S1N
07-07-2009, 11:31 AM
Hey CodingHS,
Im S1N aka 7H3 N!GH7M4R3 and im applying for a 1337 coder position.
~What i can do~
Things to do with PSP Hacking
Un-DMA Codes
Write Subroutines
Port Codes (easy as hell)
Write Jokers
Write 3 Button Jokers
Make templates for other users
Basic Codes of course
And I know MIPS
Things Not to Do With PSP Hacking
I can Code In LUA
I am learning C++ and have proggramed a few things
I can do a little bit of GFX
Here Are A few of my Codes
;Dragon Ball Z Shin Budokai Another Road
;ULUS-10234
#Universal Infi Health
;All credits to S1N
;works all modes
0x00324608 0x00001194
0x0032460C 0x00001194
0x003246C0 0x00001194
0x003D629C 0x458CA000
0x003D62A4 0x458CA000
#Training Mode Combo
;all credits to s1n
0x00488C48 0x3B9AC9FF
0x002B8014 0x000F423F
0x00324744 0x0001869F
0x00324748 0x0001869F
0x00324740 0x0001869F
0x0032473C 0x0001869F
0x003248B8 0x00000000
0x003248BC 0x00000000
0x00324750 0x0000270F
0x0032474C 0x0000270F
#Real Max Skill Levels
;credits to s1n
0x002B9DD8 0x00000063
0x002B9DE4 0x00000063
0x002B9DEC 0x00000063
0x002B9DE0 0x00000063
#1337 cam3ra angle
;you fighting right behind your player
;hard to cntrl
;credits to s1n
0x0031D8EC 0x00001E01
#Ultimate Showdown
;lets see you win 40 matches in a row
;credits to s1n
0x00322FC8 0x00000028
;Star Wars Renegade Squadron
;ULUS-10292
;All Codes here were made by s1n
#No Sound
;ALL credits to S1N
0x00320A24 0x00000000
0x00320A28 0x00000000
#Opponent Cannot Respawn
;server sided
;ALL credits to S1N
0x00428F74 0x00000000
#SWRS SkyFlashRunner and autowalk
;credits to original founder for address
;credits to S1N for value
0x0032BC64 0xBCD00000
#No Person View
;ALL CREDITS TO S1N
;working on making a first person view
;which shows only the gun
;ALL CREDITS TO S1N
0x002EE252 0x3080
0x002EE26A 0x3080
#Infinite People all Maps
;Xx-7H3 N!GH7M4R3-xX
;-includes all maps
;on Galactic Conquest
;-no credits for opponent
;-Inf Credits 4 you
;-Set CHEAT HZ to 15/1000
0x0082AA7C 0xFFFFFFFF
0x0082AA88 0xFFFFFFFF
0x0082AA04 0xFFFFFFFF
0x0082AA28 0xFFFFFFFF
0x0082AAA0 0xFFFFFFFF
0x0082AA64 0xFFFFFFFF
0x0082AA70 0xFFFFFFFF
0x0082AA40 0xFFFFFFFF
0x0082AA58 0xFFFFFFFF
0x0082AA1C 0xFFFFFFFF
0x0082AA10 0xFFFFFFFF
0x0082AA94 0xFFFFFFFF
0x0082AA4C 0xFFFFFFFF
0x0082AAAC 0xFFFFFFFF
0x0082A984 0xFFFFFFFF
0x0082A9F8 0xFFFFFFFF
0x0082A9D0 0x00000000
#Unstable Surroundings
;7H3 N!GH7M4R3
;works on all maps except space
;works online also
0x00351B28 0x0000
0x00381B28 0x0000
#!42 Bots in Game
;7H3 N!GH7M4R3
;offline
0x004294D0 0x00000000
#200 CTF Limit
;credit 7H3 N!GH7M4R3
;offline
0x004294E8 0x000000C8
#Instant Hero
;credit 7H3 N!GH7M4R3
0x004294E0 0x00000000
;when u spawn it will ask if you
;wanna be hero and if you say no
;it will wait for 30sec until asking again
;offline
#!100 Person Game - Online
;7H3 N!GH7M4R3
0x004294D8 0x00000000
#32 Humans in game - Online
;7H3 N!GH7M4R3
0x0031BB40 0x00000020
#200 CTF Limit - Online
;7H3 N!GH7M4R3
0x004294E8 0x000000C8
#Instant Hero - Online
;credit 7H3 N!GH7M4R3
0x004294E0 0x00000000
#Hosted Game Combo Online
;credit 7H3 N!GH7M4R3
;Instant Hero,200 CTF Limit
;100 Person Game(will appear on
;dedicated servers)
;32 Humans instead of 8
0x004294E0 0x00000000
0x004294E8 0x000000C8
0x004294D8 0x00000064
0x0031BB40 0x00000020
#[Release]No Units
;shows no Unit sign at the top of screen-
;-ALL CREDITS TO 7H3 N!GH7M4R3-
0x004294E4 0xFFFFFFFF
#[Release] 63353 Units-WORKS
;ALL CREDITS TO 7H3 N!GH7M4R3
;[Warning]MAJOR LAG!!!!!
0x004294E4 0x0000FFFF
#No Pause Game
;credit 7H3 N!GH7M4R3
0x00315FA0 0xFFFFFFFF
#Always Your Movement Phase
;7H3 N!GH7M4R3
;GCQ/Galactic Conquest
0x0082A8A0 0x00000004
0x0082A8A4 0x00000004
#You Send out 1000 Troops
;7H3 N!GH7M4R3
;GCQ/Galactic Connquest
0x0082A900 0x000003E8
#Inf Jet Pack
;credit 7H3 N!GH7M4R3
0x007FB38C 0x5FFFFFFF
0x007FB48C 0x5FFFFFFF
#Suicide
;credit 7H3 N!GH7M4R3
0x002EE3C4 0x9FFFFFFF
#Perfected Negative Infinite Hea
;credit 7H3 N!GH7M4R3
;you can take over CP,CTF and go into
;water and lava
0x002EE3C4 0xFFFFFFFF
#No Overheat
;Credit 7H3 N!GH7M4R3
;For space also.
0x002EF85C 0x7F000000
0x002EF88C 0x7F000000
#Health Lock-Level 1
;Credit 7H3 N!GH7M4R3
0x002EE3C4 0x1FFFFFFF
#Health Lock-Level 2
;Credit 7H3 N!GH7M4R3
0x002EE3C4 0x2FFFFFFF
#Health Lock-Level 3
;Credit 7H3 N!GH7M4R3
0x002EE3C4 0x3FFFFFFF
#Health Lock-Infinite
;Game is ruined so here it is
0x002EE3C4 0x6FFFFFFF
;These codes i found while messing around with Inf Health
;all the health lock are credit to me and the infinite health isnt
#Game Instant Over
;credit 7H3 N!GH7M4R3
0x0031613C 0x46500000
0x003285A4 0x46500000
;respawn and give it a second and it will be over
#God Mode
;credit 7H3 N!GH7M4R3
0x002EE252 0x4080
0x002EE26A 0x4080
#INFNITE AMMO BOWCASTER
;credit 7H3 N!GH7M4R3!
