Help/Support Unity IDA WriteData. What I'm doing wrong?

[Joka 968 iPhone X 12.4]

17 minutes ago, Joey said:

Ah, I didn't even see that one

It wasn't actually hidden, I could see it without having replied u noob

I know

[Piro 2 iPhone 7 12]

Thanks for all replies masters \o/. Sorry about hide content LOL. I thought it would be better, because it has a lot of pictures hahaha. I will reply each comment, i will try all suggestion. Thanks thanks and thanks again 

[Piro 2 iPhone 7 12]

2 hours ago, TheArmKing said:

umm, get_Life is an int and looks hackable, dont NOP Ints, provide a value, idk how its done on arm64 but its something like
 

MOV W0, #0xfffff 

in hex its 

00FEBF12

try that

 

2 hours ago, gogigogi1 said:

set_life and get_life work only for ur lifes
so u will not be immortal its just dont touch ur lifes
and if u nop function get_life this function anyway must return a value W0 and W0 will be zero (i think) better change NOP to MOV W0, 3 for example

 

2 hours ago, Joey said:

You have several things you can do:

 

1. get_live --> what you can do, is return a HUGE value (MOV W0, W29, RET) for example.

//original assembly code
 LDR W0, [X0, #0x18]
 RET
  
//patched code
  MOV W0, W29
  RET
   
/* how to do this with writeData:
  MOV W0, W29 = E0031D2A in HEX 
*/
   writeData(0x10081C830, 0xE0031D2A);

 

2. set_live --> this is setting your live when your live value changes

- NOP'ing the STR SHOULD work, since this will result in failing to Store (STR) a new value aka infinite health.

 

3. BalloonController_onTriggerEnter2D --> I THINK if you RET the top of the function right away (return), it will not know your 2D transform was hit, aka your health won't be effected.

- RET'ing the top of the function, is basically returning the function when it gets executed, so nothing will happen.

4. UpdateLiveCanvas --> I can't see the function, but I assume this handles your live when you get hit? If so, you'll likely see a branch of get_live or set_live & near that, you'll see a SUB
SUB means subtract, so if you change this to a ADD, or a NOP you health will also be hacked.

 

 

edit:

Oh also,

test without ifGetPrefBool first, sometimes one typo in the tweak.xm & .plist for the key will make you brain dead as f***.

I also suggest to use smaller key names, it's easier to spot a typo then.

 

edit 2:

You have my discord, I'm always open to help. Waiting for your topic to be approved may take so much time

 

Thanks for your support guys. I tried all alternatives, but the game crashed with all these

[Ted2 38.9k iPhone 13 Pro 16.0 Donor]

Just now, Piro said:

 

 

 

Thanks for your support guys. I tried all alternatives, but the game crashed with all these

what ios?writedata is broken on ios 12. if thats your iOS, send me message on dc

[Piro 2 iPhone 7 12]

2 hours ago, Joey said:

You have several things you can do:

 

1. get_live --> what you can do, is return a HUGE value (MOV W0, W29, RET) for example.

//original assembly code
 LDR W0, [X0, #0x18]
 RET
  
//patched code
  MOV W0, W29
  RET
   
/* how to do this with writeData:
  MOV W0, W29 = E0031D2A in HEX 
*/
   writeData(0x10081C830, 0xE0031D2A);

 

2. set_live --> this is setting your live when your live value changes

- NOP'ing the STR SHOULD work, since this will result in failing to Store (STR) a new value aka infinite health.

 

3. BalloonController_onTriggerEnter2D --> I THINK if you RET the top of the function right away (return), it will not know your 2D transform was hit, aka your health won't be effected.

- RET'ing the top of the function, is basically returning the function when it gets executed, so nothing will happen.

4. UpdateLiveCanvas --> I can't see the function, but I assume this handles your live when you get hit? If so, you'll likely see a branch of get_live or set_live & near that, you'll see a SUB
SUB means subtract, so if you change this to a ADD, or a NOP you health will also be hacked.

 

 

edit:

Oh also,

test without ifGetPrefBool first, sometimes one typo in the tweak.xm & .plist for the key will make you brain dead as f***.

I also suggest to use smaller key names, it's easier to spot a typo then.

 

edit 2:

You have my discord, I'm always open to help. Waiting for your topic to be approved may take so much time

 

i really liked this answer @Joey, i'm learning a lot with your topics :). How can i RET in top of the function? Just replace LDR W0, [X0, #0x18] for RET?

Another question, what ifGetPrefBool does exactly?

5 minutes ago, Joey said:

what ios?writedata is broken on ios 12. if thats your iOS, send me message on dc

You're right, IOS 12 =S

[Piro 2 iPhone 7 12]

 

Ooowww shiittt, i hacked my own game LOOOOL. The collision was detected by OnCollisionEnter and not OnTrigger as we thought. 
I just RET the OnCollisionEnter function, and SUCCESSSS *-* 

Thank you so much @Joey for ur support  

If you want to see the result of my first hack (fuucckk, im really happy xD)
 

Before - https://drive.google.com/file/d/1AIbRP8WKwn4btrE3Yc81YgGoKhKUICbn/view?usp=sharing

After (hacked) - https://drive.google.com/open?id=10wzwVm04YyMLe5Jlz6et5KZIjzHGKVbZ

Thanks for all tutorials that i see here 

 

 

Updated March 5, 2019 by Piro
Best layout