[TEST RTE] Castlevania HD XBLA TU2

[optantic]

Not sure if this the right place to post this, sorry if it's not.

Could some test this on Castlevania HD XBLA TU2 with at least 3 DLC characters installed
(tested on ALL DLCs installed, 6 extra characters, 5 extra stages, and 2 BGM). Address Range will be different if NO DLC installed.

Castlevania HD XBLA TU2 RTE v03
Castlevania HD_TU2_RTEv03.rar

Note: Poke Stats before GP, otherwise will need to reload RTE
Thanks to pureiso for isoLib!

Mirror Link
http://www.mediafire.com/download.php?bfn7025mmg9bti1

1. Enter Xbox360 IP and click Connect

2. After loading Save, poke on the button and wait ~10 seconds

3. check Stats at Main Menu

4. Start Chapter

Note: Stats are not Saved after game is turned off or Exit Game while in Chapter

Link to All DLCs and TU2:
http://www.360haven.com/forums/showt...-dlcs-tu2.html

using System;
using System.Collections.Generic;
using System.ComponentModel;
using System.Data;
using System.Drawing;
using System.Linq;
using System.Text;
using System.Windows.Forms;


namespace Castlevania_HD_XBLA_TU2
{
public partial class Form1 : Form
{
//Global variable for real time memory - so we can share between functions
private ISOLib.XBDMPackage.RealTimeMemory _rtm;
private uint[] _addresses;
private bool _flag = false;

public Form1()
{
InitializeComponent();
}

private void connectButton_Click(object sender, EventArgs e)
{
//Pointer Range, start address and dump length
_rtm = new ISOLib.XBDMPackage.RealTimeMemory(ipAddressTextBox .Text, 0xC7470000, 0x80000);

if (_rtm.Connect())
{

MessageBox.Show(this,string.Format("Connected"), string.Format("Castlevania HD XBLA TU2"), MessageBoxButtons.OK, MessageBoxIcon.Information);
pokeMemoryButton.Enabled = true;

toolStripStatus.Text = string.Format("Connected");
}
else
{
MessageBox.Show(this, string.Format("Already Connected or No Connection"), string.Format("Castlevania HD XBLA TU2"), MessageBoxButtons.OK, MessageBoxIcon.Information);
}
}



private void pokeMemoryButton_Click(object sender, EventArgs e)
{
System.Threading.Thread oThread = new System.Threading.Thread(PokeMemory);

oThread.Start();
}

private void PokeMemory()
{

CheckForIllegalCrossThreadCalls = false;
try
{
if (_flag)//if you have the addresses already
_rtm.Poke(_addresses[0] + 0x68, "43C80000");
else
{
toolStripStatus.Text = string.Format("Estimate 35 seconds...");
toolStripStatus.Invalidate();

_addresses = _rtm.FindUIntOffset("09536F6D61204372757A006F72726 9730017029400000000");

toolStripStatus.Text = string.Format("Connected");
toolStripStatus.Invalidate();