0x007E3604 0xFFFFFFFF
#!!---VIP Releases----
#Inf Ammo 3 Guns
0x007E27B4 0x0000FFFF
0x007E2B5C 0x0000FFFF
0x007E05C4 0x0000FFFF
0x007E23DC 0x0000FFFF
0x007E2730 0x0000FFFF
0x007E5AB0 0x0000FFFF
#Rapid Fire 3 Guns
0x007E2798 0x00000099
0x007E2B4C 0x00000060
#Modded Flash
;Credit 7H3 N!GH7M4R3
0x002EB5D4 0x418C0000
#INFNITE AMMO BOWCASTER
;credit 7H3 N!GH7M4R3!
0x007E3604 0xFFFFFFFF
;Medal Of Honor Heroes 2
;ULUS-10310
#R-F All Weapons DM
;all except Base
;no rapid fire for MP40 and M1 Garand
;7H3 N!GH7M4R3
0x00FA6A10 0xFF060014
0x00FA5930 0xFF640005
0x00FA5CF0 0xFF0E0014
0x00FA6BF0 0xFF640008
0x00FA6650 0xFF640005
0x00FA5B10 0xFF320008
0x00FA60B0 0xFF0E001E
0x00FA6FB0 0xFF320001
0x00FA7190 0xFF320001
0x00F6D5E0 0xFF060014
0x00F6D9A0 0xFF0E0014
0x00F6D400 0xFF640008
0x00F6D7C0 0xFF640005
0x00F6CE60 0xFF320008
0x00F6DD60 0xFF320001
0x00F6D220 0xFF0E001E
0x00F6C8C0 0xFF640005
0x00F6E300 0xFF320001
0x00DFAF70 0xFF060014
0x00B797A0 0xFF0E0014
0x00DFA610 0xFF0E0014
0x00DFABB0 0xFF280007
0x00DFA9D0 0xFF640005
0x00DFA430 0xFF320008
0x00DFB6F0 0xFF320001
0x00DFBC90 0xFF320001
0x00F491C0 0xFF060014
0x00F493A0 0xFF0E0014
0x00F47F00 0xFF640005
0x00F49580 0xFF320008
0x00F49B20 0xFF320001
0x00F48680 0xFF0E001E
0x00F480E0 0xFF640005
0x00F48FE0 0xFF280007
0x00F49D00 0xFF320001
0x00F90370 0xFF060014
0x00F90730 0xFF0E0014
0x00F90EB0 0xFF640005
0x00F91090 0xFF320008
0x00F919F0 0xFF320001
0x00F8FBF0 0xFF0E001E
0x00F8FFB0 0xFF640005
0x00F91630 0xFF320001
#Tommy Explosives all maps
0x00FA6A24 0xBC289EAE
0x00FA6A50 0x00010000
0x00F6D5F4 0xBC289EAE
0x00F6D620 0x00010000
0x00DFAF84 0xBC289EAE
0x00DFAFB8 0x00010000
0x00F491D0 0xBC289EAE
0x00F49200 0x00010000
0x00F90384 0xBC289EAE
0x00F903B0 0x00010000
0x00F6AF04 0xBC289EAE
0x00F6AF30 0x00010000
;Star Wars The Force Unleashed
;ULUS-10345
#No Health-Kento Nion
;Credit 7H3 N!GH7M4R3
;Force Duel Mode
;and Vader Story Mode
0x0112DF42 0x0000
0x0112DFF2 0x0000
0x0112E25A 0x0000
#No Health-Asaji Ventress
;Credit 7H3 N!GH7M4R3
;Force Duel Mode
0x01118982 0x0000
0x01118A32 0x0000
#No Health-Darth Desolous
;Credit 7H3 N!GH7M4R3
;Force Duel Mode
0x010F6FC2 0x0000
0x010F7072 0x0000
0x010F72DA 0x0000
#No Health-Rahm Kota
;Credit 7H3 N!GH7M4R3
;Force Duel Mode
0x010EA942 0x0000
0x010EA9F2 0x0000
0x010EAC5A 0x0000
#No Health-Count Dooku
;Credit 7H3 N!GH7M4R3
;Force Duel Mode
0x01170882 0x0000
0x01170932 0x0000
0x01170B9A 0x0000
#No Health-Mace Windu
;Credit 7H3 N!GH7M4R3
;Force Duel Mode
0x010CA1C2 0x0000
0x010CA272 0x0000
0x010CA4DA 0x0000
0x010FB212 0x0000
#!!----------------------------
#!!-------Infinite Health Codes--
#!!-----------------------------
#!Inf Health[Order 66,ForceDuel]
;Credit 7H3 N!GH7M4R3
0x00C611C2 0xFFFF
0x00C612F2 0xFFFF
0x00C6155A 0xFFFF
#Inf Health Vader Story
;Credit 7H3 N!GH7M4R3
0x00C60982 0xFFFF
0x00C60AB2 0xFFFF
0x00C60D1A 0xFFFF
0x00CF2A1A 0xFFFF
0x00CF3226 0xFFFF
#Inf Health Historic Missions
;Credit 7H3 N!GH7M4R3
0x00C61282 0xFFFF
0x00C613B2 0xFFFF
0x00C6161A 0xFFFF
#!!------------------------------
#!!-------Misc Codes-------------
#!!------------------------------
#!Kung Fu Fighting Mode
;ALL CREDITS TO S1N!!!
;Do Not Enable In Vader Story!!
;This is a 42 line code that makes your character look like
;he is kung fu fighting
0x00483374 0x44BE33D1
0x0048ED64 0x44BE33D1
0x00A1EB54 0x455BC9C7
0x00A212D4 0x455BC9C7
0x00A23A54 0x455BC9C7
0x00A261D4 0x455BC9C7
0x00A28954 0x455BC9C7
0x00A2B0D4 0x455BC9C7
0x00A2D854 0x455BC9C7
0x00C09AD4 0x456119C7
0x00C22130 0x455BC9C7
0x00C22134 0x456669C7
0x00C411F0 0x455BC9C7
0x00C411F4 0x456669C7
0x00C4120C 0x455BC9C7
0x00C4129C 0x456119C7
0x00C4CDE4 0x45612CC6
0x00C4CE5C 0x456A8CC6
0x00C4CEDC 0x45650247
0x00C4D014 0x45612CC6
0x00C610D4 0x456119C7
0x00C61104 0x455BC9C7
0x00C611A4 0x456BB9C7
0x00C63164 0x455BC9C7
0x00D44544 0x455BC9C7
0x00D46694 0x455BC9C7
0x00D467C4 0x455E99C7
0x00D467D4 0x456399C7
0x00D46814 0xFFFFFFFF
0x00D46824 0xFFFFFFFF
0x00D46864 0xFFFFFFFF
0x00D46874 0xFFFFFFFF
0x00D46984 0xFFFFFFFF
;Cod:RTV
#Gold Medalist
;gives you Gold Medals in all
;except accuracy
;ALL CREDITS TO S1N
0xFFFFFFFF 0x003223F4
0x00000454 0x00000200
0x00000450 0x00000100
0x00000448 0x00000000
#Infinite Grenades
;made by S1N
;CHT HZ 15/1000
0xFFFFFFFF 0x003223F4
0x0000020C 0x00000050
#Infnite Thompson Ammo
;made by S1N
0xFFFFFFFF 0x003223F4
0x00000148 0x00000014
Tutorials I have Made
How to Write A Simple Subroutine
#Editable Subroutine For MOHH2
;credits to s1n
[0x001bf714 0x0a3a00d4] = Do Not Change
0x00680350 0x3c08[First 4 Of Address (real addressing) ]
0x00680354 0x3c09[First 4 Of Hex Value]
0x00680358 0x2529[Last 4 Of Hex Value]
0x0068035c 0xad09[Last 4 Of Address (real addressing) ]
0x00680360 [0x03e00008] = Do Not Change
Feel free to change the addresses (0x00680350+) if you are already using a subroutine using those addresses
=How to Make A Subroutine using Ps2Dis=
Step 1
Get a Ram Dump of your game. Today we're using MOHH2.
