[CSCI Tweak.xm]SAS 3 +14 Hack

May 31, 2015

Since my thumbs would die if I formatted the offsets like every other way, I decided to post the tweak.xm. Here is the key:

0020 = MOV R0, #0 or "false"

0120 = MOV R0, #1 or "true"

FF20 = MOV R0, #255, this was for the buffed weapons, so "hey, this weapon is not level 5, its level 255" and in result they got buffed by over 1000% same case with the armor

381C = MOV R0, R7 or "a ton"

1EFF2FE1/7047 = BX LR or "skip this function or ignore it"

0038 = SUBS R0, #0, subtract no bullets from R0, the register that held your clip amount

everything in the else statement is the original hex for that offset

Hidden Content

#import "writeData.h"
#import <Foundation/Foundation.h>
#import <UIKit/UIKit.h>
#define PLIST_PATH @"/var/mobile/Library/Preferences/com.shmoo.sas3.plist"

inline bool GetPrefBool(NSString *key)
{
return [[[NSDictionary dictionaryWithContentsOfFile:PLIST_PATH] valueForKey:key] boolValue];
}

%ctor {
if(GetPrefBool(@"kTurrets"))
{
writeData(0x2B954, 0x381C7047);
} else {
writeData(0x2B954, 0xF0B50D46);
}

if(GetPrefBool(@"kArmor"))
{
writeData(0x2C154, 0x01207047);
} else {
writeData(0x2C154, 0x00223728);
}

if(GetPrefBool(@"kWeapon"))
{
writeData(0x2BC18, 0x01207047);
} else {
writeData(0x2BC18, 0xB0B50446);
}

if(GetPrefBool(@"kAmmo"))
{
writeData(0xA0D1C, 0x00386063);
} else {
writeData(0xA0D1C, 0x01386063);
}

if(GetPrefBool(@"kPhoenix"))
{
writeData(0xA09A8, 0x01207047);
} else {
writeData(0xA09A8, 0xB0B51446);
}

if(GetPrefBool(@"kTurAmmo"))
{
writeData(0x8404C, 0x7047);
} else {
writeData(0x8404C, 0xF0B5);
}

if(GetPrefBool(@"kFree"))
{
writeData(0x2B460, 0x01207047);
} else {
writeData(0x2B460, 0xB0B50446);
}

if(GetPrefBool(@"kBuff"))
{
writeData(0x2BF7C, 0xFF207047);
} else {
writeData(0x2BF7C, 0xF0B50546);
}

if(GetPrefBool(@"kNoBreakBarr"))
{
writeData(0xA4CA0, 0x7047);
} else {
writeData(0xA4CA0, 0x90B50446);
}

if(GetPrefBool(@"kWall"))
{
writeData(0x182EC, 0x1EFF2FE1);
} else {
writeData(0x182EC, 0x44F60830);
}

if(GetPrefBool(@"kHealth"))
{
writeData(0xE24C, 0x00207047);
} else {
writeData(0xE24C, 0xF0B503AF);
}

if(GetPrefBool(@"kAllyHealth"))
{
writeData(0x997B0, 0x00207047);
} else {
writeData(0x997B0, 0xF0B5F0B5);
writeData(0x997B4, 0x0CF0FDFF);
}

if(GetPrefBool(@"kArmorB"))
{
writeData(0x2C394, 0xFF207047);
} else {
writeData(0x2C394, 0xB0B50546);
}

if(GetPrefBool(@"kSAS"))
{
writeData(0x2B520, 0x01207047);
} else {
writeData(0x2B520, 0xB0B50446);
}
}

%hook AMTAppDelegate

-(void)applicationDidBecomeActive:(id)arg { 

UIAlertView *credits = [[UIAlertView alloc] initWithTitle:@"SAS Zombie Assault 3 Hacks - WAIT AT LEAST 15 SECONDS BEFORE DOING ANYTHING" 
                                                  message:@"Hacked by shmoo for iOSGods.com! If this is your first time using this hack tap download the thinned binary and replace that binary with your binary. Set permissions to 777, and group/owner to mobile. If you are having trouble with this PM me on iOSGods.com." 
                                                 delegate:self 
                                        cancelButtonTitle:@"Thanks" 
                                        otherButtonTitles:@"Download the thinned binary", nil]; 
[credits show];
[credits release]; 
%orig();
}
 
%new
-(void)alertView:(UIAlertView *)alertView clickedButtonAtIndex:(NSInteger)buttonIndex {
 
NSString *button = [alertView buttonTitleAtIndex:buttonIndex];
 
        if([button isEqualToString:@"Download the thinned binary"])
        {
                [[UIApplication sharedApplication] openURL:[NSURL URLWithString:@"link taken out for copyright reasons"]];                                                                                
        }
}
%end