1. zeroviral

    zeroviral GBAtemp Regular
    Member

    Joined:
    Jul 31, 2018
    Messages:
    100
    Country:
    Philippines
    I suggested reDLing it as I don't know if errors in both DL or Transfer process affects some games. Although the possibility of it requiring Pointer codes may be what is causing issues.
     
  2. zeroviral

    zeroviral GBAtemp Regular
    Member

    Joined:
    Jul 31, 2018
    Messages:
    100
    Country:
    Philippines
    I do not know if you are still interested but it is possible to indeed change an existing item to another.
    First on the item slots there should be this if the slot is empty FF FF FF FF and 63 in conjuction with max qll item codes. The FF FF FF FF denotesitem kind and tab where it goes etc. that is if it is conwumqble, equipment, key items and medals best. In between that and the 63(how many copies you have) is the item id. They are the same so you should have 36 00 00 00 36 00 00 00 if you Brave Point A naturally, just change the first into another item of the same category. What I mean is cansumable into consumable, etc. changing q consumable into an equipment,etc. will cause crash. Best to just use the gacha for medals, get its idconvert to dec, count how many cnumhers or slots it takes to go to a blank ones slot in Medal Maniac subtract sqy you got medal 31 and you need medal 178 equals 147. Add that to the converted dec then convert it to hex, insert and you should get it.
     
    kaymynd likes this.
  3. Yohoki

    Yohoki GBAtemp Fan
    Member

    Joined:
    Dec 4, 2018
    Messages:
    408
    Country:
    United States
    ...this is literally unreadable....
     
  4. eighthdayregret

    eighthdayregret fnerrrrrrrrrr!
    Member

    Joined:
    Sep 27, 2017
    Messages:
    312
    Country:
    United States
    They're unnecessarily complicated. A000 codes for no reason.
    And I have more codes than they do.
    I'll post them later today.
     
  5. Yohoki

    Yohoki GBAtemp Fan
    Member

    Joined:
    Dec 4, 2018
    Messages:
    408
    Country:
    United States
    Speaking of $A000 codes, I've found something out about them. They store the original value, so when you turn the code off, it returns to what it was before you turned it on.

    Edit: also, they have an invincibility code. I haven't tried it, but I assume it makes you not get hit at all, instead of just locking lives. That's prob the only useful one there.
     
    Last edited: Oct 2, 2019
  6. kaymynd

    kaymynd GBAtemp Advanced Fan
    Member

    Joined:
    Sep 19, 2018
    Messages:
    593
    Country:
    United States
    Thank you!! I'll try doing this today and post my results!! I still need about 50 of those dang medals lol

    Update: WOW! it actually worked thank you so much for this!!! I'm going to mess around with it and try to make an all medals cheat now that i understand how it works a bit more.
     
    Last edited: Oct 2, 2019
  7. eighthdayregret

    eighthdayregret fnerrrrrrrrrr!
    Member

    Joined:
    Sep 27, 2017
    Messages:
    312
    Country:
    United States
    I'm not sure how theirs works, whether it turns off collision detection or what, but the one I have is basically unending i-frames. The codes I have are pretty much ported from Pugsy's MAME cheats.
    I wish I knew how those A codes work, so I could kind ofnreverse engineer them.
     
  8. Yohoki

    Yohoki GBAtemp Fan
    Member

    Joined:
    Dec 4, 2018
    Messages:
    408
    Country:
    United States
    So, here's what they're doing.... They're changing the programming of the game. What we normally do is change the values around, but we can also change around the programming to change how those values are handled.

    Here's the original address:
    Code:
     In hex:
    90 F8 6F 03
    
    Translated into ARM Thumbv2 code:
    90 F8 6F 03    ldrb.w r0, [r0, #0x36f]
    I'm not ENTIRELY sure what this original code does, but it's important for one reason or another and has to do with your health. But, when activating the Invincibility code, this is put there instead:
    Code:
     In hex:
    1A F1 C1 FA
    
    Translated into ARM Thumbv2 code:
    1A F1 C1 FA    bl #0x11a586
    This tells the code to, instead of doing what it was supposed to do, to look for a specific area and run the code there instead. At that specific part, the rest of code is stored. Since the hacker can specify where that code is, it's easy to use an area that's not got anything else there. Here's the code that's there:
    Code:
    In hex:
    4D 21 A0 F8 80 15 90 F8 6F 03 70 47 7C 62 01 1C
    