Step 2
Open Up Ps2Dis and load your dump and set the address table at 08e80000.
This is how it should look like -
Load From - 00000000
Address From - 08e80000
Step 3
Now We need to find the Code Cave. A code cave is simply a big bunch of zeros. To find the code cave we do this.
Press Ctrl + F and a box should pop up. Hold 0 for about 7-10 seconds and stop. Check the "Hex String" box and hit enter.
Now you should see lots off addresses and the values will all be 0x00000000 and the command will be "nop"
Step 4
Now minimize Ps2Dis and get a code that you want to make a subroutine of. Convert it to real format by adding 88000000 with a hex calculator. Now once you have your address in real format (do not convert hex into real ; leave hex as it is throughout the guide ; do not do anything to the hex) paste it into notepad alongside with your hex. Ill just use "See Thru Walls".
#See Through Walls
0x00355CAC 0x3c05F000 in Fake format
#see through walls
0x08B55CAC 0x3c05f000 in Real format
Step 5
Now double click anywhere on a line and a box should pop up saying
Address [XXXXXXXX] Data [XXXXXXXX]
Label [___________________________________]
Comment [_____________________________________]
Command[nop___________________]
Step 6
Ignore Everything except the Command box. Change the "nop" command to "lui t0 $[first 4 of code address]".
So this would be mine -
lui t0 $08b6
If the 2nd half of the address is bigger than 8000 then we add 1 to the command. That is why instead of 08b5 it is 08b6
Step 7
Now go to the next one after that line. Double click it and change the command to "lui t1 $[first 4 of hex value]"
So this would be mine
lui t1 $3c05
Step 8
Now it gets a little tricky.But dont stop now! It's fairly easy if you have good eyes.
Double Click the next line and change the command to "addiu t1 t1 $[Last 4 of hex value]"
So this would be mine -
addiu t1 t1 $f000
Step 9
Now its a little more tricky than the last. This part is very important.
Double Click the next line and change the command to "sw t1 $[last 4 of code address](t0)"
So this would be mine -
sw t1 $5CAC(t0)
MAKE SURE YOU ADD (t0) WITH THE BRACKETS AFTER THE 4 NUMBERS!!!DO NOT PUT A SPACE BETWEEN $xxxx AND (t0) !!!
Step 10
This part is probably the easiest of the steps.
Double click the next line and change the command to "jr ra"
So this would be mine -
jr ra
That simple?
Now we are almost done!
All we need to is add a hook! The hook for MOHH2 is "0x001bf714" Now We need to add a value for the hook. We can find the value by double clicking the line after the jr ra and adding this command "J $[the first address of the subroutine ( the address that you started the subroutine on) ]
So this is how mine would be
J $08e8254 because i started my subroutine at 08e8254
Now a value should come up on the line taht you entered the "J" command on.
Copy that value and paste it into notepad beside your Hook address.
This is how mine looks -
0x001bf714 0x0a3a0095
The First Address is the Hook and the value beside it is the Jump value.
Now copy ALL your subroutine addresses and paste em into notepad. Convert em into fake by subtracting 8800000. DO NOT SUBTRACT THE VALUES!!!
So this is my code
#See Though Walls Subroutine
;subroutined by s1n
0x001bf714 0x0a3a0095
0x00680254 0x3c0808b6
0x00680258 0x3c093c05
0x0068025c 0x2529f000
0x00680260 0xad095cac
0x00680264 0x03e00008
========================================
================Thanks==================
========================================
Thanks goes to Sly Xcross for his template and advice about the "addiu t1 t1 $xxxx".
Thanks also to MJKT for helping me with the template and giving me help with "ori t1 t1 $xxxx
The Hook for Mohh2 is below so if you want it and you have not read the guide...
MOHH2 Hook = 0x001bf714
S1N's ULTIMATE GUIDE TO DEFEATING DMA!! VERY SIMPLE!!
Hey Guys,
Today i'm gonna show you hot to defeat DMA!!! After today you can tell DMA to suck your dick !!
This guide is very noob-proof providing you can follow instructions.
~~~~~~~~~~~~~~~~~~Table Of Contents~~~~~~~~~~~~~~~~~~~~
1. Definition Of DMA
2.Requirements
3.Arranging Everything
4. Guide
5.Thanks
6. Bonus~ Spoiler Codes and Proof!
7.Alternate Way Of Making Dumps
~~~~~~~~~~~
Definiton
~~~~~~~~~~~
For those of you that don't know, DMA means Dynamic Memory Allocation. In short, it means that the game rotates the addresses of most things in whatever game you're playing, so it is "harder to hack".
Thanks to HaxCommunity for the definition.
~~~~~~~~~~~
Requirements
~~~~~~~~~~~
~~~~~~~~
Legend
~~~~~~~~
* = Optional
^ = refer to bottom
+ = compulsary
-DMA Hunter+
-Call Of Duty Roads To Victory*
-nitePR^1
-NotePad^2
-80MB space on your PSP+
-USB Cable+
-A Brain+
^1 = or any other cheat device that can take RAM Dumps of the addresses but nitePR is preffered
^2 = Or any other writing thingy.( i.e: Microsoft Word, WordPad )
~~~~~~~~~~~~~~~~~
Arranging Everything
~~~~~~~~~~~~~~~~~
First off.
If your using Call Of Duty Roads To Victory then put it on your ISO folder in your PSP.
Put DMA Hunter and NotePad on your desktop. And Of course, add nitePR to your PSP.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Guide
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Im going to make this into easy baby steps. We are gonna be making Infinite Ammo for the Thompson Gun.
Step 1
Open Up NotePad and switch on your PSP and start COD:RTV (or your game)
Step 2
Go into any level and fire a few shots (more than 14 atleast)
Step 3
Search your number. In my case i fired 17 shots. The Tommy gun starts off with 20 shots so 20-17=3. So I search 3. Then reload your clip and fire more shots. I fired 5 more. So 20-5=15. There are 15 more shots in my clip left. So search 15.
Step 4
You should have 1 address there. If you dont, repeat Step 2-3 until you get 1 address. Change the value to 0x00000014 ( in Dec. it will be 20 ).
Enable The Code. Now go back into the game. Fire shots and you will see that your ammo didnt change. Now Go back to nitePR and press R three times. You will now be in the PRX section. Now scroll down to
Dump Ram? Slot 0 .
Hit X.
WRITE DOWN THE ADDRESS OF THE CODE YOU JUST FOUND IN NOTEPAD!!!!!!!!!!!!!
Step 5
Repeat "Steps 2-4" 2 more times.
[B]Step 6
Connect your PSP to the PC via USB cable. In the "ms0/:" ( PSP ROOT ) you should see 3 24MB files there named
[B]Dump0
Dump1
Dump2
If they are there you probably did it right. Now close the window. Open DMA Hunter. This is what it will say-
SANiK's DMA code hunter
Please get ready to select the two dumps
(Press enter to start)
Press Enter and it will tell you to choose a RAM Dump.
Navigate to your PSP drive and choose Ram Dumps 0 and 1.
You Will see This message
[QUOTE] Enter Your Address of Ram Dump 1.
Please Enter HEX ONLY (0xEF123...etc) -
Enter Your First address and then the same message will show up.
Enter your SECOND address and hit Enter.
Now this is probably what it will say-
Searching...
Found, address 0X3223F4, value changed from 0X9D028B0 to 0X9D68690
~~~~~~~~~~Junk~~~~~~~~~~
~~~~~~~~~~Junk~~~~~~~~~~
~~~~~~~~~~Junk~~~~~~~~~~
Press any key to continue . . .
Not Sure about the 0X9D028B0 part but i can almost guarantee it will say 3223F4. ( If your using COD:RTV )
Right Click on the DMA Hunter and Click Mark. Select all of it and hit Enter.
Copy it to NotePad.
[B]Step 7
Repeat the second half of Step 6 2 more times like this for the Dumps.
After Dump 1 and 2
do
Dump 2 and 3
after dump 2 and 3
do
Dump 1 and 3
Now Find a Common address in all 3 Dumps. ( most probably 0x3223F4 )
Step 8
~~~~The Code~~~~
A DMA code is made up of 2 parts.
An Example is like this
0xFFFFFFFF 0x12121211
0x11 0x1000
0xFFFFFFFF tells nitePR that its a DMA Pointer.
0x12121211 is the address of the pointer
Step 9
Found, address 0X3223F4, value changed from 0X9D028B0 to 0X9D68690
0X9D028B0 = where the pointer points to in RAM Dump 1
nitePR addresses are not always in CHEAT format. 0X9D028B0 is in REAL format. We must CONVERT it into cheat format.
Step 9.5
How to convert-
Open up Calculator and go to the View drop-down bar and click Scientific. You will now see HEX at the far right on a multiple choice bubble option.
Click it.
Now Paste your address and subtract it by 880000
Example-
0X9D028B0-8800000 = 15028B0
You have your converted address.
Step 10
We Made it this far!!! Dont Stop Now!!!
Now this is what you must do.
Remember you wrote down the address of the first DMA'd code?
Well mine was-
15029F8
We must now do this.
[QUOTE] 0X9D028B0-8800000 = 15028B0
Take this number 15028B0 (cheat formatted address) and do this
15029F8-15028B0= 148
If you are using Call of duty roads to victory then that will be the address you end up with.
This is our code now -
#Infnite Thompson Ammo
;made by S1N
0xFFFFFFFF 0x003223F4
0x00000148 0x????????
? = add your own value.
Well, that took a while didn't it?
It took me 2 hours and nothing to eat but crackers and water =/ .
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
THANKS
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Well i would like to thank a few people for helping me write this guide.
HaxCommunity for giving me the base of the guide.
WazGoingOn for giving HaxCommunity the base of your guide XD.
Oby1Chick for making me a hacker.
Kimo (though i dont know you...) for the base of the guide.
And You my reader,
for giving me the inspiration to write this guide and not give up no matter how hungry i was. XD .
Im hoping for a sticky and feel free to post here if you need any help with UNDMAing codes.
I will not hesitate to help.
~~~~~~~~~~~~~~~~~~~~~
Spoilers
~~~~~~~~~~~~~~~~~~~~~
Here are a few DMA codes Call Of Duty Roads To Victory
#Infinite Grenades
;made by S1N
0xFFFFFFFF 0x003223F4
0x0000020C 0x00000050
#Infnite Thompson Ammo
;made by S1N
0xFFFFFFFF 0x003223F4
0x00000148 0x00000014
#No Shots Fired
;This will give you a gold medal for Shots Fired
;at the end of the level when the rewards are given
;ALL credits to S1N
0xFFFFFFFF 0x003223F4
0x448 0x00000000
I understand that these codes may have been made before but i have the proof that i have made these codes and here is the proof.
Inf Nades
#Dump 1
0x013D47Fc 0x00000050
#Dump 2
0x013ea5ec 0x00000050
#Dump 3
0x0156FEBC 0x00000050
-------------------------------------------------
Dump 1 and 2
Searching...
Found, address 0X3223F4, value changed from 0X9BD45F0 to 0X9BEA3E0
Found, address 0X17FF308, value changed from 0X9BD45F0 to 0X9BEA3E0
Press any key to continue . . .
Dump 2 and 3
Searching...
Found, address 0X32177C, value changed from 0X9BEA150 to 0X9D6FA20
Found, address 0X3223F4, value changed from 0X9BEA3E0 to 0X9D6FCB0
Found, address 0X12F6EA4, value changed from 0X9BEABD0 to 0X9D704A0
Found, address 0X12F6EA8, value changed from 0X9BEABD0 to 0X9D704A0
Found, address 0X12FCB80, value changed from 0X9BEA150 to 0X9D6FA20
Press any key to continue . . .
Dump 1 and 3
Searching...
Found, address 0X3223F4, value changed from 0X9BD45F0 to 0X9BEA3E0
Found, address 0X17FF308, value changed from 0X9BD45F0 to 0X9BEA3E0
Press any key to continue . . .
---------------------------------------------------------------
Same In All 3-
Found, address 0X3223F4, value changed from 0X9BD45F0 to 0X9BEA3E0
Found, address 0X17FF308, value changed from 0X9BD45F0 to 0X9BEA3E0
---------------------------------------------------------------------
Code-
#Infinite Grenades
;made by S1N
0xFFFFFFFF 0x003223F4
0x0000020C 0x00000050
Infinite Thompson Ammo
No need for prooof for this one right?
No Shots Fired
Dump 1
0x01400DB8
Dump 2
0x013d2c18
-----------
Dump 3
[0x01547BC8 ~ not needed]
------------------------------------
DUMP 1 and 2
Searching...
Found, address 0X3223F4, value changed from 0X9C00970 to 0X9BD27D0
Found, address 0X12FCC78, value changed from 0X9C00970 to 0X9BD27D0
Found, address 0X12FCC80, value changed from 0X9C00970 to 0X9BD27D0
Press any key to continue . . .
------------------------------------
Code
#No Shots Fired
;This will give you a gold medal for Shots Fired
;at the end of the level when the rewards are given
;ALL credits to S1N
0xFFFFFFFF 0x003223F4
0x00000448 0x00000000
01400DB8
1400970
~~~~~~~~~~~~~~~~~~~~~~~~~
Alternate Method of Dumping
~~~~~~~~~~~~~~~~~~~~~~~~~
Well there is another way of dumping RAM which needs CheatMaster
get nitePR and CheatMaster installed on your PSP and create the codes like how i explained in the guide but just when ur taking a dump use cheatmaster to dump the ram which provides a better and more results for DMA hunter to use
But i acutally prefer the nitePR way as its more convienient as it comes on the root and if your using cheatmaster it comes in the cheatmaster folder which is really deep into the memory stick.
Thank you for viewing this thread and i hope you become a DMA hacker.
Well Thats About it , as soon as i get on my Laptop i will post the Codes i made for UCUS 98668 Resistance Retribution
Well Thanks for your time
:)
S1N
Im S1N aka 7H3 N!GH7M4R3 and im applying for a 1337 coder position.
~What i can do~
Things to do with PSP Hacking
Un-DMA Codes
Write Subroutines
Port Codes (easy as hell)
Write Jokers
Write 3 Button Jokers
Make templates for other users
Basic Codes of course
And I know MIPS
Things Not to Do With PSP Hacking
I can Code In LUA
I am learning C++ and have proggramed a few things
I can do a little bit of GFX
Here Are A few of my Codes
;Dragon Ball Z Shin Budokai Another Road
;ULUS-10234
#Universal Infi Health
;All credits to S1N
;works all modes
0x00324608 0x00001194
0x0032460C 0x00001194
0x003246C0 0x00001194
0x003D629C 0x458CA000
0x003D62A4 0x458CA000
#Training Mode Combo
;all credits to s1n
0x00488C48 0x3B9AC9FF
0x002B8014 0x000F423F
0x00324744 0x0001869F
0x00324748 0x0001869F
0x00324740 0x0001869F
0x0032473C 0x0001869F
0x003248B8 0x00000000
0x003248BC 0x00000000
0x00324750 0x0000270F
0x0032474C 0x0000270F
#Real Max Skill Levels
;credits to s1n
0x002B9DD8 0x00000063
0x002B9DE4 0x00000063
0x002B9DEC 0x00000063
0x002B9DE0 0x00000063
#1337 cam3ra angle
;you fighting right behind your player
;hard to cntrl
;credits to s1n
0x0031D8EC 0x00001E01
#Ultimate Showdown
;lets see you win 40 matches in a row
;credits to s1n
0x00322FC8 0x00000028
;Star Wars Renegade Squadron
;ULUS-10292
;All Codes here were made by s1n
#No Sound
;ALL credits to S1N
0x00320A24 0x00000000
0x00320A28 0x00000000
#Opponent Cannot Respawn
;server sided
;ALL credits to S1N
0x00428F74 0x00000000
#SWRS SkyFlashRunner and autowalk
;credits to original founder for address
;credits to S1N for value
0x0032BC64 0xBCD00000
#No Person View
;ALL CREDITS TO S1N
;working on making a first person view
;which shows only the gun
;ALL CREDITS TO S1N
0x002EE252 0x3080
0x002EE26A 0x3080
#Infinite People all Maps
;Xx-7H3 N!GH7M4R3-xX
;-includes all maps
;on Galactic Conquest
;-no credits for opponent
;-Inf Credits 4 you
;-Set CHEAT HZ to 15/1000
0x0082AA7C 0xFFFFFFFF
0x0082AA88 0xFFFFFFFF
0x0082AA04 0xFFFFFFFF
0x0082AA28 0xFFFFFFFF
0x0082AAA0 0xFFFFFFFF
0x0082AA64 0xFFFFFFFF
0x0082AA70 0xFFFFFFFF
0x0082AA40 0xFFFFFFFF
0x0082AA58 0xFFFFFFFF
0x0082AA1C 0xFFFFFFFF
0x0082AA10 0xFFFFFFFF
0x0082AA94 0xFFFFFFFF
0x0082AA4C 0xFFFFFFFF
0x0082AAAC 0xFFFFFFFF
0x0082A984 0xFFFFFFFF
0x0082A9F8 0xFFFFFFFF
0x0082A9D0 0x00000000
#Unstable Surroundings
;7H3 N!GH7M4R3
;works on all maps except space
;works online also
0x00351B28 0x0000
0x00381B28 0x0000
#!42 Bots in Game
;7H3 N!GH7M4R3
;offline
0x004294D0 0x00000000
#200 CTF Limit
;credit 7H3 N!GH7M4R3
;offline
0x004294E8 0x000000C8
#Instant Hero
;credit 7H3 N!GH7M4R3
0x004294E0 0x00000000
;when u spawn it will ask if you
;wanna be hero and if you say no
;it will wait for 30sec until asking again
;offline
#!100 Person Game - Online
;7H3 N!GH7M4R3
0x004294D8 0x00000000
#32 Humans in game - Online
;7H3 N!GH7M4R3
0x0031BB40 0x00000020
#200 CTF Limit - Online
;7H3 N!GH7M4R3
0x004294E8 0x000000C8
#Instant Hero - Online
;credit 7H3 N!GH7M4R3
0x004294E0 0x00000000
#Hosted Game Combo Online
;credit 7H3 N!GH7M4R3
;Instant Hero,200 CTF Limit
;100 Person Game(will appear on
;dedicated servers)
;32 Humans instead of 8
0x004294E0 0x00000000
0x004294E8 0x000000C8
0x004294D8 0x00000064
0x0031BB40 0x00000020
#[Release]No Units
;shows no Unit sign at the top of screen-
;-ALL CREDITS TO 7H3 N!GH7M4R3-
0x004294E4 0xFFFFFFFF
#[Release] 63353 Units-WORKS
;ALL CREDITS TO 7H3 N!GH7M4R3
;[Warning]MAJOR LAG!!!!!
0x004294E4 0x0000FFFF
#No Pause Game
;credit 7H3 N!GH7M4R3
0x00315FA0 0xFFFFFFFF
#Always Your Movement Phase
;7H3 N!GH7M4R3
;GCQ/Galactic Conquest
0x0082A8A0 0x00000004
0x0082A8A4 0x00000004
#You Send out 1000 Troops
;7H3 N!GH7M4R3
;GCQ/Galactic Connquest
0x0082A900 0x000003E8
#Inf Jet Pack
;credit 7H3 N!GH7M4R3
0x007FB38C 0x5FFFFFFF
0x007FB48C 0x5FFFFFFF
#Suicide
;credit 7H3 N!GH7M4R3
0x002EE3C4 0x9FFFFFFF
#Perfected Negative Infinite Hea
;credit 7H3 N!GH7M4R3
;you can take over CP,CTF and go into
;water and lava
0x002EE3C4 0xFFFFFFFF
#No Overheat
;Credit 7H3 N!GH7M4R3
;For space also.
0x002EF85C 0x7F000000
0x002EF88C 0x7F000000
#Health Lock-Level 1
;Credit 7H3 N!GH7M4R3
0x002EE3C4 0x1FFFFFFF
#Health Lock-Level 2
;Credit 7H3 N!GH7M4R3
0x002EE3C4 0x2FFFFFFF
#Health Lock-Level 3
;Credit 7H3 N!GH7M4R3
0x002EE3C4 0x3FFFFFFF
#Health Lock-Infinite
;Game is ruined so here it is
0x002EE3C4 0x6FFFFFFF
;These codes i found while messing around with Inf Health
;all the health lock are credit to me and the infinite health isnt
#Game Instant Over
;credit 7H3 N!GH7M4R3
0x0031613C 0x46500000
0x003285A4 0x46500000
;respawn and give it a second and it will be over
#God Mode
;credit 7H3 N!GH7M4R3
0x002EE252 0x4080
0x002EE26A 0x4080
#INFNITE AMMO BOWCASTER
;credit 7H3 N!GH7M4R3!
0x007E3604 0xFFFFFFFF
#!!---VIP Releases----
#Inf Ammo 3 Guns
0x007E27B4 0x0000FFFF
0x007E2B5C 0x0000FFFF
0x007E05C4 0x0000FFFF
0x007E23DC 0x0000FFFF
0x007E2730 0x0000FFFF
0x007E5AB0 0x0000FFFF
#Rapid Fire 3 Guns
0x007E2798 0x00000099
0x007E2B4C 0x00000060
#Modded Flash
;Credit 7H3 N!GH7M4R3
0x002EB5D4 0x418C0000
#INFNITE AMMO BOWCASTER
;credit 7H3 N!GH7M4R3!
0x007E3604 0xFFFFFFFF
;Medal Of Honor Heroes 2
;ULUS-10310
#R-F All Weapons DM
;all except Base
;no rapid fire for MP40 and M1 Garand
;7H3 N!GH7M4R3
0x00FA6A10 0xFF060014
0x00FA5930 0xFF640005
0x00FA5CF0 0xFF0E0014
0x00FA6BF0 0xFF640008
0x00FA6650 0xFF640005
0x00FA5B10 0xFF320008
0x00FA60B0 0xFF0E001E
0x00FA6FB0 0xFF320001
0x00FA7190 0xFF320001
0x00F6D5E0 0xFF060014
0x00F6D9A0 0xFF0E0014
0x00F6D400 0xFF640008
0x00F6D7C0 0xFF640005
0x00F6CE60 0xFF320008
0x00F6DD60 0xFF320001
0x00F6D220 0xFF0E001E
0x00F6C8C0 0xFF640005
0x00F6E300 0xFF320001
0x00DFAF70 0xFF060014
0x00B797A0 0xFF0E0014
0x00DFA610 0xFF0E0014
0x00DFABB0 0xFF280007
0x00DFA9D0 0xFF640005
0x00DFA430 0xFF320008
0x00DFB6F0 0xFF320001
0x00DFBC90 0xFF320001
0x00F491C0 0xFF060014
0x00F493A0 0xFF0E0014
0x00F47F00 0xFF640005
0x00F49580 0xFF320008
0x00F49B20 0xFF320001
0x00F48680 0xFF0E001E
0x00F480E0 0xFF640005
0x00F48FE0 0xFF280007
0x00F49D00 0xFF320001
0x00F90370 0xFF060014
0x00F90730 0xFF0E0014
0x00F90EB0 0xFF640005
0x00F91090 0xFF320008
0x00F919F0 0xFF320001
0x00F8FBF0 0xFF0E001E
0x00F8FFB0 0xFF640005
0x00F91630 0xFF320001
#Tommy Explosives all maps
0x00FA6A24 0xBC289EAE
0x00FA6A50 0x00010000
0x00F6D5F4 0xBC289EAE
0x00F6D620 0x00010000
0x00DFAF84 0xBC289EAE
0x00DFAFB8 0x00010000
0x00F491D0 0xBC289EAE
0x00F49200 0x00010000
0x00F90384 0xBC289EAE
0x00F903B0 0x00010000
0x00F6AF04 0xBC289EAE
0x00F6AF30 0x00010000
;Star Wars The Force Unleashed
;ULUS-10345
#No Health-Kento Nion
;Credit 7H3 N!GH7M4R3
;Force Duel Mode
;and Vader Story Mode
0x0112DF42 0x0000
0x0112DFF2 0x0000
0x0112E25A 0x0000
#No Health-Asaji Ventress
;Credit 7H3 N!GH7M4R3
;Force Duel Mode
0x01118982 0x0000
0x01118A32 0x0000
#No Health-Darth Desolous
;Credit 7H3 N!GH7M4R3
;Force Duel Mode
0x010F6FC2 0x0000
0x010F7072 0x0000
0x010F72DA 0x0000
#No Health-Rahm Kota
;Credit 7H3 N!GH7M4R3
;Force Duel Mode
0x010EA942 0x0000
0x010EA9F2 0x0000
0x010EAC5A 0x0000
#No Health-Count Dooku
;Credit 7H3 N!GH7M4R3
;Force Duel Mode
0x01170882 0x0000
0x01170932 0x0000
0x01170B9A 0x0000
#No Health-Mace Windu
;Credit 7H3 N!GH7M4R3
;Force Duel Mode
0x010CA1C2 0x0000
0x010CA272 0x0000
0x010CA4DA 0x0000
0x010FB212 0x0000
#!!----------------------------
#!!-------Infinite Health Codes--
#!!-----------------------------
#!Inf Health[Order 66,ForceDuel]
;Credit 7H3 N!GH7M4R3
0x00C611C2 0xFFFF
0x00C612F2 0xFFFF
0x00C6155A 0xFFFF
#Inf Health Vader Story
;Credit 7H3 N!GH7M4R3
0x00C60982 0xFFFF
0x00C60AB2 0xFFFF
0x00C60D1A 0xFFFF
0x00CF2A1A 0xFFFF
0x00CF3226 0xFFFF
#Inf Health Historic Missions
;Credit 7H3 N!GH7M4R3
0x00C61282 0xFFFF
0x00C613B2 0xFFFF
0x00C6161A 0xFFFF
#!!------------------------------
#!!-------Misc Codes-------------
#!!------------------------------
#!Kung Fu Fighting Mode
;ALL CREDITS TO S1N!!!
;Do Not Enable In Vader Story!!
;This is a 42 line code that makes your character look like
;he is kung fu fighting
0x00483374 0x44BE33D1
0x0048ED64 0x44BE33D1
0x00A1EB54 0x455BC9C7
0x00A212D4 0x455BC9C7
0x00A23A54 0x455BC9C7
0x00A261D4 0x455BC9C7
0x00A28954 0x455BC9C7
0x00A2B0D4 0x455BC9C7
0x00A2D854 0x455BC9C7
0x00C09AD4 0x456119C7
0x00C22130 0x455BC9C7
0x00C22134 0x456669C7
0x00C411F0 0x455BC9C7
0x00C411F4 0x456669C7
0x00C4120C 0x455BC9C7
0x00C4129C 0x456119C7
0x00C4CDE4 0x45612CC6
0x00C4CE5C 0x456A8CC6
0x00C4CEDC 0x45650247
0x00C4D014 0x45612CC6
0x00C610D4 0x456119C7
0x00C61104 0x455BC9C7
0x00C611A4 0x456BB9C7
0x00C63164 0x455BC9C7
0x00D44544 0x455BC9C7
0x00D46694 0x455BC9C7
0x00D467C4 0x455E99C7
0x00D467D4 0x456399C7
0x00D46814 0xFFFFFFFF
0x00D46824 0xFFFFFFFF
0x00D46864 0xFFFFFFFF
0x00D46874 0xFFFFFFFF
0x00D46984 0xFFFFFFFF
;Cod:RTV
#Gold Medalist
;gives you Gold Medals in all
;except accuracy
;ALL CREDITS TO S1N
0xFFFFFFFF 0x003223F4
0x00000454 0x00000200
0x00000450 0x00000100
0x00000448 0x00000000
#Infinite Grenades
;made by S1N
;CHT HZ 15/1000
0xFFFFFFFF 0x003223F4
0x0000020C 0x00000050
#Infnite Thompson Ammo
;made by S1N
0xFFFFFFFF 0x003223F4
0x00000148 0x00000014
Tutorials I have Made
How to Write A Simple Subroutine
#Editable Subroutine For MOHH2
;credits to s1n
[0x001bf714 0x0a3a00d4] = Do Not Change
0x00680350 0x3c08[First 4 Of Address (real addressing) ]
0x00680354 0x3c09[First 4 Of Hex Value]
0x00680358 0x2529[Last 4 Of Hex Value]
0x0068035c 0xad09[Last 4 Of Address (real addressing) ]
0x00680360 [0x03e00008] = Do Not Change
Feel free to change the addresses (0x00680350+) if you are already using a subroutine using those addresses
=How to Make A Subroutine using Ps2Dis=
Step 1
Get a Ram Dump of your game. Today we're using MOHH2.
