Yeah, I tried getting VitaCheat and others to work with Mario 64, but did not work. VitaCheat, it just gave a Error for the Game.
It might depends on how the hombrews handle the memory or the modules vice versa. If we can hope for memdump as cheat activator... I can dump a memory with memdump but with range from 81000000 - 82000000. I can see ELF in 0x0 offset. Maybe it's feasible but If the pointer was beyond from memdump range, it's hopeless.
D
Deleted User
Guest
Good news for you. On GTA3, Money address is within range. I believe this should be static; but as you mentioned, the addresses are dynamic. There's a -+0x00100000 offset difference which is common in 3.65 NND games.
0x81000000
Code:
8160D54C - Money
8160D550 - Display Money
8160D558 - HP?Was a lot of work finding everything. LOL. MAIN is supposed to represent Static, while HEAP represents Dynamic.
@Zernix
Can you explain step-by-step again how to do B200 with offset and startingpoint etc.
PCSG00488 - Eiyuu Densetsu: Sora no Kiseki FC Evolution (without patch).
I found this code and many more;
_V0 Instant all Items [945pcs.]
$4201 8247EC7C 004D0000 # + - 100000/200000/300000
$03B1 00000004 00000001
Btw.found this code with "Dog-Search Code" ;-)
Now I would like to make this code static, since I don't have a Gohanmem it will be a bit difficult.
thank you for your help
Edit:
This is the part were im crying;
"GoHANmem with "Scan Block" function. With that, I found the starting range block which is 81F00000. Search this hex with vitacheat to find the pointer. I found 4 adresses, 2 of them are the same and it's within the memory module. I picked 8128BDD8 which +B738 offset from seg1. The address 8128BDD8 is a direct pointer to 81F00000.
_V0 Speed Hack
$B200 00000001 00000000
$3201 0000B738 006DE720
$3300 00000000 00000000 "
Can you explain step-by-step again how to do B200 with offset and startingpoint etc.
This is the example of my findings:
The speed hack address 82xDE720 is already out of range from this module which is:
seg1 812806A0 - 812CD110 (for example)
you can't make a B2 code with it. To solve this problem, find the starting memory block. I used GoHANmem with "Scan Block" function. With that, I found the starting range block which is 81F00000. Search this hex with vitacheat to find the pointer. I found 4 adresses, 2 of them are the same and it's within the memory module. I picked 8128BDD8 which +B738 offset from seg1. The address 8128BDD8 is a direct pointer to 81F00000.
_V0 Speed Hack
$B200 00000001 00000000
$3201 0000B738 006DE720
$3300 00000000 00000000
This is compatible for all different regions and dumps but not for the patched ones. Only best for static address.
To find the pointer within the module with vitacheat, Use Fuzzy Search with your address that you found (speed hack for example), set the search type into "less than or equal" (<=) and limit the range from 81000000 to the end of seg1 (it will include seg0). After the result list down the the address and its value, pick the value which is closer to your address that you found. then resart, repeat and:
_V0 Speed Hack
$B200 00000001 00000000
$3201 0003E990 00003AE0
$3300 00000000 00000000
_V0 Mira
$B200 00000001 00000000
$3201 0003E990 000A5038
$3300 00000000 00000064
This will work in all version, regions, dumps, and to whatever patch you put in rePatch. Unless rePatch omits the address that you want to modify (not sure)
notes:
The speed hack address 82xDE720 is already out of range from this module which is:
seg1 812806A0 - 812CD110 (for example)
you can't make a B2 code with it. To solve this problem, find the starting memory block. I used GoHANmem with "Scan Block" function. With that, I found the starting range block which is 81F00000. Search this hex with vitacheat to find the pointer. I found 4 adresses, 2 of them are the same and it's within the memory module. I picked 8128BDD8 which +B738 offset from seg1. The address 8128BDD8 is a direct pointer to 81F00000.
_V0 Speed Hack
$B200 00000001 00000000
$3201 0000B738 006DE720
$3300 00000000 00000000
This is compatible for all different regions and dumps but not for the patched ones. Only best for static address.
