Use Hopper to take care of Mac Thunderbolt members and offline download function

Turn your own hopper take care of Mac Thunderbolt members and offline download functionLocate the Mac Thunderbolt executable file first

snakeninnys-iMac:~ snakeninny$ ls /Applications/Thunder.app/Contents/MacOSThunder            libetm.dylib       libiniparser.dylib

If your thunder is also placed /Applications under, then the location of the executable file should be the same as above??

Parse an executable file with Hopper

Locate the function you want to modify

The size of the executable file is small, and Hopper will be able to complete its analysis soon. In the Label search field, enter "is" (note, "Space is"), in the search results, find the 4 methods:

Each of them is

-[LocalTask isValidLixianTask]2. -[UserController isVip]3. -[UserController isPlatinum]4. -[UserController isDiamond]

4 methods of using hopper static patches

First Patch -[LocalTask isValidLixianTask] :
Place the mouse focus on -[LocalTask isValidLixianTask] the first line of the assembly code, then select the Hopper menu bar, modify-Assemble instruction, and enter in the popup text box mov eax, 0x1 :

Screen Shot 2015-07-06 at 3.18.07 pm.png870x177 KB

Then click "Assemble and Go Next" and type in the text box ret . The length of the patch follows -[LocalTask isValidLixianTask] this:

Why is it so patch? A simple explanation: in the x86 assembly, the return value of the function is stored in the EAX register. 1 corresponds to the bool type of Yes, so our patch let's -[LocalTask isValidLixianTask] always return yes, tell thunderbolt this is a valid offline task
Similarly, using exactly the same input to patch out the other 3 methods, that is, their first 2 assembly instructions are changed to mov eax, 0x1 and ret , modify the result:

Screen Shot 2015-07-06 at 3.29.28 pm.png447x634 KB

Use Hopper to generate a new patch executable file

In the Hopper menu, choose File--Produce new executable ..., and then select Yes in the Bullets box to generate a new thunder file. Replace the original/applications/thunder.app/contents/macos/thunder with this new thunder, then restart the Thunderbolt to see the effect:

Screen Shot 2015-07-06 at 3.59.29 pm.png946x161 89.8 KB

Finish the call.

Pro-Test can, today tried to crack the next QQ music, tried for half a day, not lit green diamond (on the phone before the crack success, Mac estimates did not find the right place)

But it lights up the HQ sign.

effect, but did not know what changes, so should still be a fake state ...

Use Hopper to take care of Mac Thunderbolt members and offline download function