Step 2
Open Up Ps2Dis and load your dump and set the address table at 08e80000.
This is how it should look like -
Load From - 00000000
Address From - 08e80000
Step 3
Now We need to find the Code Cave. A code cave is simply a big bunch of zeros. To find the code cave we do this.
Press Ctrl + F and a box should pop up. Hold 0 for about 7-10 seconds and stop. Check the "Hex String" box and hit enter.
Now you should see lots off addresses and the values will all be 0x00000000 and the command will be "nop"
Step 4
Now minimize Ps2Dis and get a code that you want to make a subroutine of. Convert it to real format by adding 88000000 with a hex calculator. Now once you have your address in real format (do not convert hex into real ; leave hex as it is throughout the guide ; do not do anything to the hex) paste it into notepad alongside with your hex. Ill just use "See Thru Walls".
#See Through Walls
0x00355CAC 0x3c05F000 in Fake format
#see through walls
0x08B55CAC 0x3c05f000 in Real format
Step 5
Now double click anywhere on a line and a box should pop up saying
Address [XXXXXXXX] Data [XXXXXXXX]
Label [___________________________________]
Comment [_____________________________________]
Command[nop___________________]
Step 6
Ignore Everything except the Command box. Change the "nop" command to "lui t0 $[first 4 of code address]".
So this would be mine -
lui t0 $08b6
If the 2nd half of the address is bigger than 8000 then we add 1 to the command. That is why instead of 08b5 it is 08b6
Step 7
Now go to the next one after that line. Double click it and change the command to "lui t1 $[first 4 of hex value]"
So this would be mine
lui t1 $3c05
Step 8
Now it gets a little tricky.But dont stop now! It's fairly easy if you have good eyes.
Double Click the next line and change the command to "addiu t1 t1 $[Last 4 of hex value]"
So this would be mine -
addiu t1 t1 $f000
Step 9
Now its a little more tricky than the last. This part is very important.
Double Click the next line and change the command to "sw t1 $[last 4 of code address](t0)"
So this would be mine -
sw t1 $5CAC(t0)
MAKE SURE YOU ADD (t0) WITH THE BRACKETS AFTER THE 4 NUMBERS!!!DO NOT PUT A SPACE BETWEEN $xxxx AND (t0) !!!
Step 10
This part is probably the easiest of the steps.
Double click the next line and change the command to "jr ra"
So this would be mine -
jr ra
That simple?
Now we are almost done!
All we need to is add a hook! The hook for MOHH2 is "0x001bf714" Now We need to add a value for the hook. We can find the value by double clicking the line after the jr ra and adding this command "J $[the first address of the subroutine ( the address that you started the subroutine on) ]
So this is how mine would be
J $08e8254 because i started my subroutine at 08e8254
Now a value should come up on the line taht you entered the "J" command on.
Copy that value and paste it into notepad beside your Hook address.
This is how mine looks -
0x001bf714 0x0a3a0095
The First Address is the Hook and the value beside it is the Jump value.
Now copy ALL your subroutine addresses and paste em into notepad. Convert em into fake by subtracting 8800000. DO NOT SUBTRACT THE VALUES!!!
So this is my code
#See Though Walls Subroutine
;subroutined by s1n
0x001bf714 0x0a3a0095
0x00680254 0x3c0808b6
0x00680258 0x3c093c05
0x0068025c 0x2529f000
0x00680260 0xad095cac
0x00680264 0x03e00008
========================================
================Thanks==================
========================================
Thanks goes to Sly Xcross for his template and advice about the "addiu t1 t1 $xxxx".
Thanks also to MJKT for helping me with the template and giving me help with "ori t1 t1 $xxxx
The Hook for Mohh2 is below so if you want it and you have not read the guide...
MOHH2 Hook = 0x001bf714
S1N's ULTIMATE GUIDE TO DEFEATING DMA!! VERY SIMPLE!!
Hey Guys,
Today i'm gonna show you hot to defeat DMA!!! After today you can tell DMA to suck your dick !!
This guide is very noob-proof providing you can follow instructions.
~~~~~~~~~~~~~~~~~~Table Of Contents~~~~~~~~~~~~~~~~~~~~
1. Definition Of DMA
2.Requirements
3.Arranging Everything
4. Guide
5.Thanks
6. Bonus~ Spoiler Codes and Proof!
7.Alternate Way Of Making Dumps
~~~~~~~~~~~
Definiton
~~~~~~~~~~~
For those of you that don't know, DMA means Dynamic Memory Allocation. In short, it means that the game rotates the addresses of most things in whatever game you're playing, so it is "harder to hack".
Thanks to HaxCommunity for the definition.
~~~~~~~~~~~
Requirements
~~~~~~~~~~~
~~~~~~~~
Legend
~~~~~~~~
* = Optional
^ = refer to bottom
+ = compulsary
-DMA Hunter+
-Call Of Duty Roads To Victory*
-nitePR^1
-NotePad^2
-80MB space on your PSP+
-USB Cable+
-A Brain+
^1 = or any other cheat device that can take RAM Dumps of the addresses but nitePR is preffered
^2 = Or any other writing thingy.( i.e: Microsoft Word, WordPad )
~~~~~~~~~~~~~~~~~
Arranging Everything
~~~~~~~~~~~~~~~~~
First off.
If your using Call Of Duty Roads To Victory then put it on your ISO folder in your PSP.
Put DMA Hunter and NotePad on your desktop. And Of course, add nitePR to your PSP.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Guide
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Im going to make this into easy baby steps. We are gonna be making Infinite Ammo for the Thompson Gun.
Step 1
Open Up NotePad and switch on your PSP and start COD:RTV (or your game)
Step 2
Go into any level and fire a few shots (more than 14 atleast)
Step 3
Search your number. In my case i fired 17 shots. The Tommy gun starts off with 20 shots so 20-17=3. So I search 3. Then reload your clip and fire more shots. I fired 5 more. So 20-5=15. There are 15 more shots in my clip left. So search 15.
Step 4
You should have 1 address there. If you dont, repeat Step 2-3 until you get 1 address. Change the value to 0x00000014 ( in Dec. it will be 20 ).
Enable The Code. Now go back into the game. Fire shots and you will see that your ammo didnt change. Now Go back to nitePR and press R three times. You will now be in the PRX section. Now scroll down to
Dump Ram? Slot 0 .
Hit X.
WRITE DOWN THE ADDRESS OF THE CODE YOU JUST FOUND IN NOTEPAD!!!!!!!!!!!!!
Step 5
Repeat "Steps 2-4" 2 more times.
[B]Step 6
Connect your PSP to the PC via USB cable. In the "ms0/:" ( PSP ROOT ) you should see 3 24MB files there named
[B]Dump0
Dump1
Dump2
If they are there you probably did it right. Now close the window. Open DMA Hunter. This is what it will say-
SANiK's DMA code hunter
Please get ready to select the two dumps
(Press enter to start)
Press Enter and it will tell you to choose a RAM Dump.
