View attachment 557671
These? Probably due to this
https://gbatemp.net/threads/cheat-codes-ams-and-sx-os-add-and-request.520293/post-10819455
Since Fp is not native to ARM64 accessing them uses library function. There are some exception where direct access was performed, for example HP, but unfortunately maybe not these, I only check exchange point.
I think there’s a very good chance that almost everything is accessible by starting from the hero’s instance of the ActorAttrMgr class. Since we already know where that is, the rest is mostly a matter of trial and error. Hacking everything would have been much harder if we didn’t have this class definition to refer to, but we do—so it really comes down to whether someone is willing to put in the effort to build an exhaustive list.
To me this problem has been solved.