NitroHax: Difference between revisions

	Nitro Hax
	File:Nitrohaxds.png
General
Author(s)	Chishm
Type	Other
Version	0.94
Licence	GPLv3
Links
	Download
	Website
	Source

Revision as of 11:50, 8 September 2021

Installation

Download and extract file.

DLDI patch .nds file and copy it to the root directory of the card.

Place an Action Replay XML file on your media device.

User guide

Start NitroHax.nds from your media device. One of the following will be loaded automatically if it is found (in order of preference):

cheats.xml in the current directory
/NitroHax/cheats.xml
/data/NitroHax/cheats.xml
/cheats.xml

If no file is found, browse for and select a file to open. Remove your media device if you want to. Remove any card that is in Slot-1.

Insert the DS game into Slot-1, choose the cheats you want to enable.

Some cheats are enabled by default and others may be always on. This is specified in the XML file. When done, exit the cheat menu. The game will then start with cheats running.

Custom Code Types

In addition to the standard Action Replay DS code types described on EnHacklopedia's Action Replay DS page, Nitro Hax supports the following custom codes.

CF000000 00000000

Code used internally to specify the end of the cheat code list. It does not need to be specified manually.

CF000001 xxxxxxxx

Relocate cheat engine to address xxxxxxxx. The cheat engine and all data are moved to the given address, which should be accessible from the ARM7.

CF000002 xxxxxxxx

Change hook address to xxxxxxxx. The hook should be a function pointer that is called regularly. By default the ARM7's VBlank interrupt handler is hooked. This code overrides the default.

C100000x yyyyyyyy

Call a function with between 0 and 4 arguments. The argument list follows this code, which has the parameters:

x - Number of arguments (0 - 4)
yyyyyyyy - Address of function

For example, to call a function at 0x02049A48 with the three arguments r0 = 0x00000010, r1 = 0x134CBA9C, and r2 = 0x12345678:

C1000003 02049A48
00000010 134CBA9C
12345678 00000000

C200000x yyyyyyyy

Run ARM or THUMB code stored in the cheat list:

x - 0 = ARM mode, 1 = THUMB mode
yyyyyyyy - Length of function in bytes

For example below will run AAAAAAAA BBBBBBBB CCCCCCCC in ARM mode, the E12FFF1E (bx lr) is needed at the end to return to the cheat engine:

C2000000 00000010
AAAAAAAA BBBBBBBB
CCCCCCCC E12FFF1E

C4000000 xxxxxxxx

Provide 4 bytes of scratch space to safely store data. Sets the offset register to point to the first word of this code. Storing data at [offset+4] will save over the top of xxxxxxxx.

C5000000 xxxxyyyy

Each time the cheat engine is executed, the counter is incremented by 1. If (counter & yyyy) == xxxx then execution status is set to true, else it is set to false. Based on Trainer Toolkit code.

C6000000 xxxxxxxx

Stores the offset register to the address xxxxxxxx. Based on Trainer Toolkit code.

D400000x yyyyyyyy

Performs the operation Data = Data ? yyyyyyyy where ? is determined by x as follows:

0 - add
1 - or
2 - and
3 - xor
4 - logical shift left
5 - logical shift right
6 - rotate right
7 - arithmetic shift right
8 - multiply

For codes begining with 3-9 or A (if-type codes), the offset register can be used for address calculations. If the lowest bit of the code's address is set then the offset is added to the address. If the address is 0x00000000 then the offset is used instead.

Controls

A - Open a folder or toggle a cheat enabled

B - Go up a folder or exit the cheat menu if at the top level

X - Enable all cheats in current folder

Y - Disable all cheats in current folder

L - Move up half a screen

R - Move down half a screen

Up - Move up one line

Down - Move down one line

Start - Start the game

Media

DS Homebrew: Installing/Using NitroHax (CalcProgrammer1)

Credits

Thanks to (in no particular order):

Pink-Lightning - Original skin (v0.5-0.82). bLAStY - Memory dumps. cReDiAr - Last crucial step for running DS Cards. Parasyte - Tips for hooking the game automagically. kenobi - Action Replay code document. Darkain - Memory and cache clearing code. Martin Korth - GBAtek. Deathwind / WinterMute - File menu code (v0.2 - v0.4). Everyone else who helped me along the way.

