Hacking Getting symbols from arbitrary RPLs?

BullyWiiPlaza

Nintendo Hacking <3
OP
Member
Joined
Aug 2, 2014
Messages
1,932
Trophies
0
XP
2,446
Country
Germany
I tried to get the function addresses from functions defined outside of coreinit.rpl (e.g. in a game's RPL) but getting their addresses does not work with the "usual way". It keeps returning an invalid address. Is there something I'm doing wrong or is it currently not possible?

JGecko U code snippet:
Code:
Connector.getInstance().connect("192.168.178.35");
        RemoteProcedureCall remoteProcedureCall = new RemoteProcedureCall();
        ExportedSymbol exportedSymbol = remoteProcedureCall.getSymbol("some-game.rpl",
                "some-function-from-it");
        System.out.println(new Hexadecimal(exportedSymbol.getAddress(), 8)); // Prints: 0023493C (which is invalid)
        Connector.getInstance().closeConnection();
It works fine with coreinit.rpl functions though:
Code:
Connector.getInstance().connect("192.168.178.35");
RemoteProcedureCall remoteProcedureCall = new RemoteProcedureCall();
ExportedSymbol exportedSymbol = remoteProcedureCall.getSymbol("coreinit.rpl",
    "OSGetSystemTime");
System.out.println(new Hexadecimal(exportedSymbol.getAddress(), 8)); // Prints: 0104337C (which is correct)
Connector.getInstance().closeConnection();
Thank you :)
 
Last edited by BullyWiiPlaza,
  • Like
Reactions: fraret

NexoCube

Well-Known Member
Member
Joined
Nov 3, 2015
Messages
1,222
Trophies
0
Age
28
Location
France
XP
1,305
Country
France
sneaky sneaky

Are trying to get the function adresses while you are in the game (I think here, you are trying to get black ops 2 mp rpl), be sure you are in the multiplayer menu, if it doesn't work try to find some rpl/rpx related function in coreinit ;)
 
  • Like
Reactions: BullyWiiPlaza

BullyWiiPlaza

Nintendo Hacking <3
OP
Member
Joined
Aug 2, 2014
Messages
1,932
Trophies
0
XP
2,446
Country
Germany
Getting the symbol does NOT work. However, if you find the function address manually you can indeed call it using the RPC system. The offset between in-memory function addresses and the ones in IDA is constant :)
 
Last edited by BullyWiiPlaza,
General chit-chat
Help Users
  • Modder_Boi @ Modder_Boi:
    i FoUnd THe chaT
  • Modder_Boi @ Modder_Boi:
    Yo I know this is random but does anyone wanna play warzone lol
  • SylverReZ @ SylverReZ:
    No, Mr. Beast, I don't.
  • K3N1 @ K3N1:
    https://youtu.be/QmQUcwXBTFk Neat running pretty smooth
  • Sonic Angel Knight @ Sonic Angel Knight:
    Did K3N1 eat taco for dinner like I predicted? :ninja:
  • SylverReZ @ SylverReZ:
    @Sonic Angel Knight, He do be shitting.
  • K3N1 @ K3N1:
    I don't have your fetish sorry
  • Psionic Roshambo @ Psionic Roshambo:
    A new fetish has entered the arena!!!
  • K3N1 @ K3N1:
    Chatroom*
  • Julie_Pilgrim @ Julie_Pilgrim:
    oh mygod
  • Julie_Pilgrim @ Julie_Pilgrim:
    is it just me or has the EOF hit an absolute low?
  • Julie_Pilgrim @ Julie_Pilgrim:
    like it always sux yeah but oh my god it REALLY REALLY sux now
  • K3N1 @ K3N1:
    Things tend to kind of get that way when people are allowed to do the same thing over and over again
  • Sonic Angel Knight @ Sonic Angel Knight:
    @Psionic Roshambo Tell us more about this new fetish? :blink:
  • K3N1 @ K3N1:
    He's got an entire bibles on fetishes
  • The Real Jdbye @ The Real Jdbye:
    @Julie_Pilgrim always has been
  • S @ SeniorFuego:
    So why is it that we're not allowed to talk about somebody shooting up a school if that person happens to be trans, even when not expressing a personal opinion???
  • Veho @ Veho:
    Who are you?
  • S @ SeniorFuego:
    A concerned citizen
  • S @ SeniorFuego:
    Here's a neat trick... if you have the edit post page open,, you can edit your post, even after the thread is locked. :D
  • S @ SeniorFuego:
    And knowing is half the battle. So why aren't the people allowed to know about the school shooting that happened the other day? People sure are free to talk about every other divisive topic in the politics section. And it usually swings in favor of the anti-republican types if a thread is allowed to stay up. Funny, that...
  • Veho @ Veho:
    But not really "ha ha" funny.
    Veho @ Veho: But not really "ha ha" funny.