Help/Support Coin Dozer IDA help... Function

[Goran 1.9k]

am learning so i need help with "for noob" explanation

Here is function in Ida PRO... that i need to change to get COIN INCREASE instead of decrease... AND to get unlimited coins but not to go on negative.... if you can get me both scenarios and functions and explanation... THANKS...

R1 Holds Coin value....

text:004CF252 loc_4CF252                              ; CODE XREF: sub_4CEE7C+3CCj
__text:004CF252                 ADD.W           R0, R4, R11,LSL#2 ; Rd = Op1 + Op2
__text:004CF256                 LDR                R1, [SP,#0x34+var_2C] ; Load from Memory
__text:004CF258                 STR                 R1, [R0,#0x10] ; Store to Memory
__text:004CF25A                LDR.W           R0, [R8,#0x30] ; Load from Memory
__text:004CF25E                 ADDS             R0, #1  ; Rd = Op1 + Op2
__text:004CF260                 STR.W            R0, [R8,#0x30] ; Store to Memory
__text:004CF264                 ADD               SP, SP, #0x1C ; Rd = Op1 + Op2
__text:004CF266                 POP.W           {R8,R10,R11} ; Pop registers
__text:004CF26A                 POP               {R4-R7,PC} ; Pop registers

[Ted2 39.2k iPhone 13 Pro 16.0 Donor]

text:004CF252 loc_4CF252                              ; CODE XREF: sub_4CEE7C+3CCj
__text:004CF252                 ADD.W           R0, R4, R11,LSL#2 ; Rd = Op1 + Op2
__text:004CF256                 LDR                R1, [SP,#0x34+var_2C] ; Load from Memory
__text:004CF258                 STR                 R1, [R0,#0x10] ; Store to Memory
__text:004CF25A                LDR.W           R0, [R8,#0x30] ; Load from Memory
__text:004CF25E                 ADDS             R0, #1  ; Rd = Op1 + Op2
__text:004CF260                 STR.W            R0, [R8,#0x30] ; Store to Memory
__text:004CF264                 ADD               SP, SP, #0x1C ; Rd = Op1 + Op2
__text:004CF266                 POP.W           {R8,R10,R11} ; Pop registers
__text:004CF26A                 POP               {R4-R7,PC} ; Pop registers

to

text:004CF252 loc_4CF252                              ; CODE XREF: sub_4CEE7C+3CCj
__text:004CF252                 ADD.W           R0, R4, R11,LSL#2 ; Rd = Op1 + Op2
__text:004CF256                 LDR                R1, [SP,#0x34+var_2C] ; Load from Memory
__text:004CF258                 STR                 R7, [R0,#0x10] ; Store to Memory  <------->
__text:004CF25A                LDR.W           R0, [R8,#0x30] ; Load from Memory
__text:004CF25E                 ADDS             R0, #1  ; Rd = Op1 + Op2
__text:004CF260                 STR.W            R0, [R8,#0x30] ; Store to Memory
__text:004CF264                 ADD               SP, SP, #0x1C ; Rd = Op1 + Op2
__text:004CF266                 POP.W           {R8,R10,R11} ; Pop registers
__text:004CF26A                 POP               {R4-R7,PC} ; Pop registers

 

What this does is stores R7 instead of normal coin vlaue

[Goran 1.9k]

5 minutes ago, Ted2 said:

text:004CF252 loc_4CF252                              ; CODE XREF: sub_4CEE7C+3CCj
__text:004CF252                 ADD.W           R0, R4, R11,LSL#2 ; Rd = Op1 + Op2
__text:004CF256                 LDR                R1, [SP,#0x34+var_2C] ; Load from Memory
__text:004CF258                 STR                 R1, [R0,#0x10] ; Store to Memory
__text:004CF25A                LDR.W           R0, [R8,#0x30] ; Load from Memory
__text:004CF25E                 ADDS             R0, #1  ; Rd = Op1 + Op2
__text:004CF260                 STR.W            R0, [R8,#0x30] ; Store to Memory
__text:004CF264                 ADD               SP, SP, #0x1C ; Rd = Op1 + Op2
__text:004CF266                 POP.W           {R8,R10,R11} ; Pop registers
__text:004CF26A                 POP               {R4-R7,PC} ; Pop registers

