IMG

 
IMG
IMG   IMG
  Welcome to GTAForums! Be sure to check out the GTA IV Forum.

You are not registered! (If you are, click here to login) Registering is fast, free and easy and allows you to instantly reply to any topic on GTAForums.
Why wait? Click here to register your own unique username and become part of the ever-growing community!


( Log In | Register | Revalidate Validation E-mail )
Quick Log-In:
  IMG
       
>
Forum Rules GTA Modification Forums

This section is for any editing topics that don't fit into any of the other forums, any questions on how to mod belong in Editing Discussion

GTAGarage.com
free mod hosting from GTANet, simply login with your GTAForums account details

GTAModding.com
GTANet's modding wiki

GTA Modding Chatroom
provided by irc.gtanet.com (Don't have an IRC client? Click here)


Pages: (47) « First ... 2 3 [4] 5 6 ... Last »  ( Go to first unread post ) Reply to this topicStart new topicStart Poll

> Documenting GTA3/VC memory adresses, Vice *and* GTA3
 
JernejL  
Posted: Apr 2 2004, 11:23
Quote Post


Big Homie
Group Icon
Group: Retired Staff
Joined: Mar 11, 2002

se.gif

Member Award




QUOTE (jax @ Apr 2 2004, 11:32)
Ahem biggrin.gif

May i request the memory addy for the local player's current position (most likely used with teleporters for trainers).

Also from what ive found, there are no set memory addy's for actors or cars, both are random data, and if im not mistaken, both mta and gtaT, reads the process memory and 'searches' for the address's of all the cars/actors, before they synchronise them.

more to follow on this!

-Jax

come on, why do you insist on making another multiplayer?
mta is far enough, and you haven't even took that minute of
time to see i posted teleporting techniques in one of first pages.

btw, teleporting technique will be realy bad to use for multiplayer,
how are you gonna sync it with collision detection?
Users WebsitePMMSN
  Top
 

 
jax  
Posted: Apr 2 2004, 12:11
Quote Post


Moof!
Group Icon
Group: Members
Joined: Jan 20, 2004

au.gif

XXXXX



no no no, not for teleporting, im after the memory addy, for the local players postion. the way it works, is the client reads the local players postion, then sends it to the server, which translates it into an actors postion, thus local player appears in certain area on the other screen. also further more i need the addy to be for VC 1.0

Thanks

-Jax
Users WebsitePM
  Top
 

 
Stretchnutter  
Posted: Apr 2 2004, 14:11
Quote Post


Also known as Racer_S
Group Icon
Group: Members
Joined: Jun 15, 2002

us.gif

Member Award




Keywords: Pointer, DMA (Dynamic Memory Allocation)
Users WebsitePM
  Top
 

 
Luke  
Posted: Apr 12 2004, 13:21
Quote Post


suckmyrocket
Group Icon
Group: Administrators
Joined: Dec 1, 2003

pride.gif

Member Award




THESE ARE FOR GTA3


Game Random Stuff
------------------------
006FAD68 = Widescreen (Cutscene, not the options widescreen) (Integer 0/1, 1 byte)
0095CDA6 = Hour (Integer, 4 bytes)
0095CDC8 = Minute (Integer, 4 bytes)

Money (Integers, 4 bytes)
--------
0094139C = Money Value (Real Value, actual money you have)
009413A0 = Money Text (Set both and it wont increment slowly, set just the value and it will go slowly up like after missions)

Menu Screens (Integers, 1 byte)
----------------
008F5AE9 = Menu visible when its 1
0095CD7C= Menu visible when its 1

If you dont set them both, then the menu may hide itself, but the game will still be paused.

Strange Stuff (Integer, 1 byte)
----------------
006FAD57= When you enter or leave your car, it will take the camera to the hideout
006FAE9E= Camera at hideout.

Might not always be the hideout, i just found these while looking for something else.

I think some of these might be in the Admin Console Excel sheets, not sure, long time since i looked through them.

This post has been edited by Smithers2 on Apr 12 2004, 14:21
Users WebsitePM
  Top
 

 
DexX  
Posted: Apr 27 2004, 09:40
Quote Post


Palpable Inanity
Group Icon
Group: Moderators
Joined: May 16, 2002

Member Award




Change the hardcoded values of Em vehicle models that chases you. i have to be that specific, because the parked ones that make up the roadblocks, WILL be UNaffected.

Fbi Rancher
0x4269ba - xx model number
if i tried this during a normal game, it simply crashes. however, if i change it to the id of a model i have loaded in my main.scm, it seems to work. Replacing a vehicle such as the rhino, will NOT give the replacement its special abilities. putting the patriot over the rhino model, as i did, will not make it immune to anything, nor will it have the ability to fire. these attributes are stored somewhere else.

