Homebrew [Custom Launcher] Spider3DSTools released

[shutterbug2000]

It's just a rom edit, but yeah you need 9.2 or under and a Gateway to run roms. It's sad, but it's the only public way.





Ha, I didn't really find much. I did a bit of editing to the personal stats file before SciresM released his tool, but it definitely does make things a lot easier. You can thank him for that.

Ok. How would I do the ram edit then? Does that require 9.2(don't need it, but it's more convenient).

 

[Huntereb]

Ok. How would I do the ram edit then? Does that require 9.2(don't need it, but it's more convenient).

I don't think anyone's released anything publicly to use for cheats with this yet, but I'm sure one will be available soon.

 

[DSoryu]

So awesome, so progress, much future, many CFW possible, wow.

Keep itt up guys, the 3DS scene seems to be on it's gold era right now.

 

[AquaX101]

Dumb question, what's loadcode and can I have a link?

 

[Apache Thunder]

Dumb question, what's loadcode and can I have a link?

Those examples are pre-release experimentation. It's not out in the wild yet. Little patience dear sir!

 

[Huntereb]

Those examples are pre-release experimentation. It's not out in the wild yet. Little patience dear sir!

It is out, you just gotta compile it on your own.

 

[shutterbug2000]

Ok, VERY dumb question here. If I wanted to dump the memory of the running Application(not the web browser, the app in the background), how would I do that with MemoryDump.dat/ how should I modify it?

 

[Apache Thunder]

It is out, you just gotta compile it on your own.

Oh I see. I thought he meant the pokemon specific stuff.

 

[Huntereb]

Ok, VERY dumb question here. If I wanted to dump the memory of the running Application(not the web browser, the app in the background), how would I do that with MemoryDump.dat/ how should I modify it?

Modify it with the proper memory offsets, then run it. General application memory starts at 0x14000000.

 

[MrCheeze]

Is there more to it than just modifying DUMPSTART in MemoryDump.S? Because doing that just causes the console to hang.

 

[shutterbug2000]

Is there more to it than just modifying DUMPSTART in MemoryDump.S? Because doing that just causes the console to hang.

Same here. Doesn't seem to work.

 

[Huntereb]

Is there more to it than just modifying DUMPSTART in MemoryDump.S? Because doing that just causes the console to hang.

Same here. Doesn't seem to work.

I haven't tested it because I have no use for it, but that looks right. Not sure why it would cause a hang.

Just FYI, this all only works in Sysnand.

 

[Sparkette]

Would it be possible to create something with this that continues to run in the background while a game is running? If so, would it be possible to create a network scan server for Cheat Engine? (listens for incoming network connections, and reads/writes RAM given in network commands.) If anyone here has used Cheat Engine I'm sure you could see how useful this would be.

 

[shutterbug2000]

Ahh yes. Made a memory dump work with a code.bin. Found what I was looking for. Time to have some fun with this.

 

[Duo8]

Would it be possible to create something with this that continues to run in the background while a game is running? If so, would it be possible to create a network scan server for Cheat Engine? (listens for incoming network connections, and reads/writes RAM given in network commands.) If anyone here has used Cheat Engine I'm sure you could see how useful this would be.

Another thread inside the running program seems more probable. To have something in the background you need to create a new process, which is possible only with arm11 kernel access (or maybe pm service).

 

[shutterbug2000]

Alright. Let's say I have a bunch of bytes(like, 0x400F worth of bytes) that I need to write to memory in sequence. For loop is probably the best option, but how would I store the original sequence into a variable(array, or whatever).

^ C n00b.

 

[Helper]

Another thread inside the running program seems more probable. To have something in the background you need to create a new process, which is possible only with arm11 kernel access (or maybe pm service).

Damn. I was interested in the possibility of a TSR, too. I thought it'd be neat to have a Gamecube controller connected to microcontroller with an IR transceiver while a program on the 3DS listens to the IR sensor and simulates button presses. You would be able to use wired controllers on a 3DS without any modification to the 3DS motherboard. Oh well.

On a different note, just to confirm, this exploit does have access to application RAM, right?

Alright. Let's say I have a bunch of bytes(like, 0x400F worth of bytes) that I need to write to memory in sequence. For loop is probably the best option, but how would I store the original sequence into a variable(array, or whatever).

^ C n00b.

I'm a noob to the 3DS, not so much to C. Typically, the answer would be to dynamically allocate a buffer. Do you have access to malloc or anything similar?

 

[xantoz]

Alright. Let's say I have a bunch of bytes(like, 0x400F worth of bytes) that I need to write to memory in sequence. For loop is probably the best option, but how would I store the original sequence into a variable(array, or whatever).

^ C n00b.

memcpy?

edit: you do have access to stdlib functions right? considering the barebones nature of this... (but then I guess just statically compile it in, alternatively for loop)

 

[Huntereb]

On a different note, just to confirm, this exploit does have access to application RAM, right?

Yes, through a workaround using a GPU command.

 

[xantoz]

Helper
If he doesn't have any malloc and it's small enough allocating a buffer on the stack should be sufficient...
If you use C99 I believe you can just declare stack arrays with dynamic sizes these days.
Then again that might be difficult to do during ROP... although probably no problem when you get to the code execution stage of things.
But I'm also kinda n00bish at hacks, yet I have quite a bit of experience with C and programming in general.