ROM Hack Cheat Codes AMS and Sx Os, Add and Request

alexj9626

Well-Known Member
Member
Joined
Oct 2, 2016
Messages
788
Trophies
0
Age
34
XP
1,512
Country
Panama
So now that 3 Houses is out, would like to know if we can get a hack that gets Riding/Flying/Armour lvls to the max, or at least level up everytime we teach or something like that. It is kinda a pain in the ass to get them up. Would love it.
 
  • Like
Reactions: Agusto101

dsrules

Well-Known Member
Member
Joined
Sep 20, 2005
Messages
8,705
Trophies
2
XP
6,273
Country
Alright I am going to write this as I go. So I am redoing the search again.
Right click first line in main, click pointer search main.
Right click first mutable main address, click pointer search min.
Right click last mutable main, click pointer search max.
Go to search, choose 32 bit. Put value in. Click convert decimal to hex. Find address.
Edit 1.
Address is 7339fa1090.
Put that in to my pointer search in address.
Choose my ram dump from initial dump.
Choose offset of 00000F00 and depth of 3. Threads at 4. Main is at 0664E04000.
Click search.
Edit 2.
Restarted with a depth of 2. It wasnt getting past the first couple of addresses with a depth of 3.
Ended up with several hundred options.
Tried to put the first 5 in sx os cheat builder and get an error of non negative number required.
I said hundreds, it's more like thousands now that I'm getting into it.
reload the stage and search again to kill off more redundant results?
 

Falo

Well-Known Member
Member
Joined
Jul 22, 2012
Messages
680
Trophies
2
XP
2,627
Country
Germany
Cheat Engine can be used against memory dumps, so yes if you know enough, you could find pointer via cheat engine, but maybe you should consider Ida Pro, the game has all the debug symbols left inside...

Here a few things for you to try out (i don't have the game installed)

this is for "LEGO MARVEL Super Heroes 2 (EUR) - Update 6 (v1.0.6) [01007690040A0800]"

