Hacking Sequential codes PSX

[jin299]

If I was to guess I would say I have to change the ibu to sw but honestly man I wouldn't have a clue?

Can this code be hacked through ram hacking, or would we need a debugger

I'm currently operating on a Mac computer, that's what I'm using to do my PSX game hacking on so I can't gain access to a debugger at the moment, so that's whys I'm concentrating more on ram hacks at the moment, I'm all out of practice anything I learned about the debugger I have forgotten.

[Abystus]

I'm currently operating on a Mac computer, that's what I'm using to do my PSX game hacking on so I can't gain access to a debugger at the moment, so that's whys I'm concentrating more on ram hacks at the moment, I'm all out of practice anything I learned about the debugger I have forgotten.

Try MAME/MESS for Mac OS X - 32/64-bit Intel. MESS runs PSX games, so your not without a debugger...

[Helder]

An not only that but it has a trace feature which I was planning to use to track back what loads data into the P1 address which should be up more in the instructions. I got the same thing happening of it freezing once I locked in a value even with an ASM code so it has to load the value and not freeze it, there is an instruction right after the load that subtracts 1 but then it loads my value therefore an endless loop.

[jin299]

Cool man I didn't know there were any debuggers available for Mac's the only question, would someone be able to tell me how to install the debugger on my Mac, because I have all the software downloaded but I don't know what to do in Mess exeC file in order to install the program?

Never mind I figured it out.

The only problem I having now is I keep getting a message saying no systems found check the rompath file specified in the mess.ini file, how do i fix this problem?

[jin299]

Can you help me out Helder maybe you know what's wrong, because I can't fix this problem i'm having when trying to run the emulator?

[jin299]

Right I got the no cash debugger working on my mac by using a program called crossover, i placed a breakpoint on the Balrog animation ram code, in the debugger, but have no idea what to do now, is there any instruction in the debugger that I should use to load the correct animation, I tried loading the values for Balrog cpu intro by observing the registers in the debugger, and then editing that instruction in the debugger to load the value, but all that did was cause the animation to lock just like in the ram code?

I'm submerged in unknown territory here with the debugger and really need your advice, on what I'm supposed to do next?

[Helder]

This is a game that requires some time to look at a trace log so I can see where the game calls the animations just for player 1 then alter them to be the one we want yet still run the routine normally for the player and CPU. This is time consuming and this method is how I have found health and jump routines for the player only when most routines affect all enemies and players. Let me have some time to look into it and I will hopefully have something, as for the MESS missing rom path it's missing the system bios for the PSX which is called a ROM in MESS which for every other emulator is a game and not BIOS.

https://archive.org/details/MESS-0.149.BIOS.ROMs

[jin299]

I put all the bios files I downloaded in the roms folder of the mess, along with the mess ini file, launched the game and it still said the same thing?

what am i doing wrong?

[jin299]

Helder how do you trace backwards using the no $cash psx debugger, and is tracing back to
a code easy to do?

[Helder]

Not with no$psx, it lacks a trace feature which pisses me off so much as I have asked for this feature and even offered the author Martin some cash to implement it but nothing so you need MESS. Can you use a windows version of MESS? if you can I can reupload a completely configured version all you need to do is fix the game directories and controller settings.

[jin299]

Helder how would i trace Balrog's player 1 animation using the no cash debugger without having to use a tracer to do so? is it possible I might be able to find the information, i'm looking for by observing the registers values in the debugger?

[Helder]

You will need a tracer to make the task alot easier but even so you would have to make some conditionals and possibly make a small custom routine to add that animation. Maybe put a break on P2 side and see what changes when he fights against you so you could copy it over to the P1 side.

[jin299]

Helder I was trying to find the values for a character modifier code for a player in Crash Team Racing For the Psx so I first put a breakpoint on the character modifier address for the game and, then had a look at the registers in the no$ debugger after the breakpoint occurred and then tried to locate the correct one that loads a character's value, I know which register is being changed, but I don't know what instruction to modify, in the debugger how would I find this?, should I be looking for an specific instruction to assemble in the debugger?

[Helder]

Whenever there is a break in any debugger the instruction before the break is the one we are looking at and for the most part it's a Store instruction but not always. So you need to look up a bit above that store and look for a load of some kind or a move using the register with the value. You then put a break on that load instruction to see if it is indeed what is loading the value we want to alter. It's helpful if you could post pictures of the debugger so I or anyone else can be of more help.

[jin299]

Here's an image man It's one from the game Street Fighter Ex2 plus for the Psx


Now looking at the debugger I know exactly which register is loading the values for the character modifier it's register a0, now the problem I'm having is I don't know how to exactly change the values in that particular register, to what I want?