Jump to content
  • 0

 Help/Support How to find what to hack in IDA? (sub_xxx)


1 post in this topic


So after using dnspy for a while and hacking quite a few unity games, i wanted to try no unity games/sub_xxx with IDA,

target game: Dead by Daylight

I'm able to find the functions i want using strings,

here is the target string: __cstring:00000001046AE9B4    00000029    C    GameplayModifierType.RevealKillerInRange

(There are many similar strings for different objects, - traps, hooks, survivors; since the game has built in chams, i believe these are the functions to enable the chams for each entity/object.)

After xref'ing the string, here are the results: https://imgur.com/a/Ga80yqQ ,

as you can see, there are many results, giving us the idea that this is a useful string so far.

Then pressing ok,  we can now see that there is a sub_x right below the function (reinforcing the idea of this being a useful string):

ADRP            X1, #[email protected] ; "GameplayModifierType.RevealKillerInRang"...
ADD             X1, X1, #[email protected] ; "GameplayModifierType.RevealKillerInRang"...
ADD             X0, SP, #0x30
MOV             W2, #1
BL              sub_1024EBB80
LDR             X1, [SP,#0x30]
LDR             W2, [SP,#0x38]
ADD             X0, X21, #0x6CC
BL              sub_104000738

In fact.. there are 2 sub_x's, this is my first issue... Which sub_x should i open? both? or is one preferred? Let me know!

For the sake of the Help/support Topic, i will just choose and open the first sub_x (BL              sub_1024EBB80)

here are the visuals..: https://imgur.com/a/ZNxvAGZ 

If you cannot zoom in on the image, i will paste it all here:

Top box :

; Attributes: bp-based frame

STP             X20, X19, [SP,#-0x20]!
STP             X29, X30, [SP,#0x10]
ADD             X29, SP, #0x10
MOV             X19, X0
CBZ             X1, loc_1024EBBBC

Bottom left box:

MOV             X3, X2
MOV             W2, #0
MOV             W4, #1
MOV             W5, #0xFFFFFFFF
MOV             X0, X19
BL              sub_1024EC234
MOV             X0, X19
LDP             X29, X30, [SP,#0x10]
LDP             X20, X19, [SP+0],#0x20

Bottom right box:

STR             XZR, [X19]
STR             WZR, [X19,#8]
MOV             X0, X19
LDP             X29, X30, [SP,#0x10]
LDP             X20, X19, [SP+0],#0x20
; End of function sub_1024EBB80

Here, i'm not sure what to modify, yes i know what MOV, STR, BL, LDR, RET, ADD, SUB etc mean, i've done a lot of research but can't seem to find my answers, so can anyone tell me what i should change in this?

Next, i believe we can go into the next sub, (BL              sub_1024EC234)

which will take us to this: (I will put IDA into text view so i can copy'n paste it all)

