle ID: com.wtfapps.apollo16
      iTunes Store Link: https://apps.apple.com/us/app/bitlife-life-simulator/id1374403536?uo=4&at=1010lce4


      Hack Features:
      - Infinite Cash
      - Free Bitizen Purchase (Press Cancle) - Work for All Versions


      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/topic/84167-arm64-bitlife-life-simulator-v1412-jailed-cheats-2/


      Hack Download Link: https://iosgods.com/topic/84223-arm64-bitlife-life-simulator-cheats-all-versions-2/
      • 3,954 replies
    • Temple Run 2 Cheats v1.129.0 +8
      Modded/Hacked App: Temple Run 2 by Imangi Studios, LLC
      Bundle ID: com.imangi.templerun2
      iTunes Store Link: https://apps.apple.com/us/app/temple-run-2/id572395608?uo=4&at=1010lce4


      Hack Features:
      - No Ads Enabled
      - x2 Coin Enabled
      - Infinite Coin (Spend some)
      - Infinite Gem (Spend some)
      - All Characters Unlocked
      - Free iAP (Turn off all iap hacks before using this, also if itunes popup don't show then run ldrestart in terminal -- This is an issue with the jailbreak not the hack)
      - Auto Run
      - Coin Magnet


      iOS Hack Download Link: https://iosgods.com/topic/132609-arm64-temple-run-2-cheats-v1691-8/
      • 325 replies
    • Archero v7.6.3 Jailed Cheats +2 [ Frozen Enemies ]
      Modded/Hacked App: Archero by HABBY PTE. LTD.
      Bundle ID: com.habby.archero
      iTunes Store Link: https://apps.apple.com/us/app/archero/id1453651052?uo=4&at=1010lce4


      Hack Features:
      - Frozen Enemies
      - OHK


      Jailbreak required hack(s): https://iosgods.com/topic/96783-arm64-archero-cheats-v223-5/


      iOS Hack Download Link: https://iosgods.com/topic/100710-arm64-archero-v223-jailed-cheats-2/
      • 7,343 replies
    • Cafeland - World Kitchen Cheats v2.65.5 +1
      Modded/Hacked App: Cafeland - World Kitchen by Gamegos Internet Teknolojileri Ltd Sti.
      Bundle ID: com.gamegos.mobile.cafeland
      iTunes Store Link: https://apps.apple.com/us/app/cafeland-world-kitchen/id1147665432?uo=4&at=1010lce4



      Hack Features:
      - Freeze Currencies


      iOS Hack Download Link: https://iosgods.com/topic/100701-arm64-cafeland-world-kitchen-cheats-v2023-1/
      • 442 replies
    • Chef & Friends: Cooking Game Cheats v1.40.2 +1
      Modded/Hacked App: Chef & Friends: Cooking Game By MYTONA Ltd.
      Bundle ID: com.mytona.cheftales
      iTunes Store Link: https://apps.apple.com/us/app/chef-friends-cooking-game/id1586951898?uo=4


      Hack Features:
      - Infinite Currencies (Hats, Coins, Gems)

      NOTE: May bug out the game so better try on your throw away account first 


      iOS Hack Download Link: https://iosgods.com/topic/178904-chef-friends-cooking-game-cheats-v141-1/
      • 40 replies
    • AdVenture Communist v6.53.1 +2 Cheats
      Modded/Hacked App: AdVenture Communist By Hyper Hippo Publishing Ltd.
      Bundle ID: com.kongregate.mobile.adventurecommunist
      iTunes Store Link: https://apps.apple.com/us/app/adventure-communist/id1225683141?uo=4

       

      📌 Mod Requirements

      - Jailbroken iPhone or iPad.
      - iGameGod / Filza / iMazing.
      - Cydia Substrate, ElleKit, Substitute or libhooker depending on your jailbreak (from Sileo, Cydia or Zebra).

       

      🤩 Hack Features

      - Freeze Currencies
      - Unlimited Cards [Get Some]

       

      ⬇️ iOS Hack Download Link: https://iosgods.com/topic/149902-adventure-communist-v6430-2-cheats/
      • 138 replies
    • MWT: Tank Battles v1.16.1 Jailed Cheats +5
      Modded/Hacked App: MWT: Tank Battles By ARTSTORM FZE
      Bundle ID: com.Shooter.ModernWarfront
      iTunes Store Link: https://apps.apple.com/us/app/mwt-tank-battles/id6469805187?uo=4


      Hack Features:
      - Multiply Attack
      - Multiply Defense
      - God Mode
      - Freeze Boosters
      - Free Subscription?
      + 10% EXP
      + 50% Cash / Gold


      iOS Hack Download IPA Link: https://iosgods.com/topic/188441-mwt-tank-battles-v121-jailed-cheats-5/
      • 215 replies
    • Grand Mountain Adventure 2 v1.06000 Jailed Cheats +1
      Modded/Hacked App: Grand Mountain Adventure 2 By Toppluva AB
      Bundle ID: com.toppluva.grandmountain2
      iTunes Store Link: https://apps.apple.com/us/app/grand-mountain-adventure-2/id6475040075?uo=4

       

      📌 Mod Requirements

      - Non-Jailbroken/Jailed or Jailbroken iPhone or iPad.
      - Sideloadly or alternatives.
      - Computer running Windows/macOS/Linux with iTunes installed.

       

      🤩 Hack Features

      - Free iAP (Press cancel when Buy) -- Turn on cheat option inside iOSGods Menu first

       

      ⬇️ iOS Hack Download IPA Link: https://iosgods.com/topic/192158-grand-mountain-adventure-2-v1018-jailed-cheats-1/
      • 66 replies
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines