Hacking VitaCheat/FinalCheat Database

Yohoki

Well-Known Member
Member
Joined
Dec 4, 2018
Messages
824
Trophies
0
Age
34
XP
1,213
Country
United States
@Yohoki
What can you say about this code below? This is very strange for me...

_V0 money
$B215 00000001 00000000
$3201 00061044 000A92B4
$3300 00000000 000F423F
It looks like the offsets are very large, but I can't say that's wrong. Sometimes offsets are just large....

What DOES stand out is the b215.... I have no idea what module that's targeting or why. Is there any reason why it's attaching to module 15?
 

tomberyx

Well-Known Member
Member
Joined
Jan 9, 2020
Messages
1,657
Trophies
2
XP
4,374
Country
Germany
It looks like the offsets are very large, but I can't say that's wrong. Sometimes offsets are just large....

What DOES stand out is the b215.... I have no idea what module that's targeting or why. Is there any reason why it's attaching to module 15?
Someone who is no longer active told me that the money code is only found in plug in 13-15 (mono plugin) for some it is 14 or 15. I wonder how to get access to this plug in and find codes. Everything is wrong but right....
This plug in 13-14-15 could also be XYZ ,suspiciously... This code is from the game Romancing Saga. Maybe it is good to investigate something here...

Edit;
Romancing Saga PCSB01120
 
Last edited by tomberyx,

Yohoki

Well-Known Member
Member
Joined
Dec 4, 2018
Messages
824
Trophies
0
Age
34
XP
1,213
Country
United States
Someone who is no longer active told me that the money code is only found in plug in 13-15 (mono plugin) for some it is 14 or 15. I wonder how to get access to this plug in and find codes. Everything is wrong but right....
This pattern 13-14-15 could also be XYZ ,suspiciously... This code is from the game Romancing Saga. Maybe it is good to investigate something here...
I don't have much info to go on, but Mono may refer to a module for Unity's game dev software. If that game is a port from a PC game that uses mono, maybe it needs to load an emulator or something first, and THEN the game? That might be why it's like that. If I could see the txt file, that might help.

I am not sure about the modules themselves being randomized. I think they always have the same module number. ASLR shouldn't move that around, at least I don't think it does. I think the only thing that moves module numbers around is adding/removing plugins.

Either way, if it's a working code, I don't see anything wrong with it. It's a simple pointer, so it's not making any odd changes to the kernel or anything malicious. You're very right to be suspicious of it since it can target kernel modules and things... But I've also released a few codes that target other modules. Though, mine have only targeted Module 0x0E, Vitacheat's module.
 
  • Like
Reactions: tomberyx

tomberyx

Well-Known Member
Member
Joined
Jan 9, 2020
Messages
1,657
Trophies
2
XP
4,374
Country
Germany
I don't have much info to go on, but Mono may refer to a module for Unity's game dev software. If that game is a port from a PC game that uses mono, maybe it needs to load an emulator or something first, and THEN the game? That might be why it's like that. If I could see the txt file, that might help.

I am not sure about the modules themselves being randomized. I think they always have the same module number. ASLR shouldn't move that around, at least I don't think it does. I think the only thing that moves module numbers around is adding/removing plugins.

Either way, if it's a working code, I don't see anything wrong with it. It's a simple pointer, so it's not making any odd changes to the kernel or anything malicious. You're very right to be suspicious of it since it can target kernel modules and things... But I've also released a few codes that target other modules. Though, mine have only targeted Module 0x0E, Vitacheat's module.

I tried this code on module 14 but got a crash then tried on 15 and it worked.
I was just wondering how to get this idea to experiment in other modules beyond Eboot.
I think these modules are somehow linked to XYZ pattern but also Pointers temp-ups have to slog through these modules.
B200 1 doesn't have to and probably the end solution to all questions. But nevertheless everything is still unknown and we stab daily with the flashlight into the unknown... makes Fun;-)

Edit; have not dumps from this game.
but a new old code made by me.

_V0 inf.max Money
$B200 00000001 00000000
$3201 0001B5C8 000261C2
$0000 00000000 000BDE31

this code eliminates xyz.

But we (maybe) never will know if this code is 100% save..
 
Last edited by tomberyx,

Yohoki

Well-Known Member
Member
Joined
Dec 4, 2018
Messages
824
Trophies
0
Age
34
XP
1,213
Country
United States
The games themselves don't have to see a seg0/seg1 or the module numbers. There is, somewhere in the data, a memory map. Vitacheat has access to this memory map (it's how the txt file is made) but it's probably inside one of the areas that show up as red XX on the debugger screen and are blank in the dumps. I believe most of the kernel data is blocked from us, including the memory map area, to keep bricks from happening.

Taken from the wiki on Memory Segmentation (which ARM32 uses):
Segments may be created for program modules, or for classes of memory usage such as code and data segments.[3] Certain segments may be shared between programs.

