Need Help in PCSX2 & Cheat Engine hacking...

[hihofai]

@Harry62 - I've tried that but it's not working. I thought it would work but it's not. I'm not sure if I didn't press the "Next Scan" fast enough or something I missed?

@Cosmo: Seems like getting more complicated? O.o

[Harry62]

Already thought that since dolphin's cheat searcher behaves the same way. But wasn't that sure. The problem is that I can't refine the search in this case because most values of 0x3F800000 are constant.
Or can I use the "Step" button to dump a smaller/partial memory range?

I wouldn't bother making dumps of games with emulators. It is much easier to search the memory in real time. I don't know anything about hacking nintendo consoles but I sometimes use cheat engine on pcsx2 and search the memory range of 0x20000000-0x22000000. Knowing that range you can reduce it drastically and focus on a small section.

@Harry62 - I've tried that but it's not working. I thought it would work but it's not. I'm not sure if I didn't press the "Next Scan" fast enough or something I missed?

You may need to search for a float value instead of a integer. Float values are basically decimal points in case you haven't worked with them yet. The number "1.0" as a floating point is "3f800000". Pcsx2dis and cheat engine accept regular decimal number input for searching floating points.

[hihofai]

@Harrry62 - That I know, but the problem is, I can't locate the exact "Address" for the Item Effect that has no time limit. I've tried even getting hit by enemy, fall into traps, but failed! I seriously don't know what I'm missing or doing wrong. It's not the value but rather unable to get the exact "Address". LOL

[47iscool]

Harry62, RAM dumps are required if you plan on making pointer codes.

[hihofai]

What is pointer Codes?

[CosmoCortney]

RAM dumps are also useful for code porting.

@hihofai: We call a pointer an address which value contains another address. This is needed when some addresses change. When the Address changes the pointer will always keep the game up to date where the new address is stored. It's pretty simple part difficult to explain. We need at least 2 RAM dumps to figure out a valid pointer address that always redirects us to the right code
you can read something about it here: http://doc.kodewerx.org/generic_code....html#pointers

[47iscool]

I figured out how pointers worked sometime last year.

You have a base code right? Well put in that address at look at its value. The offset given is added/multiplied to the value in your base address.

[Demonic722]

To clarify, you don't necessarily need RAM dumps to make a pointer code. Depending on your level of expertise, you can actually backtrace the assembly to find the actual pointer the game is reading from for said code. You can even find a pointer by performing a RAM search within a specific range as Harry has pointed out.

[hihofai]

Wow... Pointer is really something so complicated... when I'm still struggling to learn the very basic of hacking... LOL...

[Harry62]

Wow... Pointer is really something so complicated... when I'm still struggling to learn the very basic of hacking... LOL...

I'll explain pointers in an easy way using an "infinite health" code.

The regular method:
Think of the "player health address" as a letter in your mail box. The letter(health address) always has the same return address. It never changes. You use this method to edit a single address to create infinite health.

Pointer method:
You receive the "player health address" as a letter in your mail box again, however it has a different return address every time. Lucky for us we know where our mail box is so we can always retrieve the letter and get the new return address.

This is how we use pointers to access data that is constantly changing locations. Here is an example code I wrote:

Game: Shadow of the Colossus [PS2 / NTSC]

Player Movement Speed
200B1400 3C080130 // FNC_player_speed
200B1404 8D08B6AC // load player pointer
200B1408 11000003 // check if pointer not equal to zero (we do this so the game does not freeze and load offsets out of address 0x0)
200B140C 00000000
200B1410 3C2940A0 // speed modifier
200B1414 AD0901E8 // save speed modifer to offset: 1E8
200B1418 03E00008 // return to previous function
201283C8 0802C500 // jump to FNC_player_speed

[hihofai]

Hmmm... very "deep" & complicated. Need time for newbie like me to fully understand. BUT thank you very much for explaining in details with example given. It's just me that dumb enough that need time to 'digest' it. =)

PS: @Harry62 - I finally found the Infinite Effect that I need help earlier. Just like you said, get hit, then press "Decrease Value", stop the emulator & look at the Results. It wasn't easy as it was more than 90K+ results found. In the end, I referred to the other Infinite Effect code that I managed to make & check for the similarity code. Turned out it work that way, with just only a very small differences in between. But, it also turned out, it only has the Effect decoration only, not the usefulness of it. LOL. So, thanks man!

Now, for another lesson is... how to make Infinite Double Jump?

[hihofai]

Umm... anyone? Anyone can help me in here? O.o Ello?

[Harry62]

Umm... anyone? Anyone can help me in here? O.o Ello?

You have to find the jumping function which can be difficult. There are tutorials on this site but games can be vastly different when it comes to player dynamics such as jumping.

[hihofai]

Aiyaya.. that's headache. But I'll give a try. Start with "Unknown Initial Value" then "Decrease Value" right? I also need to find out how to stop timer in a game... more like make a joker code for Start & Stop function... Is that very difficult? Oh yea, what about those that don't have value? Like always get RANK A in status? Also, jump function code can be many Address lines... right? O.o

[MasterGrand]

Hi buddy, you are beginner right ?

My advice If you want to be good hacker for find any codes, You must begin from NES and Genesis and SNES...etc then you will get more experience.

Good luck