Jump to content

(“Class”_Typeinfo;) hidden trying to hook


Go to solution Solved by Saitama,

5 posts in this topic

Recommended Posts

Posted

Ok so the game is pocket ants very easy to modify with hex patches but now I’m trying to figure out if it’s possible with function pointers and stuff like that.

So I figured out a lot of useful fields (ints,floats,etc.)come from this class called Puntos problem is that in this game almost all fields from the other classes are just gameobjects,sprites,(basically no way to reference it as far as I know )

so I looked further via ida and I notice almost every class that related to changing values from Puntos  had this thing called Puntos_info in it and which it did ADRP x20,#Puntos_info@page then ADD... @pageoff then it would have a tbnz that would go to another area where it loaded the(ldr x0,[x20 or another x2#]=Puntos_typeinfo) Puntos_typeinfo then did this Ldr w8,[x0,#0xe0] after this a cbnz which if not nz then it would return but if is z it call some like this j_1l2cpp_runtime_class_init_0 then loads Puntos_typeinfo again also I can’t figure out what this 0xe0 really I checked dump.cs and fake .dlls and nothing is here that relates to that 

But Point is somehow Puntos is being referenced and I want to know if it’s possible to use it for function pointers so I can edit this useful field mostly the floats as it’s hard to edit them with arm64 without constantly crashing 

 

more info : Puntos seems to be some obfuscate thing as from the functions in the class

and game uses unityframework

Posted

// RVA: 0x1616D58 Offset: 0x1616D58 VA: 0x1616D58
public void ClaimDaily() { }

il2cpp:0000000001616E3C                 ADRP            X22, #Puntos_TypeInfo@PAGE ; Puntos_TypeInfo
il2cpp:0000000001616E40                 ADD             X22, X22, #Puntos_TypeInfo@PAGEOFF ; Puntos_TypeInfo
il2cpp:0000000001616E44                 LDR             X0, [X22] ; Puntos_TypeInfo
il2cpp:0000000001616E48                 LDR             W8, [X0,#0xE0]
il2cpp:0000000001616E4C                 CBNZ            W8, loc_1616E58
il2cpp:0000000001616E50                 BL              j__il2cpp_runtime_class_init_0
il2cpp:0000000001616E54                 LDR             X0, [X22] ; Puntos_TypeInfo
il2cpp:0000000001616E58
il2cpp:0000000001616E58 loc_1616E58                             ; CODE XREF: Anniv2$$ClaimDaily+F4↑j
il2cpp:0000000001616E58                 LDR             X8, [X0,#0xB8]
il2cpp:0000000001616E5C                 LDR             W9, [X8,#0x1A0]

X8  -> public class Puntos : MonoBehaviour // TypeDefIndex: 704
W9 -> public static int a2day; // 0x1A0

 

// RVA: 0x17D1F14 Offset: 0x17D1F14 VA: 0x17D1F14
public void ClaimQuest(int index) { }

il2cpp:00000000017D208C                 LDR             X0, [X23] ; Puntos_TypeInfo
il2cpp:00000000017D2090                 LDR             W8, [X0,#0xE0]
il2cpp:00000000017D2094                 CBNZ            W8, loc_17D20A0
il2cpp:00000000017D2098                 BL              j__il2cpp_runtime_class_init_0
il2cpp:00000000017D209C                 LDR             X0, [X23] ; Puntos_TypeInfo
il2cpp:00000000017D20A0
il2cpp:00000000017D20A0 loc_17D20A0                             ; CODE XREF: Quests$$ClaimQuest+180↑j
il2cpp:00000000017D20A0                 LDR             X8, [X0,#0xB8]
il2cpp:00000000017D20A4                 LDR             X0, [X8,#0xC30]

X8  -> public class Puntos : MonoBehaviour // TypeDefIndex: 704
W9 -> public static List<Quest> misiones; // 0xC30

Class Puntos is looks like a static Singleton
 

 

  • Winner 1
Posted (edited)

17D2BCC                 BL              SaveData$$SaveQuests
17D2BCC -> 1F2003D5

17D1C3C                 BL              SaveData$$SaveDailies
17D1C3C -> 1F2003D5

18E1F4C                 BL              SaveData$$SaveSummerDaily
18E1F4C -> 1F2003D5

and after restart game u can again collect ur quest rewards :D

 

Updated by Saitama
  • Winner 1
Posted
On 10/2/2022 at 2:17 PM, Saitama said:

// RVA: 0x1616D58 Offset: 0x1616D58 VA: 0x1616D58
public void ClaimDaily() { }

il2cpp:0000000001616E3C                 ADRP            X22, #Puntos_TypeInfo@PAGE ; Puntos_TypeInfo
il2cpp:0000000001616E40                 ADD             X22, X22, #Puntos_TypeInfo@PAGEOFF ; Puntos_TypeInfo
il2cpp:0000000001616E44                 LDR             X0, [X22] ; Puntos_TypeInfo
il2cpp:0000000001616E48                 LDR             W8, [X0,#0xE0]
il2cpp:0000000001616E4C                 CBNZ            W8, loc_1616E58
il2cpp:0000000001616E50                 BL              j__il2cpp_runtime_class_init_0
il2cpp:0000000001616E54                 LDR             X0, [X22] ; Puntos_TypeInfo
il2cpp:0000000001616E58
il2cpp:0000000001616E58 loc_1616E58                             ; CODE XREF: Anniv2$$ClaimDaily+F4↑j
il2cpp:0000000001616E58                 LDR             X8, [X0,#0xB8]
il2cpp:0000000001616E5C                 LDR             W9, [X8,#0x1A0]

X8  -> public class Puntos : MonoBehaviour // TypeDefIndex: 704
W9 -> public static int a2day; // 0x1A0

 

// RVA: 0x17D1F14 Offset: 0x17D1F14 VA: 0x17D1F14
public void ClaimQuest(int index) { }

il2cpp:00000000017D208C                 LDR             X0, [X23] ; Puntos_TypeInfo
il2cpp:00000000017D2090                 LDR             W8, [X0,#0xE0]
il2cpp:00000000017D2094                 CBNZ            W8, loc_17D20A0
il2cpp:00000000017D2098                 BL              j__il2cpp_runtime_class_init_0
il2cpp:00000000017D209C                 LDR             X0, [X23] ; Puntos_TypeInfo
il2cpp:00000000017D20A0
il2cpp:00000000017D20A0 loc_17D20A0                             ; CODE XREF: Quests$$ClaimQuest+180↑j
il2cpp:00000000017D20A0                 LDR             X8, [X0,#0xB8]
il2cpp:00000000017D20A4                 LDR             X0, [X8,#0xC30]

X8  -> public class Puntos : MonoBehaviour // TypeDefIndex: 704
W9 -> public static List<Quest> misiones; // 0xC30

Class Puntos is looks like a static Singleton
 

 

Do you think its possible to use this static singleton with function pointers to modify the float fields? that’s really my main goal

  • Solution
Posted
1 hour ago, Wowowowww said:

Do you think its possible to use this static singleton with function pointers to modify the float fields? that’s really my main goal

sure
il2cpp:0000000001616E58                 LDR             X8, [X0,#0xB8]
il2cpp:0000000001616E5C                 LDR             W9, [X8,#0x1A0]

mov w28, 1
str w28,[X8,#0x1A0]


public static int a2day; // 0x1A0 == 1

also exist more easy way - i know thats is on forum exists
named like static bla bla bla dont remember

  • Like 1

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Our picks

    • Dice Dreams™ V1.93.1 [ +9 Cheats ] Currency Max
      Modded/Hacked App: Dice Dreams™ By SuperPlay LTD
      Bundle ID: com.superplaystudios.dicedreams
      iTunes Store Link: https://apps.apple.com/us/app/dice-dreams/id1484468651?uo=4


      Hack Features:
      - Coins Max [ Disable Coins When Use Bet Multiplier ]

      - Rolls Unlimited 

      - Crowns [ Only For Card Upgrade ]

      - Shield [ Get Unlimited Rolls ]

      - Bet Multiplier [ Coins + Rewards ]

      - All Task Score + Rewards [ Linked Bet Multiplier ]

      - Next Kingdom [ Build One ]

      - Build Cost [ 0 ]

      - Premium Dreams Pass

      Warning:- Don't Blame Me Banned  Some Time Freeze Reopen Then Works


      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/forum/79-no-jailbreak-section/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 89 replies
    • Dice Dreams™ V1.93.1 [ +9 Jailed ] Currency Max
      Modded/Hacked App: Dice Dreams™ By SuperPlay LTD
      Bundle ID: com.superplaystudios.dicedreams
      iTunes Store Link: https://apps.apple.com/us/app/dice-dreams/id1484468651?uo=4


      Hack Features:

      - Coins Max [ Disable Coins When Use Bet Multiplier ]

      - Rolls Unlimited 

      - Crowns [ Only For Card Upgrade ]

      - Shield [ Get Unlimited Rolls ]

      - Bet Multiplier [ Coins + Rewards ]

      - All Task Score + Rewards [ Linked Bet Multiplier ]

      - Next Kingdom [ Build One ]

      - Build Cost [ 0 ]

