I updated the default settings (since beta98a) for breezeoptions. If the file does not already exist, it will be created with default values, including setting the custom shortcut to 1 (no shortcut keys). This change aims to avoid confusion for new users unfamiliar with the shortcut keys. You can customize this setting as needed.
If you haven't removed breezeoptions, it’s possible the file became corrupted or you may have accidentally set this setting to 1.
Last edited by TomSwitch,
For code creators I have added some dmnt enhancements. These will take a while to get into official atmosphere release, you can try them out by installing dmnt fork using the setting menu of Breeze beta98c.
.
You can have full addressing flexibility in code type 0, 1 and 5
Here is an example of how we currently do pointer cheats
[power]
580F0000 03809438
580F1000 000000B8
580F1000 00000000
580F1000 00000028
580F1000 00000010
580F1000 00000020
780F0000 00000068
640F0000 00000000 3FA00000
[Technique]
580F0000 03809438
580F1000 000000B8
580F1000 00000000
580F1000 00000028
580F1000 00000010
580F1000 00000020
780F0000 00000074
640F0000 00000000 41820000
[Gold]
580F0000 03809438
580F1000 000000B8
580F1000 00000000
580F1000 00000058
580F1000 00000018
580F1000 00000020
780F0000 00000068
640F0000 00000000 000F4240
Now you can do
[power]
580F0000 03809438
580F1000 000000B8
580F1000 00000000
580F1000 00000028
580F1000 00000010
580F1000 00000020
044F0000 00000068 3FA00000
[Technique]
580F0000 03809438
580F1000 000000B8
580F1000 00000000
580F1000 00000028
580F1000 00000010
580F1000 00000020
044F0000 00000074 41820000
[power & Technique]
580F0000 03809438
580F1000 000000B8
580F1000 00000000
580F1000 00000028
580F1000 00000010
580F1000 00000020
044F0000 00000068 3FA00000
044F0000 00000074 41820000
To reuse chain that are common you don't have to make a save of the register, you can use a different register in code type 5
[power & Technique & Gold]
580F0000 03809438
580F1000 000000B8
580F1000 00000000
580E2F00 00000028 <= here you switch to use register E so the content of F is not modified by this line
580E1000 00000010
580E1000 00000020
044E0000 00000068 3FA00000 <= power
044E0000 00000074 41820000 <= Technique
580D2F00 00000058 <= reuse value of F here
580D1000 00000018
580D1000 00000020
044D0000 00000068 000F4240 <= Gold
With type 1 change now you can use it to test a memory without loading that memory into a register first
[power & Technique with check]
580F0000 03809438
580F1000 000000B8
580F1000 00000000
580E2F00 00000028 <= here you switch to use register E so the content of F is not modified by this line
580E1000 00000010
580E1000 00000020
14451E00 00000080 00000001 <= if offset 80 has 1
044E0000 00000068 3FA00000 <= power
044E0000 00000074 41820000 <= Technique
20000000 <= end if
The increased efficiency due to the addressing mode flexibility may mean cheats might now all fit into one file for those that use to have to be in multiple files.
You can perform floating point math.
You can do keydown for conditional key so you can make cheat that increment/decrement some value or make a key toggle something.
Here is the new documentation
This extension will take some time to propagate to the Atmosphere user base, until then user will have to manually install what I included in Breeze or to build their own dmnt from atmosphere source.
Keep in mind that usage of the extension will necessitate users to update and also almost certain to not be compatible with emulator.