_rtm.Poke(_addresses[0] + 0x68, "43C80000");//SOMA
_rtm.Poke(_addresses[0] + 0x6C, "48000000");
_rtm.Poke(_addresses[0] + 0x70, "43000000");
_rtm.Poke(_addresses[0] + 0x74, "48000000");
_rtm.Poke(_addresses[0] + 0x78, "48000000");
_rtm.Poke(_addresses[0] + 0x7C, "48000000");
_rtm.Poke(_addresses[0] + 0x80, "48000000");
_rtm.Poke(_addresses[0] + 0x390, "43C80000");//ALUCARD
_rtm.Poke(_addresses[0] + 0X394, "48000000");
_rtm.Poke(_addresses[0] + 0x398, "43000000");
_rtm.Poke(_addresses[0] + 0x39C, "48000000");
_rtm.Poke(_addresses[0] + 0x3A0, "48000000");
_rtm.Poke(_addresses[0] + 0x3A4, "48000000");
_rtm.Poke(_addresses[0] + 0x3A8, "48000000");
_rtm.Poke(_addresses[0] + 0x6B8, "43C80000");//JOHATHAN
_rtm.Poke(_addresses[0] + 0x6BC, "48000000");
_rtm.Poke(_addresses[0] + 0x6C0, "43000000");
_rtm.Poke(_addresses[0] + 0x6C4, "48000000");
_rtm.Poke(_addresses[0] + 0x6C8, "48000000");
_rtm.Poke(_addresses[0] + 0x6CC, "48000000");
_rtm.Poke(_addresses[0] + 0x6D0, "48000000");
_rtm.Poke(_addresses[0] + 0x9E0, "43C80000");//Julius
_rtm.Poke(_addresses[0] + 0x9E4, "48000000");
_rtm.Poke(_addresses[0] + 0x9E8, "43000000");
_rtm.Poke(_addresses[0] + 0x9EC, "48000000");
_rtm.Poke(_addresses[0] + 0x9F0, "48000000");
_rtm.Poke(_addresses[0] + 0x9F4, "48000000");
_rtm.Poke(_addresses[0] + 0x9F8, "48000000");
_rtm.Poke(_addresses[0] + 0xD08, "43C80000");//Richter
_rtm.Poke(_addresses[0] + 0xD0C, "48000000");
_rtm.Poke(_addresses[0] + 0xD10, "43000000");
_rtm.Poke(_addresses[0] + 0xD14, "48000000");
_rtm.Poke(_addresses[0] + 0xD18, "48000000");
_rtm.Poke(_addresses[0] + 0xD1C, "48000000");
_rtm.Poke(_addresses[0] + 0xD20, "48000000");
_rtm.Poke(_addresses[0] + 0x1030, "43C80000");//Shanoa
_rtm.Poke(_addresses[0] + 0x1034, "48000000");
_rtm.Poke(_addresses[0] + 0x1038, "43000000");
_rtm.Poke(_addresses[0] + 0x103C, "48000000");
_rtm.Poke(_addresses[0] + 0x1040, "48000000");
_rtm.Poke(_addresses[0] + 0x1044, "48000000");
_rtm.Poke(_addresses[0] + 0x1048, "48000000");
_rtm.Poke(_addresses[0] + 0x1358, "43C80000");//Charlotte
_rtm.Poke(_addresses[0] + 0x135C, "48000000");
_rtm.Poke(_addresses[0] + 0x1360, "43000000");
_rtm.Poke(_addresses[0] + 0x1364, "48000000");
_rtm.Poke(_addresses[0] + 0x1368, "48000000");
_rtm.Poke(_addresses[0] + 0x136C, "48000000");
_rtm.Poke(_addresses[0] + 0x1370, "48000000");
_rtm.Poke(_addresses[0] + 0x1680, "43C80000");//Yoko
_rtm.Poke(_addresses[0] + 0x1684, "48000000");
_rtm.Poke(_addresses[0] + 0x1688, "43000000");
_rtm.Poke(_addresses[0] + 0x168C, "48000000");
_rtm.Poke(_addresses[0] + 0x1690, "48000000");
_rtm.Poke(_addresses[0] + 0x1694, "48000000");
_rtm.Poke(_addresses[0] + 0x1698, "48000000");
_rtm.Poke(_addresses[0] + 0x19A8, "43C80000");//Maria
_rtm.Poke(_addresses[0] + 0x19AC, "48000000");
_rtm.Poke(_addresses[0] + 0x19B0, "43000000");
_rtm.Poke(_addresses[0] + 0x19B4, "48000000");
_rtm.Poke(_addresses[0] + 0x19B8, "48000000");
_rtm.Poke(_addresses[0] + 0x19BC, "48000000");
_rtm.Poke(_addresses[0] + 0x19C0, "48000000");
_rtm.Poke(_addresses[0] + 0x1CD0, "43C80000");//Simon
_rtm.Poke(_addresses[0] + 0x1CD4, "48000000");
_rtm.Poke(_addresses[0] + 0x1CD8, "43000000");
_rtm.Poke(_addresses[0] + 0x1CDC, "48000000");
_rtm.Poke(_addresses[0] + 0x1CE0, "48000000");
_rtm.Poke(_addresses[0] + 0x1CE4, "48000000");
_rtm.Poke(_addresses[0] + 0x1CE8, "48000000");
_rtm.Poke(_addresses[0] + 0x1FF8, "43C80000");//FUMA
_rtm.Poke(_addresses[0] + 0x1FFC, "48000000");
_rtm.Poke(_addresses[0] + 0x2000, "43000000");
_rtm.Poke(_addresses[0] + 0x2004, "48000000");
_rtm.Poke(_addresses[0] + 0x2008, "48000000");
_rtm.Poke(_addresses[0] + 0x200C, "48000000");
_rtm.Poke(_addresses[0] + 0x2010, "48000000");


}

if (decimal.Parse(_rtm.Peek(_addresses[0] + 0x10, 0x04)) != 0) MessageBox.Show(this, string.Format("All Stats Successfully Changed"), string.Format("Castlevania HD XBLA TU2"), MessageBoxButtons.OK, MessageBoxIcon.Information);
else MessageBox.Show(this, string.Format("Poke Done"), string.Format("Castlevania HD XBLA TU2"), MessageBoxButtons.OK, MessageBoxIcon.Information);
}
catch (Exception ex)
{

MessageBox.Show(this, ex.Message, string.Format("Castlevania HD XBLA TU2"), MessageBoxButtons.OK, MessageBoxIcon.Information);
}


finally
{
_flag = false;
System.Threading.Thread.CurrentThread.Abort();
}
}
}
}

Thanks pureiso for ISOLib

[X360Quicky]

Nice optantic, I don't think I've seen you around for a little while, good to see you working on things. Do you mind me asking why the "35 second" delay? Curiosity is just damn nosy.

