Reverse engineer notes

8D 8E B0 02 00 00 C6 86 CB 01 00 00 01 C6 86 C9 01 00 00 00 VERIFY
8B CE C6 87 30 02 00 00 01 NOCLIP1
6A 00 C6 83 56 05 00 00 01 NOCLIP2
C2 04 00 CC C6 81 FE 00 00 00 00 TRAIL ON
H4sIAAAAAAAAC6WO3QnDMAyEF1JBJ_kv9CkzZIAbICt0-NpWoJAWGsiLPvvOn-198yZgUhphmU7LmUDAAhEmPsBCqCorQfSGjXiB01a7ZuOWvZztUcfZS75xqD9-EDfoPz_f9Mu3L_sKFx3IgRJI0mesayQH2sDmy9zZnHHBLNY0Z7TQAESfELgtYtLf8T4-QToH9Qjekko-lCACAAA= 3 User Coins LevelString
C6 86 57 05 00 00 00 INFINITE JUMP + HIGH JUMP
00A97543
FF 86 24 02 00 00 increase block count
FF 8F 24 02 00 00 decrease block count  BA 01 00 00 00 8B CE E8 AF CA 00 00 50 8B CF E8 B7 07 00 00 FF B6 BC 02 00 00 8B 8F 10 02 00 00 FF 15 18 EC 5B 00 56 8B C8
0040DF92
89 81 98 01 00 00
0040DF97
90 89 81 98 01 00 00 50 8B C1 05 98 01 00 00 53 BB 50 00 40 00 89 03 5B 58 E9 59 DF 00 00
90 89 81 98 01 00 00 50 8B C1 05 98 01 00 00 53 31 DB 81 C3 50 00 40 00 89 03 5B 58 C3 90

3B C7 7D 45 84 C9 74 0C ---> 3B C7 7D 45 84 C9 75 0C Practice HACK
BF 64 00 00 00 B8 64 00 00 00 E9 7E 4C 1A FD

8B EC 56 57 -8B 7D 08 B8 64 00 00 00  ---> E9 5A A3 00 00 90 90 90

inject to FF 92 B0 01 00 00 8B 4D F4 64 89 0D 00 00 00 00 59 5F 5E 8B E5 5D C3 CC
BF 64 00 00 00 B8 64 00 00 00 E9 97 5C FF FF -LEN

FF 15 1C EC 5B 00 83 BF 10 03 00 00 1F 89 9F BC 02 00 00 74 06 -FF 86 24 02 00 00   ---> NOP from -
E8 B7 07 00 00 FF B6 BC 02 00 00 8B 8F 10 02 00 00 FF 15 18 EC 5B 00 56 8B C8 FF 15 C4 E9 5B 00 83 BE 10 03 00 00 1F 74 06 -FF 8F 24 02 00 00   ----> NOP from -
51 56 8B 0D B0 A3 63 00 8B B1 44 01 00 00 83 FE 00 75 0B 5E 59 C3 90 90 90 90 90 90 90 90 89 B7 C8 01 00 00 59 59 C3 90  icon hax: inject into 00432158
8B 75 08 57 8B F9 -89 B7 10 02 00 00 ----> E8 29 7A F9 FF 90
8B 75 08 57 8B F9 -89 B7 1C 02 00 00 ----> E8 C9 79 F9 FF 90
8B 75 08 57 8B F9 -89 B7 D4 01 00 00 ----> E8 09 7C F9 FF 90
8B 75 08 57 8B F9 -89 B7 E0 01 00 00 ----> E8 A9 7B F9 FF 90
8B 75 08 57 8B F9 -89 B7 EC 01 00 00 ----> E8 49 7B F9 FF 90
8B 75 08 57 8B F9 -89 B7 F8 01 00 00 ----> E8 E9 7A F9 FF 90
8B 75 08 57 8B F9 -89 B7 C8 01 00 00 ----> E8 69 7C F9 FF 90
step 1: git gud

004607C1   76 7F            JBE SHORT Geometry.00460842    CUSTOM OBJ
004594E5   75 49            JNZ SHORT Geometry.00459530    Verify Bypass
0050A1C7   74 4F            JE SHORT Geometry.0050A218     Password lvl
004CF61D   75 04            JNZ SHORT Geometry.004CF623

original 0056007E: mov byte ptr [esi+0000049A],01
004A5156 OnJump address func.

004A51B9 call here

0055E053 - 8D 81 90050000        - lea eax,[ecx+00000590]
GeometryDash.exe+15E053 - E8 6171F4FF           - call GeometryDash.exe+A51B9
GeometryDash.exe+15E058 - 90                    - nop

004A51B9 - C7 81 90050000 8096184B - mov [ecx+00000590],4B189680
GeometryDash.exe+A51C3 - 8D 81 90050000        - lea eax,[ecx+00000590]
GeometryDash.exe+A51C9 - C3                    - ret
GeometryDash.exe+A51CA - 90                    - nop

MSVCR120.atoi+57 - 8A 18                 - mov bl,[eax]
MSVCR120.atoi+59 - 83 7F 74 01           - cmp dword ptr [edi+74],01

004B8F72 - stars

libcocos2d.cocos2d::CCString::uintValue+14 - 50                    - push eax

005567F3 GUARD BYPASS (set to cmp eax,eax)

00410E50 - B8 01 00 00 00 90 - Bypass Copying   mov eax,[ecx+00000214]

GeometryDash.exe+7D0E0 - 8B 81 18020000        - mov eax,[ecx+00000218]     ORIGINAL BYPASS

jmpto 08C10000
00410E4A   B8 01 00 00 00 C3 8B 81 14 02 00 00 89 05 ?? ?? ?? ?? EB EC

ICON ADDR
RANDOM NUMB = ICON ADDR - 4
COMPARISION = ICON ADDR - 8
COMPARISION = RANDOM NUMB + ICON ID


Max Obj Checks (set to FFFFFF):
004EF1AF
00469903
0046B896
0046BBFA


Hash checking for:
1-ID
18-Stars
38-Coins Rate Status