Big thanks to Datel (CodeJunkies) for creating the original Action Replay and its cheats.

@@ Line 38: / Line 38: @@
 In addition to the standard Action Replay DS code types described on [http://doc.kodewerx.org/hacking_nds.html#arcodetypes EnHacklopedia's Action Replay DS page], Nitro Hax supports the following custom codes.
-  CF000000 00000000 (Code list end.)
+  CF000000 00000000
 Code used internally to specify the end of the cheat code list. It does not need to be specified manually.
-  CF000001 xxxxxxxx (Relocate cheat engine.)
+  CF000001 xxxxxxxx
-Relocate the cheat engine to address xxxxxxxx. The cheat engine and all data are moved to the given address, which should be accessible from the ARM7.
+Relocate cheat engine to address xxxxxxxx. The cheat engine and all data are moved to the given address, which should be accessible from the ARM7.
-  CF000002 xxxxxxxx (Hook address.)
+  CF000002 xxxxxxxx
-Change the hook address to xxxxxxxx. The hook should be a function pointer that is called regularly.
+Change hook address to xxxxxxxx. The hook should be a function pointer that is called regularly. By default the ARM7's VBlank interrupt handler is hooked. This code overrides the default.
-By default the ARM7's VBlank interrupt handler is hooked. This code overrides the default.
-  C100000x yyyyyyyy (Call function with arguments.)
+  C100000x yyyyyyyy
 Call a function with between 0 and 4 arguments. The argument list follows this code, which has the parameters:
 * x - Number of arguments (0 - 4)
 * yyyyyyyy - Address of function
-For example, to call a function at 0x02049A48 with the three arguments r0 = 0x00000010, r1 = 0x134CBA9C, and r2 = 0x12345678, you would use:
+For example, to call a function at 0x02049A48 with the three arguments r0 = 0x00000010, r1 = 0x134CBA9C, and r2 = 0x12345678:
   C1000003 02049A48
   00000010 134CBA9C
   12345678 00000000
-  C200000x yyyyyyyy (Run ARM/THUMB code.)
+  C200000x yyyyyyyy
 Run ARM or THUMB code stored in the cheat list:
 * x - 0 = ARM mode, 1 = THUMB mode
 * yyyyyyyy - Length of function in bytes
-For example:
+For example below will run AAAAAAAA BBBBBBBB CCCCCCCC in ARM mode, the E12FFF1E (bx lr) is needed at the end to return to the cheat engine:
   C2000000 00000010
   AAAAAAAA BBBBBBBB
   CCCCCCCC E12FFF1E
-This will run the code AAAAAAAA BBBBBBBB CCCCCCCC in ARM mode. The E12FFF1E (bx lr) is needed at the end to return to the cheat engine.
+  C4000000 xxxxxxxx
+Provide 4 bytes of scratch space to safely store data. Sets the offset register to point to the first word of this code. Storing data at [offset+4] will save over the top of xxxxxxxx.
-  C4000000 xxxxxxxx (Scratch space.)
-Provide 4 bytes of scratch space to safely store data. Sets the offset register to point to the first word of this code.
-Storing data at [offset+4] will save over the top of xxxxxxxx.
-  C5000000 xxxxyyyy (Counter.)
+  C5000000 xxxxyyyy
-Each time the cheat engine is executed, the counter is incremented by 1.
+Each time the cheat engine is executed, the counter is incremented by 1. If (counter & yyyy) == xxxx then execution status is set to true, else it is set to false. Based on Trainer Toolkit code.
-If (counter & yyyy) == xxxx then execution status is set to true, else it is set to false. Based on Trainer Toolkit code.
-  C6000000 xxxxxxxx (Store offset.)
+  C6000000 xxxxxxxx
-Stores the offset register to the address xxxxxxxx. Based on Trainer Toolkit code
+Stores the offset register to the address xxxxxxxx. Based on Trainer Toolkit code.
-  D400000x yyyyyyyy (Dx Data operation.)
+  D400000x yyyyyyyy
 Performs the operation Data = Data ? yyyyyyyy where ? is determined by x as follows:
 * 0 - add