Hacking Gateway 3.6.2

  • Thread starter Thread starter Quantumcat
  • Start date Start date
  • Views Views 23,093
  • Replies Replies 162
  • Likes Likes 9
i guess because the ram dump address is not equal to the 3ds address.
find it on the 3ds now that you know what to look for.
 
But I only got a freeze.
Where I'm wrong?

You need to check the header of the file. It will tell you the virtual addresses of each ram chunk. Then you need to calculate your offset in the file relative to the ram chunk beginning.
Add this offset to the ram chunk virtual address. This is your real virtual address
 
  • Like
Reactions: cearp
You need to check the header of the file. It will tell you the virtual addresses of each ram chunk. Then you need to calculate your offset in the file relative to the ram chunk beginning.
Add this offset to the ram chunk virtual address. This is your real virtual address
How would I find this header?
 
It starts at offset 0 in the file
Hmm... I see nothing :/
1452530733-ramoffsets.png
 
It's right there.

From your screenshot: 12 00 00 00 -> means there will be 18 ram chunks coming

Ramchunk 0:
Virtual address: 00CDD000
Physical address: 27BDD000
Size: 00023000

Ramchunk 1:
Virtual address: 00D00000
Physical address: 26F50000
Size: 000B0000

And so on until Ramchunk 17

Then, the data (size 23000) for ramchunk 0 begins, then the data for ramchunk1 (size B0000), and so on

So, at file offset E0 ramchunk 0 data should begin.

That means, if you end up with say file offset F0, that means it is in the ramchunk 0 area:
F0 - E0 = 10 relative to ramchunk 0, so your virtual address for F0 is 00CDD000 + 10 = 00CDD010
 
Last edited by ,
  • Like
Reactions: cearp and Asia81
Quick question. If I want to port codes from an unupdated version of a game to an updated version of a game, do I just need to figure out the difference and add it?
So for example in MHX v1.0, the money offset is 083B1AE8, and in v1.1, it is 083B37C8. A hex calculator says the difference is 083B37C8 − 083B1AE8 = 1ce0. Does that mean I can just add 1CE0 to all the 1.0 codes and they should work on 1.1?

I just want the speed modifier to work because that code is stupid fun.

DD000000 00000204
D3000000 00000000
00C01410 40000000
00C01414 E51F000C
00C01418 E5860040
00C0141C ED960A10
00C01420 E12FFF1E
0030A2AC EB23DC58
00C01424 E51F001C
00C01428 E5860040
00C0142C E3A00000
00C01430 E12FFF1E
002F7BA4 EB24261E
D0000000 00000000
DD000000 00000104
00C01410 3F800000
D0000000 00000000
Do I just add 1CE0 to everything that doesn't start with DD, D3, or D0?
 
He guys if i download a rom and it is in 2 parts how
Quick question. If I want to port codes from an unupdated version of a game to an updated version of a game, do I just need to figure out the difference and add it?
So for example in MHX v1.0, the money offset is 083B1AE8, and in v1.1, it is 083B37C8. A hex calculator says the difference is 083B37C8 − 083B1AE8 = 1ce0. Does that mean I can just add 1CE0 to all the 1.0 codes and they should work on 1.1?

I just want the speed modifier to work because that code is stupid fun.

DD000000 00000204
D3000000 00000000
00C01410 40000000
00C01414 E51F000C
00C01418 E5860040
00C0141C ED960A10
00C01420 E12FFF1E
0030A2AC EB23DC58
00C01424 E51F001C
00C01428 E5860040
00C0142C E3A00000
00C01430 E12FFF1E
002F7BA4 EB24261E
D0000000 00000000
DD000000 00000104
00C01410 3F800000
D0000000 00000000
Do I just add 1CE0 to everything that doesn't start with DD, D3, or D0?
If all of the adress need to go up my that much then you must use dc and add it to the offset at the beginning.
 
Hey guys can anybody help me get nnid back on my emunand. I can get to the settings for it through hans on both sysnand and emunand... (both have sys settings downgraded for mset- willing to get rid of mset. I have menuha and cubic ninja).
Both nands tell me i need to update when i log it. :( help.

--------------------- MERGED ---------------------------

Can you explain that a bit more? What is dc?
DC000000 00000XXX- Adds XXX to the offset.
Then there codes like
D3000000 00000XXX- Sets the offset to XXX.
When you have an offset it adds that number to all of the adress's.
 
So I just add DC000000 00001CE0 to the first line?
What do I do about the DD, D3, and D0 stuff since I'm assuming those shouldn't be added to?
 
Last edited by GameSystem,
So I just add DC000000 00001CE0 to the first line?
If... ALL of the adress's go up by the same amout. If not you either going to have to find all new adress's or use d3 and set it to the new one before all writes.
Ex.
D3000000 00000000
DC000000 00001CE0
xxxxxxxxx 00000xxx
Or
D3
00000000 00001CE0
xxxxxxxxx 00000xxx
 
Should I just remove the DD and D0 stuff since those only seem to be required for the button activators? Those codes were made before the in game cheat menu, so I don't think you need them now since you can just disable them.

Would the new code be:
D3000000 00000000
DC000000 00001CE0
00C01410 40000000
00C01414 E51F000C
00C01418 E5860040
00C0141C ED960A10
00C01420 E12FFF1E
0030A2AC EB23DC58
00C01424 E51F001C
00C01428 E5860040
00C0142C E3A00000
00C01430 E12FFF1E
002F7BA4 EB24261E
 
Last edited by GameSystem,
We should try and keep the code creation chatter to the existing Gateshark Cheats thread.

I'm getting back into this stuff after more than 15 years, and there's a lot that's changed, so there's a lot to learn.

Having a single thread that we can search through is easier than having discussion strewn across multiple Gateway update threads.

Thanks for posting this, it'll be really useful for @Asia81 and other user comparing RAM dumps on their PC.

If they can wrap their head around it (I'm a little lost).
Is decoding the RAM dump header to convert dump to real virtual addresses something that could be automated with a python script or web app?

Quick question. If I want to port codes from an unupdated version of a game to an updated version of a game, do I just need to figure out the difference and add it?
So for example in MHX v1.0, the money offset is 083B1AE8, and in v1.1, it is 083B37C8. A hex calculator says the difference is 083B37C8 − 083B1AE8 = 1ce0. Does that mean I can just add 1CE0 to all the 1.0 codes and they should work on 1.1?

I just want the speed modifier to work because that code is stupid fun.

DD000000 00000204
D3000000 00000000
00C01410 40000000
00C01414 E51F000C
00C01418 E5860040
00C0141C ED960A10
00C01420 E12FFF1E
0030A2AC EB23DC58
00C01424 E51F001C
00C01428 E5860040
00C0142C E3A00000
00C01430 E12FFF1E
002F7BA4 EB24261E
D0000000 00000000
DD000000 00000104
00C01410 3F800000
D0000000 00000000
Do I just add 1CE0 to everything that doesn't start with DD, D3, or D0?
Ideally it'd be that easy.

There was some discussion in the Gateshark thread about game that went from using static addresses pre-update to dynamic ones after being updated.

I think that's probably an unusual case though.
 
Here:

Thanks!
Thanks,
I go to Cheat Finder and choose 32bit Exact Search 724 >Next Search > Equal > View Hits
then go to 16xxxxxx address and change 01 00 00 00 00 01 00 to 01 01 01 01 01 01 01
but I don't see any effects , maybe it's just fake address and the address seems dynamic
mipuzzv0001.JPG

mipuzzv0002.JPG
 
Last edited by dsrules,

Site & Scene News

Popular threads in this forum