Toggle sidebar

ROM Hack Cheat Codes AMS and Sx Os, Add and Request

  • Thread starter Thread starter matias3ds
  • Start date Start date
  • Views Views 24,739,008
  • Replies Replies 73,932
  • Likes Likes 249
froggy55 said:
so i did notice aob is a new added function in the latest breeze but i do not know how to use it what are the steps i would follow to to use the aob and would i use it to locate the addresses of all these codes then do the asm method and apply the ret to each one thanks for your response
Post automatically merged:


thank you for the reply and i already used the updater tool and got most of the cheats working however the ones i posted above are ones that need to be remade from scratch and as for ida pro i have no idea how to recompile or decompile and does this not require an understanding of computer language like c# or C++ because these i dont understand what i do have is a basic understanding of hexdecimal and dec conversions for addresses and values but i dont understand programming code though i wish i did
Click to expand...
if you use "Make AOB M" all cheats will be processed and this cheat will result in "02# Wanted Level 0.0.aob" being produced.
If you want only this cheat then make this the only cheat. (The correct version of game needs to be running).
With the new game version running you use "AOB 2 cheat" to recover the hook.

[02# Wanted Level 0]
[Main+R10+0x0000F186A4] = 0x94D990EB bl #0x457ca50 <= hook
[Main+R10+0x000457CA50] = 0x52800008 mov w8, #0
[Main+R10+0x000457CA54] = 0xB9002268 str w8, [x19, #0x20]
[Main+R10+0x000457CA58] = 0xD65F03C0 ret

When I said AOB it is not limited to using my tool, use any AOB tool that works.

This cheat is classic cheat you do AOB to port and normally should be easy as pie.

Nobody can help unless they dig into the game code, would be very nice of them to install the game just to help you. I won't do that, and I think that is asking for too much.

PS: You need to learn punctuation. You can ask AI to fix your sentence for you but I think spend some time learning may be good for you.
Post automatically merged:

to AOB this "[Main+R10+0x0000EF0AC8] = 0x17FFADBE b #0xedc1c0" with Breeze you need to follow the link(R), then add it to cheat
or just make the cheat that is hacking M+0xedc1c0 and create the AOB that you need to locate it with the new game version

Two AOB search is required in this case. One for the hook and one for the branch
 
Last edited by TomSwitch,
froggy55 said:
so i did notice aob is a new added function in the latest breeze but i do not know how to use it what are the steps i would follow to to use the aob and would i use it to locate the addresses of all these codes then do the asm method and apply the ret to each one thanks for your response
Post automatically merged:


thank you for the reply and i already used the updater tool and got most of the cheats working however the ones i posted above are ones that need to be remade from scratch and as for ida pro i have no idea how to recompile or decompile and does this not require an understanding of computer language like c# or C++ because these i dont understand what i do have is a basic understanding of hexdecimal and dec conversions for addresses and values but i dont understand programming code though i wish i did
Click to expand...

I'll take a look and show you how to update those [None address located.] code.
 
helloooo
I really need cheat Story of Seasons Grand Bazaar
TID 0100DAE01E4C8000
BID 07A019C51236763F

just money is okeyyy
Pleaseeeeeee T_T
 
TomSwitch said:
if you use "Make AOB M" all cheats will be processed and this cheat will result in "02# Wanted Level 0.0.aob" being produced.
If you want only this cheat then make this the only cheat. (The correct version of game needs to be running).
With the new game version running you use "AOB 2 cheat" to recover the hook.

[02# Wanted Level 0]
[Main+R10+0x0000F186A4] = 0x94D990EB bl #0x457ca50 <= hook
[Main+R10+0x000457CA50] = 0x52800008 mov w8, #0
[Main+R10+0x000457CA54] = 0xB9002268 str w8, [x19, #0x20]
[Main+R10+0x000457CA58] = 0xD65F03C0 ret

When I said AOB it is not limited to using my tool, use any AOB tool that works.

This cheat is classic cheat you do AOB to port and normally should be easy as pie.

Nobody can help unless they dig into the game code, would be very nice of them to install the game just to help you. I won't do that, and I think that is asking for too much.

