Jump to content

2 posts in this topic

Recommended Posts

Posted

Hi, i was trying to disassemble functions for a unity game. but it wasnt working.

Firstly, i got the offset to a playsound function and try to disassemble it in real time. But turns out that it is not a function at that address.

spacer.png

spacer.png

 

base address after aslr + offset :

spacer.png

 

Secondly,

 

all functions inspected in IDA are also encrypted as followed. I have no way to dissassemble the functions. 

spacer.png

 

What can i do here? Thanks.

Thanks.

Posted

i never heard about disassembling  code on ios (at least in IDA exists pseudocode generator) :D
there are two methods that i use to work
1. U dont neet to know what are happening inside function
1.1 hook function 
1.2 do what u need
1.3 call original
Example
 

void (*UpdatePlayerHp_Ori)(void *_this, int hp);
void _UpdatePlayerHp_Hook(void *_this, int hp){
	int new_hp = 10000;
	UpdatePlayerHp_Ori(_this,  new_hp);
}

MSHookFunction((void *)getRealOffset(0x100200C10), (void *)_UpdatePlayerHp_Hook, (void **)&UpdatePlayerHp_Ori);

0x100200C10 - offset of UpdatePlayerHp_Ori

2. u change HEX arm code
2.1 learn all tutorial on this portal

example of void DamageCar(bool isDamaged)

at begin of function
mov xXX, x1 //<- what evere x21,x20 or else is e receiver and x1 is isDamaged
so u must change
mov xXX, 0 // 1 = isDamaged = true // 0 - sDamaged = false

 

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines