Les dejo el asm de un parche que cree hace un tiempo

  • Offsets: W595 R3EF001

Código:
include "x.inc"
include "W595_R3EF001.lib.asm"

;W595 SW-R3EF001
;Cambia el estilo en "Alarmas"
;Muestra el Heap del telefono en el titulo
;Muestra la pantalla completa
;Cambia el estilo de los elementos
;(c) DaRkMaN


;===========Hooks===========
org 0x10933C62
_10933C62:

        MOV    R1, 4  ;Fullscreen
    
    
org 0x10933C72
_10933C72:

        MOV    R1, 3
        
org 0x10933C14
_10933C14:

        LDR   R3, offset_1
        BX      R3

offset_1    DCD newcode+1
        NOP
        NOP

;============NEWCODE============
org 0x1279E290
newcode:

        BNE     MakeTitle
        LDR    R1, Return_2

        
MakeTitle:

        LDR    R1, Label_
        MOV     R6, 0
        BL _SetTitleText
        
        LDR        R0, [R4,0x18]
        MOV        R1, 5
        BL    _SetTitleType
        
        BL  _ShowHeap
        ADD        R1, R0,    0
        LDR        R0, [R4,0x18]
        BL    _SetSecondRowTitleText
        
        LDR     R3, Return_1
        BX     R3

        
_ShowHeap:

        PUSH    {R1-R3,LR}
        MOV    R2, 6
        MOV    R1, 6
        adr    R0, aHeap    
        BL    _Str2ID
        STR    R0, [SP]
        BL    _GetFreeBytesOnHeap
        LSR    R0, R0,    0xA
        BL    _int2strID
        STR    R0, [SP,4]
        MOV    R2, 3
        MOV    R1, 6
        adr    R0, aKb        
        BL    _Str2ID
        STR    R0, [SP,8]
        MOV    R2, 3
        MOV    R1, 5
        MOV    R0, SP
        BL    _Str2ID
        POP    {R1-R3,PC}

        
_SetTitleText:
        LDR    R3, func_1
        BX    R3
        
_SetTitleType:                
        LDR    R3, func_2
        BX    R3

_SetSecondRowTitleText:                
        LDR    R3, func_3
        BX    R3

_Str2ID:
        LDR R3, func_4
        BX    R3
                
_GetFreeBytesOnHeap:
        LDR R3, func_5
        BX    R3
        
_int2strID:
        LDR R3, func_6
        BX    R3

align 4
Label_      DCD 0x283C
func_1      DCD GUIObject_SetTitleText
func_2    DCD GUIObject_SetTitleType
func_3    DCD GUIObject_SetSecondRowTitleText
func_4    DCD 0x10F61E3C+1 ;Str2ID
func_5    DCD GetFreeBytesOnHeap
func_6    DCD 0x10F61C68+1 ;int2strID
Return_1  DCD 0x10933C20+1
Return_2  DCD 0x10933D4E
aHeap     DCB "Heap: ",0          
          DCB 0xFF
aKb          DCB " KB",0
Saludos ..