Jump to content

MSHookFunction on sub_x has odd result. Any clue/experience?


Go to solution Solved by Guest,

10 posts in this topic

Recommended Posts

Posted

Been hacking an iOS app. It's a sub_x app thats been a pain in my ass. I've reached the point where I know enough to start hooking.

 

Problem is, while hooking the function i need, via an address (accounting for ASLR), the app crashes when run.

 

So I debug the app via lldb, and something odd is happening.

 

I load the app, attach lldb, and set a breakpoint for the address which I have hooked. I press the button in app and the breakpoint halts the app.

 

The next line to be run, which SHOULD be a B or BL to branch to the new/replacement function is, intead:

.LONG   0x6B007712 (or some address/value large like that). The comment showing is that it's an invalid lvalue.

 

In addition, all subsequent lines are all wrong - it's like MSHookFunction is putting too much data into the address, which is mangling the line, and throwing all other lines off.

 

I'm used MSHookFunction many times before to hook named functions, and it works, and I'm aware of it's uses. This one is a sub_x however, and I've solved the ASLR issue and I've found the memory address for the function (as proven by the lldb breakpoint stopping at the right spot).

 

Has anyone else seen something like this? I feel like I'm missing something really simple. 

Posted (edited)

As it shows in IDA right now its from 0x33f224 through 0x33f2C6, so it's 0xA2/162 bytes long (in assembly).

 

My next trial tomorrow is going to be to lldb debug a mshookfunction that I know works and see how the function is changed, but I am ASSUMING that the first line/s is/are rewritten to a branch and return, and the old_function returned by mshookfunction is a copy of the original. Obviously setting the line to be: .LONG then some huge out of range memory address is incorrect. Driving me batty.

Updated by infernusdoleo
Posted

I've used MSHookFunction on sub_x before. More than once and it has worked well in all cases for me.

Posted

I'm having a hard time understanding your problem but did you include the +1 that you need for thumb binaries? Or maybe you got the branch hex wrong

  • Solution
Posted

+1 for thumb binaries? As in shift the memory address up by 1 so I'm hooking an odd number?

Yeah for thumb you would need a +1 after the offset for some reason

Posted

I'm assuming that if I were hooking a function with a symbol and hooking it by name, it would know that automatically, and maybe my issue is that since I'm hooking by address it doesn't know?

 

I'm gonna give it a shot here shortly, been busy today and haven't had time to break out the hacking tools yet this morning. I'll post my results.

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Our picks

    • Classroom of the Elite v1.0.1 +8 Jailed Cheats [ Unlimited Currencies ]
      Modded/Hacked App: Classroom of the Elite By Crunchyroll, LLC
      Bundle ID: com.crunchyroll.gv.classroomoftheelite
      App Store Link: https://apps.apple.com/us/app/classroom-of-the-elite/id6670073323?uo=4

       
       

      🤩 Hack Features

      - Freeze Energy
      - Freeze Gems
      - Auto Win
      -- Full Game Unlocked

      VIP
      - Unlimited Coins -> Earn some.
      - Unlimited Gems -> Spend some.
      - Unlimited Energy - Earn some.
      - Unlimited XP -> Earn some.
      • 0 replies
    • Classroom of the Elite v1.0.1 +8 Cheats [ Unlimited Currencies ]
      Modded/Hacked App: Classroom of the Elite By Crunchyroll, LLC
      Bundle ID: com.crunchyroll.gv.classroomoftheelite
      App Store Link: https://apps.apple.com/us/app/classroom-of-the-elite/id6670073323?uo=4

       


      🤩 Hack Features

      - Freeze Energy
      - Freeze Gems
      - Auto Win
      -- Full Game Unlocked

      VIP
      - Unlimited Coins -> Earn some.
      - Unlimited Gems -> Spend some.
      - Unlimited Energy - Earn some.
      - Unlimited XP -> Earn some.
      • 0 replies
    • Zombie Infinity v1.8.1 [ +5 Cheats ] Currency Max
      Modded/Hacked App: Zombie Infinity By kamasu.jp Inc.
      Bundle ID: jp.kamasu.oread
      App Store Link: https://apps.apple.com/ph/app/zombie-infinity/id6736433765?uo=4