Navigate to your PSP drive and choose Ram Dumps 0 and 1.
You Will see This message
[QUOTE] Enter Your Address of Ram Dump 1.
Please Enter HEX ONLY (0xEF123...etc) -
Enter Your First address and then the same message will show up.
Enter your SECOND address and hit Enter.
Now this is probably what it will say-
Searching...
Found, address 0X3223F4, value changed from 0X9D028B0 to 0X9D68690
~~~~~~~~~~Junk~~~~~~~~~~
~~~~~~~~~~Junk~~~~~~~~~~
~~~~~~~~~~Junk~~~~~~~~~~
Press any key to continue . . .
Not Sure about the 0X9D028B0 part but i can almost guarantee it will say 3223F4. ( If your using COD:RTV )
Right Click on the DMA Hunter and Click Mark. Select all of it and hit Enter.
Copy it to NotePad.
[B]Step 7
Repeat the second half of Step 6 2 more times like this for the Dumps.
After Dump 1 and 2
do
Dump 2 and 3
after dump 2 and 3
do
Dump 1 and 3
Now Find a Common address in all 3 Dumps. ( most probably 0x3223F4 )
Step 8
~~~~The Code~~~~
A DMA code is made up of 2 parts.
An Example is like this
0xFFFFFFFF 0x12121211
0x11 0x1000
0xFFFFFFFF tells nitePR that its a DMA Pointer.
0x12121211 is the address of the pointer
Step 9
Found, address 0X3223F4, value changed from 0X9D028B0 to 0X9D68690
0X9D028B0 = where the pointer points to in RAM Dump 1
nitePR addresses are not always in CHEAT format. 0X9D028B0 is in REAL format. We must CONVERT it into cheat format.
Step 9.5
How to convert-
Open up Calculator and go to the View drop-down bar and click Scientific. You will now see HEX at the far right on a multiple choice bubble option.
Click it.
Now Paste your address and subtract it by 880000
Example-
0X9D028B0-8800000 = 15028B0
You have your converted address.
Step 10
We Made it this far!!! Dont Stop Now!!!
Now this is what you must do.
Remember you wrote down the address of the first DMA'd code?
Well mine was-
15029F8
We must now do this.
[QUOTE] 0X9D028B0-8800000 = 15028B0
Take this number 15028B0 (cheat formatted address) and do this
15029F8-15028B0= 148
If you are using Call of duty roads to victory then that will be the address you end up with.
This is our code now -
#Infnite Thompson Ammo
;made by S1N
0xFFFFFFFF 0x003223F4
0x00000148 0x????????
? = add your own value.
Well, that took a while didn't it?
It took me 2 hours and nothing to eat but crackers and water =/ .
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
THANKS
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Well i would like to thank a few people for helping me write this guide.
HaxCommunity for giving me the base of the guide.
WazGoingOn for giving HaxCommunity the base of your guide XD.
Oby1Chick for making me a hacker.
Kimo (though i dont know you...) for the base of the guide.
And You my reader,
for giving me the inspiration to write this guide and not give up no matter how hungry i was. XD .
Im hoping for a sticky and feel free to post here if you need any help with UNDMAing codes.
I will not hesitate to help.
~~~~~~~~~~~~~~~~~~~~~
Spoilers
~~~~~~~~~~~~~~~~~~~~~
Here are a few DMA codes Call Of Duty Roads To Victory
#Infinite Grenades
;made by S1N
0xFFFFFFFF 0x003223F4
0x0000020C 0x00000050
#Infnite Thompson Ammo
;made by S1N
0xFFFFFFFF 0x003223F4
0x00000148 0x00000014
#No Shots Fired
;This will give you a gold medal for Shots Fired
;at the end of the level when the rewards are given
;ALL credits to S1N
0xFFFFFFFF 0x003223F4
0x448 0x00000000
I understand that these codes may have been made before but i have the proof that i have made these codes and here is the proof.
Inf Nades
#Dump 1
0x013D47Fc 0x00000050
#Dump 2
0x013ea5ec 0x00000050
#Dump 3
0x0156FEBC 0x00000050
-------------------------------------------------
Dump 1 and 2
Searching...
Found, address 0X3223F4, value changed from 0X9BD45F0 to 0X9BEA3E0
Found, address 0X17FF308, value changed from 0X9BD45F0 to 0X9BEA3E0
Press any key to continue . . .
Dump 2 and 3
Searching...
Found, address 0X32177C, value changed from 0X9BEA150 to 0X9D6FA20
Found, address 0X3223F4, value changed from 0X9BEA3E0 to 0X9D6FCB0
Found, address 0X12F6EA4, value changed from 0X9BEABD0 to 0X9D704A0
Found, address 0X12F6EA8, value changed from 0X9BEABD0 to 0X9D704A0
Found, address 0X12FCB80, value changed from 0X9BEA150 to 0X9D6FA20
Press any key to continue . . .
Dump 1 and 3
Searching...
Found, address 0X3223F4, value changed from 0X9BD45F0 to 0X9BEA3E0
Found, address 0X17FF308, value changed from 0X9BD45F0 to 0X9BEA3E0
Press any key to continue . . .
---------------------------------------------------------------
Same In All 3-
Found, address 0X3223F4, value changed from 0X9BD45F0 to 0X9BEA3E0
Found, address 0X17FF308, value changed from 0X9BD45F0 to 0X9BEA3E0
---------------------------------------------------------------------
Code-
#Infinite Grenades
;made by S1N
0xFFFFFFFF 0x003223F4
0x0000020C 0x00000050
Infinite Thompson Ammo
No need for prooof for this one right?
No Shots Fired
Dump 1
0x01400DB8
Dump 2
0x013d2c18
-----------
Dump 3
[0x01547BC8 ~ not needed]
------------------------------------
DUMP 1 and 2
Searching...
Found, address 0X3223F4, value changed from 0X9C00970 to 0X9BD27D0
Found, address 0X12FCC78, value changed from 0X9C00970 to 0X9BD27D0
Found, address 0X12FCC80, value changed from 0X9C00970 to 0X9BD27D0
Press any key to continue . . .
------------------------------------
Code
#No Shots Fired
;This will give you a gold medal for Shots Fired
;at the end of the level when the rewards are given
;ALL credits to S1N
0xFFFFFFFF 0x003223F4
0x00000448 0x00000000
01400DB8
1400970
~~~~~~~~~~~~~~~~~~~~~~~~~
Alternate Method of Dumping
~~~~~~~~~~~~~~~~~~~~~~~~~
Well there is another way of dumping RAM which needs CheatMaster
get nitePR and CheatMaster installed on your PSP and create the codes like how i explained in the guide but just when ur taking a dump use cheatmaster to dump the ram which provides a better and more results for DMA hunter to use
But i acutally prefer the nitePR way as its more convienient as it comes on the root and if your using cheatmaster it comes in the cheatmaster folder which is really deep into the memory stick.
Thank you for viewing this thread and i hope you become a DMA hacker.
Well Thats About it , as soon as i get on my Laptop i will post the Codes i made for UCUS 98668 Resistance Retribution
Well Thanks for your time
:)
S1N