Hacking VitaCheat/FinalCheat Database

zeroviral

Well-Known Member
Member
Joined
Jul 31, 2018
Messages
108
Trophies
0
Age
31
XP
293
Country
Philippines
Dumgeon Travelers 2

First, I wanna thank Dynel for the awesome notez he posted, super helpful. 2nd I am typing this via PS Vita so please forgive the typos, have huge thunbs. 3rd these are not codes but a guideline on how to change level and stats real time. Reason fot this is that the game's offset jumps up and down.

You'll need goHANmem and/or vitacheat. Equipment that raises or decreases HP.

Character offsets could either follow or reverse the order of the default sort of characters in-game. It means starting with Alisia's offset could either be followed by Melvy's downwards or upwards, then Lilian's follow, etc. DLC characters starts with Konomi and ends with Mio which followed by Alisia onwards.

Let's get started.

1. Search the HP of a character you wanna change, do it till you have 3-5 results. Search for 2 offsets with a difference of 4, meaning an offset that ends with say 10 should be followed by 14. That is important don't alter just yet.
2. Now press triangle to browse the memory, look at the value does it have a hex value similar to it? If no try to search the other results, if yes, press up.
3. In that new line see if there is a value E4 D3 A5 81, highlighted in green when using goHANmem. if there is stay there, don't alter yet. Read next step.
4. once you see that value go to the value beside/right of 81, that is your character's level, max value 99(63 in hex). When you change it go back to the game and either equip something or change class to fix stats and unique skills problems. Do this 10 timez to crown, 11 to set to your desired level plus crown. 50 suggested 90-99 stops at 540 skill points(needs confirmation that this is max per character)
5. Go right and you'll notice 00 00 00, next to it is your total exp, don't alter or you'll crash. it uses 4 bytes.
6. On exp's right is your current hp max of 9999(3E7) 2 bytes, go skip 00 00, then now we have max hp.
7. The next 8 byte is now current tp and max tp both max at 999, i think.
8. after max tp is unaltered stats(meaning no equipment) starting with ATK, the DEF, INT, RES, DEX, AGI, Sl rest, St rest, Bs rest, Fire rest, Water rest, Lit rest, Earth rest and Air rest.
9. After those are current stats with equips.
10. For skill points, go back to level, then press down 19 times. that valu is skill points.

PS to make you don't mess up, don't be afraid to compare the value you want to alter to your current stat. This is so you don't get lost. Hope this helps, if not try to ask one of those who knows how to do this to post screenshot, as I can't, tried it but doesn't appear in photos.
 

Roah

Well-Known Member
Member
Joined
Sep 30, 2016
Messages
206
Trophies
0
Age
33
XP
416
Country
Burkina Faso
Anyone got cheats for toukiden 2 (pcse00940)
This should work with the US version, in theory. I successfully imported my JP savedata to the EN version so this means the savedata structure is the same.

Try it.
I'm getting DMA'd. 3.65 Enso here.

Regarding your previous comment, everything that you've said is true and I'll add this to the list. The Vita is just unpopular.
 

SoulEater98

Well-Known Member
Newcomer
Joined
Nov 6, 2010
Messages
68
Trophies
1
XP
658
Country
United States
# PCSE01153 Secret of Mana (NoNpDrm)

# Source: ported from https://github.com/roahnosh/vitacheat/blob/master/PCSG01121.psv by eighthdayregret

_V0 Infinite Gold
$0200 81963930 3B9AC9FF

_V0 Infinite HP
$0100 849CF98C 000003E7

_V0 Infinite Energy
$0100 849CF994 000003E8

_V0 Infinite HP/Energy
$0100 849CF98C 000003E7
$0100 849CF994 000003E8

_V0 Instant Level 99
$4200 849CF998 00000000
$0002 00000004 00000000


None of the codes work for me when I activate it.
 

