This video shows how to use IDA Pro 7.6 as a debugger for Nintendo Switch games in order to create ASM Cheats, even if the MAIN file of the game is completely unlabeled. The video also goes over Zero-Level Pointers, a concept I forgot to go over in Part 3 of the Video Series. Finally, this video also makes some corrections to Part 4 of the Video Series, as the MOV instruction was misrepresented.
Thanks to @Eiffel2018 for his posts. I used his posts from here and here in order to make this video.

 

[binkinator]

This video shows how to use IDA Pro 7.6 as a debugger for Nintendo Switch games in order to create ASM Cheats, even if the MAIN file of the game is completely unlabeled. The video also goes over Zero-Level Pointers, a concept I forgot to go over in Part 3 of the Video Series. Finally, this video also makes some corrections to Part 4 of the Video Series, as the MOV instruction was misrepresented.
Thanks to @Eiffel2018 for his posts. I used his posts from here and here in order to make this video.

My god…there‘s hours and hours of content here.

Thanks for putting it all together!

Down the rabbit hole I go.

 

[HalfScoper]

It's a nice rabbit hole but I got metaphorically stuck in it after video 2, sigh

 

[mrdude]

WOW, really in depth tutorials, well done - these are great!

 

[absso]

I must start by saying that I work with the game [Pokemon Legends, Arceus v1.1.1(v262144) TID=01001F5010DFA000].

first question: how to find the master code of a game and more specifically in the pokemon arceus game?

second question:

(trying to figure out how to do a 1hit kill ) AND GOD mod
Here are the steps I take to achieve my manipulation:

1. Hp search (address **64 BIT **) with Edizion SE in a battle, performs a search each time my pokemon is hit.

2. Once an address is found, press the right stick to display in memory and take note of the numbers between the brackets.


3.disconnect Edizion SE and connect IDA Pro 7.6

4. set the parameters as follows: *see image 1-2*

5.search with ladress find on Edizon SE (memory).(see screenshoot *3*)

6.put a breakpoint on the address.(screenshoot *4*)

7. Press play and trigger the breaking point upon enemy attack.

8. got the instruction (*picture 5*)

9. type get info and subtract Main - Address
(*picture 6*)

10. open a second IDA PRO and open the Main file. (*PICTURE 7*)
set to ARM

problem: when i try to jump to my adress in my second IDA PRO i got no results... (*PICTURE 8*)

maybe its because my value is in 32 bit not 64 bit?

also can someone tell me what i should do after Step 8 (i try to NOP the instruction but nothing happend...so i was like oh maybe its a multiple pointer but when try the same breakepoint with the NOP active i got nothing. It Says : breakingPoint Hit but i got the same adress. If Anyone want to help me on the forum or teach me i have discord : Absso#9992. Thank you

 

[masagrator]

problem: when i try to jump to my adress in my second IDA PRO i got no results... (*PICTURE 8*)

This is because you're pasting ASLRed address while IDA has fixed start address at 0x7100000000.
You need to subtract ASLR main start address from the address you have and add result to 0x7100000000.
And since you closed the game, those addresses will be now different. You must to do it in one session.

 

[absso]

This is because you're pasting ASLRed address while IDA has fixed start address at 0x7100000000.
You need to subtract ASLR main start address from the address you have and add result to 0x7100000000.
And since you closed the game, those addresses will be now different. You must to do it in one session.

Are you talking about screenshot 6? Because I subtract the value ?

 

[absso]

This is because you're pasting ASLRed address while IDA has fixed start address at 0x7100000000.
You need to subtract ASLR main start address from the address you have and add result to 0x7100000000.
And since you closed the game, those addresses will be now different. You must to do it in one session.

Also the game is still open so it's never too late

 

[absso]

This is because you're pasting ASLRed address while IDA has fixed start address at 0x7100000000.
You need to subtract ASLR main start address from the address you have and add result to 0x7100000000.
And since you closed the game, those addresses will be now different. You must to do it in one session.

Fix it! but now im here(picture) what is the next step? because its not like the video..,so what should i do? please?

 

[absso]

This is because you're pasting ASLRed address while IDA has fixed start address at 0x7100000000.
You need to subtract ASLR main start address from the address you have and add result to 0x7100000000.
And since you closed the game, those addresses will be now different. You must to do it in one session.

Do you have discord?

 

[masagrator]

Do you have discord?

I'm not responsible for this guide. I didn't even watch it to know what are you talking about.
Ask author and stop quoting me with every post.

 

[ReclaimerShawn]

Fix it! but now im here(picture) what is the next step? because its not like the video..,so what should i do? please?

You don't have room to put a custom value in, but you could always NOP the STR instruction you got and see what happens. Maybe it makes both you and the opponent invincible? Maybe it insta-kills both of you? If you find it effects both you and your opponent, which it likely will, give it a button activator so you can turn it off/on at your turn and then toggle it at your opponent's turn.

This way, if it's a god mode code, it only makes you invincible. Or, if it's an insta-kill code, only insta-kills your opponent.

 

[absso]

You don't have room to put a custom value in, but you could always NOP the STR instruction you got and see what happens. Maybe it makes both you and the opponent invincible? Maybe it insta-kills both of you? If you find it effects both you and your opponent, which it likely will, give it a button activator so you can turn it off/on at your turn and then toggle it at your opponent's turn.

This way, if it's a god mode code, it only makes you invincible. Or, if it's an insta-kill code, only insta-kills your opponent.

Thanks man thats exactly what I did! Nice work and thank you for your awnser