Help/Support Dylibs tweaks problem, Theos

Batch · June 5

On 6/2/2026 at 3:31 PM, A1XEN said:

yo @Batch i did this

#include <mach/arm/thread_status.h>

uint64_t canBuyHandle = 0;
uint64_t gemsHandle = 0;

void specter_CanBuy_Handler(void *ctx) {
    arm_thread_state64_t *regs = (arm_thread_state64_t *)ctx;
    mem_brk_suspend_self();

    if (menu && [menu getToggleValue:0 withTitle:@"Always Buy"]) {
        regs->__x[0] = 1; // Force return TRUE
    }

    mem_brk_resume_self();
}

void specter_AddOrRemoveGems_Handler(void *ctx) {
    arm_thread_state64_t *regs = (arm_thread_state64_t *)ctx;
    mem_brk_suspend_self();

    if (menu && [menu getToggleValue:0 withTitle:@"Infinite Gems"]) {
        // Always force the gem transaction to be a massive gain
        regs->__x[1] = 999999;
    }

    mem_brk_resume_self();
}

void hooks() {


    uintptr_t base = 0;
        int32_t initStatus = mem_init("UnityFramework", &base);

        if (initStatus == MEM_OK) {
            // Install Breakpoints
            // Remember to clean your build (make clean) before running this
            mem_brk_install(0xDA4D70, (uintptr_t)specter_CanBuy_Handler, &canBuyHandle);
            mem_brk_install(0xDA7F50, (uintptr_t)specter_AddOrRemoveGems_Handler, &gemsHandle);

            NSLog(@"[SilentPwn] Hardware Breakpoints deployed.");
        } else {
            NSLog(@"[SilentPwn] Error: mem_init failed with code: %d", initStatus);
        }

it kinda work because the game dint crash at startup the menu loaded, but they dont work, one of the hook (canBuy) crashes the game after 10seconds after toggling, and also it disabled me from buying anything, know this is maybe because of my callback code i may be hooked a wrong instructions,

but i wanna ask if i could directly apply a hex value to it as the callback of the breakpoint since i think that is how i made it to work using iGG

Sorry didn't saw the message! It won't work because you used wrong return i guess and why "arm_thread_state64_t *regs = (arm_thread_state64_t *)ctx;"?

Try this, if no work can you please send the method from dump.cs?

uint64_t canBuyHandle = 0;
uint64_t gemsHandle = 0;

bool specter_CanBuy_Handler(void *ctx) {
    mem_brk_suspend_self();
    
    if (menu && [menu getToggleValue:0 withTitle:@"Always Buy"]) {
        return true;
    }
    
    mem_brk_resume_self();
}

int specter_AddOrRemoveGems_Handler(void *ctx) {
    mem_brk_suspend_self();
    
    if (menu && [menu getToggleValue:0 withTitle:@"Infinite Gems"]) {
        // Always force the gem transaction to be a massive gain
        return 999999;
    }
    
    mem_brk_resume_self();
}

Batch · June 5

uint64_t canBuyHandle = 0;
  uint64_t gemsHandle = 0;

  using CanBuy_t = bool (*)(void *self);
  using AddOrRemoveGems_t = int (*)(void *self, int amount);

  static CanBuy_t orig_CanBuy = nullptr;
  static AddOrRemoveGems_t orig_AddOrRemoveGems = nullptr;

  bool specter_CanBuy_Handler(void *self) {
      if (menu && [menu getToggleValue:0 withTitle:@"Always Buy"]) {
          return true;
      }

      bool result = false;

      if (orig_CanBuy) {
          mem_brk_suspend_self();
          result = orig_CanBuy(self);
          mem_brk_resume_self();
      }

      return result;
  }

  int specter_AddOrRemoveGems_Handler(void *self, int amount) {
      if (menu && [menu getToggleValue:0 withTitle:@"Infinite Gems"]) {
          amount = 999999;
      }

      int result = 0;

      if (orig_AddOrRemoveGems) {
          mem_brk_suspend_self();
          result = orig_AddOrRemoveGems(self, amount);
          mem_brk_resume_self();
      }

      return result;
  }

  void hooks() {
      uintptr_t base = 0;
      int32_t initStatus = mem_init("UnityFramework", &base);

      if (initStatus == MEM_OK) {
          mem_brk_install(0xDA4D70, (uintptr_t)specter_CanBuy_Handler, &canBuyHandle);
          mem_brk_install(0xDA7F50, (uintptr_t)specter_AddOrRemoveGems_Handler, &gemsHandle);

          uintptr_t canBuyTarget = 0;
          uintptr_t gemsTarget = 0;

          mem_brk_target(canBuyHandle, &canBuyTarget);
          mem_brk_target(gemsHandle, &gemsTarget);

          orig_CanBuy = (CanBuy_t)canBuyTarget;
          orig_AddOrRemoveGems = (AddOrRemoveGems_t)gemsTarget;

          NSLog(@"[SilentPwn] Hardware Breakpoints deployed.");
      } else {
          NSLog(@"[SilentPwn] Error: mem_init failed with code: %d", initStatus);
      }
  }