Hacking VitaCheat/FinalCheat Database

[Guyverd]

@Guyverd the 2nd option,you have complete all missions in Official Mode?
And after,play the Ultimate Mode and complete all missions for any DLC.

Yes, already cleared all for Official Mode.
For the DLC Mission I have, they're already cleared too.

 

[NeoGranzon]

Yes, already cleared all for Official Mode.
For the DLC Mission I have, they're already cleared too.

@Guyverd ,these are the DLCs i have

as for the DLCs that are in Nopaystation,those are pkg(packages)and on the side there is a work.bin,you cannot install them directly on the PS Vita, but you need PKG2Zip to convert them to Zip and then unpack them,then insert them in ux0:addcount(where there are the DLCs of all the installed games)press triangle (from Vitashell main menu)and refresh livearea and refresh license.
It is one thing to know how to create only cheats,it is quite another to know how to make modding to your console.

 

[Guyverd]

@Guyverd ,these are the DLCs i have
View attachment 329402View attachment 329403
as for the DLCs that are in Nopaystation,those are pkg(packages)and on the side there is a work.bin,you cannot install them directly on the PS Vita, but you need PKG2Zip to convert them to Zip and then unpack them,then insert them in ux0:addcount(where there are the DLCs of all the installed games)press triangle (from Vitashell main menu)and refresh livearea and refresh license.
It is one thing to know how to create only cheats,it is quite another to know how to make modding to your console.

Wow
You have 23 DLCs, it's mean they are complete.
Mine is 20 DLCs.
That's why I couldn't unlock the missing one.

Yeah, I read your post about it and there's nothing I could do till PKGJ add them or someone share it.
Those DLCs were posted before and removed, for the new user couldn't get them.

 

[NeoGranzon]

Wow
You have 23 DLCs, it's mean they are complete.
Mine is 20 DLCs.
That's why I couldn't unlock the missing one.

Yeah, I read your post about it and there's nothing I could do till PKGJ add them or someone share it.
Those DLCs were posted before and removed, for the new user couldn't get them.

@Guyverd ,have you tried to download them from Nopaystation and do as you wrote in the previous post?
pkg2zip is a program for PC,but since i no longer have time to use it,i do everything from snartphone and console and share files via FTP,both with PS Vita and with the Nintendo Switch.

 

[tomberyx]

Can you go to the cuddle corner to make discussions. It's annoying to read DLC all the time, almost no one is interested and it doesn't help us at all in the cheat search. So finally make an end to it ...

 

[MichaelWilliams1234]

Tomberyx NeoGranzon etc bring the good old times back

Enviado do meu M2012K11AG através do Tapatalk

 

[tomberyx]

About TempAr Cheat Search;

I found out how to make the search more successful.
All that is needed a dump with pattern X and the next with pattern Y . If you use both X Y and start a search the success will be bigger for the right pointer.

What is X;
For example 83300000 Money Code
What is Y;
For example 83400000 Money Code

I know that it is not easy to get X or Y, preferably both, but this hint might help for the future.
I had 5 dumps with the pattern X and got 800 results for a possible pointer, that's too much then I took a Y dump and the result went to 15 pointers. All worked.....
It could all be coincidence but I don't think so because I know it well.

Also, I have found that if you have too many results then always take the value that is similar to Seg1.
For example;
Seg1 82300000
TempAr address 823xxxxx
This is a good start to find the right ones

 

[tomberyx]

# Title: Warlock's Tower
# ID: PCSB01208
# Region: EU
# Version: 1.00
# Type: NoNpDrm
# Code Author: tomberyx

Spoiler: Code

# PCSB01208

_V0 inf.Walk
$B200 00000001 00000000
$C201 00000001 00000010
$3002 00001A40 0000001C
$0000 00000000 00000094
$0000 00000000 0000000F
$B200 00000001 00000000
$C201 00000001 00000020
$3002 00001A40 0000001C
$0000 00000000 00000094
$0000 00000000 0000000F
$B200 00000001 00000000
$C201 00000001 00000040
$3002 00001A40 0000001C
$0000 00000000 00000094
$0000 00000000 0000000F
$B200 00000001 00000000
$C201 00000001 00000080
$3002 00001A40 0000001C
$0000 00000000 00000094
$0000 00000000 0000000F

