? k now Im confused. can some1 show a quick vid/screen shot then of this in use... I was wondering if its doing anything for me. Since it seems not to. I just saw the region... now im going to try again with the correct rom. I still think a quick vid/ a few screen shots would be nice to show it it working just incase others say it doesnt work... like me.
void SetByte (u32 addr, u8 value)
{
u32 handle = 0;
svc_openProcess (& amp; handle, 0x25); // pid = 0x25
svc_writeProcessMemory (handle, & amp; value, addr, 1);
}
u8 CheatOn_HP = 0;
u32 CheatUi () {
u8 buf [200];
acquireVideo ();
while (1) {
blank (0, 0, 320, 240);
xsprintf (buf, "Cheat:% 02d", CheatOn_HP);
print (buf, 10, 10, 255, 0, 0);
updateScreen ();
u32 key = waitKey ();
if (key == BUTTON_DU)
{
CheatOn_HP = 1;
SetByte (0x168b5fa8, 99);
}
if (key == BUTTON_DD) {
CheatOn_HP = 0;
SetByte (0x168b5fa8, 10);
}
if (key == BUTTON_B) {
break;
}
}
releaseVideo ();
return 0;
}
void Run_Cheat (u32 addr, u8 value)
{
while (1)
{
if (CheatOn_HP)
SetByte (0x168b5fa8, 99);
}
}
u64 Stack_buf [0x200 / 8];
int main () {
u32 retv;
Handle thread;
initSharedFunc ();
nsDbgPrint ("initializing Cheat plugin \ n");
plgRegisterMenuEntry (1, "CheatContro", CheatUi);
plgGetSharedServiceHandle ("fs: USER", & amp; fsUserHandle);
nsDbgPrint ("fsUserHandle:% 08x \ n", fsUserHandle);
// Svc_createThread (& amp; thread, Run_Cheat, 0, (u32) Stack_buf, 0x18, 1);
}
i'm sure i said this to you before, it looks so silly for you to call it triforce of the gods
pleaseThis is a great progress and working well when I tried it (fighting shadow link and others).
Here are the screenshots (using the plugin as well):
I also saw some codes (see below) posted in speedfly.cn perhaps related to this plug-in? It would be great if you could share the process and example of codes in your code repository so more and more players could contribute to the community cheat database for various games by using NTR CFW.
Code:void SetByte (u32 addr, u8 value) { u32 handle = 0; svc_openProcess (& amp; handle, 0x25); // pid = 0x25 svc_writeProcessMemory (handle, & amp; value, addr, 1); } u8 CheatOn_HP = 0; u32 CheatUi () { u8 buf [200]; acquireVideo (); while (1) { blank (0, 0, 320, 240); xsprintf (buf, "Cheat:% 02d", CheatOn_HP); print (buf, 10, 10, 255, 0, 0); updateScreen (); u32 key = waitKey (); if (key == BUTTON_DU) { CheatOn_HP = 1; SetByte (0x168b5fa8, 99); } if (key == BUTTON_DD) { CheatOn_HP = 0; SetByte (0x168b5fa8, 10); } if (key == BUTTON_B) { break; } } releaseVideo (); return 0; } void Run_Cheat (u32 addr, u8 value) { while (1) { if (CheatOn_HP) SetByte (0x168b5fa8, 99); } } u64 Stack_buf [0x200 / 8]; int main () { u32 retv; Handle thread; initSharedFunc (); nsDbgPrint ("initializing Cheat plugin \ n"); plgRegisterMenuEntry (1, "CheatContro", CheatUi); plgGetSharedServiceHandle ("fs: USER", & amp; fsUserHandle); nsDbgPrint ("fsUserHandle:% 08x \ n", fsUserHandle); // Svc_createThread (& amp; thread, Run_Cheat, 0, (u32) Stack_buf, 0x18, 1); }
1. Play 3ds with NTR CFW for the game ACNL (with wireless switch on)
2. Check the IP address of the 3ds (e.g. 192.168.1.10)
3. Run ntrclient application on Windows PC
4. Execute the following command:
connect('192.168.1.10', 8000)
5. After the connection is establish, you could see the list of process by using command:
listprocess()
6. One of them is the ACNL game of interest (in this case the process name is GARDEN, and has pid # 0x25)
7. Then you could check the memory layout, for example:
> memlayout(0x25)
null
valid memregions:
00100000 - 00b6efff , size: 00a6f000
08000000 - 08073fff , size: 00074000
0ffc0000 - 10000fff , size: 00041000
10002000 - 10002fff , size: 00001000
14000000 - 174dcfff , size: 034dd000
1f000000 - 1f5fffff , size: 00600000
1ff50000 - 1ff57fff , size: 00008000
1ff70000 - 1ff77fff , size: 00008000
1ff80000 - 1ff81fff , size: 00002000
1ffad000 - 1ffaefff , size: 00002000
end of memlayout.
8. I could dump the biggest one and see whether the savegame file is in that part (i.e. finding
garden.dat file (extracted by using savefiler 3ds application) content inside this memory data
dump file, data.bin):
> data(0x14000000, 0x34DD000, filename='data.bin', pid=0x25)
9. garden.dat actually starts at offset 0x01FB7E80 in that data.bin file, so now we could try finding
the location of the pocket slots of the first player by changing the content in the first slot of the
pocket multiple times and dump those data.bin for each change. In this case, I could see the offset
is 0x1FBEAD0 (or 0x15FBEAD0 after taking into consideration that data.bin starts at 0x14000000 in
the memory of pid 0x25).
10. Now, we could use command to put a bag of 99,000 bells in that first slot of pocket:
write(0x15FBEAD0, (0x12, 0x21, 0x00, 0x00), pid=0x25)
11. Profit