Edit: - dammit, some of these were off, corrected now.
*Police1 - 0x426A21
Police2 - 0x426987
Enforcer - 0x42697e
**Vicechee1 - 0x4268b8
Vicechee2 - 0x4268d3
Vicechee3 - 0x4268ee
Vicechee4 - 0x426909
Police Helicopter - ???!
Fbi Rancher - 0x4269ba
Barracks Ol - 0x426a0a
Rhino - 0x426a14

Other Em vehicles, like the Ambulance and Firetruck are not listed, as i do not know the addresses.

Note: i only tested this on the enforcer, but i swapped the MrWhoopee (ice cream truck) model over it, and the ice cream music plays when it chases you tounge.gif

*The difference between 1 and 2; police 1 is the first copcar that chases, not too aggressive, usually gives up. Police2 is the real agreesive version that typically flies around a corner and tries to t-bone you. they can use different model id's i guess...

**I don't know why the game has 4 entries for the vicechee that chases you, but if you look in the default.ide, theres also 8 vicechee cops listed (97-104) @ 2 per car, it works out.

For example, normal game, i changed it to D3h (211d - check the default.ide for numbers) to load the deluxo, and it crashed.
i requested the model and loaded it via scm this time and changed the values, and now it works, the vehicle that CHASES me, is the deluxo. however for whatever reason, the roadblocks fbi ranchers remain unaffected.
its also important to note that the chasing deluxo had no lights, no siren and no driver (!!!). i could get in and drive it with no problems.
I tried putting a pcj over it, which kind of works, same issues as above, except if you try to drive it, the game crashes.


Screenshot: (my deluxo was replaced by one of yazu's aston martin's)
user posted image

more investigation continues. any help is appreciated...

This post has been edited by ashdexx on Apr 28 2004, 06:32
PM
  Top
 

 
Ransom1  
Posted: Apr 29 2004, 00:45
Quote Post


map makin opcodin noob
Group Icon
Group: Members
Joined: Feb 20, 2004

us.gif

XXXXX



QUOTE (Delfi @ Nov 1 2003, 18:14)
QUOTE (ZanderZ @ Nov 1 2003, 17:37)
QUOTE (brokenfish @ Nov 1 2003, 14:59)
QUOTE (Opius @ Nov 1 2003, 07:44)
<span class='ME'>
<span class='ME'>Opius</span>    crosses fingers
</span>

<span class='ME'>
<span class='ME'>brokenfish</span> crosses fingers too
</span>
wow.gif wow.gif wow.gif wow.gif

<span class='ME'>
<span class='ME'>ZanderZ</span> hopes that too
</span>
although LithJoe's Ultimate Trainer is great too.

Delfi, have you contacted LithJoe? I think he programs in Delphi too and he might know more offsets and stuff.

he does, but his website is d.o.w.n..

ok, here is a nice litle something:

user posted image

*note here: the background loader is from spooky's path editor biggrin.gif
*another note: setup the keys before you run the game
*and another one: it is still unstable..
*and it loads / saves lithjoe's teleport tables
*place it to the gta-vc-exe dir, as it loads the images from img file and the default.ide..

baa:

http://www.infofeast.com/delfi/will_be_del...p/p_trainer.zip

I have vc1.1 and I can't get this teleporter thing to work sad.gif What I'm trying to do is press warp and then click back into the game and expect to be warped when I press resume game to return.

Does this thing work or what am I doing wrong? Doesn't include a readme in the download =/

Sounds awesome if it would work damnit
Users WebsitePMMSN
  Top
 

 
Stretchnutter  
Posted: Apr 29 2004, 00:49
Quote Post


Also known as Racer_S
Group Icon
Group: Members
Joined: Jun 15, 2002

us.gif

Member Award




Only works with 1.0 i think... i liked the car spawn option biggrin.gif
Users WebsitePM
  Top
 

 
Stretchnutter  
Posted: May 1 2004, 09:12
Quote Post


Also known as Racer_S
Group Icon
Group: Members
Joined: Jun 15, 2002

us.gif

Member Award




61EA5C (dword 4 bytes) - During replays this is the Time in Jiffy's (1/60th of a second) before mouse-look is turned off after idle.

This is contained in an actual ASM instruction so if writing to this position make sure your length is exactly 4 bytes no less, no more.

eg; 300 Jiffy's = 5 seconds... look it up

on a side note, if editing GTA-VC.exe in a hex editor, subtract hex 400000 (dec 4194304) from the memory offset to get the offset in the exe. (only applies to some games, not gta-vc.exe)

This post has been edited by Stretchnutter on May 29 2004, 18:06
Users WebsitePM
  Top
 

 
JernejL  
Posted: May 3 2004, 11:26
Quote Post


Big Homie
Group Icon
Group: Retired Staff
Joined: Mar 11, 2002

se.gif

Member Award




QUOTE (Ransom1 @ Apr 29 2004, 23:14)
Yep, you're right

This thing is sweet colgate.gif

But I can't figure out how to do a few things like car health, because I don't know how to specify when it needs a parameter. I tried just putting "1000" or "=1000" after the command but it didn't work. dozingoff.gif

use spaces to separate parameters.
Users WebsitePMMSN
  Top
 

 
DexX  
Posted: May 6 2004, 12:17
Quote Post


Palpable Inanity
Group Icon
Group: Moderators
Joined: May 16, 2002

Member Award




Mooreee............*drools*
Is police chopper chasing you (# of stars you have doesnt matter)
byte - A10ADB, 0/1

car door open / close animation speed?
float - 69B34A

PANZER cheat vehicle ID - byte - 4AC14B (you can change this to a bike and spawn one. but dont bother, its glitchy, and when you try to get on the bike, CRASH!)

Anytime you shoot this vehicle, you will automatilly get a 1-star rating
byte - 5B9675 - Default is 156(D), Police car

Hardcoded special features of Vehicles, use default.ide numbers
Hunter Weapons - byte - 597F4A
Seasparrow Weapons - byte - 598302 (you can only put heli weapons, on other helis!)

Cuban Exhaust - byte - 58BCA8
Tank Cannon- byte - 5945F1
Firetruck Waterhose - byte - 5945D5
Voodoo hydraulics - byte - 594611

Stuff in blue and yellow, doesnt work on bikes.

the way these are coded, you can only have one..."special attribute", per vehicle. for example, if i try to give the firetruck BOTH the waterhose and tank cannon, it will only use one. not everything works on every car. if you want to change the hunter weapons and seapsparrow weapons around, you would have to change both IDs around. the maverick is fun with hunter weapons, easier to control...
if you give your vehicle the tank cannon, it also gets the BP tires, and the ability to kill other cars by ramming them. However, it does NOT get the improved armor, so ramming another car in tank mode, does enough damage to start your OWN car on fire! be warned!

I even used a trainer maker kit (TMK 1.51) to bust out this little app to do the work for me...
http://gregval.phpwebhosting.com/uploads/trainem.gif
the police stuff on the left, as mentioned in my last post, previous page, still requires a separate main.scm with the models you want to change them to, loaded and requested through there. the exe has to have its own model loading routine for this (as none of the default chase vehicles are in the main.scm), but i cant find it turn.gif

more as i find it..
PM
  Top
 

 
=MATT=  
Posted: May 10 2004, 05:06
Quote Post


Player Hater
Group Icon
Group: Members
Joined: Apr 11, 2004

XXXXX



hey, nice list of addressed here
i have made a trainer program in VB, yes Delfi, VB and i was wondering how you get the position of the player. I read the first post on this topic but i dont exactally get what it ment by:
QUOTE
teleporter - same for as ped and as any other vehicle:
8276416 > pointer = 72083480, + 52 bytes = 72083532 where is x, y, z of the object as 4 byte float values
72083532 > float x next is y and then z

ok so there is the address "8276416" which is a pointer to "72083480" then if you add 52 bytes to it you get "72083532" where the x pos of the objest is then in "72083533" is the y pos of the object and in "72083534" is the z pos??
an i getting this rite?
and before jax said that all peds and cars were randomly stored in VC's memory so how can you give exact addresses?, or are these the addresses for the players x, y, z?
blink.gif
PM
  Top
 

 
JernejL  
Posted: May 10 2004, 11:10
Quote Post


Big Homie
Group Icon
Group: Retired Staff
Joined: Mar 11, 2002

se.gif

Member Award




QUOTE (=MATT= @ May 10 2004, 06:06)
hey, nice list of addressed here
i have made a trainer program in VB, yes Delfi, VB and i was wondering how you get the position of the player. I read the first post on this topic but i dont exactally get what it ment by:
QUOTE
teleporter - same for as ped and as any other vehicle:
8276416 > pointer = 72083480, + 52 bytes = 72083532 where is x, y, z of the object as 4 byte float values
72083532 > float x next is y and then z

ok so there is the address "8276416" which is a pointer to "72083480" then if you add 52 bytes to it you get "72083532" where the x pos of the objest is then in "72083533" is the y pos of the object and in "72083534" is the z pos??
an i getting this rite?
and before jax said that all peds and cars were randomly stored in VC's memory so how can you give exact addresses?, or are these the addresses for the players x, y, z?
blink.gif

"where is x, y, z of the object as 4 byte float values"

just read a DWORD at the "pointer" and add 52 bytes (decimal) to the value you read there, then read a 4-BYTE IEEE SINGLE FLOATING POINT VALUE at that position, that
value you read here is the X, y and z follow after x, add 4 bytes more for y and 8 bytes for z.

i don't know where you can get positions for random
peds and cars, but if someone founds out i could find this very useful!
Users WebsitePMMSN
  Top
 

 
jax  
Posted: May 10 2004, 13:42
Quote Post


Moof!
Group Icon
Group: Members
Joined: Jan 20, 2004

au.gif

XXXXX



Yes all peds are DMA, although i believe if you were to create them with ?? (global vars) which directly links them to a static memory address (sort of).