Members-only download
You can have full addressing flexibility in code type 0, 1 and 5
Here is an example of how we currently do pointer cheats
[power]
580F0000 03809438
580F1000 000000B8
580F1000 00000000
580F1000 00000028
580F1000 00000010
580F1000 00000020
780F0000 00000068
640F0000 00000000 3FA00000
[Technique]
580F0000 03809438
580F1000 000000B8
580F1000 00000000
580F1000 00000028
580F1000 00000010
580F1000 00000020
780F0000 00000074
640F0000 00000000 41820000
[Gold]
580F0000 03809438
580F1000 000000B8
580F1000 00000000
580F1000 00000058
580F1000 00000018
580F1000 00000020
780F0000 00000068
640F0000 00000000 000F4240
Now you can do
[power]
580F0000 03809438
580F1000 000000B8
580F1000 00000000
580F1000 00000028
580F1000 00000010
580F1000 00000020
044F0000 00000068 3FA00000
[Technique]
580F0000 03809438
580F1000 000000B8
580F1000 00000000
580F1000 00000028
580F1000 00000010
580F1000 00000020
044F0000 00000074 41820000
[power & Technique]
580F0000 03809438
580F1000 000000B8
580F1000 00000000
580F1000 00000028
580F1000 00000010
580F1000 00000020
044F0000 00000068 3FA00000
044F0000 00000074 41820000
To reuse chain that are common you don't have to make a save of the register, you can use a different register in code type 5
[power & Technique & Gold]
580F0000 03809438
580F1000 000000B8
580F1000 00000000
580E2F00 00000028 <= here you switch to use register E so the content of F is not modified by this line
580E1000 00000010
580E1000 00000020
044E0000 00000068 3FA00000 <= power
044E0000 00000074 41820000 <= Technique
580D2F00 00000058 <= reuse value of F here
580D1000 00000018
580D1000 00000020
044D0000 00000068 000F4240 <= Gold
With type 1 change now you can use it to test a memory without loading that memory into a register first
[power & Technique with check]
580F0000 03809438
580F1000 000000B8
580F1000 00000000
580E2F00 00000028 <= here you switch to use register E so the content of F is not modified by this line
580E1000 00000010
580E1000 00000020
14451E00 00000080 00000001 <= if offset 80 has 1
044E0000 00000068 3FA00000 <= power
044E0000 00000074 41820000 <= Technique
20000000 <= end if
The increased efficiency due to the addressing mode flexibility may mean cheats might now all fit into one file for those that use to have to be in multiple files.
You can perform floating point math.
You can do keydown for conditional key so you can make cheat that increment/decrement some value or make a key toggle something.
Here is the new documentation
Members-only download
This extension will take some time to propagate to the Atmosphere user base, until then user will have to manually install what I included in Breeze or to build their own dmnt from atmosphere source.
Keep in mind that usage of the extension will necessitate users to update and also almost certain to not be compatible with emulator.
Last edited by TomSwitch,
i'm going to use this immediately. And I can't wait to make codes that won't work for emulator
hardware ftw@TomSwitch, with the new codetype
[hp player1 full]
580F0000 033BE020
580F1000 00000140
580F1000 00000000
544E2F00 00000534
A4EF0200 00000530
unlike the old codetype, when use Jump to target, it jumps to 140+0+0+0 instead of 140+0+534
also, when using 044F0000 00000xxx vvvvvvvv, it would jump to 140+0+0
[hp player1 full]
580F0000 033BE020
580F1000 00000140
580F1000 00000000
544E2F00 00000534
A4EF0200 00000530
unlike the old codetype, when use Jump to target, it jumps to 140+0+0+0 instead of 140+0+534
also, when using 044F0000 00000xxx vvvvvvvv, it would jump to 140+0+0
Last edited by dsrules,
pr6 fixed add to bookmark and jump to target for new type 0 extension
jump to target only handles simple case for the moment, this one has multiple targets, I guess either is better than non, pr7 will make it go for the first one
Last edited by TomSwitch,
is 081 instead of 082 what you want? Does just this change fix the problem?
This game is heap static? Somehow it also uses alias. Won't be surprise that the algorithm for not main static code is not robust.
Let me know what is working and what is not. Does jump to target work? Does bookmark work? How is the memory explorer status line?
Maybe I need to look into the game to see what is happening.
Post automatically merged:
I have looked and it looks like a game that we normally don't make cheat for. It looks very much like a script based game and is not static on heap.
The add static cheat works fine for me just it won't stay the same when you progress to the next stage. It is one of those easy to DIY hack type given that it is double. Search, cheat for the level, search again next level etc etc
Last edited by TomSwitch,
no, I wasn't talking about cheat making related
you could clearly see that the address was in Heap, but Breeze treated it as the address was found in Base
if you make a bogus cheat from the found address (found address - Heap start), the cheat will work, and also it could not jump to target with this cheat
this is a static address, jump to target uses Alias as base address
TID: 0100ba200c378000
BID: C2DAC77C25BB7944
[Begin With 4 Billion X Health Enable Before Load Save]
01100000 03abb247 00000042
Last edited by dsrules,
I get heap like normal on this one. Breeze did not make it alias when I played. Anyway this isn't the kind of game that Breeze is good at.
Here is cheat for HP. A very simple match every thing cheat. May make some enemy invincible. ( saw one )
[Breeze beta98c Way of the Passive Fist 1.0.0 TID: 0100BA200C378000 BID: C2DAC77C25BB7944]
[by TomSwitch]
[auto asm hp]
04000000 00018340 F9400288
04000000 00018340 1474BBC0
04000000 01D47240 A9376BF9
04000000 01D47244 180003B9
04000000 01D47248 53103FDA
04000000 01D4724C 6B1A033F
04000000 01D47250 540002E1
04000000 01D47254 18000359
04000000 01D47258 794073FA
04000000 01D4725C 6B1A033F
04000000 01D47260 54000261
04000000 01D47264 180002F9
04000000 01D47268 794093FA
04000000 01D4726C 6B1A033F
04000000 01D47270 540001E1
04000000 01D47274 18000299
04000000 01D47278 794413FA
04000000 01D4727C 6B1A033F
04000000 01D47280 54000161
04000000 01D47284 18000239
04000000 01D47288 7944F3FA
04000000 01D4728C 6B1A033F
04000000 01D47290 540000E1
04000000 01D47294 180001D9
04000000 01D47298 794553FA
04000000 01D4729C 6B1A033F
04000000 01D472A0 54000061
04000000 01D472A4 58000168
04000000 01D472A8 F9000288
04000000 01D472AC F9400288
04000000 01D472B0 A9776BF9
04000000 01D472B4 178B4424
04000000 01D472B8 6AA80000
04000000 01D472BC 00006AA8
04000000 01D472C0 00008D34
04000000 01D472C4 000074CC
04000000 01D472C8 000074CC
04000000 01D472CC 0000D148
08000000 01D472D0 40690000 00000000
These kinds of games probably use a dictionary. The data shows no relationship to the surrounding data, and their distances are very far from each other. The code that accesses the data has no offset, which is quite typical of a script-driven engine.
Update: I keep rebooting the game and try jump to target using this cheat
[Begin With 4 Billion X Health Enable Before Load Save]
01100000 03abb247 00000042
sometimes it could jump to target (it will display heap address normally like other games, uses Heap as the base address), sometimes it could not jump to target (it will use alias as the base address)
Update 2: found a working pointer, should be 100% as far as I have tested
hp offset is either +4e0+0 or +24e0+0, might need memory check
Members only
Last edited by dsrules,
You mean some of the time the jump to target don't work or the cheat don't work?
Try 98c pr10. I make jump to target use the actual memory access type per cheatVM definition instead of start of heap type memory. I had the wrong assumption that there will only be one type of heap which may be correct for most game so this problem was never reported until now, there may be other bugs due to this wrong assumption.
These distinction has been around since maybe 4 years ago, I never understood what it means and still don't. If it starts to appear more often I will dig into it.
Members-only download
Here is the change in jump to target in pr10. When Alias got assigned a lower base that is when the jump to target will defer from cheatVM in earlier version. m_heapBaseAddr is the start of heap memory type ( no distinction ) and cheatVM has distinction since about 4 years ago.
Last edited by TomSwitch,
using pr10
after some more testings, this seems to be the case, if Alias comes before Heap, then it will use Alias as the base address (unable to jump directly to static heap), games Not using Alias doesn't have this problem
if Heap comes first it works normally, not sure if it only happens on this game or not, this is the first time I noticed it
when normal heap is not accessible, the pointer cheat starting from heap would not work, pointer cheat started from Main still works
looked at some of my installed game, they are all either using heap not alias or alias not heap
only this game using both
Last edited by dsrules,
Here comes pr11. Let me know how it goes
There is still no two heap_base support but it will set heap_base to the one use in the jump to bookmark. Heap base is the lower address at the start so bookmark maybe off until you use jump to bookmark for this game when heap and alias trade places.
I suppose using heap as reference is going to be very rare and having two heap base is even more so.
How do you know when part of the pointer is going to be heap static?
Last edited by TomSwitch,
Thanks! working good so far on pr11
as for heap static, I think that need to use the human eyes
after not able to find a working pointer on depth 8 or 9, I noticed the pointer path always ends with +50+10+58+10+4e0+0
so, I go backwards to that address using MoveLeft and found out that heap address is always the same
I recognize 4e0 is HP, strange that there is also 24E0 and HP want to alternate between these two. Not sure if there is a better unified pointer but using these two and rest of what you found works for the stages that I have played.
I will change the bookmark.heap type from bool to MemoryAccessType in the next preview to fix this properly.
I may introduce two session pointer search for the purpose of detecting static case. Maybe also add option to perform pointer search as an application, with 10x more memory can go very deep.
Last edited by TomSwitch,
that would be cool
for the hp, I didn't found another 4e0+0 after it changed to 24e0+0
so, I used the value 0x55d at +4e8 and +24e8 for memory check before grabbing the pointer
Similar threads
-
- Sticky
