Hacking VitaCheat/FinalCheat Database

[zeroviral]

Using the english patch but that isn't the cause, I've already tested it by disabling repatch and others have had no problem using the cheats with the english patch. Game was downloaded from NPS which is the same thing you will get out of PKGJ so that can't be the issue either.
I already tried to do my own cheats but I could never get any changes to the found addresses so I could never get addresses to try.
The displayed value freezes, but the actual value does not and hp and gp still deplete in the background.
I've just accepted they aren't going to work no matter what and just gave up a while ago and I've moved on to playing other games.
As far as I can tell it's DLC related as that's the only thing I haven't eliminated as a possibility for sure but I just did not want to bother with process of elimination to figure out which DLCs are at fault for shifting the addresses enough to make the codes not work. So unless the code author can tell us what DLCs they had when they made the codes then there's no telling which of the available DLC breaks them.

I suggested reDLing it as I don't know if errors in both DL or Transfer process affects some games. Although the possibility of it requiring Pointer codes may be what is causing issues.

 

[zeroviral]

Gotcha yes i have also tried this as well, with no luck, but thinking back maybe a reboot is neded for it to take effect like when the codes first came out.

Update: nope rebooting and activating cheats before game start doesn't work either, not sure what's going on here, I'm just going to grind the medals i guess, i only need like 75 anyway so not too bad lol.

I do not know if you are still interested but it is possible to indeed change an existing item to another.
First on the item slots there should be this if the slot is empty FF FF FF FF and 63 in conjuction with max qll item codes. The FF FF FF FF denotesitem kind and tab where it goes etc. that is if it is conwumqble, equipment, key items and medals best. In between that and the 63(how many copies you have) is the item id. They are the same so you should have 36 00 00 00 36 00 00 00 if you Brave Point A naturally, just change the first into another item of the same category. What I mean is cansumable into consumable, etc. changing q consumable into an equipment,etc. will cause crash. Best to just use the gacha for medals, get its idconvert to dec, count how many cnumhers or slots it takes to go to a blank ones slot in Medal Maniac subtract sqy you got medal 31 and you need medal 178 equals 147. Add that to the converted dec then convert it to hex, insert and you should get it.

 

[Yohoki]

I do not know if you are still interested but it is possible to indeed change an existing item to another.
First on the item slots there should be this if the slot is empty FF FF FF FF and 63 in conjuction with max qll item codes. The FF FF FF FF denotesitem kind and tab where it goes etc. that is if it is conwumqble, equipment, key items and medals best. In between that and the 63(how many copies you have) is the item id. They are the same so you should have 36 00 00 00 36 00 00 00 if you Brave Point A naturally, just change the first into another item of the same category. What I mean is cansumable into consumable, etc. changing q consumable into an equipment,etc. will cause crash. Best to just use the gacha for medals, get its idconvert to dec, count how many cnumhers or slots it takes to go to a blank ones slot in Medal Maniac subtract sqy you got medal 31 and you need medal 178 equals 147. Add that to the converted dec then convert it to hex, insert and you should get it.

...this is literally unreadable....

 

[eighthdayregret]

Speedfly has Metal Slug 3 for both PCSE00665 and PCSG00613, both 1.01 Versions. Has a few more, but they are VIP and Paid Codes.

They're unnecessarily complicated. A000 codes for no reason.
And I have more codes than they do.
I'll post them later today.

 

[Yohoki]

They're unnecessarily complicated. A000 codes for no reason.
And I have more codes than they do.
I'll post them later today.

Speaking of $A000 codes, I've found something out about them. They store the original value, so when you turn the code off, it returns to what it was before you turned it on.

Edit: also, they have an invincibility code. I haven't tried it, but I assume it makes you not get hit at all, instead of just locking lives. That's prob the only useful one there.

 

[kaymynd]

I do not know if you are still interested but it is possible to indeed change an existing item to another.
First on the item slots there should be this if the slot is empty FF FF FF FF and 63 in conjuction with max qll item codes. The FF FF FF FF denotesitem kind and tab where it goes etc. that is if it is conwumqble, equipment, key items and medals best. In between that and the 63(how many copies you have) is the item id. They are the same so you should have 36 00 00 00 36 00 00 00 if you Brave Point A naturally, just change the first into another item of the same category. What I mean is cansumable into consumable, etc. changing q consumable into an equipment,etc. will cause crash. Best to just use the gacha for medals, get its idconvert to dec, count how many cnumhers or slots it takes to go to a blank ones slot in Medal Maniac subtract sqy you got medal 31 and you need medal 178 equals 147. Add that to the converted dec then convert it to hex, insert and you should get it.

Thank you!! I'll try doing this today and post my results!! I still need about 50 of those dang medals lol

Update: WOW! it actually worked thank you so much for this!!! I'm going to mess around with it and try to make an all medals cheat now that i understand how it works a bit more.

 

[eighthdayregret]

Speaking of $A000 codes, I've found something out about them. They store the original value, so when you turn the code off, it returns to what it was before you turned it on.

Edit: also, they have an invincibility code. I haven't tried it, but I assume it makes you not get hit at all, instead of just locking lives. That's prob the only useful one there.

I'm not sure how theirs works, whether it turns off collision detection or what, but the one I have is basically unending i-frames. The codes I have are pretty much ported from Pugsy's MAME cheats.
I wish I knew how those A codes work, so I could kind ofnreverse engineer them.

 

[Yohoki]

I'm not sure how theirs works, whether it turns off collision detection or what, but the one I have is basically unending i-frames. The codes I have are pretty much ported from Pugsy's MAME cheats.
I wish I knew how those A codes work, so I could kind ofnreverse engineer them.

So, here's what they're doing.... They're changing the programming of the game. What we normally do is change the values around, but we can also change around the programming to change how those values are handled.

Here's the original address:

 In hex:
90 F8 6F 03

Translated into ARM Thumbv2 code:
90 F8 6F 03    ldrb.w r0, [r0, #0x36f]

I'm not ENTIRELY sure what this original code does, but it's important for one reason or another and has to do with your health. But, when activating the Invincibility code, this is put there instead:

 In hex:
1A F1 C1 FA

Translated into ARM Thumbv2 code:
1A F1 C1 FA    bl #0x11a586

This tells the code to, instead of doing what it was supposed to do, to look for a specific area and run the code there instead. At that specific part, the rest of code is stored. Since the hacker can specify where that code is, it's easy to use an area that's not got anything else there. Here's the code that's there:

In hex:
4D 21 A0 F8 80 15 90 F8 6F 03 70 47 7C 62 01 1C

Translated into ARM Thumbv2 code:
4D 21          movs   r1, #0x4d              --- sets the r1 register to 77. ( I think the chinese use 77 like we use 99, like 77 items instead of 99 items )
A0 F8 80 15    strh.w r1, [r0, #0x580]       --- Stores the last 16 bits of r1[77] to r0  and r0's offset[0x580](or something like that, I'm not really familiar with ARM)
90 F8 6F 03    ldrb.w r0, [r0, #0x36f]       --- This is the original code that should have been run. Writes what's at r0[77] back to itself and to an offset[0x36f].
70 47          bx     lr                     --- Tells the CPU to treat the next code as ARM Thumb code instead of ARM
7C 62          str    r4, [r7, #0x24]        --- Store the value of r7's offset to r4
01 1C          adds   r1, r0, #0             --- Store the value at r0[77] to r1

So there's what it's doing.... does it make any sense to me? no. I have no idea. All I know is that they've replaced a normal bit of programming with a line that says "HEY! go over here and do this code" and written a new code there. Seems it does some funny business to a couple areas and then puts everything back how it should be for the code to continue on how it was before. If I had to guess, this particular area has to do with the "Invulnerability Timer" that starts when you respawn after dying.

So, I don't know exactly what it does, but at least you can see now how it's much different than the codes we normally make and why they're different.

Edit:
For anyone that actually knows how to do this kind of stuff... Ghidra seems to work pretty well for disassembly. Dump Unsafe mode the seg0 start and end addresses and load them in Ghidra as ARM V7 Little Endian.

 

[eighthdayregret]

As promised...

# PCSE00665
# Created by eighthdayregret, with help from Yohoki
# ID: PCSE00665
# Title: Metal Slug 3
# Region: USA
# Version: 1.01
# Type: PSN/NoNpDrm
# Code Author: eighthdayregret
# Source: https://eighthsregrets.blogspot.com/2019/10/pcse00665-metal-slug-3-v101-psnnonpdrm.html
# Info: Tested and confirmed working with PSN EBOOT on 3.68 h-encore-2
# Notes: See bottom of list

_V0 Invincibility
$B200 00000001 00000000
$0000 002AAF40 0000006C

_V0 Max Lives
$B200 00000001 00000000
$0000 002AAC7A 00000063

_V0 Inf Ammo
$B200 00000001 00000000
$0100 002B94BA 0000FFFF

_V0 Weapon Select - NOTE 1
$B200 00000001 00000000
$0100 002B94B2 0000xxxx

_V0 Rapid Fire
$B200 00000001 00000000
$0000 002B94B0 00000000

_V0 Inf Bombs
$B200 00000001 00000000
$0000 002B94B4 00000063

_V0 Bomb Select - NOTE 2
$B200 00000001 00000000
$0000 002B94B5 000000xx

_V0 No Bomb Delay
$B200 00000001 00000000
$0000 002B94B1 00000000

_V0 Inf Slug Bombs
$B200 00000001 00000000
$0000 002B95F8 00000063

_V0 Inf Slug Fuel
$B200 00000001 00000000
$0000 002B95F8 00000060

_V0 Body Type Select - NOTE 3
$B200 00000001 00000000
$0000 002AAF4E 000000xx

_V0 UP+START to Finish Level Now
$C202 00000001 00000018
$B200 00000001 00000000
$0000 002B973C 0000003F