[optantic]

Trying to make my first RTE :)
I think it takes 35 seconds to dump the memory length 0x80000 and then search for the pointer and apply the values.

[fullmetal172]

not able to download this says its restricted for me for some reason

[optantic]

added mediafire link

[X360Quicky]

Trying to make my first RTE :)
I think it takes 35 seconds to dump the memory length 0x80000 and then search for the pointer and apply the values.

Oh OK, 35 seconds seems a bit long to me, you might want to go over your code. My halo 4 RTE (not released) does a search of memory length 0x200000 then searches for pointers, then checks the values stored, and applies my set values if the values match my checks, it tries to do this continuously every 1/4 of a second to make sure it's poking the correct location. The first search takes a maximum of 5 seconds (I plan to try to make it quicker), then it continuously does it automatically within a second, I've tested it by reloading the map which changes all the values, changing to other maps, and restarting the console, and it's doing it in the correct times.

Well done on your first RTE by the way, but like I said you may want to work on the timings.

[optantic]

Updated RTE to v02
1. lowered atk, strength since 9999 strength is overkilled, it'll stuck on Boss1 if it's killed before dropping down, soul attacks still does 9999 damages
2. lowered base HP to 400 since all traps still takes off 10% damage regardless how much HP you got

@X360Quicky, could it be faster if you're using xbdm.xex from dev kernel?
Maybe, you could try out the RTE if you have the game and see how long it takes to poke on your console, I've included the link to All DLCs and TU2 in the first post.
Or check out the coding (spoiler) and see what could be done to improve the speed?

[X360Quicky]

Updated RTE to v02
1. lowered atk, strength since 9999 strength is overkilled, it'll stuck on Boss1 if it's killed before dropping down, soul attacks still does 9999 damages
2. lowered base HP to 400 since all traps still takes off 10% damage regardless how much HP you got

@X360Quicky, could it be faster if you're using xbdm.xex from dev kernel?
Maybe, you could try out the RTE if you have the game and see how long it takes to poke on your console, I've included the link to All DLCs and TU2 in the first post.
Or check out the coding (spoiler) and see what could be done to improve the speed?

Lol everybody seems to be using this ISOLib. If I'm wrong with anything then correct me as I have never used ISOLib before, I just do things myself as always.
So..."_rtm = new ISOLib.XBDMPackage.RealTimeMemory(ipAddressTextBox .Text, 0xC7470000, 0x80000);" I assume this is to get debug access to the 360 through XBDM.dll, and the memory address and length to dump to find the base memory location to use poking activity? or maybe it does it manually through tcp?

but...what is this? "_addresses = _rtm.FindUIntOffset("09536F6D61204372757A006F72726 9730017029400000000");" is it finding the first occurrence, or all occurrences of the string from the memory dump from (memory address: 0xC7470000, length: 0x80000) to get the memory address(es) and storing it in a char array? because if it is then it's different to how I do things.

And then there is this: "_rtm.Poke(_addresses[0] + 0x68, "43C80000");//SOMA
what is that doing? poking the memory address of: (_addresses[0] + 0x68) to the value of: "43C80000"?
because if it is, wouldn't it make sense to do this: _rtm.Poke(_addresses[0] + 0x68, "43C8000048000000430000004800000048000000480000004 8000000"); ? so instead of poking 4 bytes of data 7 times wasting time, you could simply poke 28 bytes of data once! This would work as 0x68, 0x6C, 0x70, 0x74, 0x78, 0x7C, 0x80 are all 4 bytes apart and you was poking 4 bytes before so you was basically breaking up 28 bytes to do separately. Depending on how the dll is set up that code will work else you'd need to write it up yourself to poke 28 bytes instead of 4. You have a quite a lot that don't need poking so many times.

I'll try your RTE tomorrow, I'm on RGLoader so we'll se if it makes a difference, if not...
I don't have the game right now but I will try and get the game tomorrow, and compile something up and see what times I get.

My apologies for the long message. (I don't know how to do spoilers or anything on here lol.)