ROM Hack Cheat Codes AMS and Sx Os, Add and Request

[Jericoss]

I only try to make ASM codes for Castlevania Order of Ecclesia.
Surprisingly easy, I should say the game is well emulated.
But, let's wait for NeoGranzon to make it.

Is it easy in ASM? I found a instruction in Breeze for MP but I don't know how to convert them. Can I send you PM?

 

[AesopRock]

Does anyone happen to have updated cheats for Dead Cells?

Program ID:
0100646009FBE000

Build ID:
6E35EE0A24029143

Thank you!

Post automatically merged: Aug 28, 2024

Does anyone happen to have updated cheats for Dead Cells?

Program ID:
0100646009FBE000

Build ID:
6E35EE0A24029143

Thank you!

 

[TomSwitch]

Hi Tom, I didn't do that, I just deleted everything and installed it again. Because I don't even know what it means or how to use "try sleep or connect GDB from PC".
-This was the first 3 times this happened to me and it was when I installed Breeze 92d, I had 91.
-It happened to me when I was trying to find the difference between my HP and the enemy. Twice.
* Crazy, I found the address of my HP but I don't know how to use it, well I don't know how to use breeze, it always returns me to the address I chose (1260ea8:ldr w8 [x8...etc,etc) and I can never find out where the address is that is my HP (1a25f99...etc.etc). Why? Or can't that be done and I have to do math and calculations to get to that address?

View attachment 454936View attachment 454937

other example I cant go to the addresss i need to mod
View attachment 454938View attachment 454939View attachment 454940

what is the name of the game, I will take a look

 

[herowang]

Is it easy in ASM? I found a instruction in Breeze for MP but I don't know how to convert them. Can I send you PM?

It has a random MAIN address
so, it will need to do an AOB for that

 

[Gamerjin]

@Jericoss , @herowang

can you both test this pointer for HP for me, then?
its for the Order of Ecclesia.
[test hp ptr]
58010000 02380720
58011000 00000028
78010000 0047C8CC
64010000 00000000 0000270F

if it works, your cur hp should 9999. and you have your main ptr (the first 2 lines.)

 

[Jericoss]

what is the name of the game, I will take a look

Lost Epic
TID: 010098F019A64000
BID: 9B8920A9247AD29C v 1.00

Post automatically merged: Aug 28, 2024

@Jericoss , @herowang

can you both test this pointer for HP for me, then?
its for the Order of Ecclesia.
[test hp ptr]
58010000 02380720
58011000 00000028
78010000 0047C8CC
64010000 00000000 0000270F

if it works, your cur hp should 9999. and you have your main ptr (the first 2 lines.)

im not in home i go there in 30 min, but MASTER optantic do it for DoS

 

[shark2003]

@Jericoss , @herowang

can you both test this pointer for HP for me, then?
its for the Order of Ecclesia.
[test hp ptr]
58010000 02380720
58011000 00000028
78010000 0047C8CC
64010000 00000000 0000270F

if it works, your cur hp should 9999. and you have your main ptr (the first 2 lines.)

Works on Ryujinx!!

 

[TomSwitch]

Hi Tom, I didn't do that, I just deleted everything and installed it again. Because I don't even know what it means or how to use "try sleep or connect GDB from PC".
-This was the first 3 times this happened to me and it was when I installed Breeze 92d, I had 91.
-It happened to me when I was trying to find the difference between my HP and the enemy. Twice.
* Crazy, I found the address of my HP but I don't know how to use it, well I don't know how to use breeze, it always returns me to the address I chose (1260ea8:ldr w8 [x8...etc,etc) and I can never find out where the address is that is my HP (1a25f99...etc.etc). Why? Or can't that be done and I have to do math and calculations to get to that address?

View attachment 454936View attachment 454937

I see you have successfully found the code that access only one address, if you want to go to the memory found you press X (select)

I have hack this game earlier, I did not notice anything special about the game, maybe it is the steps you took that brought you to this error screen. I have no idea what may cause it, I only a way that may fix it and therefore I send this message to ask user to try it.

other example I cant go to the addresss i need to mod
View attachment 454938View attachment 454939View attachment 454940

I see your cursor is on goto call, that will bring you to the code x30 is pointing at, not always the call to the sub routine ( very useful information ) that the hook is in but rather the last call made which can be inside the sub routine ( mostly useless )

 

[cheatsuser]

​

Silent Hope
TID: 0100E6E01A0BA000
BID: 6E7ADC5714437430
VER. 1.0.3

List of cheats:

[Infinite Health]
[Infinite Money (after pick-up)]
[Money multiplier 4x]
[Money multiplier 6x]
[Infinite Skill Points]
[Exp multiplier 2x]
[Exp multiplier 4x]
[Exp multiplier 6x]
[Item Pick-up multiplier 4x]
[Item pick-up multiplier 8x]

Enjoy!

Not working on yuzu android emulator

Post automatically merged: Aug 28, 2024

​

Silent Hope
TID: 0100E6E01A0BA000
BID: 6E7ADC5714437430
VER. 1.0.3

List of cheats:

[Infinite Health]
[Infinite Money (after pick-up)]
[Money multiplier 4x]
[Money multiplier 6x]
[Infinite Skill Points]
[Exp multiplier 2x]
[Exp multiplier 4x]
[Exp multiplier 6x]
[Item Pick-up multiplier 4x]
[Item pick-up multiplier 8x]

Enjoy!

Not working in yuzu android emulator

 

[TomSwitch]

Not working on yuzu android emulator

Post automatically merged: Aug 28, 2024

Not working in yuzu android emulator

I looked, there isn't anything that will cause the cheat to not work on emulator, there is a good chance these cheats are good, I think maybe you don't know how cheat works on emulator. ASM cheats must be activated before you start the game. Pointer cheat should work anytime.

