How to view .so (Shared Object) Functions Name and Address with Offset?

[GuyLian]

Hello scientists,

I am trying to make Opcode Injections but I need to find the address with offset of the function which is inside "libmatch.so".

I also dumped IL2CPP functions in "libil2cpp.so" but the function I need is not in that dump file.

Any help please?

[MC874]

Hi @GuyLian, there's several ways to do this:

• Using dissasembler software: IDA Pro or Ghidra (Windows / Linux)
• Using debugging tool: Frida Toolkit
• Using dissasembler command line toolset: Radare2 on Termux (Android)
• Analyze manually from Game Guardian Memory Viewer, function often starts with: "LDR", "PUSH" or "ADRL"

Let me know if you have any questions.

[THETWINSOFFICIAL]

You can use gg 

Set range xa > selected libmatch.so

Use calculate offset enter you offset 

And you can see stucture arm code 

And you can mod libmacth just use gg and hex apk

[GuyLian]

Thanks @MC874and @SYLVIAfor reply.

I request thread lock.

[THETWINSOFFICIAL]

12 hours ago, GuyLian said:

Thanks @MC874and @SYLVIAfor reply.

I request thread lock.

Ok