_V0 Select Starting Mission - NOTE 4
$B200 00000001 00000000
$0000 002B973B 000000xx

_V0 DOWN+START to Get 15 POWs
$C202 00000001 00000048
$B200 00000001 00000000
$0000 002B96C4 000000FF

[NOTE 1]
The Mobile Satellite + Thunder Cloud options are slightly buggy they both work fine if enabled prior to starting the level
FF00 - Normal Gun
0201 - Metal Slug Cannon
0102 - Shotgun
0203 - Rocket Launcher
0104 - Flame Shot
FF05 - Heavy Machine Gun
FF06 - Laser Gun
0107 - SUPER Shotgun
0208 - SUPER Rocket Launcher
0109 - SUPER Flame Shot
FF0A - SUPER Heavy Machine Gun
FF0B - SUPER Laser Gun
030C - Enemy Chaser
020D - Iron Lizard
030E - Drop Shot
020F - SUPER Grenade
0315 - FAT Enemy Chaser
FF10 - Mobile Satellite
FF11 - Thunder Cloud

[NOTE 2]
01 - Mortar Grenade(Normal)
02 - Petrol Bomb
03 - Rock

[NOTE 3]
Select them in this order Human-Fatman-Mummy-Swimmer-Snowman-Zombie and back around through Human for the best effect
00 - Human
02 - Fatman (Can't Move!)
03 - Mummy
05 - Swimmer
06 - Snowman (Can't Move!)
07 - Zombie

[NOTE 4]
Enable at character select screen
00 - Mission 1
01 - Mission 2
02 - Mission 3
03 - Mission 4
04 - Final Mission
05 - End Sequence

 

[zeroviral]

...this is literally unreadable....

Sorry, I have difficulties with using touchscreens and my Smartphone blocks the area where you type with its keyboard. I kept hitting the wrong letters but I also cannot see the typos. Thankfully kaymynd understood it even if it is unreadable.

 

[pawdedi]

Hello, I tried made cheats for shovel knight (PCSB00743). Found cheats for money (dec) and infinite hp (float).
Cheats works. But when I use temp ar vita ed. I have 0 green results.

Some times when I relunch game, old saved cheat works like a charm.

Can someone try to made working cheat?

 

[Yohoki]

Hello, I tried made cheats for shovel knight (PCSB00743). Found cheats for money (dec) and infinite hp (float).
Cheats works. But when I use temp ar vita ed. I have 0 green results.

Some times when I relunch game, old saved cheat works like a charm.

Can someone try to made working cheat?

when you launch the game, and the old cheat doesn't work, have you tried making another dump and adding it in to TempAR? The TempAR ed can use up to 6 different dumps. And it may require you to search deeper for the pointers. Double click or hit spacebar on one to open it up.

 

[pawdedi]

Thanks. Already know that but use only 2 dumps. Will try more dumps at once.

Cheers

 

[Yohoki]

Thanks. Already know that but use only 2 dumps. Will try more dumps at once.

Cheers

It's possible that there's other weird stuff going on, but sometimes it's just helpful to try more dumps. That's why I added the function to TempAr.

 

[Smoker1]

Anyone figure out a Inf Jumps Code for God of War Collection (PCSA00126)??

 

[NeoGranzon]

Hi @Yohoki,i've create code for infinite money for SRW Z3(Jigoku Hen)with Vitacheat normal search,when begin new game the code don't work,but only on the game saved.
How do make it permanent?

 

[CrossOut]

Hi @Yohoki,i've create code for infinite money for SRW Z3(Jigoku Hen)with Vitacheat normal search,when begin new game the code don't work,but only on the game saved.
How do make it permanent?

You have use the Tempar tool and put two or more memory dumps of the game into it then look for a pointer to make the code permanent.

 

[NeoGranzon]

You have use the Tempar tool and put two or more memory dumps of the game into it then look for a pointer to make the code permanent.

2 dumps?Sorry don't understand,you can explain me better?

 

[Yohoki]

2 dumps?Sorry don't understand,you can explain me better?

https://github.com/r0ah/vitacheat/wiki/Finding-Pointers-With-TempAR

You need to find the code, then make a memory dump in the "CROSS MEMORY" section. Reload the game and repeat. When you have 2 or more dumps, you can load them into TempAR and search for a pointer. I recommend "TempAR - Vita Edition" because you can use up to 6 dumps, and it's been updated for vita codes. (plus I made it, so bragging rights, I guess )

 

[NeoGranzon]

https://github.com/r0ah/vitacheat/wiki/Finding-Pointers-With-TempAR

You need to find the code, then make a memory dump in the "CROSS MEMORY" section. Reload the game and repeat. When you have 2 or more dumps, you can load them into TempAR and search for a pointer. I recommend "TempAR - Vita Edition" because you can use up to 6 dumps, and it's been updated for vita codes. (plus I made it, so bragging rights, I guess )

Thank you so much,if i want search for example HP,EN Ammo ecc... how do make it?