Nintendo SWITCH Cheat Codes Download

Avoid creating cheat Request Topic​

Request cheats are made in :​

cheat-codes-ams-and-sx-os-add-and-request-general


This group provides cheat code authors to post works, share experience, learn and exchange

This group also provides cracking game players to get the latest and most complete cheats, and assist in testing

Since GBATemp is the most famous place in the industry, we hope to improve the content quality of this group

The main contents of this group include:
1. Publish personal originals.
2. Improve the quality of secondary creation (including version updates, repairs, and enhancements)
3. Request to create game cheats
4. Tutorial sharing on developing game cheat codes

For technical exchanges, sharing the code of others must attach the URL of the webpage published by the original author (do not copy the complete code)

Although the content of this group is very precious, it is provided for free, and it is not allowed to reprint it to commercial places or paid membership websites for profit.
Nintendo SWITCH Cheat Codes Download
Nintendo SWITCH Cheat Codes Download

Breeze beta 94

  • Thread starter Thread starter TomSwitch
  • Start date Start date
  • Views Views 1,947
  • Replies Replies 87
  • Likes Likes 10
Sorry I messed up the update to p2 release and it ended up with p1 in the zip.

Please use P3
Post automatically merged:

can't seem to replicate this, could you write the steps to achieve this when you have time?
sometimes 0 count when I watch breakpoint using stack, also x30_catch keep changing back to offset after used x30_catch =stack and detached, not sure if that is normal or not
View attachment 457901View attachment 457902View attachment 457903
X30_catch always defaults to offset, I will change that to last used in next release.
Your first screen is using stack, that means if the following is captured using this setting then 234c7c0 is from the stack
1726278190659.png
You second screen did not show X30 match to be turned on, what you catch isn't blocked by mismatch and you should still catch something only the uniqueness of the catch is going to changed from catching x30 vs catching stack value. Uniqueness is defined by everything after "]", including stack catch and grab[A] when enabled
This: 1726279073397.png
 
Last edited by TomSwitch,
Sorry I messed up the update to p2 release and it ended up with p1 in the zip.

Please use P3
Post automatically merged:


X30_catch always defaults to offset, I will change that to last used in next release.
Your first screen is using stack, that means if the following is captured using this setting then 234c7c0 is from the stack
View attachment 457944
You second screen did not show X30 match to be turned on, what you catch isn't blocked by mismatch and you should still catch something only the uniqueness of the catch is going to changed from catching x30 vs catching stack value. Uniqueness is defined by everything after "]", including stack catch and grab[A] when enabled
This: View attachment 457947
what settings do you need to get 2092470 like in your pic?
https://gbatemp.net/attachments/1726188583976-png.457679/
I am only getting 234c7c0 for x30 when set watch instruction
stack check =3 , stack offset = 1, x30 catch = stack
 
2024091505413800-CCFA659F4857F96DDA29AFEDB2E166E6.jpg
Pressing select on this line let you edit two value, first one is the register number and second the offset
Only register is used in the capture. Offset is use in the display of results. The displayed value is [X0,0x20] in this case. If you change it without making new capture it would be the previous register + offset in the display

When you watch an instruction Breeze enter these two value for you but you can change it before you start the watch
The left most [x,y] in the captured data shows x the value of X0 and y 0x20 if you capture with this setting. Breeze read [x,y] and display the value in current memory when you view the result

I shall change the algorithm to make it X0 when you capture blr X? as the X? is probably a less useful register.
Post automatically merged:

1726355898990.png
 
Last edited by TomSwitch,
  • Like
Reactions: LaMano
View attachment 458126
Pressing select on this line let you edit two value, first one is the register number and second the offset
Only register is used in the capture. Offset is use in the display of results. The displayed value is [X0,0x20] in this case. If you change it without making new capture it would be the previous register + offset in the display

When you watch an instruction Breeze enter these two value for you but you can change it before you start the watch
The left most [x,y] in the captured data shows x the value of X0 and y 0x20 if you capture with this setting. Breeze read [x,y] and display the value in current memory when you view the result

I shall change the algorithm to make it X0 when you capture blr X? as the X? is probably a less useful register.
Thanks, now able to replicate what you did before in those pics
do what you think is the best
 
seeing the register gets you the address of the method while X0 is likely to be "this" pointing to the class
Thanks for be able to download straight to the switch and with alternative stack so much more compare value for player side also items ect....
 
Thanks for be able to download straight to the switch and with alternative stack so much more compare value for player side also items ect....
Yes, I decided to hide prerelease form normal users and reduce friction to advance user getting prerelease and also able to roll back to older release easily.
Post automatically merged:

2024091509422700-CCFA659F4857F96DDA29AFEDB2E166E6.jpg
Found a good test case for what I am working on next.
73 unique access to this memory. Searching for the "one" or maybe "few" that is exclusive to this memory will be something worth automation

Next up a analyze menu to make sense of it.
 
