Oh i've almost forget, regarding the UIButton:OnClick
yeah this almost works for all Mono Unity games, except they are using a custom UI Asset.Since I couldn't find any reference in Telerik's JustDecompile for it (seems to be a universal Unity function), I reckon it would work for any button in a GUI, right? Such as this one?
maybe this will come in handy one day, AOBs for function start of Button_Invoke for Unity games compiled without Mono:
48 89 4C 24 08 55 41 54 41 56 41 57 48 83 EC 28 48 8B 41 68 4C 8B F9 48 85 C0 74 0A
near the end of this invoke:
Code: Select all
GameAssembly.dll+2B420D - FF D7 - call rdi <-----------------------------------------------
GameAssembly.dll+2B420F - 48 FF C5 - inc rbp
GameAssembly.dll+2B4212 - 49 3B EE - cmp rbp,r14
GameAssembly.dll+2B4215 - 0F82 F5FEFFFF - jb GameAssembly.dll+2B4110
GameAssembly.dll+2B421B - 4C 8B 6C 24 20 - mov r13,[rsp+20]
GameAssembly.dll+2B4220 - 48 8B 7C 24 68 - mov rdi,[rsp+68]
GameAssembly.dll+2B4225 - 48 8B 74 24 60 - mov rsi,[rsp+60]
GameAssembly.dll+2B422A - 48 8B 5C 24 58 - mov rbx,[rsp+58]
GameAssembly.dll+2B422F - 48 83 C4 28 - add rsp,28 { 40 }
GameAssembly.dll+2B4233 - 41 5F - pop r15
GameAssembly.dll+2B4235 - 41 5E - pop r14
GameAssembly.dll+2B4237 - 41 5C - pop r12
GameAssembly.dll+2B4239 - 5D - pop rbp
GameAssembly.dll+2B423A - C3 - ret
recently used this AOBs for my Ignore-XP script for Bloons TD6, easy obfuscation bypass