    Translated into ARM Thumbv2 code:
    4D 21          movs   r1, #0x4d              --- sets the r1 register to 77. ( I think the chinese use 77 like we use 99, like 77 items instead of 99 items )
    A0 F8 80 15    strh.w r1, [r0, #0x580]       --- Stores the last 16 bits of r1[77] to r0  and r0's offset[0x580](or something like that, I'm not really familiar with ARM)
    90 F8 6F 03    ldrb.w r0, [r0, #0x36f]       --- This is the original code that should have been run. Writes what's at r0[77] back to itself and to an offset[0x36f].
    70 47          bx     lr                     --- Tells the CPU to treat the next code as ARM Thumb code instead of ARM
    7C 62          str    r4, [r7, #0x24]        --- Store the value of r7's offset to r4
    01 1C          adds   r1, r0, #0             --- Store the value at r0[77] to r1
    So there's what it's doing.... does it make any sense to me? no. I have no idea. All I know is that they've replaced a normal bit of programming with a line that says "HEY! go over here and do this code" and written a new code there. Seems it does some funny business to a couple areas and then puts everything back how it should be for the code to continue on how it was before. If I had to guess, this particular area has to do with the "Invulnerability Timer" that starts when you respawn after dying.

    So, I don't know exactly what it does, but at least you can see now how it's much different than the codes we normally make and why they're different.

    Edit:
    For anyone that actually knows how to do this kind of stuff... Ghidra seems to work pretty well for disassembly. Dump Unsafe mode the seg0 start and end addresses and load them in Ghidra as ARM V7 Little Endian.
     
    Last edited: Oct 3, 2019
  9. eighthdayregret

    eighthdayregret fnerrrrrrrrrr!
    Member

    Joined:
    Sep 27, 2017
    Messages:
    312
    Country:
    United States
    As promised...

    Code:
    # PCSE00665
    # Created by eighthdayregret, with help from Yohoki
    # ID: PCSE00665
    # Title: Metal Slug 3
    # Region: USA
    # Version: 1.01
    # Type: PSN/NoNpDrm
    # Code Author: eighthdayregret
    # Source: https://eighthsregrets.blogspot.com/2019/10/pcse00665-metal-slug-3-v101-psnnonpdrm.html
    # Info: Tested and confirmed working with PSN EBOOT on 3.68 h-encore-2
    # Notes: See bottom of list
    
    _V0 Invincibility
    $B200 00000001 00000000
    $0000 002AAF40 0000006C
    
    _V0 Max Lives
    $B200 00000001 00000000
    $0000 002AAC7A 00000063
    
    _V0 Inf Ammo
    $B200 00000001 00000000
    $0100 002B94BA 0000FFFF
    
    _V0 Weapon Select - NOTE 1
    $B200 00000001 00000000
    $0100 002B94B2 0000xxxx
    
    _V0 Rapid Fire
    $B200 00000001 00000000
    $0000 002B94B0 00000000
    
    _V0 Inf Bombs
    $B200 00000001 00000000
    $0000 002B94B4 00000063
    
    _V0 Bomb Select - NOTE 2
    $B200 00000001 00000000
    $0000 002B94B5 000000xx
    
    _V0 No Bomb Delay
    $B200 00000001 00000000
    $0000 002B94B1 00000000
    
    _V0 Inf Slug Bombs
    $B200 00000001 00000000
    $0000 002B95F8 00000063
    
    _V0 Inf Slug Fuel
    $B200 00000001 00000000
    $0000 002B95F8 00000060
    
    _V0 Body Type Select - NOTE 3
    $B200 00000001 00000000
    $0000 002AAF4E 000000xx
    
    _V0 UP+START to Finish Level Now
    $C202 00000001 00000018
    $B200 00000001 00000000
    $0000 002B973C 0000003F
    
    _V0 Select Starting Mission - NOTE 4
    $B200 00000001 00000000
    $0000 002B973B 000000xx
    
    _V0 DOWN+START to Get 15 POWs
    $C202 00000001 00000048
    $B200 00000001 00000000
    $0000 002B96C4 000000FF
    Code:
    [NOTE 1]
    The Mobile Satellite + Thunder Cloud options are slightly buggy they both work fine if enabled prior to starting the level
    FF00 - Normal Gun
    0201 - Metal Slug Cannon
    0102 - Shotgun
    0203 - Rocket Launcher
    0104 - Flame Shot
    FF05 - Heavy Machine Gun
    FF06 - Laser Gun
    0107 - SUPER Shotgun
    0208 - SUPER Rocket Launcher
    0109 - SUPER Flame Shot
    FF0A - SUPER Heavy Machine Gun
    FF0B - SUPER Laser Gun
    030C - Enemy Chaser
    020D - Iron Lizard
    030E - Drop Shot
    020F - SUPER Grenade
    0315 - FAT Enemy Chaser
    FF10 - Mobile Satellite
    FF11 - Thunder Cloud
    
