help finding timer in elebits

Started by bradhig, November 26, 2008, 11:43:04 PM

Previous topic - Next topic

bradhig

in the jap version the timer code was

0407B960 D0630010

how do you search the 04000000 memory range or is that the wrong one?

Aesteval

04000000 isn't the memory range.  04 is the code type, 07B960 is the offset from the current memory range.  In this case the location would be 8007B960.

bradhig

#2
I keep finding different addresses but poking them doesn't change the timer. I have searched the memory ranges in the drop down list.

I am searching ELEbits RELEA4

bradhig

I search every time a minutes passes.  9 minute ,then 8 minute but any addresses I find don't effect the timer. Am I searching the wrong way?

biolizard89

Quote from: bradhig on November 27, 2008, 01:46:00 AM
I search every time a minutes passes.  9 minute ,then 8 minute but any addresses I find don't effect the timer. Am I searching the wrong way?
Try an unknown search instead of searching for certain values.  I wouldn't be surprised if the timer is stored funkily.  I've seen software that stores times in deciseconds or other weird formats.  Even if it's stored in a weird format, an unknown search should find it.  However, it might be hard to find the value if it's on a pointer.

Panda On Smack

Quote from: bradhig on November 26, 2008, 11:43:04 PM
in the jap version the timer code was

0407B960 D0630010

how do you search the 04000000 memory range or is that the wrong one?

It looks like an ASM overwrite so whatever is at 8007B960 isn't a value but a function

Ask the person who made the jap code what value is usually at the address 8007B960

Then you can search for whatever they give you in the 80 range to find the same asm

bradhig

Quote from: biolizard89 on November 27, 2008, 05:01:17 AM
Quote from: bradhig on November 27, 2008, 01:46:00 AM
I search every time a minutes passes.  9 minute ,then 8 minute but any addresses I find don't effect the timer. Am I searching the wrong way?
Try an unknown search instead of searching for certain values.  I wouldn't be surprised if the timer is stored funkily.  I've seen software that stores times in deciseconds or other weird formats.  Even if it's stored in a weird format, an unknown search should find it.  However, it might be hard to find the value if it's on a pointer.

I tried that but when I use search on mem2 which is 56 blocks long wired sometimes crashes.

Panda On Smack

Just ask ZiT what's normally at that address, it's very easy

ZiT

TIME STOP

Address:80EA1B94

ASM:8007B960:  D0230010 stfs f1,16(r3)   

CHANGE ASM:8007B960 D0630010   stfs f3,16(r3)      

Thank You :cool:

Panda On Smack

Quote from: ZiT on November 28, 2008, 10:41:07 AM
TIME STOP

Address:80EA1B94

ASM:8007B960:  D0230010 stfs f1,16(r3)   

CHANGE ASM:8007B960 D0630010   stfs f3,16(r3)      

Thank You :cool:

See :)

Thanks ZiT

bradhig, look for the 32bit value D0230010 in the 80 range, hopefully you wont get many results

Phancakes

I'm also new to this...

Where do I add these codes that you're posting? I'm looking for a hack on AC:CF that will give me infinite money. :-[

Panda On Smack

Quote from: Phancakes on November 28, 2008, 02:58:42 PM
I'm also new to this...

Where do I add these codes that you're posting? I'm looking for a hack on AC:CF that will give me infinite money. :-[

If you have homebrew channel installed you can luanch gecko os and it uses the codes

there is a thread all about AC:CF with a inf money code

bradhig

Okay I search for d0230010 when I first start a level with the level info on the screen and the timer at 7:00 then as the timer ticks down I search with less then but I am stuck with 16 codes. I don't know if I am even searching the right way I am searching for 32 bits codes.  This wouldn't be a problem if code requests would get answered instead 20 million people wanting to hack codes for ssbb. Not to mention the game ,wired ,sometimes my pc keep crashing.

Aesteval

Quote from: bradhig on November 28, 2008, 06:23:37 PM
Okay I search for d0230010 when I first start a level with the level info on the screen and the timer at 7:00 then as the timer ticks down I search with less then but I am stuck with 16 codes. I don't know if I am even searching the right way I am searching for 32 bits codes.  This wouldn't be a problem if code requests would get answered instead 20 million people wanting to hack codes for ssbb. Not to mention the game ,wired ,sometimes my pc keep crashing.

Unless I'm completely misunderstanding what ZiT said, the value of D0230010 should be remaining constant as the timer counts down.  It should be a string of code that changes the value of the timer, as opposed to being the actual timer itself.  So you want to search for D0230010, find a site that remains at that value no matter what else changes, change that value to D0630010, and that should then stop the timer countdown.

Panda On Smack

Quote from: Aesteval on November 28, 2008, 06:42:19 PMUnless I'm completely misunderstanding what ZiT said, the value of D0230010 should be remaining constant as the timer counts down.  It should be a string of code that changes the value of the timer, as opposed to being the actual timer itself.  So you want to search for D0230010, find a site that remains at that value no matter what else changes, change that value to D0630010, and that should then stop the timer countdown.

Exactly