__text:00000001024EC234 sub_1024EC234                           ; CODE XREF: sub_1024EB8C8+1C0↑p
__text:00000001024EC234                                         ; sub_1024EBB80+28↑p
__text:00000001024EC234                 STP             X28, X27, [SP,#-0x40]!
__text:00000001024EC238                 STP             X22, X21, [SP,#0x10]
__text:00000001024EC23C                 STP             X20, X19, [SP,#0x20]
__text:00000001024EC240                 STP             X29, X30, [SP,#0x30]
__text:00000001024EC244                 ADD             X29, SP, #0x30
__text:00000001024EC248                 SUB             SP, SP, #0x410
__text:00000001024EC24C                 MOV             X19, X5
__text:00000001024EC250                 MOV             X22, X3
__text:00000001024EC254                 MOV             X20, X1
__text:00000001024EC258                 MOV             X21, X0
__text:00000001024EC25C                 ADRP            X8, #[email protected]
__text:00000001024EC260                 LDR             X8, [X8,#[email protected]]
__text:00000001024EC264                 LDR             X8, [X8]
__text:00000001024EC268                 STUR            X8, [X29,#-0x38]
__text:00000001024EC26C                 CBNZ            W2, loc_1024EC298
__text:00000001024EC270                 CBZ             W4, loc_1024EC298
__text:00000001024EC274                 ADD             X1, SP, #8
__text:00000001024EC278                 ADD             X3, SP, #4
__text:00000001024EC27C                 MOV             W2, #0x400
__text:00000001024EC280                 MOV             X0, X20
__text:00000001024EC284                 BL              sub_1024EF2C8
__text:00000001024EC288                 CBZ             W0, loc_1024EC334
__text:00000001024EC28C                 ADD             X20, SP, #8
__text:00000001024EC290                 LDR             W8, [SP,#4]
__text:00000001024EC294                 ADD             W2, W8, #1
__text:00000001024EC298 loc_1024EC298                           ; CODE XREF: sub_1024EC234+38↑j
__text:00000001024EC298                                         ; sub_1024EC234+3C↑j
__text:00000001024EC298                 LDRB            W9, [X20]
__text:00000001024EC29C                 CBZ             W9, loc_1024EC340
__text:00000001024EC2A0 loc_1024EC2A0                           ; CODE XREF: sub_1024EC234+108↓j
__text:00000001024EC2A0                 MOV             W8, #0
__text:00000001024EC2A4                 ADD             X10, X20, #1
__text:00000001024EC2A8                 ADRP            X11, #[email protected]
__text:00000001024EC2AC                 ADD             X11, X11, #[email protected]
__text:00000001024EC2B0                 MOV             X12, X9
__text:00000001024EC2B4 loc_1024EC2B4                           ; CODE XREF: sub_1024EC234+A8↓j
__text:00000001024EC2B4                 SXTB            W13, W12
__text:00000001024EC2B8                 SUB             W13, W13, #0x61 ; 'a'
__text:00000001024EC2BC                 CMP             W13, #0x1A
__text:00000001024EC2C0                 CSET            W13, CC
__text:00000001024EC2C4                 SUB             W12, W12, W13,LSL#5
__text:00000001024EC2C8                 EOR             W12, W8, W12
__text:00000001024EC2CC                 AND             W12, W12, #0xFF
__text:00000001024EC2D0                 LDR             W12, [X11,W12,UXTW#2]
__text:00000001024EC2D4                 EOR             W8, W12, W8,LSR#8
__text:00000001024EC2D8                 LDRB            W12, [X10],#1
__text:00000001024EC2DC                 CBNZ            W12, loc_1024EC2B4
__text:00000001024EC2E0                 ADD             X10, X20, #1
__text:00000001024EC2E4                 MOV             W12, #0xFFFFFFFF
__text:00000001024EC2E8                 ADRP            X11, #[email protected]
__text:00000001024EC2EC                 ADD             X11, X11, #[email protected]
__text:00000001024EC2F0 loc_1024EC2F0                           ; CODE XREF: sub_1024EC234+F4↓j
__text:00000001024EC2F0                 EOR             W9, W12, W9
__text:00000001024EC2F4                 AND             W9, W9, #0xFF
__text:00000001024EC2F8                 LDR             W9, [X11,W9,UXTW#2]
__text:00000001024EC2FC                 EOR             W9, W9, W12,LSR#8
__text:00000001024EC300                 AND             W12, W9, #0xFF
__text:00000001024EC304                 LDR             W12, [X11,W12,UXTW#2]
__text:00000001024EC308                 EOR             W9, W12, W9,LSR#8
__text:00000001024EC30C                 AND             W12, W9, #0xFF
__text:00000001024EC310                 LDR             W12, [X11,W12,UXTW#2]
__text:00000001024EC314                 EOR             W9, W12, W9,LSR#8
__text:00000001024EC318                 AND             W12, W9, #0xFF
__text:00000001024EC31C                 LDR             W12, [X11,W12,UXTW#2]
__text:00000001024EC320                 EOR             W12, W12, W9,LSR#8
__text:00000001024EC324                 LDRB            W9, [X10],#1
__text:00000001024EC328                 CBNZ            W9, loc_1024EC2F0
__text:00000001024EC32C                 MVN             W9, W12
__text:00000001024EC330                 B               loc_1024EC344
__text:00000001024EC334 ; ---------------------------------------------------------------------------
__text:00000001024EC334 loc_1024EC334                           ; CODE XREF: sub_1024EC234+54↑j
__text:00000001024EC334                 MOV             W2, #0
__text:00000001024EC338                 LDRB            W9, [X20]
__text:00000001024EC33C                 CBNZ            W9, loc_1024EC2A0
__text:00000001024EC340 loc_1024EC340                           ; CODE XREF: sub_1024EC234+68↑j
__text:00000001024EC340                 MOV             W8, #0
__text:00000001024EC344 loc_1024EC344                           ; CODE XREF: sub_1024EC234+FC↑j
__text:00000001024EC344                 AND             W5, W8, #0xFFFF
__text:00000001024EC348                 AND             W6, W9, #0xFFFF
__text:00000001024EC34C                 MOV             X3, X22
__text:00000001024EC350                 MOV             X4, X19
__text:00000001024EC354                 MOV             X0, X21
__text:00000001024EC358                 MOV             X1, X20
__text:00000001024EC35C                 BL              sub_1024ECA2C
__text:00000001024EC360                 LDUR            X8, [X29,#-0x38]
__text:00000001024EC364                 ADRP            X9, #[email protected]
__text:00000001024EC368                 LDR             X9, [X9,#[email protected]]
__text:00000001024EC36C                 LDR             X9, [X9]
__text:00000001024EC370                 CMP             X9, X8
__text:00000001024EC374                 B.NE            loc_1024EC390
__text:00000001024EC378                 ADD             SP, SP, #0x410
__text:00000001024EC37C                 LDP             X29, X30, [SP,#0x30]
__text:00000001024EC380                 LDP             X20, X19, [SP,#0x20]
__text:00000001024EC384                 LDP             X22, X21, [SP,#0x10]
__text:00000001024EC388                 LDP             X28, X27, [SP+0],#0x40
__text:00000001024EC38C                 RET