    [NOTE 2]
    01 - Mortar Grenade(Normal)
    02 - Petrol Bomb
    03 - Rock
    
    [NOTE 3]
    Select them in this order Human-Fatman-Mummy-Swimmer-Snowman-Zombie and back around through Human for the best effect
    00 - Human
    02 - Fatman (Can't Move!)
    03 - Mummy
    05 - Swimmer
    06 - Snowman (Can't Move!)
    07 - Zombie
    
    [NOTE 4]
    Enable at character select screen
    00 - Mission 1
    01 - Mission 2
    02 - Mission 3
    03 - Mission 4
    04 - Final Mission
    05 - End Sequence
     
    CrossOut, Smoker1 and Yohoki like this.
  10. zeroviral

    zeroviral GBAtemp Regular
    Member

    Joined:
    Jul 31, 2018
    Messages:
    100
    Country:
    Philippines
    Sorry, I have difficulties with using touchscreens and my Smartphone blocks the area where you type with its keyboard. I kept hitting the wrong letters but I also cannot see the typos. Thankfully kaymynd understood it even if it is unreadable.
     
  11. pawdedi

    pawdedi Newbie
    Newcomer

    Joined:
    Oct 3, 2019
    Messages:
    2
    Country:
    Poland
    Hello, I tried made cheats for shovel knight (PCSB00743). Found cheats for money (dec) and infinite hp (float).
    Cheats works. But when I use temp ar vita ed. I have 0 green results.

    Some times when I relunch game, old saved cheat works like a charm.

    Can someone try to made working cheat?
     
  12. Yohoki

    Yohoki GBAtemp Fan
    Member

    Joined:
    Dec 4, 2018
    Messages:
    408
    Country:
    United States
    when you launch the game, and the old cheat doesn't work, have you tried making another dump and adding it in to TempAR? The TempAR ed can use up to 6 different dumps. And it may require you to search deeper for the pointers. Double click or hit spacebar on one to open it up.
     
    pawdedi likes this.
  13. pawdedi

    pawdedi Newbie
    Newcomer

    Joined:
    Oct 3, 2019
    Messages:
    2
    Country:
    Poland
    Thanks. Already know that but use only 2 dumps. Will try more dumps at once.

    Cheers
     
    Yohoki likes this.
  14. Yohoki

    Yohoki GBAtemp Fan
    Member

    Joined:
    Dec 4, 2018
    Messages:
    408
    Country:
    United States
    It's possible that there's other weird stuff going on, but sometimes it's just helpful to try more dumps. That's why I added the function to TempAr. :P
     
    Smoker1 likes this.
  15. Smoker1

    Smoker1 GBAtemp Addict
    Member

    Joined:
    Feb 17, 2015
    Messages:
    2,694
    Country:
    United States
    Anyone figure out a Inf Jumps Code for God of War Collection (PCSA00126)??
     
  16. NeoGranzon

    NeoGranzon Member
    Newcomer

    Joined:
    Aug 4, 2019
    Messages:
    32
    Country:
    Italy
    Hi @Yohoki,i've create code for infinite money for SRW Z3(Jigoku Hen)with Vitacheat normal search,when begin new game the code don't work,but only on the game saved.
    How do make it permanent?
     
  17. CrossOut

    CrossOut GBAtemp Regular
    Member

    Joined:
    Aug 12, 2018
    Messages:
    164
    Country:
    United Kingdom
    You have use the Tempar tool and put two or more memory dumps of the game into it then look for a pointer to make the code permanent.
     
    NeoGranzon likes this.
  18. NeoGranzon

    NeoGranzon Member
    Newcomer

    Joined:
    Aug 4, 2019
    Messages:
    32
    Country:
    Italy
    2 dumps?Sorry don't understand,you can explain me better?
     
  19. Yohoki

    Yohoki GBAtemp Fan
    Member

    Joined:
    Dec 4, 2018
    Messages:
    408
    Country:
    United States
    https://github.com/r0ah/vitacheat/wiki/Finding-Pointers-With-TempAR

    You need to find the code, then make a memory dump in the "CROSS MEMORY" section. Reload the game and repeat. When you have 2 or more dumps, you can load them into TempAR and search for a pointer. I recommend "TempAR - Vita Edition" because you can use up to 6 dumps, and it's been updated for vita codes. (plus I made it, so bragging rights, I guess :P )
     
    NeoGranzon likes this.
  20. NeoGranzon

    NeoGranzon Member
    Newcomer

    Joined:
    Aug 4, 2019
    Messages:
    32
    Country:
    Italy
    Thank you so much,if i want search for example HP,EN Ammo ecc... how do make it?
     
Draft saved Draft deleted
Loading...

Hide similar threads Similar threads with keywords - FinalCheat, VitaCheat, Database