Hacking Address of real function ?

[ptitleray]

I'm on 4.1.0 firmware and i would like to know how to get the address of certain functions
I recovered almost all addresses with the help of :
- OSDynLoad_Acquire()
- OSDynLoad_FindExport()
but I can't retrieve the REAL address of :
- FSGetStat()
- MEMAllocFromDefaultHeapEx()
and few others

Can somebody help me ?

 

[Marionumber1]

I'm on 4.1.0 firmware and i would like to know how to get the address of certain functions
I recovered almost all addresses with the help of :
- OSDynLoad_Acquire()
- OSDynLoad_FindExport()
but I can't retrieve the REAL address of :
- FSGetStat()
- MEMAllocFromDefaultHeapEx()
and few others

Can somebody help me ?

MEMAllocFromDefaultHeapEx is actually a function pointer. You need to set isData (second arg of FindExport) to 1, and then it will give you the pointer. Dereferencing that pointer gets you the address of the function itself. FSGetStat() may work in a similar way.