Here, there are another 2 sub_x (the final ones in the string) let me know if you want me to show them too but i was afraid this topic is too long.. haha

and if anyone knows what i cant change to enable the built in chams, please let me know!

and thank you for your time.





Link to comment
Share on other sites

0 answers to this question

Recommended Posts

There have been no answers to this question yet

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Answer this question...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Our picks

    • HAWK: Airplane Space games Cheats v37.2 +3
      Modded/Hacked App: HAWK: Airplane Fighter jet sky By My.com B.V.
      Bundle ID: com.my.hawk.air.shooter
      iTunes Store Link: https://apps.apple.com/us/app/hawk-airplane-fighter-jet-sky/id1145878423?uo=4

      Hack Features:
      - God Mode
      - OHK
      - Instant Win

      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/topic/89813-arm64-hawk-bullet-hell-jet-shooter-v33-jailed-cheats-1/

      Hack Download Link: https://iosgods.com/topic/142184-hawk-airplane-fighter-jet-sky-cheats-v33-3/
        • Agree
        • Thanks
        • Like
      • 908 replies
    • ZIO and the Magic Scrolls Cheats v1.1.0 +5
      Modded/Hacked App: ZIO and the Magic Scrolls By SuperPlanet corp.
      Bundle ID: com.superplanet.zio
      iTunes Store Link: https://apps.apple.com/us/app/zio-and-the-magic-scrolls/id1534988573?uo=4

      Hack Features:
      - Multiply Damage
      - Multiply Defense
      - Auto Win
      - Infinite MP
      - Dumb AI

      iOS Hack Download Link: https://iosgods.com/topic/153684-zio-and-the-magic-scrolls-cheats-v1012-5/
        • Agree
      • 129 replies
    • Sword Master Story Cheats v4.2.336 +3
      Modded/Hacked App: Sword Master Story By SuperPlanet corp.
      Bundle ID: com.superplanet.swordmaster
      iTunes Store Link: https://apps.apple.com/us/app/sword-master-story/id1521447065?uo=4