PS: You need to learn punctuation. You can ask AI to fix your sentence for you but I think spend some time learning may be good for you.
Post automatically merged:

to AOB this "[Main+R10+0x0000EF0AC8] = 0x17FFADBE b #0xedc1c0" with Breeze you need to follow the link(R), then add it to cheat
or just make the cheat that is hacking M+0xedc1c0 and create the AOB that you need to locate it with the new game version

Two AOB search is required in this case. One for the hook and one for the branch
Click to expand...
thank you so much for the info when i get rid of this nasty head ache ill give this a try
Post automatically merged:

pspmaster said:
I'll take a look and show you how to update those [None address located.] code.
Click to expand...
thank you so much it is greatly appreciated
 
froggy55 said:
thank you so much for the info when i get rid of this nasty head ache ill give this a try
Post automatically merged:


thank you so much it is greatly appreciated
Click to expand...

GTA Vice City 1.0.8 UPD MEMO pspmaster on 2026.08.19
---------------------------------------------------
Safe code cave range of v1.0.8 : 045C0F00 ~ 045C0FFF a little bit small...(IDA segments view Shift +F7)

.text:00000071045C0EFF DCB 0xD6
.text:00000071045C0F00 % 1
.text:00000071045C0F01 % 1
.text:00000071045C0F02 % 1
.
.
.text:00000071045C0FFC % 1
.text:00000071045C0FFD % 1
.text:00000071045C0FFE % 1
.text:00000071045C0FFF % 1
.text:00000071045C0FFF ; .text ends
.text:00000071045C0FFF
.rodata:00000071045C1000 ; ===========================================================================
.rodata:00000071045C1000
.rodata:00000071045C1000 ; Segment type: Pure data
.rodata:00000071045C1000 AREA .rodata, DATA, READONLY, ALIGN=

////////////////////////////////////////////////////////////////////
[02# Wanted Level 0 1.0.7]
040A0000 0457CA50 52800008
040A0000 0457CA54 B9002268
040A0000 0457CA58 D65F03C0
040A0000 00F186A4 94D990EB

TomSwitch NX-Cheat code commander to view ASM:

[02# Wanted Level 0 1.0.7]
[Main+R10+0x000457CA50] = 0x52800008 mov w8, #0
[Main+R10+0x000457CA54] = 0xB9002268 str w8, [x19, #0x20]
[Main+R10+0x000457CA58] = 0xD65F03C0 ret
[Main+R10+0x0000F186A4] = 0x94D990EB bl #0x457ca50

Code updater: try 1.0.7--->1.0.8:

[02# Wanted Level 0 1.0.7]
040A0000 00F186A4 94D990EB
040A0000 0457CA50 52800008
040A0000 0457CA54 B9002268
040A0000 0457CA58 D65F03C0

[02# Wanted Level 0 1.0.7]
=========== RAW ===========
040A0000 00F186A4 94D990EB

=========== ASM ===========
0xF186A4: BL #0x457CA50

[Wed Aug 19 11:27:44 2026]
This is branch assembly code.

[.Text]: None address located.
----------------------------------------------------------

can't find any candidates, means something channged.register or code flowchart...

IDA Pro to view the address [00F186A4] ASM code of 1.0.7 main file:

Jump address: 7100F186A4

.text:0000007100F186A4 STR W8, [X19,#0x20] <<<1.0.7 target address

Right click on

.text:0000007100F186A4 loc_7100F186A4 >>>>> Graphic View


STR WZR, [X19,#0x20]
STURH WZR, [X19,#0x19]

is an interesting address

>>>>Text view

.text:0000007100F186CC STR WZR, [X19,#0x20]
.text:0000007100F186D0 STURH WZR, [X19,#0x19]

let's make a fake cheat code for Updater to search similar address in 1.0.8 with TomSwitch cheat code commander:

[FS]
[Main+R10+0x0000F186CC] = 0xB900227F str wzr, [x19, #0x20]
[Main+R10+0x0000F186D0] = 0x7801927F sturh wzr, [x19, #0x19]

[FS]
040A0000 00F186CC B900227F
040A0000 00F186D0 7801927F

use above code to search for 1.0.8 with zzpong's code updater


[FS]
=========== RAW ===========
040A0000 00F186CC B900227F
040A0000 00F186D0 7801927F

=========== ASM ===========
0xF186CC: STR WZR, [X19, #0x20]
0xF186D0: STURH WZR, [X19, #0x19]

[Wed Aug 19 12:13:00 2026]
This is assembly code.

[.Text]: Single address "0x00F8B568" located.

