Tutorial How to use syslog to your advantage

[Guest]

Printing return values and arguments to syslog is a great way to use MSHookFunction to your advantage. I have done this many times now and have re-wrote some functions based on what the output was in syslog.

Requirements:
Flexible (from BigBoss)
syslogd to /var/log/syslog (saurik's repo, but I think that's optional)
Hopper

 

Hidden Content

Instructions:
1. Go into Settings, and enable Flexible to show in your app.

2. Find the function you want to hook and hook it normally. Example:

float (*speedOld)(void *self, int arg0);

float speed(void *self, int arg0){
//function body
}

%ctor{
MSHookFunction(bla bla bla);
}

3. Make the call to NSLog to tell the device to start printing what you want to syslog. Here's how it would look:

float (*speedOld)(void *self, int arg0);

float speed(void *self, int arg0){
NSLog(@"return value: %f, arg0: %d", speedOld(self, arg0), arg0);

return speedOld(self, arg0); //always return the function pointer, or the old function so the game functions normally
}

%ctor{
MSHookFunction(bla bla bla);
}

4. Go into your game, and Flexible should appear. On Flexible, tap Menu -> System Log.

5. Preform the action that the function handles, go into syslog from Flexible, and see the return values! This is very useful when you know how to hack something but you can't find the exact offsets because you're able to re-write functions.

One more thing:
In NSLog, you can add more than two things to print. In fact, you can add as many as you want.

In the NSLog call, %f = float and %d = int. Replace them accordingly to the function.
%d: int
%f: float
%s: const char* (c string) or char* (you will 99% use this instead of NSString)
%@: NSString (you will rarely use this)

Updated October 9, 2016 by Guest

[Rook 547.7k iPad Pro (2nd gen) 17.4 Donor]

Hello, hello, hello!

[NitroxicDemon 3.2k 8.1.2]

[Guest]

Hello, hello, hello!

Hello?

[mete1724 52 4]

Ok

[KingRalph 813 9.3.5]

Kool

[Amuyea 87.8k iPhone 7 Plus 14.3]

Nice

[Cr4ck 0 11]

thx

[bus991 17.1k iPhone 8 12.4 Donor]

Hm

[Pradeep6868 5k]

ok