      Hack Features:
      - Custom Player Stats
      - Weak Enemies
      - One Hit Kill
      - & More

      Press & Hold to read feature description

      iOS Hack Download Link: https://iosgods.com/topic/146819-sword-master-story-cheats-v42294-3/
      • 448 replies
    • Archero v3.7.0 Jailed Cheats +2 [ Frozen Enemies ]
      Modded/Hacked App: Archero by HABBY PTE. LTD.
      Bundle ID: com.habby.archero
      iTunes Store Link: https://apps.apple.com/us/app/archero/id1453651052?uo=4&at=1010lce4

      Hack Features:
      - Frozen Enemies
      - OHK

      Jailbreak required hack(s): https://iosgods.com/topic/96783-arm64-archero-cheats-v223-5/

      iOS Hack Download Link: https://iosgods.com/topic/100710-arm64-archero-v223-jailed-cheats-2/
        • Agree
        • Thanks
        • Winner
        • Like
      • 6,097 replies
    • Archero Cheats v3.7.0 +5 [ God Mode & More ]
      Modded/Hacked App: Archero by HABBY PTE. LTD.
      Bundle ID: com.habby.archero
      iTunes Store Link: https://apps.apple.com/us/app/archero/id1453651052?uo=4&at=1010lce4

      Hack Features:
      - Multiply Defense to
      - Multiply Damage to
      - God Mode
      - OHK (Must use with God Mode)
      - Freeze Enemies

      NOTE: If you want to use god mode and ohk turn off multiply damage and defense first. I added multiply damage and defense there to avoid ban

      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/topic/100710-archero-v210-enemies-dont-attack-x30-attack/

      Hack Download Link: https://iosgods.com/topic/96783-arm64-archero-cheats-v220-5/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 14,610 replies
    • Garena Liên Quân Mobile / Garena RoV / Garena 傳說對決 Cheats (All Versions) +2
      Modded/Hacked App: Garena Liên Quân Mobile by Garena Mobile Private Limited
      Bundle ID: com.garena.game.kgvn
      iTunes Store Link: https://apps.apple.com/vn/app/garena-li%C3%AAn-qu%C3%A2n-mobile/id1150288115?uo=4&at=1010lce4

      Hack Features:
      - Map Hacks

      iOS Hack Download Link: https://iosgods.com/topic/130903-arm64-garena-li%C3%AAn-qu%C3%A2n-mobile-cheats-v13518-1/
        • Like
      • 1,754 replies
    • Monopoly Tycoon Cheats (All Versions) +1
      Modded/Hacked App: Monopoly Tycoon By Nvizzio Creations Inc
      Bundle ID: com.nvizziocreations.mayfair
      iTunes Store Link: https://apps.apple.com/us/app/monopoly-tycoon/id1486225508?uo=4

      Hack Features:
      - Infinite Currencies

      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/topic/154295-monopoly-tycoon-v0153-jailed-cheats-1/

      iOS Hack Download Link: https://iosgods.com/topic/154293-monopoly-tycoon-cheats-all-versions-1/
      • 10 replies
    • PunBall Cheats v1.5.0 +2
      Modded/Hacked App: PunBall By HABBY PTE. LTD.
      Bundle ID: com.habby.punball
      iTunes Store Link: https://apps.apple.com/us/app/punball/id1585781366?uo=4

      Hack Features:
      - Dumb Enemies
      - One Hit Kill

      iOS Hack Download Link: https://iosgods.com/topic/151406-punball-cheats-v100-2/
      • 217 replies
    • 我也是大俠(Kung fu Supreme) Cheats v2.6.1 +1
      Modded/Hacked App: 我也是大俠(Kung fu Supreme) By MUJOY PTE. LTD.
      Bundle ID: com.ledu.m.wysdx.tw
      iTunes Store Link: https://apps.apple.com/vn/app/%E6%88%91%E4%B9%9F%E6%98%AF%E5%A4%A7%E4%BF%A0-kung-fu-supreme/id1518000601?uo=4

