[PC/PSP] Creating NitePR codes with DMA[Dynamic Memory Allocation]

For those of you that don't know, DMA means Dynamic Memory Allocation. In short, it means that the game rotates the addresses of most things in whatever game you're playing, so it is "harder to hack".

Click to expand...

Step 1

Open Up NotePad and switch on your PSP and start CORTV (or your game)

Click to expand...

Step 2

Go into any level and fire a few shots (more than 14 atleast)

Click to expand...

Step 3

Search your number. In my case i fired 17 shots. The Tommy gun starts off with 20 shots so 20-17=3. So I search 3. Then reload your clip and fire more shots. I fired 5 more. So 20-5=15. There are 15 more shots in my clip left. So search 15.

Click to expand...

Step 4

You should have 1 address there. If you dont, repeat Step 2-3 until you get 1 address. Change the value to 0x00000014 ( in Dec. it will be 20 ).
Enable The Code. Now go back into the game. Fire shots and you will see that your ammo didnt change. Now Go back to nitePR and press R three times. You will now be in the PRX section. Now scroll down to

Dump Ram? Slot 0

Click to expand...

.

Hit X.
WRITE DOWN THE ADDRESS OF THE CODE YOU JUST FOUND IN NOTEPAD!!!!!!!!!!!!!

Click to expand...

Step 5

Repeat "Steps 2-4" 2 more times. REMEMBER TO WRITE THE ADDRESS DOWN EACH TIME YOU DO IT!!!!!

Click to expand...

Step 6

Connect your PSP to the PC via USB cable. In the "ms0/:" ( PSP ROOT ) you should see 3 24MB files there named

Dump0

Click to expand...

Dump1

Click to expand...

Dump2

Click to expand...

If they are there you probably did it right. Now close the window. Open DMA Hunter. This is what it will say-

SANiK's DMA code hunter

Please get ready to select the two dumps
(Press enter to start)

Click to expand...

Press Enter and it will tell you to choose a RAM Dump.

Navigate to your PSP drive and choose Ram Dumps 0 and 1. IN ORDER!!!

You Will see This message

Enter Your Address of Ram Dump 1.
Please Enter HEX ONLY (0xEF123...etc) -

Click to expand...

Enter Your First address and then the same message will show up.
Enter your SECOND address and hit Enter.

Now this is probably what it will say-

Searching...
Found, address 0X3223F4, value changed from 0X9D028B0 to 0X9D68690
~~~~~~~~~~Junk~~~~~~~~~~
~~~~~~~~~~Junk~~~~~~~~~~
~~~~~~~~~~Junk~~~~~~~~~~
Press any key to continue . . .

Click to expand...

Not Sure about the 0X9D028B0 part but i can almost guarantee it will say 3223F4. ( If your using CORTV )

Right Click on the DMA Hunter and Click Mark. Select all of it and hit Enter.

Copy it to NotePad.

Click to expand...

Step 7

Repeat the second half of Step 6 2 more times like this for the Dumps.
After Dump 1 and 2
do
Dump 2 and 3
after dump 2 and 3
do
Dump 1 and 3



Now Find a Common address in all 3 Dumps. ( most probably 0x3223F4 )

Click to expand...

Step 8

~~~~The Code~~~~

A DMA code is made up of 2 parts.

An Example is like this

0xFFFFFFFF 0x12121211
0x11 0x1000


0xFFFFFFFF tells nitePR that its a DMA Pointer.
0x12121211 is the address of the pointer

Click to expand...

Step 9

Found, address 0X3223F4, value changed from 0X9D028B0 to 0X9D68690

0X9D028B0

Click to expand...

= where the pointer points to in RAM Dump 1

nitePR addresses are not always in CHEAT format. 0X9D028B0 is in REAL format. We must CONVERT it into cheat format.

Click to expand...

Step 9.5

How to convert-

Open up Calculator and go to the View drop-down bar and click Scientific. You will now see HEX at the far right on a multiple choice bubble option.
Click it.
Now Paste your address and subtract it by 880000

Example-

0X9D028B0-8800000 = 15028B0
You have your converted address.

Click to expand...

Step 10

We Made it this far!!! Dont Stop Now!!!


Now this is what you must do.
Remember you wrote down the address of the first DMA'd code?

Well mine was-

15029F8

We must now do this.

0X9D028B0-8800000 = 15028B0

Click to expand...

Take this number 15028B0 (cheat formatted address) and do this

15029F8-15028B0= 148

If you are using Call of duty roads to victory then that will be the address you end up with.


This is our code now -

#Infnite Thompson Ammo
;made by S1N
0xFFFFFFFF 0x003223F4
0x00000148 0x????????

? = add your own value.