Smoker1

Well-Known Member
Member
Joined
Feb 17, 2015
Messages
5,063
Trophies
1
Location
California
XP
6,133
Country
United States
@eighthdayregret : Went back to Urban Trial Freestyle after 2 Games did not come up with anything. But UTF had 0 Highlighted, so I tried 1 more MemDump, and it only had 1, but it had a offset of 0x0, but that Code did not do anything.
 

eighthdayregret

fnerrrrrrrrrr!
Member
Joined
Sep 27, 2017
Messages
493
Trophies
0
Age
43
Website
eighthsregrets.blogspot.com
XP
837
Country
United States
Yeah, they're dynamic. I'm working on them. Should have something tonight.
I give up. They've got to be multilevel pointers or something. I'm coming up empty.

@eighthdayregret : Went back to Urban Trial Freestyle after 2 Games did not come up with anything. But UTF had 0 Highlighted, so I tried 1 more MemDump, and it only had 1, but it had a offset of 0x0, but that Code did not do anything.
That could also be a multilevel pointer. When you find a result in your searches on VitaCheat, do a follow up search for the address for your result.

EDIT: Maybe I don't give up. I might try this multilevel pointer thing.
Simple (very, very overly simple) explanation: Find address for code. Search VitaCheat for that address. Continue doing so over and over.

Further edit: From what I gather from the internets, multilevel pointers should be sought thusly: find value as normal. Search for address that contains the address of the value as its value.
Repeat until you reach a result where the address does not yield any results when searched for as a value.
 
Last edited by eighthdayregret,
  • Like
Reactions: Smoker1

Roah

Well-Known Member
Member
Joined
Sep 30, 2016
Messages
206
Trophies
0
Age
33
XP
416
Country
Burkina Faso
Basically, TempAR can be used to find pointers, but unlike more advanced tools such as Cheat Engine, it only finds the upper most level pointer. Most games have multi-level pointers, some going as far as 5-6 deep. The problem with this is like so:

Imaginary base pointer: 0x81345678 (this is what we're trying to find)

In memory dump 1 it goes 0x81345678 -> 0x81F12D3A -> 0x82AC9830 -> 0x83D7BF00

But in memory dump 2 it goes: 0x81345678 -> 0x81F12D3A -> 8x82CA2364 -> 0x86F765A0

In TempAR you will see 0x83D7BF00 or 0x86F765A0 but because they differ between the two dumps it won't be highlighted as green. And you won't get green results until you go 3-4 levels deep. This makes it VERY time consuming to check all the black results multi-levels deep.

What they do instead is dump a decrypted eBoot, remove the SELF header (first 0x1000 bytes) and then they decompile that eBoot in a reverse engineering application like IDA Pro. Then they find the function that controls what they want to cheat (Ammo usage) and they write a new function to do something different (no Ammo usage) covert it into assembly and use the $AXXX code type to overwrite the game's function with their own custom one.

Basically, they don't have access to any special pointer finding program. They're just reading the eBoot's decrypted data and rewriting it. Now, if TempAR got multi-level pointer searching like Cheat Engine does or if Cheat Engine allowed us to define a starting address offset for memory dumps like TempAR does, then we would likely be able to find pointers much easier.
I've tried tempar before using the above information but never got any results so I gave up :). And I just realized that Ive been doing it wrong based on smoker's message to me as he got substantial result. Just sharing this post by analog.

Also now that we can decrypt and use decrypted nonpdrm eboot thanks to dot's repatch, maybe well learn more on how they code their release at speedfly once theyh release a cheat for nonpdrm game with dma. If they have already then share it.

Edit: interesting. This has been a very productive day. Thanks @AnalogMan, @Smoker1 and @eighthdayregret
 
Last edited by Roah,
  • Like
Reactions: Smoker1

zeroviral

Well-Known Member
Member
Joined
Jul 31, 2018
Messages
108
Trophies
0
Age
31
XP
293
Country
Philippines
Can anyone point me to a guide to help me find the experience addresses for demon gaze 2 please?

Exp and all address changes/shifts every game session. To search for exp gained in battle make sure to search the value shown every battle and you'll find it. Remove Aquarius and Cancer as their Exp gain messes up the searching process. You'll find around 2-3 address' and It's usually the 1st or 2nd. Set it to 15,000,000 as max to not crash, 9,999,999 max for aquarius and cancer. It will crash if set higher for them since they can increase exp gain. It should allow you to jump from Level 1-68-98-99 or 3-4 levels at level 60+ with a full party. For items, Set an item, usually Crystals or Gold and 2x Gem or what you want to increase in your inventory, slot depended. Search it's value in 8-bit say like 27 Maintainance Crystal in slot 5, once you have done first search, sell 10 then reasearch, sell 10 again the search then sell till you have 1, now you'll be narrowed to 2-3 adress'. Chnge either the 1st or 2nd to 99 max. Now that slot will increase consumables to 99 when it's that slot. You can store 98 of that item (you need to have 1 of that item in the slot or you'll have to withdraw 1) to Prometh too and since you have 1 left it will return to 99. The stored item stays, saving will also retain the value 99 once you closed the game. You'll have to research though for new sessions as the adress shifts.

Hope these helps.
 
Last edited by zeroviral,

susanoomon

Well-Known Member
Member
Joined
Jun 23, 2015
Messages
498
Trophies
0
Age
34
XP
1,818
Country
United States
Exp and all address changes/shifts every game session. To search for exp gained in battle make sure to search the value shown every battle and you'll find it. Remove Aquarius and Cancer as their Exp gain messes up the searching process. You'll find around 2-3 address' and It's usually the 1st or 2nd. Set it to 15,000,000 as max to not crash, 9,999,999 max for aquarius and cancer. It will crash if set higher for them since they can increase exp gain. It should allow you to jump from Level 1-68-98-99 or 3-4 levels at level 60+ with a full party. For items, Set an item, usually Crystals or Gold and 2x Gem or what you want to increase in your inventory, slot depended. Search it's value in 8-bit say like 27 Maintainance Crystal in slot 5, once you have done first search, sell 10 then reasearch, sell 10 again the search then sell till you have 1, now you'll be narrowed to 2-3 adress'. Chnge either the 1st or 2nd to 99 max. Now that slot will increase consumables to 99 when it's that slot. You can store 98 of that item (you need to have 1 of that item in the slot or you'll have to withdraw 1) to Prometh too and since you have 1 left it will return to 99. The stored item stays, saving will also retain the value 99 once you closed the game. You'll have to research though for new sessions as the adress shifts.

Hope these helps.
How do I search for it though I don't know how to find it.... I've never done this before....
 

Smoker1

Well-Known Member
Member
Joined
Feb 17, 2015
Messages
5,063
Trophies
1
Location
California
XP
6,133
Country
United States
Interesting past few Days. @eighthdayregret helped me figure out another way to find Cheats using the TempAR Pointer Search. While a few Games will not coperate with me, I did manage to find a couple of Pointer Codes
Mahjong Royal Towers - TURN OFF before reaching the Level Selection, or the Game will Crash.
_V0 Low Time-Turn OFF after Lvl
$3201 820C0C78 000000C4
$3300 00020001 30000000

Urban Trial Freestyle (US) - Tried finding the "Challenge - Inf Time" Code.......no such luck. No Highlighted Paths. But....
Challenge - Inf Fuel
$3201 8131C57C 00000010
$3300 00000000 442F0000
 

Smoker1

Well-Known Member
Member
Joined
Feb 17, 2015
Messages
5,063
Trophies
1
Location
California
XP
6,133
Country
United States
@Roah : Yeah, the next bit I am trying to wrap my head around is, Pinball Games and the Tilt. I know a User created a No Tilt Cheat for Pinball Heroes, but I have tried to find it, and even in Pinball Arcade. Did not work out so well.
 

monodevil

Well-Known Member
Member
Joined
Apr 2, 2013
Messages
288
Trophies
1
XP
1,050
Country
United States
I had to find this myself as I have had no luck with online searches.
FFX PCSB00395
_V0 Equipment Ability Modifier
$0000 8262AD4A 000000xx - Ability #1
$0000 8262AD4C 000000xx - Ability #2
$0000 8262AD4E 000000xx - Ability #3
$0000 8262AD50 000000xx - Ability #4

This is the offsets for the first weapon/armor in slot 1 of your inventory.
Hope this makes someone's day as it has been all I was after for ages lol.