      Hack Features:
      - Freeze Coin (Do not abuse and upgrade too fast and too much)

      Change language from iOS Settings

      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/topic/147020-%E6%88%91%E4%B9%9F%E6%98%AF%E5%A4%A7%E4%BF%A0kung-fu-supreme-v193-jailed-cheats-1/

      iOS Hack Download Link: https://iosgods.com/topic/147017-%E6%88%91%E4%B9%9F%E6%98%AF%E5%A4%A7%E4%BF%A0kung-fu-supreme-cheats-v193-1/
      • 157 replies
    • SUPERSTAR SMTOWN Cheats v3.1.9 +2
      Modded/Hacked App: SUPERSTAR SMTOWN By DalcomSoft Japan, Inc.
      Bundle ID: jp.co.ponos.superstarsmtown
      iTunes Store Link: https://apps.apple.com/jp/app/superstar-smtown/id1216136006?uo=4

      Hack Features:
      - Auto Dance
      - Never Lose Combo

      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/topic/154291-superstar-smtown-v319-jailed-cheats-1/

      iOS Hack Download Link: https://iosgods.com/topic/154289-superstar-smtown-cheats-v319-2/
      • 3 replies
    • [ARM64] Wordscapes Cheats (All Versions) +1
      Modded/Hacked App: Wordscapes By PeopleFun, Inc.
      Bundle ID: com.peoplefun.wordcross
      iTunes Store Link: https://itunes.apple.com/us/app/wordscapes/id1207472156?mt=8&uo=4&at=1010lce4

      Hack Features:
      - Infinite Coins (Spend some/ Get some)

      Hack Download Link: https://iosgods.com/topic/79833-arm64-wordscapes-cheats-v1051-1/
      • 202 replies
    • Darkzone - Idle RPG v0.9.78 +2 Cheats
      Modded/Hacked App: Darkzone - Idle RPG By GOLPE LLC
      Bundle ID: com.capitanos.darkzone
      iTunes Store Link: https://apps.apple.com/us/app/darkzone-idle-rpg/id1483534564?uo=4

      Mod Requirements:
      - Jailbroken iPhone/iPad/iPod Touch.
      - Filza / iMazing or any other file managers for iOS.
      - Cydia Substrate, Substitute or libhooker depending on your jailbreak.
      - PreferenceLoader (from Cydia or Sileo).

      Hack Features:
      - One Hit Kill
      - God Mode

      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/forum/79-no-jailbreak-section/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/

      iOS Hack Download Link:

      Hidden Content
      Download Hack

      Installation Instructions:
      STEP 1: Download the .deb Cydia hack file from the link above.
      STEP 2: Copy the file over to your iDevice using any of the file managers mentioned above or skip this step if you're downloading from your iDevice.
      STEP 3: Using Filza or iFile, browse to where you saved the downloaded .deb file and tap on it.
      STEP 4: Once you tap on the file, you will need to press on 'Install' or 'Installer' from the options on your screen.
      STEP 5: Let Filza / iFile finish the cheat installation. Make sure it successfully installs, otherwise see the note below.
      STEP 6: If the hack is a Mod Menu, which is usually the case nowadays, the cheat features can be toggled in-game. Some cheats have options that can be enabled from your iDevice settings.
      STEP 7: Turn on the features you want and play the game. You may need to follow further instructions inside the hack's popup in-game.


      NOTE: If you have any questions or problems, read our Troubleshooting topic & Frequently Asked Questions & Answers topic. If you still haven't found a solution, post your issue down below and we'll do our best to help! If the hack does work for you, post your feedback below and help out other fellow members that are encountering issues.

      - AlyssaX64

      Cheat Video/Screenshots:

      • 20 replies
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best possible user experience without cookies. You can accept or decline our non-essential cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines