ROM Hack [Q] Cheats on N3DS XL

[dsrules]

It's sad, i sold my old3DS and can't investigate it further to make a better tutorial comparing old > new3DS.

search 0x00100000 to 0x0010000X value on fcram = fcram addr
search 0x08000000 to 0x0800000X value on fcram = fcram addr

 

[liomajor]

When I try to dump it using this: data(0x14000000, 0x<size>, filename='dump0.bin', pid=0x<games_pid>) it just gives me an error.

Here is a small log from eur acnl using ntr debugger:

Spoiler

> connect('192.168.2.199', 8000)
null
Server connected.
.
.
starting applet: 0004000000086400
.
.
> listprocess()
null
pid: 0x00000000, pname:      fs, tid: 0000000000000000, kpobj: fff75d70
pid: 0x00000001, pname:  loader, tid: 0000000000000000, kpobj: fff75fe0
pid: 0x00000002, pname:      pm, tid: 0000000000000000, kpobj: fff76250
pid: 0x00000003, pname:      sm, tid: 0000000000000000, kpobj: fff764c0
pid: 0x00000004, pname:      pxi, tid: 0000000000000000, kpobj: fff76730
pid: 0x00000005, pname:      ns, tid: 0004013000008002, kpobj: fff769a0
pid: 0x00000006, pname:      ptm, tid: 0004013000002202, kpobj: fff76c10
pid: 0x00000007, pname:      cfg, tid: 0004013000001702, kpobj: fff76e80
pid: 0x00000008, pname:    gpio, tid: 0004013000001b02, kpobj: fff770f0
pid: 0x00000009, pname:      i2c, tid: 0004013000001e02, kpobj: fff77360
pid: 0x0000000a, pname:      mcu, tid: 0004013000001f02, kpobj: fff775d0
pid: 0x0000000b, pname:      pdn, tid: 0004013000002102, kpobj: fff77840
pid: 0x0000000c, pname:      spi, tid: 0004013000002302, kpobj: fff77ab0
pid: 0x0000000d, pname:      ps, tid: 0004013000003102, kpobj: fff77d20
pid: 0x0000000e, pname:  ErrDisp, tid: 0004003000008a02, kpobj: fff77f90
pid: 0x0000000f, pname:    menu, tid: 0004003000009802, kpobj: fff78200
pid: 0x00000010, pname:      hid, tid: 0004013000001d02, kpobj: fff78470
pid: 0x00000011, pname:    codec, tid: 0004013000001802, kpobj: fff786e0
pid: 0x00000012, pname:      dsp, tid: 0004013000001a02, kpobj: fff78950
pid: 0x00000013, pname:      am, tid: 0004013000001502, kpobj: fff78bc0
pid: 0x00000014, pname:      gsp, tid: 0004013000001c02, kpobj: fff78e30
pid: 0x00000015, pname:      qtm, tid: 0004013000004202, kpobj: fff790a0
pid: 0x00000016, pname:  camera, tid: 0004013000001602, kpobj: fff79310
pid: 0x00000017, pname:    csnd, tid: 0004013000002702, kpobj: fff79580
pid: 0x00000018, pname:      mic, tid: 0004013000002002, kpobj: fff797f0
pid: 0x00000019, pname:      ir, tid: 0004013000003302, kpobj: fff79a60
pid: 0x0000001a, pname:      nwm, tid: 0004013000002d02, kpobj: fff79cd0
pid: 0x0000001b, pname:  socket, tid: 0004013000002e02, kpobj: fff79f40
pid: 0x0000001c, pname:    http, tid: 0004013000002902, kpobj: fff7a1b0
pid: 0x0000001d, pname:      ssl, tid: 0004013000002f02, kpobj: fff7a420
pid: 0x0000001e, pname:    cecd, tid: 0004013000002602, kpobj: fff7a690
pid: 0x0000001f, pname:  friends, tid: 0004013000003202, kpobj: fff7a900
pid: 0x00000020, pname:      ac, tid: 0004013000002402, kpobj: fff7ab70
pid: 0x00000021, pname:    boss, tid: 0004013000003402, kpobj: fff7ade0
pid: 0x00000022, pname:      act, tid: 0004013000003802, kpobj: fff7b050
pid: 0x00000023, pname:    news, tid: 0004013000003502, kpobj: fff7b2c0
pid: 0x00000024, pname:      ndm, tid: 0004013000002b02, kpobj: fff7b530
pid: 0x00000025, pname:      nim, tid: 0004013000002c02, kpobj: fff7b7a0
pid: 0x00000026, pname:      dlp, tid: 0004013000002802, kpobj: fff7ba10
pid: 0x0000002a, pname:  GARDEN, tid: 0004000000086400, kpobj: fff7bc80
pid: 0x0000002b, pname:      ro, tid: 0004013000003702, kpobj: fff7bef0
end of process list.
> memlayout(pid=0x2a)
null
valid memregions:
00100000 - 00b6dfff , size: 00a6e000
06000000 - 06010fff , size: 00011000
07000000 - 07005fff , size: 00006000
08000000 - 0805dfff , size: 0005e000
0ffc0000 - 10000fff , size: 00041000
10002000 - 10002fff , size: 00001000
14000000 - 174dcfff , size: 034dd000
end of memlayout.
> data(0x14000000, 0x34dd000, filename='dump0.bin', pid=0x2a)
null
packet: cmd = 9, dataLen = 55431168
dump saved into dump0.bin successfully
finished

Found my (acnlram.bin) map data twice in HxD: Town Name: Kibou

 

[Kirbs]

liomajor I finally got to dump it thanks to your log. Now I just need to know how can I extract acnlram.bin from the dump?

 

[liomajor]

liomajor I finally got to dump it thanks to your log. Now I just need to know how can I extract acnlram.bin from the dump?

786432 Bytes = C0000.

Use HxD and go to your start like i did, it should be the second hit for "64 ED D1 98 F8 00 02"
or search your Town / Name.

Press strg+e for "select block" and enter C0000 as lenght when your cursor is on the first byte (Offset (h) 00 - 1FB8200 in my pic).

Your block is now highlighted like this:

Its important that the end is lots of "00", if not, you took the wrong hit for "64 ED D1 98 F8 00 02".

You can now press strg+c to copy, strg+n for new file, strg+v to fill your new "acnlram.bin".

Maybe your offsets are the same like mine, maybe not (i'm using eur acnl).

Offset 0 in dump0.bin is 14000000 on new3ds, if your value you want to write is
@ 1FB8200 in dump0.bin you have to add 14000000 for the final offset!

 

[Kirbs]

liomajor Well, I finished doing it. Is this how it's supposed to look?

 

[liomajor]

liomajor Well, I finished doing it. Is this how it's supposed to look?

Yes, now add what you want, save it and compare it to your unchanged file.

This way you will receive the values. After calculating the real offset,
you can add it with the write command in ntr debugger.

Enter the Trainstation, execute write command, exit Trainstation

 

[Kirbs]

Yes, now add what you want, save it and compare it to your unchanged file.

This way you will receive the values. After calculating the real offset,
you can add it with the write command in ntr debugger.

Enter the Trainstation, execute write command, exit Trainstation

Is the big grey spot in the middle of the map supposed to be there?

 

[liomajor]

Possible, every map is different and will change when playing/constructing.

It's your town, you should know what it is.

 

[Kirbs]

Possible, every map is different and will change when playing/constructing.

It's your town, you should know what it is.

Thank you so much for all your patience and help! I appreciate it very much.