 

[Peoples92]

# Title: Warlock's Tower
# ID: PCSB01208
# Region: EU
# Version: 1.00
# Type: NoNpDrm
# Code Author: tomberyx

Spoiler: Code

# PCSB01208

_V0 inf.Walk
$B200 00000001 00000000
$C201 00000001 00000010
$3002 00001A40 0000001C
$0000 00000000 00000094
$0000 00000000 0000000F
$B200 00000001 00000000
$C201 00000001 00000020
$3002 00001A40 0000001C
$0000 00000000 00000094
$0000 00000000 0000000F
$B200 00000001 00000000
$C201 00000001 00000040
$3002 00001A40 0000001C
$0000 00000000 00000094
$0000 00000000 0000000F
$B200 00000001 00000000
$C201 00000001 00000080
$3002 00001A40 0000001C
$0000 00000000 00000094
$0000 00000000 0000000F

Works great

 

[tomberyx]

# Title: Pinball Heroes Complete
# ID: PCSA00109
# Region: US
# Version: 1.00
# Type: NoNpDrm
# Code Author: tomberyx

Spoiler: Code

# PCSA00109

_V0 inf.Balls
$B200 00000001 00000000
$3001 00040EA4 00000580
$0000 00000000 00000019

_V0 No Tilt
$B200 00000001 00000000
$3001 00040EA4 00000574
$0000 00000000 00000000

_V0 Control my Balls [use D-Pad]
$B200 00000001 00000000
$C201 00000001 00000010
$3203 0000520C 0000049C
$0000 00000000 00000000
$0000 00000000 00000070
$0000 00000000 BF500000
$B200 00000001 00000000
$C201 00000001 00000020
$3203 0000520C 0000049C
$0000 00000000 00000000
$0000 00000000 00000070
$0000 00000000 3F000000
$B200 00000001 00000000
$C201 00000001 00000020
$3203 0000520C 0000049C
$0000 00000000 00000000
$0000 00000000 00000070
$0000 00000000 00000000
$B200 00000001 00000000
$C201 00000001 00000040
$3203 0000520C 0000049C
$0000 00000000 00000000
$0000 00000000 00000070
$0000 00000000 3F000000
$B200 00000001 00000000
$C201 00000001 00000080
$3203 0000520C 0000049C
$0000 00000000 00000000
$0000 00000000 00000070
$0000 00000000 00000000
$B200 00000001 00000000
$3001 00040EA4 00000574
$0000 00000000 00000000

_V0 Control my Balls [Alternative]
$B200 00000001 00000000
$C201 00000001 00000010
$3203 00040EA4 0000049C
$0000 00000000 00000000
$0000 00000000 00000070
$0000 00000000 BF500000
$B200 00000001 00000000
$C201 00000001 00000020
$3203 00040EA4 0000049C
$0000 00000000 00000000
$0000 00000000 00000070
$0000 00000000 3F000000
$B200 00000001 00000000
$C201 00000001 00000020
$3203 00040EA4 0000049C
$0000 00000000 00000000
$0000 00000000 00000070
$0000 00000000 00000000
$B200 00000001 00000000
$C201 00000001 00000040
$3203 00040EA4 0000049C
$0000 00000000 00000000
$0000 00000000 00000070
$0000 00000000 3F000000
$B200 00000001 00000000
$C201 00000001 00000080
$3203 00040EA4 0000049C
$0000 00000000 00000000
$0000 00000000 00000070
$0000 00000000 00000000
$B200 00000001 00000000
$3001 00040EA4 00000574
$0000 00000000 00000000

 

[XMYDL]

@Yohoki
I 've tried the new TemAR. What I have to confess is that your work is a masterpiece.
As you see, sometimes TempAR's multilevel pointer searching function is even better than Universal Pointer Searcher!

I have to specify the last offset 0x808 in UPS finding my pointers. Which is useless while we have no idea what the offset is.

 

[Yohoki]

@Yohoki
I 've tried the new TemAR. What I have to confess is that your work is a masterpiece.
As you see, sometimes TempAR's multilevel pointer searching function is even better than Universal Pointer Searcher!
View attachment 329574

I have to specify the last offset 0x808 in UPS finding my pointers. Which is useless while we have no idea what the offset is.

I would recommend you look into why that may be. There's a reason why that pointer isn't showing up in UPS.

TempAR works by displaying all pointers in the first dump only. It then looks at the other dumps and changes the original lists colors. It doesn't add or remove any pointers.

UPS makes a list of all pointers in all the dumps and will only display a pointer if it is in ALL of the dumps, and removes any pointers not in all of them.

So, for your TempAR, that pointer is colored red, meaning that it is found in 5 of your 6 dumps. Since that pointer is missing in one of your dumps, UPS has thrown it out. For some reason, one of your dumps does not have that pointer, which means that sometimes while playing, that code will not work.

Are you using the noASLR plugin? If not, I would recommend you put it on while searching for codes.

 

[XMYDL]

I would recommend you look into why that may be. There's a reason why that pointer isn't showing up in UPS.

TempAR works by displaying all pointers in the first dump only. It then looks at the other dumps and changes the original lists colors. It doesn't add or remove any pointers.

UPS makes a list of all pointers in all the dumps and will only display a pointer if it is in ALL of the dumps, and removes any pointers not in all of them.

So, for your TempAR, that pointer is colored red, meaning that it is found in 5 of your 6 dumps. Since that pointer is missing in one of your dumps, UPS has thrown it out. For some reason, one of your dumps does not have that pointer, which means that sometimes while playing, that code will not work.

Are you using the noASLR plugin? If not, I would recommend you put it on while searching for codes.

I'm quite sure no settings are wrong——I've test it many times. I can't find the certain pointer even with only 1 dump. BUT CAN BE FOUND WITH "LAST OFFSET" OPTION SET.
I'm always using noASLR cause its one of the best weird-problem solvers.

 

[tomberyx]

@Yohoki
About combo codes;

We know the usual codes for D-Pad but is it possible to use also the right stick below that would give more possibilities?


Other topic;

I know from experience that all Ratalika games are the most difficult to get stable codes.
Why;
It often happens that with 2 dumps you get 6+ results and this is not helpful because the third dump sets everything to zero.

All Ratalika games are a bit special if you want a pointer. Now things seem to be a bit easier with NoSL plugin but still not always easy.

There are a lot of Ratalika games that have not been hacked yet, so we should could do something about it and kick these games in the Ass...

 

[Yohoki]

I'm quite sure no settings are wrong——I've test it many times. I can't find the certain pointer even with only 1 dump. BUT CAN BE FOUND WITH "LAST OFFSET" OPTION SET.
I'm always using noASLR cause its one of the best weird-problem solvers.

I'm quite confident in my answer, that it is NOT there in at least one dump, but present in the other 5. I typically use HxD or Cheat Engine to inspect pointers. But that requires getting comfortable with HEX and raw data, which I'm aware not everyone is going to have fun with. If you have noASLR installed for all of those dumps, find a different pointer. It's probably not a good one. It's highlighted, so it IS in the seg1 range, but it's not a valid pointer in one of your dumps, meaning it's going to fail at times.

I get that "sometimes" these bad pointers work most of the time, and may even seem to work 100% of the time when we check it. But, you've no idea what the pointer is and what it's doing when that pointer isn't right. Maybe it's doing nothing. Maybe it writes to a useless part of memory, but also just as likely is maybe it's writing to a part of your savegame (corrupt save data)
or maybe it writes to a system file (game crash or worse).

It's better to find a good pointer if you have the option. I'd rather dig a bit better and explore other options than release a code that I already know isn't perfect.