      🤩 Hack Features

      - ADS Pass

      - Energy Pass

      - Premium Pass

      - Currency

      - Hero Status [ HP - DMG ]
      • 0 replies
    • Zombie Infinity v1.8.1 [ +5 Jailed ] Currency Max
      Modded/Hacked App: Zombie Infinity By kamasu.jp Inc.
      Bundle ID: jp.kamasu.oread
      App Store Link: https://apps.apple.com/ph/app/zombie-infinity/id6736433765?uo=4


      🤩 Hack Features

      - ADS Pass

      - Energy Pass

      - Premium Pass

      - Currency

      - Hero Status [ HP - DMG ]
      • 0 replies
    • GrandChase Cheats v1.91.2 +4 [ Multiply Attack & More ]
      Modded/Hacked App: GrandChase By KOG co., Ltd
      Bundle ID: com.kog.grandchaseglobal
      iTunes Store Link: https://itunes.apple.com/us/app/grandchase/id1385904294?mt=8&uo=4&at=1010lce4

      Mod Requirements:
      - Jailbroken iPhone/iPad/iPod Touch.
      - iFile / Filza / iFunBox / iTools or any other file managers for iOS.
      - Cydia Substrate or Substitute.
      - PreferenceLoader (from Cydia or Sileo).


      Hack Features:
      - x Player Damage - x1 - 100
      - x Player HP - x1 - 100
      - Auto-Win
      - Unlimited Skills

      All features are unlinked and only for player, you!

      This hack is an In-Game Mod Menu (iGMM). In order to activate the Mod Menu, tap on the iOSGods button found inside the app. This hack works on the latest x64 or ARM64 iDevices: iPhone 5s, 6, 6 Plus, 6s, 6s Plus, 7, 7 Plus, 8, 8 Plus, X, Xr, Xs, Xs Max, SE, iPod Touch 6G, iPad Air, Air 2, Pro & iPad Mini 2, 3, 4 and later.
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 1,466 replies
    • Earn to Die Rogue v1.14.178 +15 Jailed Cheats [ Unlimited Currencies ]
      Modded/Hacked App: Earn to Die Rogue By Not Doppler Pty Limited
      Bundle ID: com.notdoppler.earntodierogue
      iTunes Store Link: https://apps.apple.com/us/app/earn-to-die-rogue/id1564024870?uo=4


      Hack Features:
      - Unlimited Cash
      - Unlimited Gold
      - Unlimited Skill Tree Tokens


      Jailbreak required hack(s): [Mod Menu Hack] Earn to Die Rogue v1.00.96 +2 Cheats [ Unlimited Currencies ] - Free Jailbroken Cydia Cheats - iOSGods
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 266 replies
    • Earn to Die Rogue v1.14.178 +15 Cheats [ Unlimited Currencies ]
      Modded/Hacked App: Earn to Die Rogue By Not Doppler Pty Limited
      Bundle ID: com.notdoppler.earntodierogue
      iTunes Store Link: https://apps.apple.com/us/app/earn-to-die-rogue/id1564024870?uo=4


      Hack Features:
      - Unlimited Cash
      - Unlimited Gold
      - Unlimited Skill Tree Tokens


      Non-Jailbroken & No Jailbreak required hack(s): [Non-Jailbroken Hack] Earn to Die Rogue v1.00.96 +2 Jailed Cheats [ Unlimited Currencies ] - Free Non-Jailbroken IPA Cheats - iOSGods
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 155 replies
    • Virtual Villagers 6 v1.9.7 +100 Jailed Cheats [ Cheats Menu ]
      Modded/Hacked App: Virtual Villagers 6 By LDW Software, LLC
      Bundle ID: com.ldw.vv6
      iTunes Store Link: https://apps.apple.com/us/app/virtual-villagers-6/id6566193928?uo=4

       
       

      Hack Features

      - Cheats Menu -> Head into Settings, toggle the Help button, close settings then re-open to show a Cheats button.*
      - Unlimited Food*
      - Unlimited Wood*
      - Unlimited Stone*
      - Unlimited Tech Points*
      - Unlimited Lavastone*

      * - Head into Settings and toggle the Help button. Only enable 1 feature at a time.