Last edited by TomSwitch,
  • Like
Reactions: ranma99vn
1726491827019.png
Post automatically merged:

https://gbatemp.net/threads/downfall-1-0-2-tid-010018e01dc96000-bid-ff2969eb2a940aba.660939/
2024091709170100-CCFA659F4857F96DDA29AFEDB2E166E6.jpg
Stack offset check cheat:
[hp 100k]
stp x25, x26, [sp,#-0x90]
ldr w25,e
ldr x26, [sp,0xd0]
lsl w26,w26,16
cmp w25, w26
b.ne original
ldr s8, a
str s8, [x0, #0x60]
original: {original}
ldp x25, x26, [sp,#-0x90]
return: b code1+4
e:.word 0xfd1c0000
a:.float 100000

With Breeze 94p8b making the auto asm you only need to compose the following lines to make the hp 100k cheat
ldr s8, a
str s8, [x0, #0x60]
a:.float 100000
 
Last edited by TomSwitch,
what to do when I got hp > bp, goto call, watch the same register and none of the address shows up belong to player?
 
Last edited by dsrules,
what to do when I got hp > bp, goto call, watch the same register and none of the address shows up belong to player?
The usual is X0 at the point of calling contains a pointer to some class and the object of your interest may not be depth 0.
What you want can be :
[X0+offset1] => the easy one
[[X0+offset1]+offset2] => still not too bad
[[[X0+offset1]+offset2]+offset3] => maybe should just use the brute force method or be prepared to work through the game code

Bear in mind that X0 may not be the one.

There is a chance that the instruction you watch may overwhelm gen2 fork with the frequency it gets triggered and capturing stopped. Watch trig= and if you see that it stop increasing before it reach max trigger you set, the capture is not complete. Do some pre-screening to reduce the trigger frequency (maybe by generating a cheat code using make_x30_cheat, or write one with screen that you suspect would help reduce the frequency of trigger)

Let me know what game, what value you are looking at and how to quickly find it then I can take a closer look.
 
Last edited by TomSwitch,
The usual is X0 at the point of calling contains a pointer to some class and the object of your interest may not be depth 0.
What you want can be :
[X0+offset1] => the easy one
[[X0+offset1]+offset2] => still not too bad
[[[X0+offset1]+offset2]+offset3] => maybe should just use the brute force method or be prepared to work through the game code

Bear in mind that X0 may not be the one.

There is a chance that the instruction you watch may overwhelm gen2 fork with the frequency it gets triggered and capturing stopped. Watch trig= and if you see that it stop increasing before it reach max trigger you set, the capture is not complete. Do some pre-screening to reduce the trigger frequency (maybe by generating a cheat code using make_x30_cheat, or write one with screen that you suspect would help reduce the frequency of trigger)

Let me know what game, what value you are looking at and how to quickly find it then I can take a closer look.
castle crashers remastered hp
I think I have tried
[X0+offset1] and [[X0+offset1]+offset2]
register+0xc = hp, but I couldn't get any address that is even near, will try to set different registers and see what happens

does max trigger get saved after edited or it needs to be set per game session? I only set it one time to 2000 or 0x2000 (forgot which one), the most trigger I have seen was around 1500, didn't really pay much attention to it
 
castle crashers remastered hp
I think I have tried
[X0+offset1] and [[X0+offset1]+offset2]
register+0xc = hp, but I couldn't get any address that is even near, will try to set different registers and see what happens

does max trigger get saved after edited or it needs to be set per game session? I only set it one time to 2000 or 0x2000 (forgot which one), the most trigger I have seen was around 1500, didn't really pay much attention to it
Max trigger is there so some game that slows down a lot it would run out and let you have control again. You can safely set it to say 10000 which is the default I put, once you change it your value it is until you change it again.
Post automatically merged:

I made this earlier

[Breeze beta50 Castle Crashers Remastered 1.0.5 TID: 010001300D14A000 BID: EF5B33316A45337D]

[HP fill]
04000000 00139988 F8687928
04000000 00139988 143C2096
04000000 01041BE0 A9376BF9
04000000 01041BE4 A93873FB
04000000 01041BE8 A9397BFD
04000000 01041BEC 8B080D39
04000000 01041BF0 F940033A
04000000 01041BF4 B9400B5B
04000000 01041BF8 7100137F
04000000 01041BFC 540001A1
04000000 01041C00 71003D1F
04000000 01041C04 54000080
04000000 01041C08 7100411F
04000000 01041C0C 54000040
04000000 01041C10 14000008
04000000 01041C14 94000016
04000000 01041C18 F940073A
04000000 01041C1C F940075A
04000000 01041C20 D2801AFD
04000000 01041C24 900065BB
04000000 01041C28 910A237B
04000000 01041C2C 94000006
04000000 01041C30 A9776BF9
04000000 01041C34 A97873FB
04000000 01041C38 A9797BFD
04000000 01041C3C F8687928
04000000 01041C40 17C3DF53
04000000 01041C44 F940037C
04000000 01041C48 B40000FC
04000000 01041C4C EB19039F
04000000 01041C50 540000A0
04000000 01041C54 9100437B
04000000 01041C58 D10007BD
04000000 01041C5C B5FFFF5D
04000000 01041C60 14000002
04000000 01041C64 A9006B79
04000000 01041C68 D65F03C0
04000000 01041C6C F940073A
04000000 01041C70 B9400F5B
04000000 01041C74 180000DC
04000000 01041C78 6B1C037F
04000000 01041C7C 54000063
04000000 01041C80 1800009B
04000000 01041C84 B9000F5B
04000000 01041C88 D65F03C0
04000000 01041C8C 42000000
04000000 01041C90 44960000