@Yohoki
About combo codes;

We know the usual codes for D-Pad but is it possible to use also the right stick below that would give more possibilities?

It's probably possible, but it's not currently coded into vitacheat. But if you want more options, I don't think there's a limit to how many buttons you use in a code. Like, you should be able to make it L+R+[ ]+X.... Nothing's stopping you, that I know of.

Other topic;

I know from experience that all Ratalika games are the most difficult to get stable codes.
Why;
It often happens that with 2 dumps you get 6+ results and this is not helpful because the third dump sets everything to zero.

All Ratalika games are a bit special if you want a pointer. Now things seem to be a bit easier with NoSL plugin but still not always easy.

There are a lot of Ratalika games that have not been hacked yet, so we should could do something about it and kick these games in the Ass...

......Are you trying to temp me? XD

If you're going to do one, I found a list here that has some Top 10 (really more like 15) of their games on Vita. Unless you had a better idea, these would be a good place to start.

Specifically, this "Super Destronaut DX".... It should be possible to make a code that lets you scroll through weapon types. I did something similar on a few games, like "Plants vs Zombies" and "Birth of Isaac"..... The method was like this:

I hacked a value into a code cave,
Tracked that value
Used b200 to target vitacheat's Seg1
Made Changed the value part of the code in seg1
Use b200 to switch back to the game's seg0/1
Write the new, Changed value to the game

It's pretty complex, but can do some really cool stuff if done right. I detailed it on my PvZ PSV file: https://github.com/r0ah/vitacheat/blob/master/db/PCSE00064.psv

Spoiler: Item Select Code

_V0 --Square plus DPad Swaps Plants
### Initialize
#Check if 81888000 is blank
$D201 81888000 00000000
#Write normal data to 81888000 (05000100)
$0200 81888000 00010005
##End
#
### Controller Combo
#Check LB is 0
$D003 81888003 00000000
#Check Controller for R+Sq
$C202 00000001 00008020
#Mov single bit left
$5000 81888001 81888002
#Set LB to 1
$0000 81888003 00000001
##End
#
### Controller Combo
#Check LB is 0
$D003 81888003 00000000
#Check Controller for L+Sq
$C202 00000001 00008080
#Mov single bit right
$5000 81888001 81888000
#Set LB to 1
$0000 81888003 00000001
##End
#
#
### Apply Selection
#Check LB is 1
$D007 81888003 00000001
#Check S1 for 0x00
$D006 81888001 00000000
#Apply Set 0 to P.Compression
$7002 815FC1F0 00000E9C
$7200 00000000 00000090
$7702 00000000 00000000
$0008 00000074 00000001
#Set Normal Data to Set 0
$0000 81888000 00000005
$0000 81888002 00000001
##End
### Apply Selection
#Check LB is 1
$D007 81888003 00000001
#Check S1 for 0x00
$D006 81888001 00000001
#Apply Set 0 to P.Compression
$7002 815FC1F0 00000E9C
$7200 00000000 00000090
$7702 00000000 00000008
$0008 00000074 00000001
#Set Normal Data to Set 0
$0000 81888000 00000000
$0000 81888002 00000002
##End
### Apply Selection
#Check LB is 1
$D007 81888003 00000001
#Check S1 for 0x00
$D006 81888001 00000002
#Apply Set 0 to P.Compression
$7002 815FC1F0 00000E9C
$7200 00000000 00000090
$7702 00000000 00000010
$0008 00000074 00000001
#Set Normal Data to Set 0
$0000 81888000 00000001
$0000 81888002 00000003
##End
### Apply Selection
#Check LB is 1
$D007 81888003 00000001
#Check S1 for 0x00
$D006 81888001 00000003
#Apply Set 0 to P.Compression
$7002 815FC1F0 00000E9C
$7200 00000000 00000090
$7702 00000000 00000018
$0008 00000074 00000001
#Set Normal Data to Set 0
$0000 81888000 00000002
$0000 81888002 00000004
##End
### Apply Selection
#Check LB is 1
$D007 81888003 00000001
#Check S1 for 0x00
$D006 81888001 00000004
#Apply Set 0 to P.Compression
$7002 815FC1F0 00000E9C
$7200 00000000 00000090
$7702 00000000 00000020
$0008 00000074 00000001
#Set Normal Data to Set 0
$0000 81888000 00000003
$0000 81888002 00000005
##End
### Apply Selection
#Check LB is 1
$D007 81888003 00000001
#Check S1 for 0x00
$D006 81888001 00000005
#Apply Set 0 to P.Compression
$7002 815FC1F0 00000E9C
$7200 00000000 00000090
$7702 00000000 00000028
$0008 00000074 00000001
#Set Normal Data to Set 0
$0000 81888000 00000004
$0000 81888002 00000000
##End
#
#
### Reset to normal State
#Check LB is 1
$D002 81888003 00000001
#Check Controller for Sq alone
$C201 00000001 00008000
#Set LB to 0
$0000 81888003 00000000
##End
### Reset to normal State
#Check LB is 1
$D002 81888003 00000001
#Check Controller for L alone
$C201 00000001 00000080
#Set LB to 0
$0000 81888003 00000000
##End
### Reset to normal State
#Check LB is 1
$D002 81888003 00000001
#Check Controller for R alone
$C201 00000001 00000020
#Set LB to 0
$0000 81888003 00000000
##End