To find the pointer within the module with vitacheat, Use Fuzzy Search with your address that you found (speed hack for example), set the search type into "less than or equal" (<=) and limit the range from 81000000 to the end of seg1 (it will include seg0). After the result list down the the address and its value, pick the value which is closer to your address that you found. then resart, repeat and:
_V0 Speed Hack
$B200 00000001 00000000
$3201 0003E990 00003AE0
$3300 00000000 00000000
_V0 Mira
$B200 00000001 00000000
$3201 0003E990 000A5038
$3300 00000000 00000064
This will work in all version, regions, dumps, and to whatever patch you put in rePatch. Unless rePatch omits the address that you want to modify (not sure)
notes:
- Speed hack 82xDE720 where x sometimes change.
- Memory module "here" is the eboot.bin vitacheat mostly use this module to display the seg0 & seg1 when you push the R-Analog-UP in "Browse Memory"
- seg1 812806A0 - 812CD110 you can see this by pushing the right analog up in "Browse Memory". This is useful for B2 code.
- "Memory block" is a chunk of data from RAM. the biggest will be the game files. GoHANmem can differentiate each block.
- GoHANmem can determine the range of memory block while vitacheat cannot.
- VitaCheat can specifically determine the memory executable modules and it's names while GoHANmem cannot. vitacheat only recognize executable modules like suprx, skprx. you can see more of it when you dump a memory with vitacheat.
PCSG00488 - Eiyuu Densetsu: Sora no Kiseki FC Evolution (without patch).
I found this code and many more;
_V0 Instant all Items [945pcs.]
$4201 8247EC7C 004D0000 # + - 100000/200000/300000
$03B1 00000004 00000001
Btw.found this code with "Dog-Search Code" ;-)
Now I would like to make this code static, since I don't have a Gohanmem it will be a bit difficult.
thank you for your help
Edit:
This is the part were im crying;
"GoHANmem with "Scan Block" function. With that, I found the starting range block which is 81F00000. Search this hex with vitacheat to find the pointer. I found 4 adresses, 2 of them are the same and it's within the memory module. I picked 8128BDD8 which +B738 offset from seg1. The address 8128BDD8 is a direct pointer to 81F00000.
_V0 Speed Hack
$B200 00000001 00000000
$3201 0000B738 006DE720
$3300 00000000 00000000 "
Last edited by tomberyx,
Tried these cheats again on a proper vitamin dump and they don't work/have no effect in game. The other vitamin made cheats also don't work. Wonder what the problem could be. I guess I'll stick with the NoNpDrm version for now.
Last edited by Hollow357,
It will be difficult to determine the range of block without GoHANmem. If you want to find it with vitacheat alone, you have to browse the memory and find the beginning of normal values after XX XX XX.
Vitamin and Mai dumps had inconsistency when it comes to decrypting assets. It creates discrepancies between original and decrypted; Not to mention that factor if whether game was dumped from psn or physical carts. I've never encountered ARM write codes for NND so I'm not sure.
I'm late to realize that memdump can't use pointer hahaha. Anyways, I found the addresses, pointer and offsets. They are almost relative so it's easy to find thanks to your findings.
Last edited by Zernix,
Sorry but I forgot to mention that there are more blocks there that exist. The starting block that you've found is the eboot. The starting point that game mainly uses is usually somewhere in 81F-830. It might be wrong; It depends on how many modules the game uses or plugins that you use.
Use the latest GoHANmem 3.01 which is working for 3.65. After you found the starting point, search the address as value. Pick the result which is within eboot segment.
If you can open the Vitacheat menu. I believe the latest vpk is 1.3. I'm using the latest but I can't open Vitacheat. I suggest you try it too. I might be the only one who can't open it.
@faythdus sorry but you still don't understand,the codes were created on cfw 3.60,if you have installed cfw 3.65 on your PS Vita,the codes created with a different firmware(from the one installed)often don't work.
Thanks for doing a cheat for severed! Me and my daughter will finally be able to get further into the game now. I have the PCSE00589 version of the game, do you think there's a chance the cheat will work on that as well?
Similar threads
- No one is chatting at the moment.
-
-
-
-
-
-
-
-
-
-
-
@
Xdqwerty:
A-WELL-A BIRD, BIRD, BIRD, B-BIRD'S THE WORD
A-WELL-A BIRD, BIRD, BIRD, B-BIRD'S THE WORD
A-WELL-A -
-
-
-
-
-
-
-
-
-
-
-
-
-