Well, that took a while didn't it?
It took me 2 hours and nothing to eat but crackers and water =/ .

~~~~~~~~~~~~~~~~~~~~~~~~~~~~
THANKS
~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Well i would like to thank a few people for helping me write this guide.

HaxCommunity for giving me the base of the guide.
WazGoingOn for giving HaxCommunity the base of your guide XD.
Oby1Chick for making me a hacker.
Kimo (though i dont know you...) for the base of the guide.

And You my reader,
for giving me the inspiration to write this guide and not give up no matter how hungry i was. XD .

Im hoping for a sticky and feel free to post here if you need any help with UNDMAing codes.
I will not hesitate to help.

~~~~~~~~~~~~~~~~~~~~~
Spoilers
~~~~~~~~~~~~~~~~~~~~~

Here are a few DMA codes Call Of Duty Roads To Victory

#Infinite Grenades
;made by S1N
0xFFFFFFFF 0x003223F4
0x0000020C 0x00000050

#Infnite Thompson Ammo
;made by S1N
0xFFFFFFFF 0x003223F4
0x00000148 0x00000014

#No Shots Fired
;This will give you a gold medal for Shots Fired
;at the end of the level when the rewards are given
;ALL credits to S1N
0xFFFFFFFF 0x003223F4
0x448 0x00000000


I understand that these codes may have been made before but i have the proof that i have made these codes and here is the proof.


Inf Nades


#Dump 1
0x013D47Fc 0x00000050

#Dump 2
0x013ea5ec 0x00000050

#Dump 3
0x0156FEBC 0x00000050


-------------------------------------------------

Dump 1 and 2

Searching...
Found, address 0X3223F4, value changed from 0X9BD45F0 to 0X9BEA3E0
Found, address 0X17FF308, value changed from 0X9BD45F0 to 0X9BEA3E0
Press any key to continue . . .

Dump 2 and 3

Searching...
Found, address 0X32177C, value changed from 0X9BEA150 to 0X9D6FA20
Found, address 0X3223F4, value changed from 0X9BEA3E0 to 0X9D6FCB0
Found, address 0X12F6EA4, value changed from 0X9BEABD0 to 0X9D704A0
Found, address 0X12F6EA8, value changed from 0X9BEABD0 to 0X9D704A0
Found, address 0X12FCB80, value changed from 0X9BEA150 to 0X9D6FA20
Press any key to continue . . .


Dump 1 and 3

Searching...
Found, address 0X3223F4, value changed from 0X9BD45F0 to 0X9BEA3E0
Found, address 0X17FF308, value changed from 0X9BD45F0 to 0X9BEA3E0
Press any key to continue . . .





---------------------------------------------------------------


Same In All 3-

Found, address 0X3223F4, value changed from 0X9BD45F0 to 0X9BEA3E0
Found, address 0X17FF308, value changed from 0X9BD45F0 to 0X9BEA3E0


---------------------------------------------------------------------



Code-

#Infinite Grenades
;made by S1N
0xFFFFFFFF 0x003223F4
0x0000020C 0x00000050


Infinite Thompson Ammo

No need for prooof for this one right?


No Shots Fired

Dump 1
0x01400DB8

Dump 2
0x013d2c18
-----------
Dump 3
[0x01547BC8 ~ not needed]
------------------------------------
DUMP 1 and 2

Searching...
Found, address 0X3223F4, value changed from 0X9C00970 to 0X9BD27D0
Found, address 0X12FCC78, value changed from 0X9C00970 to 0X9BD27D0
Found, address 0X12FCC80, value changed from 0X9C00970 to 0X9BD27D0
Press any key to continue . . .
------------------------------------
Code

#No Shots Fired
;This will give you a gold medal for Shots Fired
;at the end of the level when the rewards are given
;ALL credits to S1N
0xFFFFFFFF 0x003223F4
0x00000448 0x00000000


01400DB8
1400970


~~~~~~~~~~~~~~~~~~~~~~~~~
Alternate Method of Dumping
~~~~~~~~~~~~~~~~~~~~~~~~~


Well there is another way of dumping RAM which needs CheatMaster


get nitePR and CheatMaster installed on your PSP and create the codes like how i explained in the guide but just when ur taking a dump use cheatmaster to dump the ram which provides a better and more results for DMA hunter to use

But i acutally prefer the nitePR way as its more convienient as it comes on the root and if your using cheatmaster it comes in the cheatmaster folder which is really deep into the memory stick.

Thank you for viewing this thread and i hope you become a DMA hacker.

Click to expand...

Pink Floyd said:

Nice guide, did you make it 100% yourself?

Click to expand...

Phantomkiller42 said:

This looks likes codes for like ps2, back in the day when i would hack that, haha.

Click to expand...