to

text:004CF252 loc_4CF252                              ; CODE XREF: sub_4CEE7C+3CCj
__text:004CF252                 ADD.W           R0, R4, R11,LSL#2 ; Rd = Op1 + Op2
__text:004CF256                 LDR                R1, [SP,#0x34+var_2C] ; Load from Memory
__text:004CF258                 STR                 R7, [R0,#0x10] ; Store to Memory  <------->
__text:004CF25A                LDR.W           R0, [R8,#0x30] ; Load from Memory
__text:004CF25E                 ADDS             R0, #1  ; Rd = Op1 + Op2
__text:004CF260                 STR.W            R0, [R8,#0x30] ; Store to Memory
__text:004CF264                 ADD               SP, SP, #0x1C ; Rd = Op1 + Op2
__text:004CF266                 POP.W           {R8,R10,R11} ; Pop registers
__text:004CF26A                 POP               {R4-R7,PC} ; Pop registers

 

What this does is stores R7 instead of normal coin vlaue

will try that now with HxD.... to see does it works...

also, how i can compile that in DEB tweak???

[Ted2 39.2k iPhone 13 Pro 16.0 Donor]

9 minutes ago, Goran said:

will try that now with HxD.... to see does it works...

also, how i can compile that in DEB tweak???

U need to do code injection. See tutorial section for how to do that.

[Goran 1.9k]

3 minutes ago, Ted2 said:

U need to do code injection. See tutorial section for how to do that.

ok, but this function is not good... Game starts, but on loading screen it just stays on COIN DOZER LOADING :)

and nothing happens, no crash, no game, just stay ike that... can you try another one??? some other code... :) maybe, that coins just increase instead of decrease... or R7 but in some other way.... :)

[Ted2 39.2k iPhone 13 Pro 16.0 Donor]

1 minute ago, Goran said:

ok, but this function is not good... Game starts, but on loading screen it just stays on COIN DOZER LOADING :)

and nothing happens, no crash, no game, just stay ike that... can you try another one??? some other code... :) maybe, that coins just increase instead of decrease... or R7 but in some other way.... :)

Is there any CMP near the function?

[Clarify 22.6k iPhone 13 15]

27 minutes ago, Goran said:

am learning so i need help with "for noob" explanation

Here is function in Ida PRO... that i need to change to get COIN INCREASE instead of decrease... AND to get unlimited coins but not to go on negative.... if you can get me both scenarios and functions and explanation... THANKS...

R1 Holds Coin value....

text:004CF252 loc_4CF252                              ; CODE XREF: sub_4CEE7C+3CCj
__text:004CF252                 ADD.W           R0, R4, R11,LSL#2 ; Rd = Op1 + Op2
__text:004CF256                 LDR                R1, [SP,#0x34+var_2C] ; Load from Memory
__text:004CF258                 STR                 R1, [R0,#0x10] ; Store to Memory
__text:004CF25A                LDR.W           R0, [R8,#0x30] ; Load from Memory
__text:004CF25E                 ADDS             R0, #1  ; Rd = Op1 + Op2
__text:004CF260                 STR.W            R0, [R8,#0x30] ; Store to Memory
__text:004CF264                 ADD               SP, SP, #0x1C ; Rd = Op1 + Op2
__text:004CF266                 POP.W           {R8,R10,R11} ; Pop registers
__text:004CF26A                 POP               {R4-R7,PC} ; Pop registers

if all this is for game hacks then count me out 

[Goran 1.9k]

1 minute ago, Ted2 said:

Is there any CMP near the function?

 

[Ted2 39.2k iPhone 13 Pro 16.0 Donor]

6 minutes ago, Goran said:

 

Try NOP ' 0x4cf248' 

 

Also, why do u got all those ;load from memory?

[Goran 1.9k]

8 minutes ago, Ted2 said:

Try NOP ' 0x4cf248' 

 

Also, why do u got all those ;load from memory?

Done there NOP ' 0x4cf248'  C0 46 but game start loading, does not freeze, but after some load crash...