Code:
build in cheat codes, 0xFF = -1 = disabled
.data:0000000003F40018 CD CC 4C 3D CHEAT_ICERINK_FRICTION DCD 0x3D4CCCCD   ; DATA XREF: MechContext::ProcessMovementAndHeading(ContextBehaviourPacket &):loc_AC7744↑r
.data:0000000003F4001C FF          LEGOCHEAT_DETONATORX6 DCB 0xFF          ; DATA XREF: .rodata:0000000002CEDF28↑o
.data:0000000003F4001D FF          LEGOCHEAT_MAGNETMOVE DCB 0xFF           ; DATA XREF: Hang_SetTargetMom(MechCharacter *,ushort,LegoGamePad *,float,NUVEC *)+15C↑r
.data:0000000003F4001E FF          LEGOCHEAT_EXTRAHEARTS DCB 0xFF          ; DATA XREF: GetMaxHitPoints(MechCharacter *)+24↑r
.data:0000000003F4001F FF          LEGOCHEAT_ARMOURPLATING DCB 0xFF        ; DATA XREF: .rodata:0000000002A71580↑o
.data:0000000003F40020 FF          LEGOCHEAT_MAGIC_DARKSIDE DCB 0xFF       ; DATA XREF: LegoMagic::CanUseMagicObject(MechCharacter *,GizmoMagic *)+34↑r
.data:0000000003F40021 FF          LEGOCHEAT_MAGIC_PULL DCB 0xFF           ; DATA XREF: MagicPushed_SetTargetMom(MechCharacter *,ushort,LegoGamePad *,float,NUVEC *)+AC↑r
.data:0000000003F40022 FF          LEGOCHEAT_SUPERZAPPER DCB 0xFF          ; DATA XREF: InitGameAfterConfig(void)+788↑w
.data:0000000003F40023 FF          LEGOCHEAT_SUPERASTROMECH DCB 0xFF       ; DATA XREF: InitGameAfterConfig(void)+794↑w
.data:0000000003F40024 FF          LEGOCHEAT_SUPERDETONATORS DCB 0xFF      ; DATA XREF: PartKill_StickyBomb(PART *,int)+220↑r
.data:0000000003F40025 FF          LEGOCHEAT_INFINITETORPEDOS DCB 0xFF     ; DATA XREF: InitGameAfterConfig(void)+7B0↑w
.data:0000000003F40026 FF          LEGOCHEAT_NICKNAMES DCB 0xFF            ; DATA XREF: .rodata:0000000002C18088↑o
.data:0000000003F40027 FF          LEGOCHEAT_MAXBOOMERANGS DCB 0xFF        ; DATA XREF: .rodata:0000000002CB87B0↑o
.data:0000000003F40028 FF          LEGOCHEAT_FASTBOOMERANGS DCB 0xFF       ; DATA XREF: MechBoomerangs::Release(MechCharacter &,TargetArray &,BoomerangInfo const&,VuMtx const*,GizItem *)+78↑r
.data:0000000003F40029 FF          LEGOCHEAT_MAXBOOMERANGDAMAGE DCB 0xFF   ; DATA XREF: MechCharacterInterface::HitByBoomerang(Boomerang *,bool)+1D4↑r
.data:0000000003F4002A FF          LEGOCHEAT_SUPERDRAGBOMB DCB 0xFF        ; DATA XREF: InitGameAfterConfig(void)+7CC↑w
.data:0000000003F4002B FF          LEGOCHEAT_CABLE_INSTANTZAP DCB 0xFF     ; DATA XREF: InitGameAfterConfig(void)+7DC↑w
.data:0000000003F4002C FF          LEGOCHEAT_DISARM DCB 0xFF               ; DATA XREF: InitGameAfterConfig(void)+7EC↑w
.data:0000000003F4002D FF          LEGOCHEAT_IMMUNETOPHOBIA DCB 0xFF       ; DATA XREF: MechPhobiaContext::CanEnterPhobia(MechCharacter &,MechPhobiaAreaBase *,bool)+34↑r
.data:0000000003F4002E FF          LEGOCHEAT_SNAKEWHIP DCB 0xFF            ; DATA XREF: GizmoGrappleManager::Draw(float,ClassManager_RenderingPriority)+38↑r
.data:0000000003F4002F FF          LEGOCHEAT_BREATHEUNDERWATER DCB 0xFF    ; DATA XREF: .rodata:0000000002BFE4B0↑o
.data:0000000003F40030 FF          LEGOCHEAT_COLLECTGHOSTSTUDS DCB 0xFF    ; DATA XREF: CollectCoin(WorldInfo_DONOTUSE *,NUVEC const*,int,int,MechCharacter *,bool,int)+64↑r
.data:0000000003F40031 FF          LEGOCHEAT_SUPERSTRENGTH DCB 0xFF        ; DATA XREF: .rodata:00000000029E5690↑o
.data:0000000003F40032 FF          LEGOCHEAT_ENEMYPAWNONSTUDSDEATH DCB 0xFF

COINMAGNETSCALE: main+0x3F190D8 default: 0x40400000 //3.0
ScoreMultiplier: main+0x3F190DC default: 2
AddStudsAverageValue: main+0x3F190E0 default: 0x48742400 //250000.0
dvMaxStudsPerFrame: main+0x36E8C64 default: 0x989680 //10000000
dvInitStuds: main+0x36E8C68 default: 0x7DD //2000

FULLDEBUGTOGGLE: main+0x5EDD6E8 (4 byte)
plr_lastpos: main+5EDD6C0 (vector3 float)
ShowPlayerCoordinate: main+0x5EDD6DC (2 byte)
PlayerHeartPos: main+0x5EDD4E0

MechCharacter::GetHitPoints(MechCharacter *__hidden this):
.text:0000000000A91178 00 C4 47 B9                 LDR             W0, [X0,#0x7C4] ; Load from Memory
.text:0000000000A9117C C0 03 5F D6                 RET                     ; Return from Subroutine

MechCharacter::GetMaxHitPoints(MechCharacter *__hidden this)
.text:0000000000A9118C 00 C0 47 B9                 LDR             W0, [X0,#0x7C0] ; Load from Memory
.text:0000000000A91190 C0 03 5F D6                 RET                     ; Return from Subroutine

you could try to change the GetHitPoints into GetMaxHitPoints, like this:

[Infinite Health (On)]
04000000 00A91178 B947C000
[Infinite Health (Off)]
04000000 00A91178 B947C400
 
Last edited by Falo,
  • Like
Reactions: Rabita

jialeyne19

Well-Known Member
Member
Joined
Dec 22, 2016
Messages
176
Trophies
0
XP
691
Country
Philippines
i never searched for it, this is the address where the game reads the jetpack from.

Code:
X19 = Main Pointer
0xE68 = Jetpack Offset

.text:00000000005043E8 68 6A 4E BD                 LDR             S8, [X19,#0xE68] ; Load from Memory
...
.text:0000000000504434 B7 E4 00 90                 ADRP            X23, #_Multiplayer@PAGE ; Address of Page
.text:0000000000504438 F7 AE 47 F9                 LDR             X23, [X23,#_Multiplayer@PAGEOFF] ; Load from Memory
.text:000000000050443C E8 02 40 39                 LDRB            W8, [X23] ; Load from Memory
.text:0000000000504440 B6 FD 01 B0                 ADRP            X22, #byte_44B9FC0@PAGE ; Address of Page
.text:0000000000504444 D6 02 3F 91                 ADD             X22, X22, #byte_44B9FC0@PAGEOFF ; Rd = Op1 + Op2
.text:0000000000504448 C8 00 00 34                 CBZ             W8, loc_504460 ; Compare and Branch on Zero
.text:000000000050444C C9 CA 41 F9                 LDR             X9, [X22,#(pMain - 0x44B9FC0)] ; Load from Memory
.text:0000000000504450 3F 01 13 EB                 CMP             X9, X19 ; Set cond. codes on Op1 - Op2
.text:0000000000504454 60 00 00 54                 B.EQ            loc_504460 ; Branch
.text:0000000000504458 E9 1B 09 32                 MOV             W9, #0x3F800000 ; Rd = Op2

in code:
v3 = *(float *)(this + 0xE68);
...
  if ( *Multiplayer && pMain != this)
    *(_DWORD *)(this + 0xE68) = 0x3F800000;
   
If Multiplayer is active and pMain is diffrent from the offline game, then jetpack is set to 0x3F800000.

This code is 100% identical to the pc version, they only change
v3 = *(float *)(this + 0xE68);
to
*(float *)(this + 0xE68) = 0x3F800000;
v3 = *(float *)(this + 0xE68);

it also never worked for me.
it work for me iam on 7.0.1 atmosphere 0.9.2 not sure if this as ps vita firmware version i create codes from 3.60 version. it worked on my 3.65 version but not work on 3.68

--------------------- MERGED ---------------------------

Can i get your txt file when i put in manually it doesnt stick in atmos just other cheats i have and sxos gives parsing error
here bro
 

Attachments

  • 010075000C608000.rar
    548 bytes · Views: 155

Falo

Well-Known Member
Member
Joined
Jul 22, 2012
Messages
680
Trophies
2
XP
2,627
Country
Germany
Fire emblem Three houses cheats ? :-)
fire emblem three houses cheats please gold items and maybe exp thanks

The game is not even out yet....

Fire Emblem Three Houses - Update 0 (v1.0.0)

TitleId: 010055D009F78000
BuildId: CECF500CEA4C214C

Code:
[Zero Playtime]
580F0000 019CF6E0
780F0000 00023B50
640F0000 00000000 00000000

[Max Money]
580F0000 019CF6E0
780F0000 00023B54
640F0000 00000000 0098967F

[9 Activity Points (Bonding)]
580F0000 019CF6E0
780F0000 000249CF
610F0000 00000000 00000009

[9 Activity Points (Teaching)]
580F0000 019CF6E0
780F0000 000249D0
610F0000 00000000 00000009

[9 Activity Points (Battle)]
580F0000 019CF6E0
780F0000 000249D1
610F0000 00000000 00000009

Seams like this game has a new sdk log function (nn:: prepo:: PlayReport:: Add), this is how i found this pointer so fast, here all the values the game logs:

Character: 0x668, Size = 0x230 Byte, Count = 35
PlayTime = 0x22AE0 + 0x1070
Money = 0x22AE0 + 0x1074
Difficulty = 0x22AE0 + 0x1280 (0, 1, 2 or 3)
Gamestyle = 0x22AE0 + 0x1281 (0, 1 or 2)
Chapter = 0x23B5C
Route = 0x23D62
MapID = 0x23D64
InstructLevel = 0x249A8
InstructExp = 0x249BA
PlayLog_Wark = 0x24F03
PlayLog_Lecture = 0x24F04
PlayLog_ToBtl = 0x24F05
PlayLog_Rest = 0x24F06
PlayLog_Trnmnt = 0x24F07
PlayLog_Sing = 0x24F08
PlayLog_Lunch = 0x24F09
PlayLog_Cooking = 0x24F0A
PlayLog_Drill = 0x24F0B
PlayLog_Teaparty = 0x24F0C
PlayLog_SCOUT = 0x24F0D

I don't know yet what these values do, just started to play, but money and time code works.
 
