Register | Login | |||||
Main
| Memberlist
| Active users
| Calendar
| Chat
| Online users Ranks | FAQ | ACS | Stats | Color Chart | Search | Photo album |
| |
0 users currently in ROM Hacking. |
Acmlm's Board - I3 Archive - ROM Hacking - RAM to ROM | New poll | | |
Add to favorites | Next newer thread | Next older thread |
User | Post | ||
KeiiChi Kun Leever Learn some manners. Password changed to gibberish and IP banned. Since: 01-01-06 From: Sushi Bar Last post: 6292 days Last view: 6292 days |
| ||
I'm not sure whether this is actually possible, but I'm sure I recall someone writing a script for it somewhere. Right then, you know when you change something in the Memory Viewer in VBA, and it, say, changes the amount of lives you have? Is there any simple way of finding the ROM address for this value? You know, so you could change the amount of lives you start a game with? | |||
Ryusui Red Paragoomba Since: 06-15-06 Last post: 6398 days Last view: 6293 days |
| ||
There's probably a simpler way, but here's how I'd do it.
1. Get VBA-SDL-H. 2. Open the ROM and set a write breakpoint for the RAM address where the number of lives is stored. 3. When it breaks, go to vanilla VBA, open the disassembler and go to the line that VBA-SDL-H broke on. Look in the few lines of code above (VBA-SDL-H actually breaks on the line after the write) and see what line loads the number of lives. If it's a simple "mov rX #0x3" or some such, thank you Mario, your quest is over. Open the ROM, go to that position and change the instruction to the number of lives you want. 4. If it's not, though, find the load instruction that gets the number from the ROM. Go back to VBA-SDL-H, reset and set a THUMB breakpoint for that line. When it breaks, note the register values: the offset used by the load instruction should be the address you're looking for in the ROM. If it's not, odds are the routine is used for multiple purposes. Keep breaking until it gets the right value. |
|||
interdpth Mole MZM rapist Since: 11-18-05 Last post: 6279 days Last view: 6279 days |
| ||
Who knows you could get lucky and find DMA calls or such you could just swap byte the mem address and search for it if your lucky
like 8123456 becomes 56341208 same goes for mem addresses try that |
|||
KeiiChi Kun Leever Learn some manners. Password changed to gibberish and IP banned. Since: 01-01-06 From: Sushi Bar Last post: 6292 days Last view: 6292 days |
| ||
Thanks a lot |
Add to favorites | Next newer thread | Next older thread |
Acmlm's Board - I3 Archive - ROM Hacking - RAM to ROM | | |