--- Press "Generate" to export or "Skip" to discard ---

you see, this [FS] code will let us know the new location should be around [0x00F8B568 ]

now use IDA Pro ，IDA-View A 1.0.7 and 1.0.8 main file:


1.0.7 00F186CC >>IDA-View A >>Graphic View
1.0.8 00F8B568 >>IDA-View A > Graphic View

find new 1.0.8 target: (refer to the pic shown

2026-08-19 122546.jpg


1.0.8 loc_7100F8B544 TEXT view:

.text:0000007100F8B544
.text:0000007100F8B544 loc_7100F8B544 ; CODE XREF: sub_7100F8B2D0+24C↑j
.text:0000007100F8B544 STR W10, [X19,#0x20] <<<<<<<-----1.0.8 new target
.text:0000007100F8B548 STURH W8, [X19,#0x19]
.text:0000007100F8B54C B loc_7100F8B570


we got the 1.0.8 new address:
.text:0000007100F8B544 STR W10, [X19,#0x20] <<<<<<<-----1.0.8 new target

now use TomSwitch NX Cheat code commander to rewrite the 1.0.8 code for this:


[02# Wanted Level 0 1.0.7]
[Main+R10+0x000457CA50] = 0x52800008 mov w8, #0
[Main+R10+0x000457CA54] = 0xB9002268 str w8, [x19, #0x20]
[Main+R10+0x000457CA58] = 0xD65F03C0 ret
[Main+R10+0x0000F186A4] = 0x94D990EB bl #0x457ca50

use 1.0.8 safe code cave range, i use the last range: ......045C0FFC

[02# Wanted Level 0 1.0.8]
[Main+R10+0x0000F8B544] = 0xB900226A str w10, [x19, #0x20]
[Main+R10+0x0000F8B544] = 0x94D8D6AC bl #0x45c0ff4
[Main+R10+0x00045C0FF4] = 0x5280000A mov w10, #0
[Main+R10+0x00045C0FF8] = 0xB900226A str w10, [x19, #0x20]
[Main+R10+0x00045C0FFC] = 0xD65F03C0 ret

[02# Wanted Level 0 1.0.8]
040A0000 00F8B544 B900226A
040A0000 00F8B544 94D8D6AC
040A0000 045C0FF4 5280000A
040A0000 045C0FF8 B900226A
040A0000 045C0FFC D65F03C0

------pspmaster demo how to update a code that zzpong's code updater can't update
 
  • Love
Reactions: matt_akira
pspmaster said:
GTA Vice City 1.0.8 UPD MEMO pspmaster on 2026.08.19
---------------------------------------------------
Safe code cave range of v1.0.8 : 045C0F00 ~ 045C0FFF a little bit small...(IDA segments view Shift +F7)

.text:00000071045C0EFF DCB 0xD6
.text:00000071045C0F00 % 1
.text:00000071045C0F01 % 1
.text:00000071045C0F02 % 1
.
.
.text:00000071045C0FFC % 1
.text:00000071045C0FFD % 1
.text:00000071045C0FFE % 1
.text:00000071045C0FFF % 1
.text:00000071045C0FFF ; .text ends
.text:00000071045C0FFF
.rodata:00000071045C1000 ; ===========================================================================
.rodata:00000071045C1000
.rodata:00000071045C1000 ; Segment type: Pure data
.rodata:00000071045C1000 AREA .rodata, DATA, READONLY, ALIGN=

////////////////////////////////////////////////////////////////////
[02# Wanted Level 0 1.0.7]
040A0000 0457CA50 52800008
040A0000 0457CA54 B9002268
040A0000 0457CA58 D65F03C0
040A0000 00F186A4 94D990EB

TomSwitch NX-Cheat code commander to view ASM:

[02# Wanted Level 0 1.0.7]
[Main+R10+0x000457CA50] = 0x52800008 mov w8, #0
[Main+R10+0x000457CA54] = 0xB9002268 str w8, [x19, #0x20]
[Main+R10+0x000457CA58] = 0xD65F03C0 ret
[Main+R10+0x0000F186A4] = 0x94D990EB bl #0x457ca50

Code updater: try 1.0.7--->1.0.8:

[02# Wanted Level 0 1.0.7]
040A0000 00F186A4 94D990EB
040A0000 0457CA50 52800008
040A0000 0457CA54 B9002268
040A0000 0457CA58 D65F03C0

[02# Wanted Level 0 1.0.7]
=========== RAW ===========
040A0000 00F186A4 94D990EB

=========== ASM ===========
0xF186A4: BL #0x457CA50

[Wed Aug 19 11:27:44 2026]
This is branch assembly code.

[.Text]: None address located.
----------------------------------------------------------

can't find any candidates, means something channged.register or code flowchart...