Last edited by Falo,

alexj9626

Well-Known Member
Member
Joined
Oct 2, 2016
Messages
788
Trophies
0
Age
34
XP
1,512
Country
Panama
The game is not even out yet....

Fire Emblem Three Houses - Update 0 (v1.0.0)

TitleId: 010055D009F78000
BuildId: CECF500CEA4C214C

Thanks a lot! Would like to know if there is any way to get a skill level up anytime we instruct (going from C to C+ for example) or something like that, so Flying/Riding/Armour isnt that much of a pain in the ass.
Thanks again!
 

wangch

Well-Known Member
Member
Joined
Apr 12, 2019
Messages
132
Trophies
0
Age
30
XP
429
Country
United States
[引号=“Falo,POST:8726229,会员:310561”]欺骗引擎可以用来对付内存转储,所以是的,如果你知道的足够多,你可以通过欺骗引擎找到指针,但也许你应该考虑Ida Pro,游戏中所有的调试符号都留在了.

Here a few things for you to try out (i don't have the game installed)

this is for "LEGO MARVEL Super Heroes 2 (EUR) - Update 6 (v1.0.6) [01007690040A0800]"

Code:
build in cheat codes, 0xFF = -1 = disabled
.data:0000000003F40018 CD CC 4C 3D CHEAT_ICERINK_FRICTION DCD 0x3D4CCCCD   ; DATA XREF: MechContext::ProcessMovementAndHeading(ContextBehaviourPacket &):loc_AC7744↑r
.data:0000000003F4001C FF          LEGOCHEAT_DETONATORX6 DCB 0xFF          ; DATA XREF: .rodata:0000000002CEDF28↑o
.data:0000000003F4001D FF          LEGOCHEAT_MAGNETMOVE DCB 0xFF           ; DATA XREF: Hang_SetTargetMom(MechCharacter *,ushort,LegoGamePad *,float,NUVEC *)+15C↑r
.data:0000000003F4001E FF          LEGOCHEAT_EXTRAHEARTS DCB 0xFF          ; DATA XREF: GetMaxHitPoints(MechCharacter *)+24↑r
.data:0000000003F4001F FF          LEGOCHEAT_ARMOURPLATING DCB 0xFF        ; DATA XREF: .rodata:0000000002A71580↑o
.data:0000000003F40020 FF          LEGOCHEAT_MAGIC_DARKSIDE DCB 0xFF       ; DATA XREF: LegoMagic::CanUseMagicObject(MechCharacter *,GizmoMagic *)+34↑r
.data:0000000003F40021 FF          LEGOCHEAT_MAGIC_PULL DCB 0xFF           ; DATA XREF: MagicPushed_SetTargetMom(MechCharacter *,ushort,LegoGamePad *,float,NUVEC *)+AC↑r
.data:0000000003F40022 FF          LEGOCHEAT_SUPERZAPPER DCB 0xFF          ; DATA XREF: InitGameAfterConfig(void)+788↑w
.data:0000000003F40023 FF          LEGOCHEAT_SUPERASTROMECH DCB 0xFF       ; DATA XREF: InitGameAfterConfig(void)+794↑w
.data:0000000003F40024 FF          LEGOCHEAT_SUPERDETONATORS DCB 0xFF      ; DATA XREF: PartKill_StickyBomb(PART *,int)+220↑r
.data:0000000003F40025 FF          LEGOCHEAT_INFINITETORPEDOS DCB 0xFF     ; DATA XREF: InitGameAfterConfig(void)+7B0↑w
.data:0000000003F40026 FF          LEGOCHEAT_NICKNAMES DCB 0xFF            ; DATA XREF: .rodata:0000000002C18088↑o
.data:0000000003F40027 FF          LEGOCHEAT_MAXBOOMERANGS DCB 0xFF        ; DATA XREF: .rodata:0000000002CB87B0↑o
