 |
Cheat Engine
The Official Site of Cheat Engine
|
| View previous topic :: View next topic |
| Author |
Message |
RESIDENTEvIlKill3R84
Cheater
![]() Reputation: 0
Joined: 30 Aug 2013
Posts: 39
|
 Posted: Fri Aug 30, 2013 2:58 am Post subject: How to find Devil May Cry 3 S.E Health Address? |
 |
|
Hi,
I'm new here, liked modding & hacking games, but what i really like what cheat engine, the tool is perfect now, due to the bugs fixed for 64 bit computer but forget that 
----------------------------------------------------------------------------------------
So i was thinking how to find Devil May Cry 3 S.E (Special Edition) Health address, i really need help here, please help needed
I was planning to make a tutorial, when i found out how to hack the health address, if you want, i will be online, but i think this is break the rules, if so, then tell me then i remove this comment ASAP, you can guide me though this hacking through my chatroom, PM me , then i tell you the address, canot post the url yet, i'm really sorry if this break the rules, please don't temp ban me because from this because i really need help 
I tried to copy what someone did that each bar = 1000 but when i do that Devil May Cry 3 S.E stop responding...
I await for your reply
|
|
| Back to top |
|
 |
vergilganesh
Expert Cheater
 Reputation: 0
Joined: 01 Jul 2013
Posts: 134
Location: India
|
| Posted: Tue Sep 03, 2013 8:08 am Post subject: |
|
|
Each slot of health worth 1000 float. if u have 20 slots use exact value scanning 20000. lose some health and decreased value as next scan. you will get 4 green addresses.
if u pls try the uploaded cheat table it consists more than 12 cheats.
| Description: |
|
Download |
| Filename: |
dmc3se.CT |
| Filesize: |
20.77 KB |
| Downloaded: |
3533 Time(s) |
|
|
| Back to top |
|
|
vergilganesh
Expert Cheater
Reputation: 0
Joined: 01 Jul 2013
Posts: 134
Location: India
|
| Posted: Thu Sep 05, 2013 8:21 am Post subject: |
|
|
|
|
| Back to top |
|
|
RESIDENTEvIlKill3R84
Cheater
![]() Reputation: 0
Joined: 30 Aug 2013
Posts: 39
|
| Posted: Sat Sep 07, 2013 6:52 am Post subject: |
|
|
Now that explain better, can you help me with something else?
Well its an old game Resident Evil 3
I know how to hack health, ammo, items, typerwriter saves
but what i really need help on is rapid fire, i've found this table but the addresses are not working to me, as for i have Xplosive version.
Those arrows are the ones i want, really bad, but thanks for the help!
| Description: |
| These are the things i wanted! |
|
| Filesize: |
44.16 KB |
| Viewed: |
43973 Time(s) |
|
|
|
| Back to top |
|
|
Zaladine
Expert Cheater
 Reputation: 3
Joined: 14 Oct 2012
Posts: 129
Location: Djokdja, Indonesia
|
| Posted: Sat Sep 07, 2013 10:10 am Post subject: |
|
|
That addresses and values in the table looks familiar. Did you get it from GameShark?
If you play RE3 via PSX emulator, then the addresses will be quite similar to those in the picture. But, if you play the PC version, then they possible be different.
You could start by finding the SaveGame numbers since you know how to find it, then check the addresses which are 'close' to it with same offsets. Eg: from your table, savegame and secret mode addresses only 14 bytes apart. So, when you found the savegame address, check 14 bytes before the address. Most likely, it would be the address for secret mode. So, try put FFE0 on it (according to the table). If this works, then you could do the same trick for the rest addresses.
If i remember it correctly, i've done this long ago with FF7 on ePSXe emulator.
|
|
| Back to top |
|
|
RESIDENTEvIlKill3R84
Cheater
![]() Reputation: 0
Joined: 30 Aug 2013
Posts: 39
|
| Posted: Thu Oct 10, 2013 11:47 am Post subject: |
|
|
| Zaladine wrote: | That addresses and values in the table looks familiar. Did you get it from GameShark?
If you play RE3 via PSX emulator, then the addresses will be quite similar to those in the picture. But, if you play the PC version, then they possible be different.
You could start by finding the SaveGame numbers since you know how to find it, then check the addresses which are 'close' to it with same offsets. Eg: from your table, savegame and secret mode addresses only 14 bytes apart. So, when you found the savegame address, check 14 bytes before the address. Most likely, it would be the address for secret mode. So, try put FFE0 on it (according to the table). If this works, then you could do the same trick for the rest addresses.
If i remember it correctly, i've done this long ago with FF7 on ePSXe emulator. |
Using the crap Xplosiv version i can do health, ammo, slot items, item codes, saves, but rapid fire is my main target!
|
|
| Back to top |
|
|
Zaladine
Expert Cheater
Reputation: 3
Joined: 14 Oct 2012
Posts: 129
Location: Djokdja, Indonesia
|
| Posted: Fri Oct 11, 2013 3:47 pm Post subject: |
|
|
Just installed RE3 cause i'm curious of how the rapid-fire hack was done. Mine is the original PC (non Xplosive) version however. And luckily, after some values scanning, it turned out that most of vital values are stored at static addresses. Even luckier, the addresses are very much the same as the one you provided in your picture.
About Rapid Fire hack, just focus on the Rapid Fire (2) address, 0x00A5CDFC. This address is actually holds the code value of Jill's states, e.g.: Walking Forward = 0, walking backward = 9, etc. The important value however, in regard to Rapid Fire, are only 2:
- Weapon ready to fire = 2
- Weapon just fired = 1
To make rapid fire hack, we have to somehow freeze this address to 2 but only when the weapon is drawn. To simply freeze this address to 2 won't work at all since Jill won't able to do other actions (walking, running, moving backward, etc). And so debugging this address is necessary, and this code snippet came out:
| Code: | ResidentEvil3.exe+64AF4 - 8D 8C 00 01000300 - lea ecx,[eax+eax+00030001]
ResidentEvil3.exe+64AFB - 89 8E C8000000 - mov [esi+000000C8],ecx |
The code executed right after one bullet shots, so simply change the code to:
| Code: | | ResidentEvil3.exe+64AF4 - 8D 8C 00 02000300 - lea ecx,[eax+eax+00030002] |
Above code modification will freeze Jill's state address to 2 only when she draws her weapon...
And so the result is a successful Rapid Fire hack as shown in following screen shot:
(pay attention to the spilled bullet shells).
Next thing to do is to freeze the bullet amount since rapid fire hack will surely decrease Jill's ammo rapidly. A simple table freeze will do, and the value data-type for ammo is 1 byte...
_________________
... to boldly go where no eagle has gone before ... |
|
| Back to top |
|
|
RESIDENTEvIlKill3R84
Cheater
![]() Reputation: 0
Joined: 30 Aug 2013
Posts: 39
|
| Posted: Sun Oct 13, 2013 7:13 pm Post subject: |
|
|
| I'm a noob but i really don't know how to do this, i use 4 bytes, instead bullets are bytes, i can't really seem to see what are you trying to explain....
|
|
| Back to top |
|
|
Zaladine
Expert Cheater
Reputation: 3
Joined: 14 Oct 2012
Posts: 129
Location: Djokdja, Indonesia
|
| Posted: Mon Oct 14, 2013 4:00 am Post subject: |
|
|
I'll try to make it as simple as possible. Anyway, pardon my English beforehand...
The address i use for RapidFire hack is 0x00A5CDFC. This address actually holds Jill's state:
- When Jill is walking forward, 0x00A5CDFC = 0.
- When Jill is walking backward, 0x00A5CDFC = 9.
- When Jill is drawing weapon, 0x00A5CDFC = 2.
- When Jill has just shot her weapon, 0x00A5CDFC = 1.
- etc
Just after Jill shot her weapon, the value at 0x00A5CDFC will be changed to 1. This IS the state where her weapon is in delay between shot state. So, i need to prevent this to happen by forcing the value to 2 (drawing weapon state) so i can immediately fire the next shot.
Thus, to make Jill's shot rapid, i need address 0x00A5CDFC froze to 2.
However, aside of making Jill's shot rapid, such freezing will unable Jill to move around, because she will be kept in drawing weapon state (=2).
That's why i use the simple code modification explained previously, to freeze the address to 2 ONLY when Jill has just shot her weapon instead freeze it to 2 all the time which will make her unable to do other things like walking, running, stepping backward, etc...
_________________
... to boldly go where no eagle has gone before ... |
|
| Back to top |
|
|
mgr.inz.Player
I post too much
 Reputation: 222
Joined: 07 Nov 2008
Posts: 4438
Location: W kraju nad Wisla. UTC+01:00
|
| Posted: Mon Oct 14, 2013 6:36 am Post subject: |
|
|
We can achieve almost the same thing with this:
pseudo code:
| Code: | function checkState()
if state==1
{
state=2;
}
end |
Or Lua code we can use inside CE:
| Code: | function onTimer(obj)
local state = readInteger("00A5CDFC")
if state~=1 then return end -- not 1, exit
writeInteger("00A5CDFC",2) -- replace 1 with 2
end
timer = createTimer(nil,true)
timer.OnTimer = onTimer
timer.Interval = 50 |
When using emulator, if you have found static address you can use above script.
_________________
|
|
| Back to top |
|
|
RESIDENTEvIlKill3R84
Cheater
![]() Reputation: 0
Joined: 30 Aug 2013
Posts: 39
|
| Posted: Tue Oct 15, 2013 1:36 pm Post subject: |
|
|
| Zaladine wrote: | I'll try to make it as simple as possible. Anyway, pardon my English beforehand...
The address i use for RapidFire hack is 0x00A5CDFC. This address actually holds Jill's state:
- When Jill is walking forward, 0x00A5CDFC = 0.
- When Jill is walking backward, 0x00A5CDFC = 9.
- When Jill is drawing weapon, 0x00A5CDFC = 2.
- When Jill has just shot her weapon, 0x00A5CDFC = 1.
- etc
Just after Jill shot her weapon, the value at 0x00A5CDFC will be changed to 1. This IS the state where her weapon is in delay between shot state. So, i need to prevent this to happen by forcing the value to 2 (drawing weapon state) so i can immediately fire the next shot.
Thus, to make Jill's shot rapid, i need address 0x00A5CDFC froze to 2.
However, aside of making Jill's shot rapid, such freezing will unable Jill to move around, because she will be kept in drawing weapon state (=2).
That's why i use the simple code modification explained previously, to freeze the address to 2 ONLY when Jill has just shot her weapon instead freeze it to 2 all the time which will make her unable to do other things like walking, running, stepping backward, etc... |
This address: 0x00A5CDFC is also = to 00A5CDFC doesn't it? I use 4 bytes cos nothing happens with 2 bytes or bytes but i try it if i can!
Hey don't worry about your language.... i still can read 
If i can i'll make a video how i normally do it... well still need help...
so 0x00A5CDFC is the key of address but nothing happens, are you sure this is xplosiv resident evil 3 address.... with normal RE3 & Xplosiv RE3 addresses could be different!
| mgr.inz.Player wrote: | We can achieve almost the same thing with this:
pseudo code:
| Code: | function checkState()
if state==1
{
state=2;
}
end |
Or Lua code we can use inside CE:
| Code: | function onTimer(obj)
local state = readInteger("00A5CDFC")
if state~=1 then return end -- not 1, exit
writeInteger("00A5CDFC",2) -- replace 1 with 2
end
timer = createTimer(nil,true)
timer.OnTimer = onTimer
timer.Interval = 50 |
When using emulator, if you have found static address you can use above script. |
This didn't work.... lua code i meant.....
I think its the Xplosiv version addresses be different... i can tell because i had the normal version in 2005 i've done this before but i don't remember anymore besides i have the C.E table but that doesn't work on C.E 6.3
My laptop (Now i'm using) got repaired so i'm starting to use that cos the keyboard is easy to use!
I've added my table below check if that works on your RE3 if not then it means the addresses are different!
If i put that address 0x00A5CDFC, and change it to bytes i get 63...
| Description: |
|
| Filesize: |
90.48 KB |
| Viewed: |
42678 Time(s) |
|
| Description: |
|
| Filesize: |
1.09 MB |
| Viewed: |
42678 Time(s) |
|
| Description: |
|
| Filesize: |
6.7 KB |
| Viewed: |
42678 Time(s) |
|
| Description: |
|
Download |
| Filename: |
ResidentEvil3.CT |
| Filesize: |
3.17 KB |
| Downloaded: |
1603 Time(s) |
|
|
| Back to top |
|
|
Zaladine
Expert Cheater
Reputation: 3
Joined: 14 Oct 2012
Posts: 129
Location: Djokdja, Indonesia
|
| Posted: Tue Oct 15, 2013 5:05 pm Post subject: |
|
|
| RAPIDKILLER1712 wrote: | | so 0x00A5CDFC is the key of address but nothing happens, are you sure this is xplosiv resident evil 3 address.... with normal RE3 & Xplosiv RE3 addresses could be different! |
My RE3 is not the Xplosiv one, like i said it before in my previous post:
| Zaladine wrote: | | Just installed RE3 cause i'm curious of how the rapid-fire hack was done. Mine is the original PC (non Xplosive) version however. And luckily, after some values scanning, it turned out that most of vital values are stored at static addresses. Even luckier, the addresses are very much the same as the one you provided in your picture. |
| RAPIDKILLER1712 wrote: | I've added my table below check if that works on your RE3 if not then it means the addresses are different!
If i put that address 0x00A5CDFC, and change it to bytes i get 63... |
Most likely, the address are different between versions, so you have at first find the address in your version. Its value should works the same way: 0 = walking forward, 9 = walking backward, etc. Try to find the right address by doing some of these actions (for Jill) with the corresponding values.
| RAPIDKILLER1712 wrote: | | This address: 0x00A5CDFC is also = to 00A5CDFC doesn't it? |
Yes, indeed. The prefix '0x' is one way to indicate that the following number is a hexadecimal number.
| RAPIDKILLER1712 wrote: | | I use 4 bytes cos nothing happens with 2 bytes or bytes but i try it if i can! |
It should be byte (1 byte integer). The address is the problem. The data-type won't matter much if the address it the wrong one...
| mgr.inz.Player wrote: | We can achieve almost the same thing with this:
pseudo code:
| Code: | function checkState()
if state==1
{
state=2;
}
end |
Or Lua code we can use inside CE:
| Code: | function onTimer(obj)
local state = readInteger("00A5CDFC")
if state~=1 then return end -- not 1, exit
writeInteger("00A5CDFC",2) -- replace 1 with 2
end
timer = createTimer(nil,true)
timer.OnTimer = onTimer
timer.Interval = 50 |
When using emulator, if you have found static address you can use above script. |
Tanks for this very nice info. It shows much how scripting is a very feature.
It's too bad however that such script in this case is not gonna work: there are different states use same value, e.g. value for weapon draws = 2, while idle state value also = 2. Running value = 1, while weapon shot also = 1. So, i guess we have to add certain address for additional check (address which hold the unique state regards weapon use).
_________________
... to boldly go where no eagle has gone before ... |
|
| Back to top |
|
|
mgr.inz.Player
I post too much
Reputation: 222
Joined: 07 Nov 2008
Posts: 4438
Location: W kraju nad Wisla. UTC+01:00
|
| Posted: Wed Oct 16, 2013 9:25 am Post subject: |
|
|
@Zaladine, Well, you didn't write that before
Indeed we need more informations. Maybe keypress (holding "AIM" button) state.