      - Premium Dreams Pass

      Warning:- Don't Blame Me Banned  Some Time Freeze Reopen Then Works

       
      Jailbreak required hack(s): https://iosgods.com/forum/5-game-cheats-hack-requests/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 58 replies
    • Survivor Kingdoms V3.26 [ +11 Jailed ] Easy Win
      Modded/Hacked App: Survivor Kingdoms By Gamee Joint Stock Company
      Bundle ID: com.gamee.kingdoms.survivor.io
      iTunes Store Link: https://apps.apple.com/us/app/survivor-kingdoms/id6444824577?uo=4

       

      🚀 Hack Features

      - IAP Free [ Buy Anything ]

      - Health

      - Damage

      - Skill CD Slow

      - Skill CD Fast [ Maybe Game Slow ]

      - Skill Size Big

      - Shooting Speed Fast

      - Movement Speed

      - Auto Revive Unlimited [ Never Die ]

      - Ultimate Power CD

      - Avatar & Frame 


      🍏 Jailbreak iOS hacks: https://iosgods.com/forum/5-game-cheats-hack-requests/
      🤖 Modded Android APKs: https://iosgods.com/forum/68-android-section/
        • Informative
        • Agree
        • Winner
        • Like
      • 34 replies
    • Survivor Kingdoms V3.26 [ +11 Cheats ] Easy Win
      Modded/Hacked App: Survivor Kingdoms By Gamee Joint Stock Company
      Bundle ID: com.gamee.kingdoms.survivor.io
      iTunes Store Link: https://apps.apple.com/us/app/survivor-kingdoms/id6444824577?uo=4


      Hack Features:
      - IAP Free [ Buy Anything ]

      - Health

      - Damage

      - Skill CD Slow

      - Skill CD Fast [ Maybe Game Slow ]

      - Skill Size Big

      - Shooting Speed Fast

      - Movement Speed

      - Auto Revive Unlimited [ Never Die ]

      - Ultimate Power CD

      - Avatar & Frame 


      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/forum/79-no-jailbreak-section/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 44 replies
    • Squishmallows Match v0.7.8 [ +2 Cheats ] Auto Win
      Modded/Hacked App: Squishmallows Match By East Side Games Inc
      Bundle ID: com.eastsidegames.squishmallows
      App Store Link: https://apps.apple.com/ph/app/squishmallows-match/id6450057167?uo=4

       

      🤩 Hack Features

      - Auto Win
      - Lives [ 0 Play Unlimited ]

        • Like
      • 6 replies
    • Squishmallows Match v0.7.8 [ +2 Jailed ] Auto Win
      Modded/Hacked App: Squishmallows Match By East Side Games Inc
      Bundle ID: com.eastsidegames.squishmallows
      App Store Link: https://apps.apple.com/ph/app/squishmallows-match/id6450057167?uo=4
       

      🤩 Hack Features

      - Auto Win
      - Lives [ 0 Play Unlimited ]

        • Like
      • 9 replies
    • Adventure Bay - Farm Games v1.43.14 [ +4 Cheats ] Currency Max
      Modded/Hacked App: Adventure Bay - Farm Games By Gamegos Teknoloji A.S.
      Bundle ID: com.gamegos.adventure.bay.paradise.farm
      iTunes Store Link: https://apps.apple.com/us/app/adventure-bay-farm-games/id1578449819?uo=4
       

      🤩 Hack Features

      - Gems
      - Coins
      - Energy
      - Avatar Unlock
        • Thanks
        • Like
      • 23 replies
    • Adventure Bay - Farm Games v1.43.14 [ +4 Jailed ] Currency Max
      Modded/Hacked App: Adventure Bay - Farm Games By Gamegos Teknoloji A.S.
      Bundle ID: com.gamegos.adventure.bay.paradise.farm
      iTunes Store Link: https://apps.apple.com/us/app/adventure-bay-farm-games/id1578449819?uo=4


      🤩 Hack Features

      - Gems
      - Coins
      - Energy
      - Avatar Unlock
        • Informative
        • Agree
        • Thanks
        • Winner
        • Like
      • 30 replies
    • Raising Reincarnated SwordMage v1.17.3 +2 Jailed Cheats
      Modded/Hacked App: Raising Reincarnated SwordMage By Lunosoft Inc.
      Bundle ID: com.lunosoft.swordsman
      App Store Link: https://apps.apple.com/us/app/raising-reincarnated-swordmage/id6745645696?uo=4

       

       

      📌 Mod Requirements

      - Non-Jailbroken/Jailed or Jailbroken iPhone or iPad.
      - Sideloadly or alternatives.
      - Computer running Windows/macOS/Linux with iTunes installed.