In a system using segmentation, computer memory addresses consist of a segment id and an offset within the segment.[3] A hardware memory management unit (MMU) is responsible for translating the segment and offset into a physical address, and for performing checks to make sure the translation can be done and that the reference to that segment and offset is permitted.

Each segment has a length and set of permissions (for example, read, write, execute) associated with it.[3] A process is only allowed to make a reference into a segment if the type of reference is allowed by the permissions, and if the offset within the segment is within the range specified by the length of the segment. Otherwise, a hardware exception such as a segmentation fault is raised.

So SOMEWHERE, the MMU is storing a mapped location of every module, and it's segments. But since we don't have access to the headers, we have to use the txt file that we get when dumping.
 
  • Like
Reactions: tomberyx

Guyverd

Well-Known Member
Member
Joined
Jun 9, 2013
Messages
137
Trophies
1
Age
32
Location
City of Hope
XP
498
Country
Indonesia
@Guyverd ,i should download it and create them,but after the events i don't want those better than me to do it.
I already have the USA version, if it's possible for you to create the VitaCheat for Extreme VS Force USA.
Anyway, what version game is the Japanese one? If it's 1.04 or the latest, let me download the Japanese one since the USA version is still 1.0 and no DLC found in the PKGJ.
The ASIA version I have is on 1.04 with the DLC unlocked yet no cheats for it.

I couldn't DM you since there's no mail icon on your profile even I've followed you and I tried to start conversation, enter your username and send it yet it's failed. How to send PM to you?
 

Yohoki

Well-Known Member
Member
Joined
Dec 4, 2018
Messages
824
Trophies
0
Age
34
XP
1,213
Country
United States
I already have the USA version, if it's possible for you to create the VitaCheat for Extreme VS Force USA.
Anyway, what version game is the Japanese one? If it's 1.04 or the latest, let me download the Japanese one since the USA version is still 1.0 and no DLC found in the PKGJ.
The ASIA version I have is on 1.04 with the DLC unlocked yet no cheats for it.
If you're going to have 2 versions available for testing, I'd be interested in how the noASLR+B200 works between regions. :)

It's entirely possible that this just doesn't work... Different regions usually have some minor bugfixes and things added in, in addition to the language differences.... But, It's also possible that these minor tweaks will have no effect on a good pointer with this method.
 

Guyverd

Well-Known Member
Member
Joined
Jun 9, 2013
Messages
137
Trophies
1
Age
32
Location
City of Hope
XP
498
Country
Indonesia
If you're going to have 2 versions available for testing, I'd be interested in how the noASLR+B200 works between regions. :)

It's entirely possible that this just doesn't work... Different regions usually have some minor bugfixes and things added in, in addition to the language differences.... But, It's also possible that these minor tweaks will have no effect on a good pointer with this method.
In my case I have the code for ASIA version and try to ASIA and ASIA English Translated version, both have the same version yet the codes don't work or it lets to crash that's why I'm asking here.
Since this game has more than 3 regions, I'll download the one with has worked VitaCheat.

Anyway, is there VitaCheat for Digimon World Next Order for Complete All Attack Skills and Complete All Evolution Line?
I have the latest translated version yet there are some texts which are still on Chinese especially on Special Quest.
 

Yohoki

Well-Known Member
Member
Joined
Dec 4, 2018
Messages
824
Trophies
0
Age
34
XP
1,213
Country
United States
In my case I have the code for ASIA version and try to ASIA and ASIA English Translated version, both have the same version yet the codes don't work or it lets to crash that's why I'm asking here.
Since this game has more than 3 regions, I'll download the one with has worked VitaCheat.

Anyway, is there VitaCheat for Digimon World Next Order for Complete All Attack Skills and Complete All Evolution Line?
I have the latest translated version yet there are some texts which are still on Chinese especially on Special Quest.
I was meaning for you to try making the code for testing. XD

But if you don't know how, don't worry about it. I'll get around to it eventually, i guess.
 

Yohoki

Well-Known Member
Member
Joined
Dec 4, 2018
Messages
824
Trophies
0
Age
34
XP
1,213
Country
United States
Edit: nvm. I see some moving again. Ignore the rest

........ do we even need pointers anymore?

Can you guys check if noASLR just makes all memory static now?

HP in YsVIII was static now, so I tried 'Criminal Girls: Invite Only' because I knew it has some wack going on in level changes..... But I think HP is now static in that game, too.... If it is, this makes pointer searching even easier than I thought it would.

Find HP or something in a game, and save the address... Reset the game a few times and keep checking that same address. Does it stay the same now?
 