Edit: For some reason it messes with slot #2 of the weapon inventory if set as $0200, has no problems
as $0000.

Just tried this and it works perfectly on the US version of Final Fantasty X [PCSE00293] now I just need a list of the Ability values. Was wondering if it'll be the same as the PS2 version.

And speaking of Final Fantasty X, I also just tried the Everyone Get AP After Battle code from speedfly and it works perfectly as well. Only issue is that it also include people not in your group like Seymour, was wondering if it was possable to remove Seymour being included in that code.

_V0 Everyone Get AP After Battle /战斗后所有人都有AP
$A200 811CA8B8 F920F3F6
$A200 815C0AFC 0790F240
$A200 815C0B00 2763F2C8
$A200 815C0B04 3101F05F
$A200 815C0B08 60796039
$A200 815C0B0C 62B96279
$A200 815C0B10 1DC8F990
$A100 815C0B14 00004770
 

zeroviral

Well-Known Member
Member
Joined
Jul 31, 2018
Messages
108
Trophies
0
Age
31
XP
293
Country
Philippines
How do I search for it though I don't know how to find it.... I've never done this before....
First fight a battle say at 666th Ave. On the battle result you'll see Exp at the top left and Gim at top right. Say you get 100 Exp and 150 Gim. Stay there, don't click X or O, open vitacheat. Go to search press start to reset to make sure you are doin fresh search and select 32-bit and enter 100. Wait till it shows all result, now go back to the game. Fight another battle, at the next result screen say you got 87 Exp stay there again and on search replace 100 with 87 then click search again, do this till the result says 5 or less memory address and 0 temp address. Now press triangle, it'll show then the address wth an arrow pointing to it's value like [0x8xxxxxxx(address/offset) -> FFFFFFFF (value in hex)]. Make sure the value is the same as your search only in hex format. Use a scientific calculator or hex to dec converter if you must. You can then press start to save one to the cheats list. Now go there and change the value, by pressing circle you can modify the value. You can use square to change from Hex, Dec and Nan/Float while changing, press Circle to save. You'll be back to cheats list then just press Square to activate (highlighted in blue). Fight to see if the exp changed to the value you entered. If not try the other results, repeat the value changing and testing. If you meant as in hex edit mode, well at the vita search result just press triangle raher then start. You'll be shown the Memory in the left and the valuez arranged from left to right. The format is in little endian, meaning that hex value like 0053FAB7 is written as B7 FA 53 00. This is only if you know what you're doing as this results to crashing, when altering wrong offsets. I'd love to put a screen shot but Vita-chan can't save ss from vitacheat and gohanmem as stated in my DT2 stat altering.

--------------------- MERGED ---------------------------

Just tried this and it works perfectly on the US version of Final Fantasty X [PCSE00293] now I just need a list of the Ability values. Was wondering if it'll be the same as the PS2 version.

And speaking of Final Fantasty X, I also just tried the Everyone Get AP After Battle code from speedfly and it works perfectly as well. Only issue is that it also include people not in your group like Seymour, was wondering if it was possable to remove Seymour being included in that code.