IDA Pro to view the address [00F186A4] ASM code of 1.0.7 main file:

Jump address: 7100F186A4

.text:0000007100F186A4 STR W8, [X19,#0x20] <<<1.0.7 target address

Right click on

.text:0000007100F186A4 loc_7100F186A4 >>>>> Graphic View


STR WZR, [X19,#0x20]
STURH WZR, [X19,#0x19]

is an interesting address

>>>>Text view

.text:0000007100F186CC STR WZR, [X19,#0x20]
.text:0000007100F186D0 STURH WZR, [X19,#0x19]

let's make a fake cheat code for Updater to search similar address in 1.0.8 with TomSwitch cheat code commander:

[FS]
[Main+R10+0x0000F186CC] = 0xB900227F str wzr, [x19, #0x20]
[Main+R10+0x0000F186D0] = 0x7801927F sturh wzr, [x19, #0x19]

[FS]
040A0000 00F186CC B900227F
040A0000 00F186D0 7801927F

use above code to search for 1.0.8 with zzpong's code updater


[FS]
=========== RAW ===========
040A0000 00F186CC B900227F
040A0000 00F186D0 7801927F

=========== ASM ===========
0xF186CC: STR WZR, [X19, #0x20]
0xF186D0: STURH WZR, [X19, #0x19]

[Wed Aug 19 12:13:00 2026]
This is assembly code.

[.Text]: Single address "0x00F8B568" located.

--- Press "Generate" to export or "Skip" to discard ---

you see, this [FS] code will let us know the new location should be around [0x00F8B568 ]

now use IDA Pro ，IDA-View A 1.0.7 and 1.0.8 main file:


1.0.7 00F186CC >>IDA-View A >>Graphic View
1.0.8 00F8B568 >>IDA-View A > Graphic View

find new 1.0.8 target: (refer to the pic shown

View attachment 586754

1.0.8 loc_7100F8B544 TEXT view:

.text:0000007100F8B544
.text:0000007100F8B544 loc_7100F8B544 ; CODE XREF: sub_7100F8B2D0+24C↑j
.text:0000007100F8B544 STR W10, [X19,#0x20] <<<<<<<-----1.0.8 new target
.text:0000007100F8B548 STURH W8, [X19,#0x19]
.text:0000007100F8B54C B loc_7100F8B570


we got the 1.0.8 new address:
.text:0000007100F8B544 STR W10, [X19,#0x20] <<<<<<<-----1.0.8 new target

now use TomSwitch NX Cheat code commander to rewrite the 1.0.8 code for this:


[02# Wanted Level 0 1.0.7]
[Main+R10+0x000457CA50] = 0x52800008 mov w8, #0
[Main+R10+0x000457CA54] = 0xB9002268 str w8, [x19, #0x20]
[Main+R10+0x000457CA58] = 0xD65F03C0 ret
[Main+R10+0x0000F186A4] = 0x94D990EB bl #0x457ca50

use 1.0.8 safe code cave range, i use the last range: ......045C0FFC

[02# Wanted Level 0 1.0.8]
[Main+R10+0x0000F8B544] = 0xB900226A str w10, [x19, #0x20]
[Main+R10+0x0000F8B544] = 0x94D8D6AC bl #0x45c0ff4
[Main+R10+0x00045C0FF4] = 0x5280000A mov w10, #0
[Main+R10+0x00045C0FF8] = 0xB900226A str w10, [x19, #0x20]
[Main+R10+0x00045C0FFC] = 0xD65F03C0 ret

[02# Wanted Level 0 1.0.8]
040A0000 00F8B544 B900226A
040A0000 00F8B544 94D8D6AC
040A0000 045C0FF4 5280000A
040A0000 045C0FF8 B900226A
040A0000 045C0FFC D65F03C0

------pspmaster demo how to update a code that zzpong's code updater can't update
Click to expand...
will this process work also for the weapon set codes and how do i make a fake cheat code to find the address thank you so much for the info and i will keep studying this as maybe i missed something
 
froggy55 said:
will this process work also for the weapon set codes and how do i make a fake cheat code to find the address thank you so much for the info and i will keep studying this as maybe i missed something
Click to expand...
[the cheat you want]
04000000 Address dummy

[b #0xedc1c0]
04000000 00edc1c0 00000000
AOB this cheat then create the b # code
 
Last edited by TomSwitch,
TomSwitch said:
[the cheat you want]
04000000 Address dummy

[b #0xedc1c0]
04000000 00edc1c0 00000000
AOB this cheat then create the b # code
Click to expand...
i guess what im trying to understand is how he make the code to be able to find the simular adress in 1.0.8 for example this is his fs code how did he determine these values was it based on the address in the 1.0.7 version when you go to make a fake code in your cheat code commander does it give the option to base it on the address of previouse version the game

040A0000 00F186CC B900227F
040A0000 00F186D0 7801927F
 
froggy55 said:
will this process work also for the weapon set codes and how do i make a fake cheat code to find the address thank you so much for the info and i will keep studying this as maybe i missed something
Click to expand...

