
kenzusik
-
Posts
6 -
Joined
-
Last visited
Posts posted by kenzusik
-
-
11 hours ago, Aizen_ said:
Your game is crashing because of the way you patched the function. The instruction you used:
MOV W0, #99999 RET
doesn’t work for values bigger than 65535 on ARM64. MOV W0, #imm can only handle 16‑bit immediates, so when you put 99999, the instruction isn’t encoded properly and the app blows up when it runs.
If you want to force it to return 99999, you need to build that value in two steps using MOVZ and MOVK, like this:
MOVZ W0, #34463 ; lower 16 bits of 99999 (0x869F)
MOVK W0, #1, LSL #16 ; upper bits
RET
something like this i think
Thank you, but this happens even if I add not 9999, but even if I add 10
-
10 hours ago, Aizen_ said:
that because u may have patched it at the wrong place , patching things that is essential for game to run so thats why its crashing
+ yoi cannot just patch anywhere it will casue crash
I'm not patching random stuff — I'm specifically patching the
DreamBlast.Inventory::GetCoins
functionHere’s how it looks in IDA:
il2cpp:0000000001ADA504 ; DreamBlast.Inventory::GetCoins il2cpp:0000000001ADA504 SUB SP, SP, #0x40 il2cpp:0000000001ADA508 STP X22, X21, [SP,#0x30+var_20] il2cpp:0000000001ADA50C STP X20, X19, [SP,#0x30+var_10] ... il2cpp:0000000001ADA5B0 RET
It just returns the coin count using
GetItemCount
andMathf.Max
I try to patch it like this
MOV W0, #99999 RET
Or in hex:
20 0B 80 D2 ; MOV W0, #99999 C0 03 5F D6 ; RET
But after patching, the app immediately crashes. The address is correct, and I’m only replacing the start of the function
-
On 22.07.2025 at 21:24, Aizen_ said:
Yeah for soem strange reasons last time static patching worked for me but live offset didnt
anyway thanks for the reply cashApp keeps crashing when I patch with the IDA offset.
You know any fix for this? -
Why does the game crash when I add a patch to the offset and enable the function ?
-
Hi, What causes the app to crash when applying a patch to the offset and activating the function?
Any guidance for modifying IPA with non-jailbreak device
in Help & Support
Posted
I noticed something: the offset in the guide is long, but mine is short. In the offset field, I simply enter the offset from IDA. Is that correct?