[HP fill off]
04000000 00139988 F8687928

I can't figure out what I did. Must be some brute force match.
Post automatically merged:

From the game code it looks like
[[[X0+0x18]+8*?]+C]

1726929849034.png
So the question is what is X8 when the target is HP
My idea behind GrabA is to find out what this may be, write a cheat code that store the value of X8 into some memory then when the watch is triggered you get that value. Or the alternative is to understand the game code
I have a feeling X8 is some specific value for HP and the reason the watch on the actual write produce so many hits is X8 can be many values

I put a watch on X8 and I have 78 hits

I shall make some tool to make this GrabA exercise easier to execute. I am lazy to do it manually unless I am desperate. Are you?
 
Last edited by TomSwitch,
Max trigger is there so some game that slows down a lot it would run out and let you have control again. You can safely set it to say 10000 which is the default I put, once you change it your value it is until you change it again.
Post automatically merged:

I made this earlier

[Breeze beta50 Castle Crashers Remastered 1.0.5 TID: 010001300D14A000 BID: EF5B33316A45337D]

[HP fill]
04000000 00139988 F8687928
04000000 00139988 143C2096
04000000 01041BE0 A9376BF9
04000000 01041BE4 A93873FB
04000000 01041BE8 A9397BFD
04000000 01041BEC 8B080D39
04000000 01041BF0 F940033A
04000000 01041BF4 B9400B5B
04000000 01041BF8 7100137F
04000000 01041BFC 540001A1
04000000 01041C00 71003D1F
04000000 01041C04 54000080
04000000 01041C08 7100411F
04000000 01041C0C 54000040
04000000 01041C10 14000008
04000000 01041C14 94000016
04000000 01041C18 F940073A
04000000 01041C1C F940075A
04000000 01041C20 D2801AFD
04000000 01041C24 900065BB
04000000 01041C28 910A237B
04000000 01041C2C 94000006
04000000 01041C30 A9776BF9
04000000 01041C34 A97873FB
04000000 01041C38 A9797BFD
04000000 01041C3C F8687928
04000000 01041C40 17C3DF53
04000000 01041C44 F940037C
04000000 01041C48 B40000FC
04000000 01041C4C EB19039F
04000000 01041C50 540000A0
04000000 01041C54 9100437B
04000000 01041C58 D10007BD
04000000 01041C5C B5FFFF5D
04000000 01041C60 14000002
04000000 01041C64 A9006B79
04000000 01041C68 D65F03C0
04000000 01041C6C F940073A
04000000 01041C70 B9400F5B
04000000 01041C74 180000DC
04000000 01041C78 6B1C037F
04000000 01041C7C 54000063
04000000 01041C80 1800009B
04000000 01041C84 B9000F5B
04000000 01041C88 D65F03C0
04000000 01041C8C 42000000
04000000 01041C90 44960000

[HP fill off]
04000000 00139988 F8687928

I can't figure out what I did. Must be some brute force match.
Post automatically merged:

From the game code it looks like
[[[X0+0x18]+8*?]+C]

View attachment 459665
So the question is what is X8 when the target is HP
My idea behind GrabA is to find out what this may be, write a cheat code that store the value of X8 into some memory then when the watch is triggered you get that value. Or the alternative is to understand the game code
I have a feeling X8 is some specific value for HP and the reason the watch on the actual write produce so many hits is X8 can be many values

I put a watch on X8 and I have 78 hits

I shall make some tool to make this GrabA exercise easier to execute. I am lazy to do it manually unless I am desperate. Are you?
I gave up, too many things share the same breakpoint
the closest I got was x0+0x18+(0x130)+0xc, else far away in the thousands

also had quite a few crashes on beta94, wasn't able to replicate it, so not sure what causes it
I was going between viewing memory in gen2 menu and search manager, pushing b to go back
sometimes, after execute a watch then b
 
I gave up, too many things share the same breakpoint
the closest I got was x0+0x18+(0x130)+0xc, else far away in the thousands

also had quite a few crashes on beta94, wasn't able to replicate it, so not sure what causes it
I was going between viewing memory in gen2 menu and search manager, pushing b to go back
sometimes, after execute a watch then b
There is was bug in gen 2 0.13b that may cause crash. I have put in 94a 0.13c
 
There is was bug in gen 2 0.13b that may cause crash. I have put in 94a 0.13c
any idea why Breeze was not able to search in main non asm region? start search using main only or start search with search main only = 1 couldn't find the value
edizon se was able to find the value
 

Group statistics

Group owner:
matias3ds
Members:
86054
Threads:
7759
Messages:
42258
Photos:
0

Site & Scene News