 

[bloodfalco]

@Jericoss , @herowang

can you both test this pointer for HP for me, then?
its for the Order of Ecclesia.
[test hp ptr]
58010000 02380720
58011000 00000028
78010000 0047C8CC
64010000 00000000 0000270F

if it works, your cur hp should 9999. and you have your main ptr (the first 2 lines.)

@Gamerjin If it is okay with you, I would like to ask for Max Luck for Dawn of Sorrow, Portrait of Ruin and Order of Ecclesia.

 

[Maq47]

I see your cursor is on goto call, that will bring you to the code x30 is pointing at, not always the call to the sub routine ( very useful information ) that the hook is in but rather the last call made which can be inside the sub routine ( mostly useless )

Since a call for a subroutine is almost always a 'bl' or 'blr' instruction, technically you can sometimes find the correct calling instruction by finding the next 'ret' instruction and pressing Y to follow the branch. Note that this only works if there is only one instruction that calls that subroutine; if there's more than 1, breeze will only take you to either the one that the code's current state will execute next or the one that was most recently executed (I am unsure which, @TomSwitch will know better, as he coded breeze; it may even only take you to the first instruction in MAIN that calls the subroutine). Decompiling the game update's main NSO in Ghidra can provide you with all instructions that call the desired subroutine, but that's a highly advanced method, and I do not recommend it in most situations, as it is almost always unnecessary.

 

[dsrules]

its for the Order of Ecclesia.
[test hp ptr]
58010000 02380720
58011000 00000028
78010000 0047C8CC
64010000 00000000 0000270F

if it works, your cur hp should 9999. and you have your main ptr (the first 2 lines.)

that is a huge offset! no wonder can't find working pointer with Breeze

 

[TomSwitch]

Since a call for a subroutine is almost always a 'bl' or 'blr' instruction, technically you can sometimes find the correct calling instruction by finding the next 'ret' instruction and pressing Y to follow the branch. Note that this only works if there is only one instruction that calls that subroutine; if there's more than 1, breeze will only take you to either the one that the code's current state will execute next or the one that was most recently executed (I am unsure which, @TomSwitch will know better, as he coded breeze; it may even only take you to the first instruction in MAIN that calls the subroutine). Decompiling the game update's main NSO in Ghidra can provide you with all instructions that call the desired subroutine, but that's a highly advanced method, and I do not recommend it in most situations, as it is almost always unnecessary.

I probably did not document this feature as it isn't ready for prime time.
The {17} means there are 17 branch to this address, if you press Goto Source you get to see the addresses

Don't complain of pain if you choose to explore it

 

[Jericoss]

It has a random MAIN address
so, it will need to do an AOB for that

@herowang I dont know what is AOB but I find this.. and 2 more from this what can i do? what is strh , ldrh always i see ldr, str

@TomSwitch what is this : (put "Master") by itself ????

 

[Gamerjin]

that is a huge offset! no wonder can't find working pointer with Breeze

and wasnt easy calculating this either, i did try to find an hp pointer first, but once i find the hp again, i took notice that it said "BASE", so firing ida told me the game is modular, like star wars battlefront. i knew then what i needed to do. so after getting a working pointer for the start of the module, then i refound the hp, did the math, and prayed it was static.....
i got lucky...

 

[Jericoss]

and wasnt easy calculating this either, i did try to find an hp pointer first, but once i find the hp again, i took notice that it said "BASE", so firing ida told me the game is modular, like star wars battlefront. i knew then what i needed to do. so after getting a working pointer for the start of the module, then i refound the hp, did the math, and prayed it was static.....
i got lucky...

Yes is in BASE but I remember seeing that and doing an addition or subtraction of I don't remember how (and since I don't like math I didn't do it hehe) so @Gamerjin didn't you look for it in Breeze?? or search pointer pc

Post automatically merged: Aug 28, 2024

that is a huge offset! no wonder can't find working pointer with Breeze

yes breeze can do it , I do it (wthout math) jejeje but i want to do it ASM but dont understand..

 

[Gamerjin]

yes breeze can do it , I do it (wthout math) jejeje but i want to do it ASM but dont understand..

.....actually, because it's modular, you're not going to be able to straight to asm because of the emulator. You first have to get to the emulator, then you can asm off of the emulators main address.

 

[Jericoss]

.....actually, because it's modular, you're not going to be able to straight to asm because of the emulator. You first have to get to the emulator, then you can asm off of the emulators main address.

No man, don't tell me that, that's why I can't learn ASM hahaha, another thing I don't understand, my friend.

Post automatically merged: Aug 28, 2024

View attachment 454999
Don't complain of pain if you choose to explore it

@TomSwitch Just like in this photo, it sent me the HP address of the game Lost Epic to (bl 0x17xxxxx) but I don't know what to do there.
Both games sent me to (bl 0x17xxxxx).

 

[TomSwitch]

@TomSwitch what is this : (put "Master") by itself ????
View attachment 455006

In order for many of the game code related features of Breeze to work with code in loadable module as if it is in main this is my solution. You can add to master but you must keep those Breeze generated for you at the top and you have to visit cheat menu at least once after you launch Breeze for the master code to be read and registered by Breeze

Post automatically merged: Aug 28, 2024

No man, don't tell me that, that's why I can't learn ASM hahaha, another thing I don't understand, my friend.

Post automatically merged: Aug 28, 2024

@TomSwitch Just like in this photo, it sent me the HP address of the game Lost Epic to (bl 0x17xxxxx) but I don't know what to do there.
Both games sent me to (bl 0x17xxxxx).

don't use goto call until you are more comfortable with making asm cheats