.data:0000000003F40028 FF          LEGOCHEAT_FASTBOOMERANGS DCB 0xFF       ; DATA XREF: MechBoomerangs::Release(MechCharacter &,TargetArray &,BoomerangInfo const&,VuMtx const*,GizItem *)+78↑r
.data:0000000003F40029 FF          LEGOCHEAT_MAXBOOMERANGDAMAGE DCB 0xFF   ; DATA XREF: MechCharacterInterface::HitByBoomerang(Boomerang *,bool)+1D4↑r
.data:0000000003F4002A FF          LEGOCHEAT_SUPERDRAGBOMB DCB 0xFF        ; DATA XREF: InitGameAfterConfig(void)+7CC↑w
.data:0000000003F4002B FF          LEGOCHEAT_CABLE_INSTANTZAP DCB 0xFF     ; DATA XREF: InitGameAfterConfig(void)+7DC↑w
.data:0000000003F4002C FF          LEGOCHEAT_DISARM DCB 0xFF               ; DATA XREF: InitGameAfterConfig(void)+7EC↑w
.data:0000000003F4002D FF          LEGOCHEAT_IMMUNETOPHOBIA DCB 0xFF       ; DATA XREF: MechPhobiaContext::CanEnterPhobia(MechCharacter &,MechPhobiaAreaBase *,bool)+34↑r
.data:0000000003F4002E FF          LEGOCHEAT_SNAKEWHIP DCB 0xFF            ; DATA XREF: GizmoGrappleManager::Draw(float,ClassManager_RenderingPriority)+38↑r
.data:0000000003F4002F FF          LEGOCHEAT_BREATHEUNDERWATER DCB 0xFF    ; DATA XREF: .rodata:0000000002BFE4B0↑o
.data:0000000003F40030 FF          LEGOCHEAT_COLLECTGHOSTSTUDS DCB 0xFF    ; DATA XREF: CollectCoin(WorldInfo_DONOTUSE *,NUVEC const*,int,int,MechCharacter *,bool,int)+64↑r
.data:0000000003F40031 FF          LEGOCHEAT_SUPERSTRENGTH DCB 0xFF        ; DATA XREF: .rodata:00000000029E5690↑o
.data:0000000003F40032 FF          LEGOCHEAT_ENEMYPAWNONSTUDSDEATH DCB 0xFF

COINMAGNETSCALE: main+0x3F190D8 default: 0x40400000 //3.0
ScoreMultiplier: main+0x3F190DC default: 2
AddStudsAverageValue: main+0x3F190E0 default: 0x48742400 //250000.0
dvMaxStudsPerFrame: main+0x36E8C64 default: 0x989680 //10000000
dvInitStuds: main+0x36E8C68 default: 0x7DD //2000

FULLDEBUGTOGGLE: main+0x5EDD6E8 (4 byte)
plr_lastpos: main+5EDD6C0 (vector3 float)
ShowPlayerCoordinate: main+0x5EDD6DC (2 byte)
PlayerHeartPos: main+0x5EDD4E0

MechCharacter::GetHitPoints(MechCharacter *__hidden this):
.text:0000000000A91178 00 C4 47 B9                 LDR             W0, [X0,#0x7C4] ; Load from Memory
.text:0000000000A9117C C0 03 5F D6                 RET                     ; Return from Subroutine

MechCharacter::GetMaxHitPoints(MechCharacter *__hidden this)
.text:0000000000A9118C 00 C0 47 B9                 LDR             W0, [X0,#0x7C0] ; Load from Memory
.text:0000000000A91190 C0 03 5F D6                 RET                     ; Return from Subroutine

you could try to change the GetHitPoints into GetMaxHitPoints, like this:

[Infinite Health (On)]
04000000 00A91178 B947C000
[Infinite Health (Off)]
04000000 00A91178 B947C400
[/QUOTE]
Hello I find Fire emblem Three houses
It seems that there are archive checks as well.
Is there any way to crack it?
 