 

[monodevil]

Feels like finding pointers now went from finding a needle in a hay tack to finding a speck of dirt in a hay stack. Back to Freedom Wars and using noaslr.skprx.

Spoiler: Search

I pulled all nighters trying to find just "something" even with 100k offsets and still nothing. So my only clue was that maybe a couple of my dumps are bad seeing as I can only find pink/purple ones but I found that strange because I'm usually careful when it comes to making dumps.

So before I decided to make more dumps I took a peek with hxd and noticed that things were a complete mess of addresses. While I did have the right addresses and the dumps were "correct", the addresses above and below were all random strings in various sizes with no kind of pattern or anything in each dump. I then categorized the bad dumps(3 and 5) with the good dumps to see if I could get all 6 matching dumps and sure enough I did but took me 4 more dumps just to get 2 more good dumps.

Spoiler: Search 2

So either:
1) this game is still swapping memory sections even with ASLR off and still needs a condition. The old condition I had been using probably isn't it anymore since ASLR is off and have to find a new one.

2) vitacheat jumbles up the addresses when its searching or creating dumps.

For 1) I tried seeing if the bad dumps would match in tempAR but so far I haven't found anything yet. I still need to dig deeper though. For 2) Freedom Wars is really strange with it address where sometimes when making dumps during missions, enemies and party members would randomly fly or drop in random places on the map. Basically weird things start to happen when you make dumps during missions.

I worked with this game with @Yohoki years ago and end the end, it still feels like I'm doing the same thing we did with the previous codes done with ASLR on. Just fewer results to look for.

# PCSA00147 Freedom Wars US

# Version 1.22 + all the DLC

_V0 Infinite Max Ammo 2nd weapon slot
$B200 00000001 00000000
$3203 003D72BC 00000048
$3200 00000000 00000028
$3200 00000000 000003BC
$3300 00000000 000003E7

I haven't done much testing with that code as I'm burned out at the moment, plus carpel tunnel but this is the Infinite Max Ammo I was going to make years ago and never got around to it. I made an Infinite current Ammo years ago but that ended up crashing the game after using it for too long. I don't think the game could handle shooting that much ammo for too long so it could crash. Infinite Max Ammo should be a better code. Hate that I still need to do this for the 1st slot.

 

[Yohoki]

Feels like finding pointers now went from finding a needle in a hay tack to finding a speck of dirt in a hay stack. Back to Freedom Wars and using noaslr.skprx.

