Help/Support different offsets in Binary

B3albakii · August 11, 2020

hello guys i need help with finding offsets,
i have a game downloaded from the app store ...
i have CrackerXI installed, , i Crack the binary and load it into IDA
and when i find the offset i need .
i open the original binary file in my phone with HEX and look for that offset, i find that it is not the same?
so what should i do please help and thanks

bR34Kr · August 11, 2020

Remove the 10 before the offset.

^ for future reference

B3albakii · August 14, 2020

1. This is the offset in IDA

2. This is in HEX

3. When i open BInary in Iphone HEX

4. i find different HEX numbers

so Please help me thanks

Updated August 14, 2020 by B3albakii

B3albakii · August 15, 2020

up

B3albakii · August 21, 2020

@bR34Kr check it plZz

Rook · August 21, 2020

If your binary is thinned, the IDA file offset may be off. You can just use the hex bytes and search them on the file to find the offset.

bR34Kr · August 21, 2020

1 hour ago, Rook said:

If your binary is thinned, the IDA file offset may be off. You can just use the hex bytes and search them on the file to find the offset.

Also make sure the binary is the cracked version. I just tried with an iOS binary and the offset pointed to by IDA is correct if you jump to it in a hex editor (I used HxD). Maybe IDA changes the endianness? But just make sure you bin is cracked. That's about it.