If I remember correctly (I played it long time ago on PSX) we can not move/run and fire at the same time.
PS: I don't have this game.
_________________
|
|
| Back to top |
|
|
Zaladine
Expert Cheater
Reputation: 3
Joined: 14 Oct 2012
Posts: 129
Location: Djokdja, Indonesia
|
| Posted: Wed Oct 16, 2013 10:28 am Post subject: |
|
|
@mgr.inz.Player
Lol.. Indeed... My bad and am apologize...
Actually, i got mine from torrent download.
And i think it's against the forum rule to
share the link here (simply googling will do,
however. heheh...)
It's quite small game, by the way...
_________________
... to boldly go where no eagle has gone before ... |
|
| Back to top |
|
|
RESIDENTEvIlKill3R84
Cheater
![]() Reputation: 0
Joined: 30 Aug 2013
Posts: 39
|
| Posted: Wed Oct 16, 2013 2:47 pm Post subject: |
|
|
| Zaladine wrote: | | RAPIDKILLER1712 wrote: | | so 0x00A5CDFC is the key of address but nothing happens, are you sure this is xplosiv resident evil 3 address.... with normal RE3 & Xplosiv RE3 addresses could be different! |
My RE3 is not the Xplosiv one, like i said it before in my previous post:
| Zaladine wrote: | | Just installed RE3 cause i'm curious of how the rapid-fire hack was done. Mine is the original PC (non Xplosive) version however. And luckily, after some values scanning, it turned out that most of vital values are stored at static addresses. Even luckier, the addresses are very much the same as the one you provided in your picture. |
| RAPIDKILLER1712 wrote: | I've added my table below check if that works on your RE3 if not then it means the addresses are different!
If i put that address 0x00A5CDFC, and change it to bytes i get 63... |
Most likely, the address are different between versions, so you have at first find the address in your version. Its value should works the same way: 0 = walking forward, 9 = walking backward, etc. Try to find the right address by doing some of these actions (for Jill) with the corresponding values.
| RAPIDKILLER1712 wrote: | | This address: 0x00A5CDFC is also = to 00A5CDFC doesn't it? |
Yes, indeed. The prefix '0x' is one way to indicate that the following number is a hexadecimal number.
| RAPIDKILLER1712 wrote: | | I use 4 bytes cos nothing happens with 2 bytes or bytes but i try it if i can! |
It should be byte (1 byte integer). The address is the problem. The data-type won't matter much if the address it the wrong one...
| mgr.inz.Player wrote: | We can achieve almost the same thing with this:
pseudo code:
| Code: | function checkState()
if state==1
{
state=2;
}
end |
Or Lua code we can use inside CE:
| Code: | function onTimer(obj)
local state = readInteger("00A5CDFC")
if state~=1 then return end -- not 1, exit
writeInteger("00A5CDFC",2) -- replace 1 with 2
end
timer = createTimer(nil,true)
timer.OnTimer = onTimer
timer.Interval = 50 |
When using emulator, if you have found static address you can use above script. |
Tanks for this very nice info. It shows much how scripting is a very feature.
It's too bad however that such script in this case is not gonna work: there are different states use same value, e.g. value for weapon draws = 2, while idle state value also = 2. Running value = 1, while weapon shot also = 1. So, i guess we have to add certain address for additional check (address which hold the unique state regards weapon use). |
Is 00A7715C but i freeze it & it crashed
It happened but Jill get stuck!
| Description: |
| It turns to rapid fire but she get stuck! |
|
| Filesize: |
1.03 MB |
| Viewed: |
42577 Time(s) |
|
| Description: |
|
| Filesize: |
955.57 KB |
| Viewed: |
42583 Time(s) |
|
|
|
| Back to top |
|
|
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