  • Like
Reactions: xtatu

tides

Well-Known Member
Member
Joined
Apr 2, 2013
Messages
297
Trophies
1
Age
37
XP
791
Country
United States
The game is not even out yet....

Fire Emblem Three Houses - Update 0 (v1.0.0)

TitleId: 010055D009F78000
BuildId: CECF500CEA4C214C

Code:
[Zero Playtime]
580F0000 019CF6E0
780F0000 00023B50
640F0000 00000000 00000000

[Max Money]
580F0000 019CF6E0
780F0000 00023B54
640F0000 00000000 0098967F

[9 Activity Points (Bonding)]
580F0000 019CF6E0
780F0000 000249CF
610F0000 00000000 00000009

[9 Activity Points (Teaching)]
580F0000 019CF6E0
780F0000 000249D0
610F0000 00000000 00000009

Seams like this game has a new sdk log function (nn:: prepo:: PlayReport:: Add), this is how i found this pointer so fast, here all the values the game logs:

Character: 0x668, Size = 0x230 Byte, Count = 35
PlayTime = 0x22AE0 + 0x1070
Money = 0x22AE0 + 0x1074
Difficulty = 0x22AE0 + 0x1280 (0, 1, 2 or 3)
Gamestyle = 0x22AE0 + 0x1281 (0, 1 or 2)
Chapter = 0x23B5C
Route = 0x23D62
MapID = 0x23D64
InstructLevel = 0x249A8
InstructExp = 0x249BA
PlayLog_Wark = 0x24F03
PlayLog_Lecture = 0x24F04
PlayLog_ToBtl = 0x24F05
PlayLog_Rest = 0x24F06
PlayLog_Trnmnt = 0x24F07
PlayLog_Sing = 0x24F08
PlayLog_Lunch = 0x24F09
PlayLog_Cooking = 0x24F0A
PlayLog_Drill = 0x24F0B
PlayLog_Teaparty = 0x24F0C
PlayLog_SCOUT = 0x24F0D

I don't know yet what these values do, just started to play, but money and time code works.


thanks
 

JrpgAddict

Well-Known Member
Member
Joined
Oct 7, 2016
Messages
697
Trophies
0
Age
38
XP
1,655
Country
Netherlands
The game is not even out yet....

Fire Emblem Three Houses - Update 0 (v1.0.0)

TitleId: 010055D009F78000
BuildId: CECF500CEA4C214C

Code:
[Zero Playtime]
580F0000 019CF6E0
780F0000 00023B50
640F0000 00000000 00000000

[Max Money]
580F0000 019CF6E0
780F0000 00023B54
640F0000 00000000 0098967F

[9 Activity Points (Bonding)]
580F0000 019CF6E0
780F0000 000249CF
610F0000 00000000 00000009

[9 Activity Points (Teaching)]
580F0000 019CF6E0
780F0000 000249D0
610F0000 00000000 00000009

Seams like this game has a new sdk log function (nn:: prepo:: PlayReport:: Add), this is how i found this pointer so fast, here all the values the game logs:

Character: 0x668, Size = 0x230 Byte, Count = 35
PlayTime = 0x22AE0 + 0x1070
Money = 0x22AE0 + 0x1074
Difficulty = 0x22AE0 + 0x1280 (0, 1, 2 or 3)
Gamestyle = 0x22AE0 + 0x1281 (0, 1 or 2)
Chapter = 0x23B5C
Route = 0x23D62
MapID = 0x23D64
InstructLevel = 0x249A8
InstructExp = 0x249BA
PlayLog_Wark = 0x24F03
PlayLog_Lecture = 0x24F04
PlayLog_ToBtl = 0x24F05
PlayLog_Rest = 0x24F06
PlayLog_Trnmnt = 0x24F07
PlayLog_Sing = 0x24F08
PlayLog_Lunch = 0x24F09
PlayLog_Cooking = 0x24F0A
PlayLog_Drill = 0x24F0B
PlayLog_Teaparty = 0x24F0C
PlayLog_SCOUT = 0x24F0D

I don't know yet what these values do, just started to play, but money and time code works.

ty for this, any chance for infinite activity points (is 9 max?) AND easy skill lv up when teaching and fightin pls?
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • No one is chatting at the moment.
    NinStar @ NinStar: unless nintendo is going to start selling consoles at a loss that thing won't be cheap based on...