       

      🤩 Hack Features

      - Enemy HP Divide
      - Enemy Damage Divide

       

      ⬇️ iOS Hack Download IPA Link


      Hidden Content

      Download via the iOSGods App







       

      📖 PC Installation Instructions

      STEP 1: Download the pre-hacked .IPA file from the link above to your computer. To download from the iOSGods App, see our iOSGods App IPA Download Tutorial which includes a video example.
      STEP 2: Download Sideloadly and install it on your Windows or Mac.
      STEP 3: Open Sideloadly on your computer, connect your iOS device, and wait until your device name appears in Sideloadly.
      STEP 4: Once your iDevice is recognized, drag the modded .IPA file you downloaded and drop it into the Sideloadly application.
      STEP 5: Enter your Apple Account email, then press “Start.” You’ll then be asked to enter your password. Go ahead and provide the required information.
      STEP 6: Wait for Sideloadly to finish sideloading/installing the hacked IPA. If there are issues during installation, please read the note below.
      STEP 7: Once the installation is complete and you see the app on your Home Screen, you will need to go to Settings -> General -> Profiles / VPN & Device Management. Once there, tap on the email you entered from step 6, and then tap on 'Trust [email protected]'.
      STEP 8: Now go to your Home Screen and open the newly installed app and everything should work fine. You may need to follow further per app instructions inside the hack's popup in-game.

      NOTE: iOS/iPadOS 16 and later, you must enable Developer Mode. For free Apple Developer accounts, you will need to repeat this process every 7 days. If you have any questions or problems, read our Sideloadly FAQ section of the topic and if you don't find a solution, please post your issue below and we'll do our best to help! If the hack does work for you, post your feedback below and help out other fellow members that are encountering issues.

       

      🙌 Credits

      - AlyssaX64

       

      📷 Cheat Video/Screenshots

      N/A
      • 4 replies
    • Raising Reincarnated SwordMage v1.17.3 +2 Cheats
      Modded/Hacked App: Raising Reincarnated SwordMage By Lunosoft Inc.
      Bundle ID: com.lunosoft.swordsman
      App Store Link: https://apps.apple.com/us/app/raising-reincarnated-swordmage/id6745645696?uo=4

       

       

      📌 Mod Requirements

      - Jailbroken iPhone or iPad.
      - iGameGod / Filza / iMazing.
      - Cydia Substrate, ElleKit, Substitute or libhooker depending on your jailbreak (from Sileo, Cydia or Zebra).

       

      🤩 Hack Features

      - Enemy HP Divide
      - Enemy Damage Divide

       

      ⬇️ iOS Hack Download Link


      Hidden Content

      Download Hack







       

      📖 iOS Installation Instructions

      STEP 1: Download the .deb hack file from the link above. Use Safari, Google Chrome or other iOS browsers to download.
      STEP 2: Once the file has downloaded, tap on it and then you will be prompted on whether you want to open the deb with iGameGod or copy it to Filza.
      STEP 3: If needed, tap on the downloaded file again, then select ‘Normal Install’ from the options on your screen.
      STEP 4: Let iGameGod/Filza finish the cheat installation. If it doesn’t install successfully, see the note below.
      STEP 5: Open the game, log in to your iOSGods account when asked, then toggle on the features you want and enjoy!

       

      NOTE: If you have any questions or problems, read our Jailbreak iOS Hack Troubleshooting & Frequently Asked Questions & Answers topic. If you still haven't found a solution, post your issue below and we'll do our best to help! If the hack does work for you, please post your feedback below and help out other fellow members that are encountering issues.

       

      🙌 Credits

      - AlyssaX64

       

      📷 Cheat Video/Screenshots

      N/A

       

      More iOS App Hacks
      If you’re looking for Non-Jailbroken & No Jailbreak required iOS IPA hacks, visit the iOS Game Cheats & Hacks or the iOSGods App for a variety of modded games and apps for non-jailbroken iOS devices.

      Modded Android APKs
      Need modded apps or games for Android? Check out the latest custom APK mods, cheats & more in our Android Section.
        • Haha
      • 3 replies
    • Survival War: Adventure RPG v2.3.6 Debug Menu [+10 Cheats]
      Modded/Hacked App: Survival War: Adventure RPG By Gamee Joint Stock Company
      Bundle ID: com.gamee.survival.war.adventure.rpg
      App Store Link: https://apps.apple.com/us/app/survival-war-adventure-rpg/id6745683917?uo=4



      🤩 Hack Features

      - Debug Menu
       
        • Thanks
        • Winner
        • Like
      • 7 replies
    • Survival War: Adventure RPG v2.3.6 Debug Menu [+10 Jailed Cheats]
      Modded/Hacked App: Survival War: Adventure RPG By Gamee Joint Stock Company
      Bundle ID: com.gamee.survival.war.adventure.rpg
      App Store Link: https://apps.apple.com/us/app/survival-war-adventure-rpg/id6745683917?uo=4



      🤩 Hack Features

      - Debug Menu
        • Agree
        • Winner
        • Like
      • 12 replies
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines