Help/Support Unity IDA WriteData. What I'm doing wrong?

Joka · March 4, 2019

17 minutes ago, Joey said:

Ah, I didn't even see that one

It wasn't actually hidden, I could see it without having replied u noob

I know

Piro · March 4, 2019

Thanks for all replies masters \o/. Sorry about hide content LOL. I thought it would be better, because it has a lot of pictures hahaha. I will reply each comment, i will try all suggestion. Thanks thanks and thanks again

Piro · March 4, 2019

2 hours ago, TheArmKing said:
umm, get_Life is an int and looks hackable, dont NOP Ints, provide a value, idk how its done on arm64 but its something like
MOV W0, #0xfffff 
in hex its
00FEBF12
try that

2 hours ago, gogigogi1 said:

set_life and get_life work only for ur lifes
so u will not be immortal its just dont touch ur lifes
and if u nop function get_life this function anyway must return a value W0 and W0 will be zero (i think) better change NOP to MOV W0, 3 for example

2 hours ago, Joey said:
You have several things you can do:

1. get_live --> what you can do, is return a HUGE value (MOV W0, W29, RET) for example.
//original assembly code
 LDR W0, [X0, #0x18]
 RET
  
//patched code
  MOV W0, W29
  RET
   
/* how to do this with writeData:
  MOV W0, W29 = E0031D2A in HEX 
*/
   writeData(0x10081C830, 0xE0031D2A);
2. set_live --> this is setting your live when your live value changes

- NOP'ing the STR SHOULD work, since this will result in failing to Store (STR) a new value aka infinite health.

3. BalloonController_onTriggerEnter2D --> I THINK if you RET the top of the function right away (return), it will not know your 2D transform was hit, aka your health won't be effected.

- RET'ing the top of the function, is basically returning the function when it gets executed, so nothing will happen.

4. UpdateLiveCanvas --> I can't see the function, but I assume this handles your live when you get hit? If so, you'll likely see a branch of get_live or set_live & near that, you'll see a SUB
SUB means subtract, so if you change this to a ADD, or a NOP you health will also be hacked.

edit:

Oh also,

test without ifGetPrefBool first, sometimes one typo in the tweak.xm & .plist for the key will make you brain dead as f***.

I also suggest to use smaller key names, it's easier to spot a typo then.

edit 2:

You have my discord, I'm always open to help. Waiting for your topic to be approved may take so much time

Thanks for your support guys. I tried all alternatives, but the game crashed with all these

Ted2 · March 4, 2019

Just now, Piro said:

Thanks for your support guys. I tried all alternatives, but the game crashed with all these

what ios?writedata is broken on ios 12. if thats your iOS, send me message on dc

Piro · March 4, 2019

2 hours ago, Joey said:
You have several things you can do:

1. get_live --> what you can do, is return a HUGE value (MOV W0, W29, RET) for example.
//original assembly code
 LDR W0, [X0, #0x18]
 RET
  
//patched code
  MOV W0, W29
  RET
   
/* how to do this with writeData:
  MOV W0, W29 = E0031D2A in HEX 
*/
   writeData(0x10081C830, 0xE0031D2A);
2. set_live --> this is setting your live when your live value changes

- NOP'ing the STR SHOULD work, since this will result in failing to Store (STR) a new value aka infinite health.

3. BalloonController_onTriggerEnter2D --> I THINK if you RET the top of the function right away (return), it will not know your 2D transform was hit, aka your health won't be effected.

- RET'ing the top of the function, is basically returning the function when it gets executed, so nothing will happen.

4. UpdateLiveCanvas --> I can't see the function, but I assume this handles your live when you get hit? If so, you'll likely see a branch of get_live or set_live & near that, you'll see a SUB
SUB means subtract, so if you change this to a ADD, or a NOP you health will also be hacked.

edit:

Oh also,

test without ifGetPrefBool first, sometimes one typo in the tweak.xm & .plist for the key will make you brain dead as f***.

I also suggest to use smaller key names, it's easier to spot a typo then.

edit 2:

You have my discord, I'm always open to help. Waiting for your topic to be approved may take so much time

i really liked this answer @Joey, i'm learning a lot with your topics :). How can i RET in top of the function? Just replace LDR W0, [X0, #0x18] for RET?

Another question, what ifGetPrefBool does exactly?

5 minutes ago, Joey said:

what ios?writedata is broken on ios 12. if thats your iOS, send me message on dc

You're right, IOS 12 =S

Piro · March 5, 2019

Ooowww shiittt, i hacked my own game LOOOOL. The collision was detected by OnCollisionEnter and not OnTrigger as we thought.
I just RET the OnCollisionEnter function, and SUCCESSSS *-*

Thank you so much @Joey for ur support

If you want to see the result of my first hack (fuucckk, im really happy xD)

Before - https://drive.google.com/file/d/1AIbRP8WKwn4btrE3Yc81YgGoKhKUICbn/view?usp=sharing

After (hacked) - https://drive.google.com/open?id=10wzwVm04YyMLe5Jlz6et5KZIjzHGKVbZ

Thanks for all tutorials that i see here