in the user area which starts at 0×08000000 (cwcheat just sums at the adresses that value so if an ipotetic cheat device (because cwcheat and cm are the only working in dh and cheat hacker is old and there isn't anything else) uses the real adress starting (so with 0×08000000 summed) you will only need to subtract it have a look here
http://wiki.ps2dev.org/psp:memory_map
cwcheat is in kernel 1 partition (prx and some things) kernel 3 volatile ram for db config loading and kernel 2 for loaded codes