_V0 Everyone Get AP After Battle /战斗后所有人都有AP
$A200 811CA8B8 F920F3F6
$A200 815C0AFC 0790F240
$A200 815C0B00 2763F2C8
$A200 815C0B04 3101F05F
$A200 815C0B08 60796039
$A200 815C0B0C 62B96279
$A200 815C0B10 1DC8F990
$A100 815C0B14 00004770

Possible but you'll have to find it in that codes 1-by-1 and do trial and error. I am not sure but looking at those strings it's either it's tied to another character ala Marcus and Eiko from FFIX or one of those is for Seymour and was included accidentally. Leaning on the former as it happens. in some FF. In that particular case I don't think they included Seymour willingly. Urgh, even in cdes he haunts us.
 
Last edited by zeroviral,

Roah

Well-Known Member
Member
Joined
Sep 30, 2016
Messages
206
Trophies
0
Age
33
XP
416
Country
Burkina Faso
@Roah : Yeah, the next bit I am trying to wrap my head around is, Pinball Games and the Tilt. I know a User created a No Tilt Cheat for Pinball Heroes, but I have tried to find it, and even in Pinball Arcade. Did not work out so well.
It takes a lot of effort and time to look for multi-pointers. Unless im actually playing the game I don't think ill be looking for those pointers.
Just tried this and it works perfectly on the US version of Final Fantasty X [PCSE00293] now I just need a list of the Ability values. Was wondering if it'll be the same as the PS2 version.

And speaking of Final Fantasty X, I also just tried the Everyone Get AP After Battle code from speedfly and it works perfectly as well. Only issue is that it also include people not in your group like Seymour, was wondering if it was possable to remove Seymour being included in that code.

_V0 Everyone Get AP After Battle /战斗后所有人都有AP
$A200 811CA8B8 F920F3F6
$A200 815C0AFC 0790F240
$A200 815C0B00 2763F2C8
$A200 815C0B04 3101F05F
$A200 815C0B08 60796039
$A200 815C0B0C 62B96279
$A200 815C0B10 1DC8F990
$A100 815C0B14 00004770
Is there any reason why you guys are not using the FFX save editor :) It's more efficient compared to vitacheat as you can edit everything like adding abilities to all of your party's weapons and armors. The vitacheat doesn't even have modifiers where you can choose (edit) from multiple values for a specific address.

About the APs, here's the code for infinite s.level. I stop working on the vitacheat code because of two things:
  1. Vitacheat's limitation. Only 50 code descriptors is allowed.
  2. I couldn't get the in-battle HP/MP/Overdrive cheat to work. It gets overriden by the game. This means vitacheat doesnt have anything to offer that the editor can't do.
The vitacheat from speedfly is from a maidump game where they hacked the decrypted eboot and reprogrammed the game.
 
Last edited by Roah, , Reason: Choose from multiple values

zeroviral

Well-Known Member
Member
Joined
Jul 31, 2018
Messages
108
Trophies
0
Age
31
XP
293
Country
Philippines
It takes a lot of effort and time to look for multi-pointers. Unless im actually playing the game I don't think ill be looking for those pointers.

Is there any reason why you guys are not using the FFX save editor :) It's more efficient compared to vitacheat as you can edit everything like adding abilities to all of your party's weapons and armors. The vitacheat doesn't even have modifiers where you can choose (edit) from multiple values for a specific address.

About the APs, here's the for infinite s.level. I stop working on the vitacheat code because of two things:
  1. Vitacheat's limitation. Only 50 code descriptors is allowed.
  2. I couldn't get the in-battle HP/MP/Overdrive cheat to work. It gets overriden by the game. This means vitacheat doesnt have anything to offer that the editor can't do.
The vitacheat from speedfly is from a maidump


Might be because he doesn't have an access to PC. If I remember correctly the save editor is a PC application. Honestly my laptop keeps pressing period so typing is hard. Especially for ftp transfer. I had to search for a work around and vitacheat and gohanmem suffices, for now. I would still use the editor for the Weapons, no way will I make myself lose my mind trying in getting those.
 
Last edited by zeroviral,

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • No one is chatting at the moment.
    SylverReZ @ SylverReZ: https://www.youtube.com/watch?v=_PiiXM51oBo