Is there a way to find out what instructions write to an address?

ThePerplexedOne

Active Member
OP
Newcomer
Joined
Nov 30, 2021
Messages
40
Trophies
0
Age
29
XP
147
Country
United Kingdom
I'm trying to write my own cheat codes to get some practice in. It's easy enough finding pointers for certain addresses and creating codes for those.

Currently I am using Edizon and Noexes, and PointerSearcherSE

But so far I can't figure out how to find specific instructions inside functions. E.g. instead of finding the address of health and changing the value, I want to be able to find the address of health, then find out what instructions are writing to it, and then modify those instructions. This is easy enough in PC hacking, because Cheat Engine is such a powerful tool with features like that.

So far, I cannot find any strings using IDA that are helpful to me.
 

FAST6191

Techromancer
Editorial Team
Joined
Nov 21, 2005
Messages
36,798
Trophies
3
XP
28,375
Country
United Kingdom
I have been following some of the Atmosphere GDB bridges/stubs/whatever for cheat making for the Switch. Several of those appear to support breakpoints (break on write being one of those). Specifics of that I am less familiar with though. IDA tended to be the weapon of choice, but will tend to also want to be the full fat version rather than the older free X86 one. https://gbatemp.net/threads/atmospheres-gdb.602435/
Whether you can twist something like https://wrongbaud.github.io/posts/ghidra-debugger/ , GNU/GCC or possibly Radare2 to work for it I don't know.

You also have the option of trying disassembly, however I am not sure how that would shake out with the Switch's use of ASLR and more dynamic allocation of memory even without that compared to older devices where even ctrl F in a text editor would do for you in a considerable amount of cases.
 
  • Like
Reactions: mathew77

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • No one is chatting at the moment.
    BigOnYa @ BigOnYa: After watching, that I feel like I'm on them already +1