      Jailbreak required iOS hacks: [Mod Menu Hack] Virtual Villagers 6 v1.3.23 +100 Cheats [ Cheats Menu ] - Free Jailbroken Cydia Cheats - iOSGods
      Modded Android APKs: https://iosgods.com/forum/68-android-section/
        • Agree
        • Like
      • 8 replies
    • Virtual Villagers 6 v1.9.7 +100 Cheats [ Cheats Menu ]
      Modded/Hacked App: Virtual Villagers 6 By LDW Software, LLC
      Bundle ID: com.ldw.vv6
      iTunes Store Link: https://apps.apple.com/us/app/virtual-villagers-6/id6566193928?uo=4

       


      Hack Features

      - Cheats Menu -> Head into Settings, toggle the Help button, close settings then re-open to show a Cheats button.*
      - Unlimited Food*
      - Unlimited Wood*
      - Unlimited Stone*
      - Unlimited Tech Points*
      - Unlimited Lavastone*

      * - Head into Settings and toggle the Help button. Only enable 1 feature at a time.


      For Non-Jailbroken & No Jailbreak required hacks: [IPA Mod Menu] Virtual Villagers 6 v1.3.23 +100 Jailed Cheats [ Cheats Menu ] - Free Non-Jailbroken IPA Cheats - iOSGods
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
        • Haha
        • Thanks
        • Like
      • 5 replies
    • Hellsquad Rrrush! v1.0.1 +3 Jailed Cheats [ Damage & Defence ]
      Modded/Hacked App: Hellsquad Rrrush! By Wemade Max Co., Ltd.
      Bundle ID: com.wemademax.projectsc
      App Store Link: https://apps.apple.com/us/app/hellsquad-rrrush/id6737409896?uo=4

       


      🤩 Hack Features

      - Damage Multiplier
      - Defence Multiplier
      - God Mode
        • Informative
        • Winner
        • Like
      • 4 replies
    • Hellsquad Rrrush! v1.0.1 +3 Cheats [ Damage & Defence ]
      Modded/Hacked App: Hellsquad Rrrush! By Wemade Max Co., Ltd.
      Bundle ID: com.wemademax.projectsc
      App Store Link: https://apps.apple.com/us/app/hellsquad-rrrush/id6737409896?uo=4

       


      🤩 Hack Features

      - Damage Multiplier
      - Defence Multiplier
      - God Mode
        • Winner
      • 5 replies
    • [ DBL ]ドラゴンボール レジェンズ v6.4.0 - [ Instant - Win & More ]
      Modded/Hacked App: ドラゴンボール レジェンズ By BANDAI NAMCO Entertainment Inc.
      Bundle ID: jp.co.bandainamcoent.BNEI0333
      iTunes Store Link: https://itunes.apple.com/jp/app/ドラゴンボール-レジェンズ/id1358232022


      Mod Requirements:
      - Jailbroken iPhone/iPad/iPod Touch.
      - iFile / Filza / iFunBox / iTools or any other file managers for iOS.
      - Cydia Substrate (from Cydia).
      - PreferenceLoader (from Cydia).


      Hack Features:
      - x Player Damage - x1 - 20 
      - x Player Defense - x1 - 20 
      - One Hit Kill
      - God Mode 
      - 1 Enemy Per Quest
      - Instant - Win - Enable It When You In Battle
      - No Swap CoolDown
      - No Vanish CoolDown
      - No KI Cost
      - Auto Complete All Challenges-> Currency/Chrono Crystals Hack!
      - Always Critical
      - Tutorial Bypass
      - All Cards Give DragonBalls

      All functions are unlinked and only for player, you!
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 1,646 replies
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines