Hacking NTR Debugger - svc_controlMemory failed when trying to attach to a process

[Altr0n]

Hello All,

I'm attempting to use the version of NTRDebugger on NTR CFW 3.2 from this thread:

https://gbatemp.net/threads/release...st-public-real-time-debugger-for-n3ds.384858/

When I attempt to attach to a process (the cart that I'm running) I get the following error:

svc_controlMemory failed: c860180amapRemoteMemory failed: c860180a
protectRemoteMemory failed: d8e007f5

I am very new to the NTR debugger so there may be a simple solution that I'm not aware of, any insight is appreciated, thanks!

 

[Deleted member 369977]

Can you send me your console log, ( a spoiler would be most helpful. ) it seems like you're trying to access memory outside of the valid memregions.

 

[Altr0n]

Sure,

> listprocess()
null
patching smdh
starting app: 00040000000c6400
FSUSER_OpenDirectory failed, ret=c8804478FSUSER_OpenDirectory failed, ret=c8804478patching smdh
pid: 0x00000000, pname:       fs, tid: 0000000000000000, kpobj: fff75820
pid: 0x00000001, pname:   loader, tid: 0000000000000000, kpobj: fff75a88
pid: 0x00000002, pname:       pm, tid: 0000000000000000, kpobj: fff75cf0
pid: 0x00000003, pname:       sm, tid: 0000000000000000, kpobj: fff75f58
pid: 0x00000004, pname:      pxi, tid: 0000000000000000, kpobj: fff761c0
pid: 0x00000005, pname:       ns, tid: 0004013000008002, kpobj: fff76428
pid: 0x00000006, pname:      ptm, tid: 0004013000002202, kpobj: fff76690
pid: 0x00000007, pname:      cfg, tid: 0004013000001702, kpobj: fff768f8
pid: 0x00000008, pname:     gpio, tid: 0004013000001b02, kpobj: fff76b60
pid: 0x00000009, pname:      i2c, tid: 0004013000001e02, kpobj: fff76dc8
pid: 0x0000000a, pname:      mcu, tid: 0004013000001f02, kpobj: fff77030
pid: 0x0000000b, pname:      pdn, tid: 0004013000002102, kpobj: fff77298
pid: 0x0000000c, pname:      spi, tid: 0004013000002302, kpobj: fff77500
pid: 0x0000000d, pname:       ps, tid: 0004013000003102, kpobj: fff77768
pid: 0x0000000e, pname:  ErrDisp, tid: 0004003000008a02, kpobj: fff779d0
pid: 0x0000000f, pname:     menu, tid: 0004003000008f02, kpobj: fff77c38
pid: 0x00000010, pname:      hid, tid: 0004013000001d02, kpobj: fff77ea0
pid: 0x00000011, pname:    codec, tid: 0004013000001802, kpobj: fff78108
pid: 0x00000012, pname:      dsp, tid: 0004013000001a02, kpobj: fff78370
pid: 0x00000013, pname:       am, tid: 0004013000001502, kpobj: fff785d8
pid: 0x00000014, pname:      gsp, tid: 0004013000001c02, kpobj: fff78840
pid: 0x00000015, pname:     csnd, tid: 0004013000002702, kpobj: fff78aa8
pid: 0x00000016, pname:   camera, tid: 0004013000001602, kpobj: fff78d10
pid: 0x00000017, pname:      mic, tid: 0004013000002002, kpobj: fff78f78
pid: 0x00000018, pname:       ir, tid: 0004013000003302, kpobj: fff791e0
pid: 0x00000019, pname:      nwm, tid: 0004013000002d02, kpobj: fff79448
pid: 0x0000001a, pname:   socket, tid: 0004013000002e02, kpobj: fff796b0
pid: 0x0000001b, pname:     http, tid: 0004013000002902, kpobj: fff79918
pid: 0x0000001c, pname:      ssl, tid: 0004013000002f02, kpobj: fff79b80
pid: 0x0000001d, pname:     cecd, tid: 0004013000002602, kpobj: fff79de8
pid: 0x0000001e, pname:  friends, tid: 0004013000003202, kpobj: fff7a050
pid: 0x0000001f, pname:       ac, tid: 0004013000002402, kpobj: fff7a2b8
pid: 0x00000020, pname:     boss, tid: 0004013000003402, kpobj: fff7a520
pid: 0x00000021, pname:      act, tid: 0004013000003802, kpobj: fff7a788
pid: 0x00000022, pname:     news, tid: 0004013000003502, kpobj: fff7a9f0
pid: 0x00000023, pname:      ndm, tid: 0004013000002b02, kpobj: fff7ac58
pid: 0x00000024, pname:      nim, tid: 0004013000002c02, kpobj: fff7aec0
pid: 0x00000025, pname:      dlp, tid: 0004013000002802, kpobj: fff7b128
pid: 0x00000028, pname:      PXZ, tid: 00040000000c6400, kpobj: fff7b390
pid: 0x00000029, pname:       ro, tid: 0004013000003702, kpobj: fff7b5f8

Now, trying to attach to PXZ

> attachprocess(0x28)
null
buf: 07001000, size: 0000e000
svc_controlMemory failed: c860180amapRemoteMemory failed: c860180a
protectRemoteMemory failed: d8e007f5
will listen at port 5040

Am I using the command incorrectly?

 

[Altr0n]

So, it works with other processes, but not with the running game. Not sure what's going on here. About to try with a different game

The debugger does not seem to work with any of my carts, but it does work with other system processes like HID, Friends, etc

For what it's worth I'm on Cakes CFW using BootNTR to setup NTR.

 

[Deleted member 369977]

The command Attachprocess takes 2 arguments. First is the pid, as you already specified. And second is the patchAddress, which is 0 by default thus resulting in the protectRemoteMemory error.

Spoiler

Anyways, I haven't messed that much with breakpoints yet, but I found this: https://gbatemp.net/threads/release...-debugger-for-n3ds.384858/page-4#post-6055914 Maybe this helps you.

 

[Altr0n]

Interesting, for some reason just specifying the PID works on other processes, I should have just dug into the code, I apologize for the laziness.

It still does not seem to work even for the specified memory regions that I get from the debugger, not sure what's going on.

 

[Altr0n]

The command Attachprocess takes 2 arguments. First is the pid, as you already specified. And second is the patchAddress, which is 0 by default thus resulting in the protectRemoteMemory error.

Spoiler

Anyways, I haven't messed that much with breakpoints yet, but I found this: https://gbatemp.net/threads/release...-debugger-for-n3ds.384858/page-4#post-6055914 Maybe this helps you.

Using your version of the NTRDebugger are you able to attach to any games that are running from a cartridge?

Just curious at this point because all of my games give me the same error even when I specify the memory regions.