Yes . as Tom said, you can make any [FS] code with the addressed around the original old target address by Graphic view or Text view. the following address code will be more helpful to find a single address:

[.Text]: Single address "0x00F8B568" located.

Tips:

If the code and registers related to the old version’s target address are involved, use the code near it in IDA’s Graph View that is unrelated to register numbers to construct the [FS] code. In the above example, both consecutive addresses are assigned using wzr and are unrelated to registers, so there is a high chance of using them to generate the [FS] and obtain a unique new address in the updated version.


Locating code segments that restore certain registers at the end of a function to serve as [FS] is also easy to find, which helps in identifying a unique new address and allows the new address to help locate the same code segment in the updated version. then you can easily find the new target address with comparing the old- new main file 's Graphic view.

Some code addresses that involve unique-looking assignments, calculations, or conditional checks are also relatively easy to use as [FS], as they help in locating a unique new address.
 
pspmaster said:
Yes . as Tom said, you can make any [FS] code with the addressed around the original old target address by Graphic view or Text view. the following address code will be more helpful to find a single address:

[.Text]: Single address "0x00F8B568" located.

Tips:

If the code and registers related to the old version’s target address are involved, use the code near it in IDA’s Graph View that is unrelated to register numbers to construct the [FS] code. In the above example, both consecutive addresses are assigned using wzr and are unrelated to registers, so there is a high chance of using them to generate the [FS] and obtain a unique new address in the updated version.


Locating code segments that restore certain registers at the end of a function to serve as [FS] is also easy to find, which helps in identifying a unique new address and allows the new address to help locate the same code segment in the updated version. then you can easily find the new target address with comparing the old- new main file 's Graphic view.

Some code addresses that involve unique-looking assignments, calculations, or conditional checks are also relatively easy to use as [FS], as they help in locating a unique new address.
Click to expand...
ok so when i do this for the weapon set codes i use the old target from the 1.0.7 code to generate a fake code wich then lets me find the new addresses in 1.0.8 via zzpongs tool is this correct ? and again thank you guys som much for taking the time to teach me
 
froggy55 said:
ok so when i do this for the weapon set codes i use the old target from the 1.0.7 code to generate a fake code wich then lets me find the new addresses in 1.0.8 via zzpongs tool is this correct ? and again thank you guys som much for taking the time to teach me
Click to expand...
yes. you are right. refer to the following pic, will help you understand:
The purpose is to help you use [FS] to locate the address of the [FS] code in the new version. Then, by using the Graphic-View, you can find the actual new address of the code that needs to be updated, near the new [FS] address in the updated version. In this example, the register in the new address’s code has already changed from w8 to w10, which is the root reason why the code updater fails to find it.
屏幕截图 2026-08-19 141953.png
 
pspmaster said:
yes. you are right. refer to the following pic, will help you understand:
The purpose is to help you use [FS] to locate the address of the [FS] code in the new version. Then, by using the Graphic-View, you can find the actual new address of the code that needs to be updated, near the new [FS] address in the updated version. In this example, the register in the new address’s code has already changed from w8 to w10, which is the root reason why the code updater fails to find it.
View attachment 586759
Click to expand...
ok i think im getting it ill give this a try tomorrow and see if i can get it going also just a quick quick question that wanted level 0 code for 1.08 will that code work as in ca i add to my cheat file or was it just an example or both let me know thanks
 

Site & Scene News

Go to forum More news

Popular threads in this forum

Emulation Emulator  Cemu - Wii U Emulator - Switch Port

Emulation Emulator  Dolphin - GC/Wii Emulator - Switch Port

Emulation Emulator  DrasticDS Emulator - Switch Port

Raikopon - a speedy, experimental 3DS emulator for Nintendo Switch (Dekopon Fork)

Emulation Gaming Homebrew Others Homebrew app Emulator  [Nintendo Switch] Raika Azahar - The 3DS Emulator aimed at base Nintendo Switch

Homebrew Homebrew game  Plants vs Zombies Fusion - Switch Port

Docklight - A port of Lighthouse to the Nintendo Switch

Homebrew Homebrew game  Angry Birds 2 - Switch port