Sega Mega CD ISO Hacks & Editors

[Tony H]

Road Rash (Sega CD) Editor.

Thought that a Sega CD editor would be an easy way to add cheats/codes to the .bin file. Cheats/codes can be easily turned on or off just by whether or not the code is checked or not when you patch the file. If it's checked, the code will be turned on, if it's not checked, the code will be turned off. You can also return your bin file to it's original/unmodified state, just by running the program and making sure all of the cheats are unchecked, then patch the file.

Working on editors for other Sega CD games.



RoadRash(Sega CD)EditorV3a.zip

[Metro City]

Thanks all for the cheats

[Tony H]

There is 'find out what accesses this address' and 'find out what writes to this address'. But both of those are useless when running an emulator, I think. Because all you get are emulator assembly instructions.

That's exactly what you're looking for.

I found a good tutorial written by Mezmorize. Should answer all your questions. Lots of pictures.

CheatEngineROMhacking_files.zip

[vgcuts]

There is 'find out what accesses this address' and 'find out what writes to this address'. But both of those are useless when running an emulator, I think. Because all you get are emulator assembly instructions.

[Tony H]

As you probably know, there's no way to patch the ISO file with a RAM address. However, you can use the RAM address to help you figure out where to patch it.

There is a way to do it within Cheat Engine, but I don't have my notes on that in front of me. I don't even have CE installed right now (new computer). If I remember correctly, you highlight the RAM address and click on something like "Find out where it's being called from". CE will pop up a window whenever that RAM address is called on from the ROM. Maybe someone has notes or a link on how exactly to do it.

[vgcuts]

RAM addresses (for instance infinite health).

[Tony H]

If I find a cheat in Cheat Engine, is there a way to figure out where to patch the ISO?

Did you find a RAM address or ROM address?

[vgcuts]

If I find a cheat in Cheat Engine, is there a way to figure out where to patch the ISO?

[vgcuts]

Did you look through here? http://gamehacking.org/vb/threads/45...ks-amp-Patches

There are a ton of Sega CD codes there and most of them aren't in the db.

Assuming you've already looked through the codes in that link (and didn't find any), you might be able to make the code yourself using the RAM search feature in an emulator called Gens r57 Tracer. It's the basic method of searching Greater Than, Less Than, etc. If the search results show that the RAM address starts with "FFxxxx", then you should have no problem getting the code to work.

EDIT: Does anyone know of a better Sega CD hacking emulator than Gens r57? I haven't kept current on that stuff.

Already tried using Bizhawk. Found codes that freeze the health meter, but you still die (the game 'knows' how many damage you've taken still, I guess). Exactly the same problem I had trying to hack an 'always first place' code for Diddy Kong Racing.

[Tony H]

Still need an AH3 Thunderstrike (US) infinite health code.

Did you look through here? http://gamehacking.org/vb/threads/45...ks-amp-Patches

There are a ton of Sega CD codes there and most of them aren't in the db.

Assuming you've already looked through the codes in that link (and didn't find any), you might be able to make the code yourself using the RAM search feature in an emulator called Gens r57 Tracer. It's the basic method of searching Greater Than, Less Than, etc. If the search results show that the RAM address starts with "FFxxxx", then you should have no problem getting the code to work.

EDIT: Does anyone know of a better Sega CD hacking emulator than Gens r57? I haven't kept current on that stuff.

[vgcuts]

You'll need to hack those codes into your ISO file using a hex editor.

Patched the Battlecorps ISO and this one works great

Still need an AH3 Thunderstrike (US) infinite health code.

Also, the Snatcher codes here don't seem to work: https://gamehacking.org/game/85416

[Tony H]

Does anyone have codes for Battlecorps and AH3 Thunderstrike?

Actually earlier in the thread someone posted these codes for Battlecorps, but I need advice in formatting them for use in Gens Plus GX:

F9E84A790000F9E2670E91790000F9E2
F9E84A790000F9E2670E60040000F9E2

You'll need to hack those codes into your ISO file using a hex editor.

[vgcuts]

Does anyone have codes for Battlecorps and AH3 Thunderstrike?

Actually earlier in the thread someone posted these codes for Battlecorps, but I need advice in formatting them for use in Gens Plus GX:

F9E84A790000F9E2670E91790000F9E2
F9E84A790000F9E2670E60040000F9E2

[dewen]

Use Tony's "00 or FF" trick, I find the address store the invincible data ( 00 or FF ).

FFF852:FFFF --> invincible
FFF852:0000 --> not invincible

Gens r57 shell mod has a "ram watch" function,
you can select and mark the possible searched address and add them to "watch" window,
then play the game, the watch windows will show the changes,
you can select the address "not 00 or FF" and remove them to narrowing the possibility,
sometimes it's more fast then the way "add address to game genie and test"
( "add to cheat" seems no function ? )

Hook the address to read FFF852, log shows
[FF:89AC] R16 = FFFF [FFF852]
[FF:88F2] R16 = FFFF [FFF852]

search trace.log with "FF:89AA", find :
FF:89AA 4A 78 TST.W ($F852) <-- check if $F852 = 00 = not invincible
FF:89AE 67 00 BEQ #$000A [FF:89BA]

so I use RAW Genie code 1/2
FF89AA:6002 ( replace 4A 78 with 60 02 )

then I must fix the FFF852 with FFFF,
so log ram write FFF852
find [FF:880C] W16 = 0000 [FFF852]
search trace log
find FF:880A 42 78 CLR.W ($F852) <-- set $F852 to 0000
so raw game genie code 2/2 FF880A:6002

finally I got 2 combine game genie code for invincible without flash
FF89AA:6002 <-- check if $F852=0 by log read $FFF852 from FFFF to 0000
FF880A:6002 <-- set $F852 to 0 by log write (CLR.W) $FFF852 to 0000

it seems works ( the first life will die, then the left become invincible )

Hex patch : Keiou Yuugekitai (Japan)
=======================
Invincible ( no flashing, first will die ), total 11 patch x 2
find for 4278F8523B7C
replace 6002F8523B7C

find for 4A78F8526700
replace 6002F8526700
===========
unlimited Lives ( raw genie code FF8B50:6002 ), 11 patch
find for 5378F8566A00
replace 6002F8566A00
==========

Thank Tony for your great help !

[Tony H]

I can not "add the RAM code", it's gray out as you said, I use mobile phone photo it and
input to game genie area manually,

Actually not a bad idea, although still time consuming.