Last edited by Yohoki,
  • Like
Reactions: tomberyx

NeoGranzon

シュウ 「グラビトロンカノン 発射!」
Member
Joined
Aug 4, 2019
Messages
2,946
Trophies
1
XP
7,841
Country
Italy
I already have the USA version, if it's possible for you to create the VitaCheat for Extreme VS Force USA.
Anyway, what version game is the Japanese one? If it's 1.04 or the latest, let me download the Japanese one since the USA version is still 1.0 and no DLC found in the PKGJ.
The ASIA version I have is on 1.04 with the DLC unlocked yet no cheats for it.

I couldn't DM you since there's no mail icon on your profile even I've followed you and I tried to start conversation, enter your username and send it yet it's failed. How to send PM to you?
@Guyverd ,it is the version 1.04 the Japanese one I have.
You can't PM me i don't know why,ask a moderator.
 

tomberyx

Well-Known Member
Member
Joined
Jan 9, 2020
Messages
1,657
Trophies
2
XP
4,374
Country
Germany
If you're going to have 2 versions available for testing, I'd be interested in how the noASLR+B200 works between regions. :)

It's entirely possible that this just doesn't work... Different regions usually have some minor bugfixes and things added in, in addition to the language differences.... But, It's also possible that these minor tweaks will have no effect on a good pointer with this method.

I will try to investigate it sounds nice ! But not on this game.
 

Guyverd

Well-Known Member
Member
Joined
Jun 9, 2013
Messages
137
Trophies
1
Age
32
Location
City of Hope
XP
498
Country
Indonesia
@Guyverd ,it is the version 1.04 the Japanese one I have.
You can't PM me i don't know why,ask a moderator.
Could you share the vitacheat for the Japanese one?
I'm going to download the Japanese one.
I'm afraid if I download the EUR, the version is 1.0.
Is it possible for you to share the DLC of Shin Gundam Musou?
 

NeoGranzon

シュウ 「グラビトロンカノン 発射!」
Member
Joined
Aug 4, 2019
Messages
2,946
Trophies
1
XP
7,841
Country
Italy
Could you share the vitacheat for the Japanese one?
I'm going to download the Japanese one.
I'm afraid if I download the EUR, the version is 1.0.
Is it possible for you to share the DLC of Shin Gundam Musou?
@Guyverd ,no don't share Mobile Suit Gundam Extreme VS Force and don't need share DLCs for Shin Gundam Musou,they are in PKGj ready to download.
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • No one is chatting at the moment.
  • Xdqwerty @ Xdqwerty:
    also gonna install twilight menu in my r4 flashcard
  • Psionic Roshambo @ Psionic Roshambo:
    One thing that just occurred to me.... The sound on the 2600 sucked less back then the harsh sound we hear now is from infinitely better speakers we have now, back when the 2600 was new speakers produced a almost muffled sound, like CRTs made old graphics look slightly better.
  • Psionic Roshambo @ Psionic Roshambo:
    I wonder if I could recommend that to some emulation devs that perhaps the sound could use some smoothing out to simulate those old TVs
  • Psionic Roshambo @ Psionic Roshambo:
    I think a few of the early systems could benefit from that, at least up to the 8 bit generation, by the 16 bit generation I think TVs had gotten a lot better in almost every way
  • Xdqwerty @ Xdqwerty:
    i dont have an sd card adapter but I have an usb sd card adapter
  • K3Nv2 @ K3Nv2:
    Old people games
  • Xdqwerty @ Xdqwerty:
    its not the one that comes with the r4
  • Xdqwerty @ Xdqwerty:
    doesnt work (my flashcard is from r4isdhc.com)
  • Xdqwerty @ Xdqwerty:
    might install ysmenu first
  • Psionic Roshambo @ Psionic Roshambo:
    Try Wood firmware
  • Psionic Roshambo @ Psionic Roshambo:
    For your R4
  • Psionic Roshambo @ Psionic Roshambo:
    It's old but it's the best firmware out for DS stuff
  • Xdqwerty @ Xdqwerty:
    it says it only works for the original R4, R4i Gold (r4ids.cn), R4iDSN (r4idsn.com) and Acekard R.P.G.
  • Xdqwerty @ Xdqwerty:
    nvm it does support mine
  • Xdqwerty @ Xdqwerty:
    but why choose it over ysmenu @Psionic Roshambo?
  • Xdqwerty @ Xdqwerty:
    bc im stupid?
  • Xdqwerty @ Xdqwerty:
    yea ik im stupid
  • Xdqwerty @ Xdqwerty:
    good night
  • Psionic Roshambo @ Psionic Roshambo:
    Just give it a try, but honestly if you have a 3DS you can play DS games without a card just off the internal SD card
  • Psionic Roshambo @ Psionic Roshambo:
    Slightly slower loading but a bit more convenient
  • BakerMan @ BakerMan:
    guys, my fuckin headphones have an out of place speaker
  • K3Nv2 @ K3Nv2:
    Did you try wearing them?
    B @ btjunior: @Xdqwerty 16