JEBE [SNES] Mega Man X

Started by Thomas83Lin, April 20, 2011, 07:15:23 AM

Previous topic - Next topic

Skiller

Quote from: dcx2 on April 23, 2011, 10:19:48 PM
Always fight bosses [dcx2]
42000000 90000000
001C134A 00000000
E0000000 80008000
This can be used with all weapons + inf

EDIT: off by one byte

lol i always took the easy rout when hacking EMU games ..
branching at the PPC side of the emu  and just setting up calls depending on the value placed in R0 since every value that runs threw the emu holds a diffrent offset ..
but backtracking right to the rom .. now thats very nice .. :) never thought of doin that lol .. would make some problemmatic games alot easyer to hack .. :)

thanks for spiking my intrest i will have to look into this a little more not to .. since this will work on any platform that uses emus for loading roms . be it ps2 wii or even ps3 since they all seem to use the same emus ..

dcx2

At least for this game, the most important line was this

800595E4:  7C6600AE   lbzx   r3,r6,r0

It belongs to the function that translates a SNES address into a Wii address.  If you set an execute BP on this address, and the LR = 8005A97C, then it's in the middle of reading an op-code which will be put into r3.  Pressing Show Mem will take you to r6 + r0, which is where the game's ASM is.  At this point, use the Tools tab to dump the portion of memory you're interested in, then fire up a disassembler like Tracer and read the output.  Because of SNES variable length instructions, you might need to adjust the offset that the disassembler starts at, in case your dump started in the middle of an op code.

To do e.g. inf lives, set a write BP on lives and die.  Once it hits, set an ex BP on 800595E4.  Then Show Mem.  You'll be taken to the instruction just after the store.  Dump and disassemble the region in this area, look for the decrement, nop it out.

Thomas83Lin

#17
Inf Dash+Smoke [Thomas83Lin]
42000000 90000000
001A71F7 00000080
061A847F 00000002
EAEA0000 00000000
E0000000 80008000
*Requires Suit Upgrade*

Just remove the 06 code to remove the inf smoke effect.



lee4

#18
NGC Controller [lee4]
28172CD8 0000????

Megaman X SNES PAR simulator [lee4]
48000000 804A835C
DE000000 80008180
1000yyyy 000000xx
E0000000 80008000

offset and value are taken from http://gamehacking.org/?s=bsfree2&sys=4&gid=5844 (former known as GSHI)

yyyy = offset
0BCF Inf HP [Ugetab]
1F9A Max HP [Ugetab]
0C03 Max Charge [Ugetab]
1F73 Enable Hadoken [Ugetab]
0C27 Hadoken Animation [Ugetab]
1F80 9 Lives [Ugetab]
1F83 Have Sub-Tank 1, Full [Ugetab]
1F84 Have Sub-Tank 2, Full [Ugetab]
1F85 Have Sub-Tank 3, Full [Ugetab]
1F86 Have Sub-Tank 4, Full [Ugetab]
1F99 All X Armor [Ugetab]
0C35 Unlimted Hadoken [xMrNx]
0BBB Fast animations [xMrNx]
1F7A Stage modifier [xMrNx]
1F81 Checkpoint modifier [xMrNx]
0BD8 Invincible [Parasyte]
0BFA Infinite Dash [Fangs]
0C0C Air Walker [Fangs]
0E8F 1 shot Kill [Fangs]
0BDD Can fire more normal shot [Fangs]
0C25 Can fire more charged shots [Fangs]
00B3 Screen Brightness Modifier [Hacc]
00C0 HUD/Sprite/BG Modifier [Hacc]
0BC6 Jump Height Modifier [Hacc]
1F88 Infinite Homing T [VisitntX]
1F8A Infinite C. Sting [VisitntX]
1F8C Infinite R. Shield [VisitntX]
1F8E Infinite Fire W. [VisitntX]
1F90 Infinite Storm T. [VisitntX]
1F92 Infinite E. Spark [VisitntX]
1F94 Infinite B. Cutter [VisitntX]
1F96 Infinite S. Ice [VisitntX]

xx = value
20 Inf HP [Ugetab]
20 Max HP [Ugetab]
01 Max Charge [Ugetab]
85 Enable Hadoken [Ugetab]
06 Hadoken Animation [Ugetab]
09 9 Lives [Ugetab]
FF Have Sub-Tank 1, Full [Ugetab]
FF Have Sub-Tank 2, Full [Ugetab]
FF Have Sub-Tank 3, Full [Ugetab]
FF Have Sub-Tank 4, Full [Ugetab]
FF All X Armor [Ugetab]
00 Unlimted Hadoken [xMrNx]
01 Fast animations [xMrNx]
00-0C Stage modifier [xMrNx]
00-04 Checkpoint modifier [xMrNx]
00-08 Invincible [Parasyte]
18 Infinite Dash [Fangs]
2C Air Walker [Fangs]
01 1 shot Kill [Fangs]
00 Can fire more normal shot [Fangs]
00 Can fire more charged shots [Fangs]
00-FF Screen Brightness Modifier [Hacc]
?? HUD/Sprite/BG Modifier [Hacc]
64-08 Jump Height Modifier [Hacc]
5C Infinite Homing T [VisitntX]
5C Infinite C. Sting [VisitntX]
5C Infinite R. Shield [VisitntX]
5C Infinite Fire W. [VisitntX]
5C Infinite Storm T. [VisitntX]
5C Infinite E. Spark [VisitntX]
5C Infinite B. Cutter [VisitntX]
5C Infinite S. Ice [VisitntX]