Spoiler: Search

View attachment 329566

I pulled all nighters trying to find just "something" even with 100k offsets and still nothing. So my only clue was that maybe a couple of my dumps are bad seeing as I can only find pink/purple ones but I found that strange because I'm usually careful when it comes to making dumps.

So before I decided to make more dumps I took a peek with hxd and noticed that things were a complete mess of addresses. While I did have the right addresses and the dumps were "correct", the addresses above and below were all random strings in various sizes with no kind of pattern or anything in each dump. I then categorized the bad dumps(3 and 5) with the good dumps to see if I could get all 6 matching dumps and sure enough I did but took me 4 more dumps just to get 2 more good dumps.

Spoiler: Search 2

View attachment 329641

So either:
1) this game is still swapping memory sections even with ASLR off and still needs a condition. The old condition I had been using probably isn't it anymore since ASLR is off and have to find a new one.

2) vitacheat jumbles up the addresses when its searching or creating dumps.

For 1) I tried seeing if the bad dumps would match in tempAR but so far I haven't found anything yet. I still need to dig deeper though. For 2) Freedom Wars is really strange with it address where sometimes when making dumps during missions, enemies and party members would randomly fly or drop in random places on the map. Basically weird things start to happen when you make dumps during missions.

I worked with this game with @Yohoki years ago and end the end, it still feels like I'm doing the same thing we did with the previous codes done with ASLR on. Just fewer results to look for.

# PCSA00147 Freedom Wars US

# Version 1.22 + all the DLC

_V0 Infinite Max Ammo 2nd weapon slot
$B200 00000001 00000000
$3203 003D72BC 00000048
$3200 00000000 00000028
$3200 00000000 000003BC
$3300 00000000 000003E7

I haven't done much testing with that code as I'm burned out at the moment, plus carpel tunnel but this is the Infinite Max Ammo I was going to make years ago and never got around to it. I made an Infinite current Ammo years ago but that ended up crashing the game after using it for too long. I don't think the game could handle shooting that much ammo for too long so it could crash. Infinite Max Ammo should be a better code. Hate that I still need to do this for the 1st slot.

It's funny. I also remembered this one being really difficult to get good dumps. I was going to try it out after I tested Ys8 and Criminal Girls, but I ended updating TempAR instead.

I'll have another look at this one again. IIRC, the game changed it's layout every time you enter a mission. So having more than one dump per mission doesn't help.... And (again, iirc) I think it was that mission 1 has a set area in ram, and mission 2 has a different set, etc.... not that each time you play mission 1 it randomizes.

I will have to look into all that again, though. It's been several years since I've tried hacking it.

 

[MNero]

hi could someone tell if there is a cheat for Resogun US version? I was playing the amazing spider man but it crashes on the loading screen, so until I solve this I'm going to play resogun.

 

[Yohoki]

hi could someone tell if there is a cheat for Resogun US version? I was playing the amazing spider man but it crashes on the loading screen, so until I solve this I'm going to play resogun.

https://gbatemp.net/search/2790648/?q=resogun&t=post&c[thread]=485343&o=relevance
There IS a search button.

 

[monodevil]

It's funny. I also remembered this one being really difficult to get good dumps. I was going to try it out after I tested Ys8 and Criminal Girls, but I ended updating TempAR instead.

I'll have another look at this one again. IIRC, the game changed it's layout every time you enter a mission. So having more than one dump per mission doesn't help.... And (again, iirc) I think it was that mission 1 has a set area in ram, and mission 2 has a different set, etc.... not that each time you play mission 1 it randomizes.

I will have to look into all that again, though. It's been several years since I've tried hacking it.

Yeah I almost never make dumps in the same mission or setting and usually just restart the game after finding what I needed. Or at least I do that now. Usually I just make dumps in different missions to try to get things all jumbled up. Where the 1st dump will be a random mission with no party members then close out of the game. Then 2nd dump will be a completely different mission or map but I'll add 1 or more party members, then repeat with more of fewer party members.

I'll try testing the code to see if it changes and plan to look into the bad dumps to see if I could find a pointer with those.