Help/Support Making a Character Speed Hack - iOS Hacking

[ss77ss77 9 iPhone X 15.1]

• Public Property RunSpeed As Single
   

    <Token(Token := "0x6000DAF")>
    <Address(RVA := "0x14E6264", Offset := "0x14E6264", VA := "0x1014E6264")>
    <Attribute(Name := "CompilerGeneratedAttribute", RVA := "0x164980", Offset := "0x164980")>
    Get
        Return 0F
    End Get

il2cpp:00000001014E6264
il2cpp:00000001014E6264 Character$$get_RunSpeed                 ; CODE XREF: Monster_2021$$OnModeChange+2C↓p
il2cpp:00000001014E6264                                         ; Monster_2021$$subAiMsgFirstSetup+24↓p
il2cpp:00000001014E6264                                         ; DATA XREF: ...
il2cpp:00000001014E6264                 LDR             S0, [X0,#0x4D4]
il2cpp:00000001014E6268                 RET
il2cpp:00000001014E6268 ; End of function Character$$get_RunSpeed

Tell me method. There seems to be a cause when I "As Single" click it, is it correct?

How can I change the speed of my character?

[Rook 567.5k iPad Pro (2nd gen) 17.4 Donor]

9 hours ago, ss77ss77 said:

1014E6264                 LDR             S0, [X0,#0x4D4]

Modify this and see if there's a change in-game.

[ss77ss77 9 iPhone X 15.1]

43 minutes ago, Rook said:

Modify this and see if there's a change in-game.

Namespace System
    ''' <summary>単精度浮動小数点数を表します。</summary>
    ' Token: 0x0200001F RID: 31
    <Token(Token := "0x200001F")>
    <Attribute(Name := "ComVisibleAttribute", RVA := "0x984BC", Offset := "0x984BC")>
    <System.Serializable()>
    Public Structure [Single]
        Implements System.IFormattable, System.IConvertible, System.IComparable, System.IComparable(Of Single), System.IEquatable(Of Single)

        ''' <summary>このメンバーの説明については、<see cref="M:System.IConvertible.ToBoolean(System.IFormatProvider)" /> のトピックを参照してください。</summary>
        ''' <param name="provider">このパラメーターは無視されます。</param>
        ''' <returns>現在のインスタンスの値が 0 でない場合は <see langword="true" />。それ以外の場合は <see langword="false" />。</returns>
        ' Token: 0x0600020D RID: 525 RVA: 0x00003FC0 File Offset: 0x000021C0
        <Token(Token := "0x600020D")>
        <Address(RVA := "0x8ED3C", Offset := "0x8ED3C", VA := "0x10008ED3C", Slot := "5")>
        Private Function ToBoolean(provider As System.IFormatProvider) As Boolean
            Return Nothing
        End Function

Of course, I ran the code using the "live offset patcher", but it didn't reflect.

Above is after "As Single"clicking.

Other parameters are also set to "As Single" and are not reflected.

I don't know where the cause is.

[ss77ss77 9 iPhone X 15.1]

18 minutes ago, Ffhhffdghhddgigd said:

 

 

Of course, I ran the code using the "live offset patcher", but it didn't reflect.

[0xNoctis 9.9k iPad Pro (5th gen) 13.3 Donor]

On 7/18/2022 at 11:00 PM, Rook said:

1014E6264                 LDR             S0, [X0,#0x4D4]

What are you using to change it? like which hex codes

[ss77ss77 9 iPhone X 15.1]

On 7/23/2022 at 7:20 PM, 0xNoctis said:

What are you using to change it? like which hex codes

I'm not used to "live offset patcher" so I changed it.

[ss77ss77 9 iPhone X 15.1]

LDR

Copy from memory to register

 

Online ARM to HEX Converter

00D444BD

 

I don't know how to proceed from here.

 

 

[Kobina 246 iPhone 6s 12. 0]

On 8/13/2022 at 7:09 AM, ss77ss77 said:

LDR

Copy from memory to register

 

Online ARM to HEX Converter

00D444BD

 

I don't know how to proceed from here.

 

Did you put that into the hex and save it and delete the orginal binary of the game and put the hack binary and tested it and see if it works?