Homebrew Using HANS for making an in-game cheat menu?

[Deleted User]

Hello Gbatemp:
Could that be possible?
Thinking about a think like Gateway ingame cheat menu.
With HANS we can return to HBL so we could make a pause game and go to cheatmenu.3dsx ?

 

[SANNIC789]

pleas smea make it hapen

 

[Coleman_C18]

With HANS we can return to HBL so we could make a pause game and go to cheatmenu.3dsx ?

Returning to the HBL closes the app/game you were playing entirely.

 

[Raffle]

everything is possibl you just need to believe it

 

[JJTapia19]

Maybe it's possble with a highly modified payload but not with hans by it self.

 

[MsMidnight]

You can modify the ROM like Debug Yellow by thezzazzglitch. So if you apply it to the ROM itself its possible

 

[101239]

If we can boot back to the hbmnu with hans im sure we can do this.

 

[JJTapia19]

If we can boot back to the hbmnu with hans im sure we can do this.

It's not hans, it's the payload what does that.

 

[Deleted User]

Another way would be to edit the hans payload so that it creates a thread in game code that will run in the free executable space at the end of .text pages.
In this custom thread we can try to make a simple RAM editor which loads a cheat file previously loaded in a buffer, and will run with the game code.
That's my lil idea.

 

[Mrrraou]

Not possible:

Another way would be to edit the hans payload so that it creates a thread in game code that will run in the free executable space at the end of .text pages.
In this custom thread we can try to make a simple RAM editor which loads a cheat file previously loaded in a buffer, and will run with the game code.
That's my lil idea.

.text size can't be edited because of exheaders and things that follows. Plus, memory problems would occur when trying to load cheats in RAM.
A better idea would be to patch directly the code.bin to make the cheat you want.

Hello Gbatemp:
Could that be possible?
Thinking about a think like Gateway ingame cheat menu.
With HANS we can return to HBL so we could make a pause game and go to cheatmenu.3dsx ?

Making the game pause would maybe be possible when patching the home button code, as the payload does for screenshots. Then maybe something could be done here, but not sure, if the code runs in another service/process, the game RAM cannot be patched (with gspwn, maybe it can). And it would never run a 3DSX. Ever. (making it running a 3dsx that could access the game ram while running it would be as possible as your famous amiibohax that gives kernel exploit. I'm sorry but it makes me laugh so hard)

 

[Deleted User]

Not possible:

.text size can't be edited because of exheaders and things that follows. Plus, memory problems would occur when trying to load cheats in RAM.
A better idea would be to patch directly the code.bin to make the cheat you want.

I'm aware of how it works.
But the memory pages are 0x1000 aligned, so there will be very little executable space between .text code end and .text page end.
If i understood the sources well, this is how hans repairs game's code before launch it.

 

[Mrrraou]

I'm aware of how it works.
But the memory pages are 0x1000 aligned, so there will be very little executable space between .text code end and .text page end.
If i understood the sources well, this is how hans repairs game's code before launch it.

Well, depending on games.
And, I don't know where you saw that HANS was repairing "game's code", but... could you explain (or give a link to that part of the code) ?

 

[Deleted User]

https://github.com/smealum/HANS/tree/master/loader
I looked quicly at the sources, i can be wrong;
The loader seems to overwrite the first 0x5000 bytes of the game code, which then gets repaired.
In order to do this the loader places a stub at the very end of the .text page, which will re-jump at the game code once gspwn finished to copy the corrupted parte.

My idea was to expand the stub code to create a custom thread.
But the space is very little.

 

[101239]

It's not hans, it's the payload what does that.

exACtly

 

[Mrrraou]

https://github.com/smealum/HANS/tree/master/loader
I looked quicly at the sources, i can be wrong;
The loader seems to overwrite the first 0x5000 bytes of the game code, which then gets repaired.
In order to do this the loader places a stub at the very end of the .text page, which will re-jump at the game code once gspwn finished to copy the corrupted parte.

My idea was to expand the stub code to create a custom thread.
But the space is very little.

Well, in fact, it does. It copies stub.bin at the beginning of the .text first then runs it. But still, you would have to find where you are going to put the cheats inside memory without breaking the game. But, well, maybe it could be possible. Let's see if you can restore it and still having the thread running, too.

--------------------- MERGED ---------------------------

exACtly

What?

 

[DarkFlare69]

The 14 people who voted for yes probably don't know how this kind of stuff works.

 

[Deleted User]

In-game, probably not.
Out-of-game as a .3dsx or HANS option; plausible

 

[froggestspirit]

(making it running a 3dsx that could access the game ram while running it would be as possible as your famous amiibohax that gives kernel exploit. I'm sorry but it makes me laugh so hard)

Cubic ninja amiibo deconfirmed!

 

[hacksn5s4]

could make it so yo apply the cheats before you start the game and you hold a button combination the browser ramhack thing worked with out kernel exploit and rom hacks are possible on hans so i don't see why is would not

 

[MsMidnight]

The 14 people who voted for yes probably don't know how this kind of stuff works.

Smealum voted yes, and he made HANS