EG:

CODE

SCM ?? MEM ADDY
1000?? 821668
1004?? 82166C
1008?? 821670


I've never tried to do anything with this, just something i found along my path. However, an idea sprung to mind with ur pointer for the x,y,z perhaps if you 'point' your 'pointer' at one of those addys (after creating an actor using the required number that is).

err in scm create an actor using 1000?? and then use the 'pointer' to 'point' at 821668 is what im saying.

I have no idea if this would work or not, just a thought colgate.gif

-Jax
Users WebsitePM
  Top
 

 
Sobeit  
Posted: May 12 2004, 02:57
Quote Post


mta ninja
Group Icon
Group: BUSTED!
Joined: May 11, 2004

us.gif

XXXXX



sorry for the extra trouble i am givin u guys for posting this reply so late, but for

QUOTE
Mooreee............*drools*
Is police chopper chasing you (# of stars you have doesnt matter)
byte - A10ADB, 0/1

car door open / close animation speed?
float - 69B34A

PANZER cheat vehicle ID - byte - 4AC14B (you can change this to a bike and spawn one. but dont bother, its glitchy, and when you try to get on the bike, CRASH!)

Anytime you shoot this vehicle, you will automatilly get a 1-star rating
byte - 5B9675 - Default is 156(D), Police car

Hardcoded special features of Vehicles, use default.ide numbers
Hunter Weapons - byte - 597F4A
Seasparrow Weapons - byte - 598302 (you can only put heli weapons, on other helis!)
Cuban Exhaust - byte - 58BCA8
Tank Cannon- byte - 5945F1
Firetruck Waterhose - byte - 5945D5
Voodoo hydraulics - byte - 594611


this is obviously not a freeze/unfreeze thing, but, i tried to add values with a hotkey but, to no avail, help?

*EDIT*:i was talking about the adding voodoo hydrolics mostly, but for the weapons, ect, that would be cool as well cool.gif
Users WebsitePM
  Top
 

 
DexX  
Posted: May 16 2004, 02:30
Quote Post


Palpable Inanity
Group Icon
Group: Moderators
Joined: May 16, 2002

Member Award




Here's some addresses i got this afternoon.

All are float as far as i can tell
Friction between car wheels, and ground: - 69a61a (0 = no friction, or traction. cars cant drive properly!)
Flip the driver side wheels of a car horizontally - 69a5ec (user of the dmagic wheelmod should recognize this effect, make it all 0)
Width of front wheel - this only affects vehicles that have the "skinny front wheel" flag, checked off in the handling.cfg, like the boxville and Linerunner - 69a62b
Size of the corona on the police car EM lights - 69a633
Area that the police car EM lights actually effect - 69a65c

there's more, but they need further testing.
PM
  Top
 

 
JernejL  
Posted: May 17 2004, 10:59
Quote Post


Big Homie
Group Icon
Group: Retired Staff
Joined: Mar 11, 2002

se.gif

Member Award




QUOTE (ashdexx @ May 16 2004, 03:30)
Why dont all of you stop? Delfi your a moderator! its your job to delete spam like this, not add to it.

ANYWAY, ontopic, here's some addresses i got this afternoon.

All are float as far as i can tell
Friction between car wheels, and ground: - 69a61a (0 = no friction, or traction. cars cant drive properly!)
Flip the driver side wheels of a car horizontally - 69a5ec (user of the dmagic wheelmod should recognize this effect, make it all 0)
Width of front wheel - this only affects vehicles that have the "skinny front wheel" flag, checked off in the handling.cfg, like the boxville and Linerunner - 69a62b
Size of the corona on the police car EM lights - 69a633
Area that the police car EM lights actually effect - 69a65c

there's more, but they need further testing.

the spam: the spelling DOES matter to me a lot, sorry but it just throws me off.

i disassembled the gta-vc exe with win32dasm and parsed the asm text to
extract out any adress access to object data - variables, etc.. so i will now
make a addon for my memory editor to show me these positions of
variables so i can easily break the memory blocks into records and have a
better overview on the data and extract some stuff and post here something useful.

ashdexx, there is also a "wider rear wheel" effect, got that one?

Users WebsitePMMSN
  Top
 

 
DexX  
Posted: May 17 2004, 17:05
Quote Post


Palpable Inanity
Group Icon
Group: Moderators
Joined: May 16, 2002

Member Award




QUOTE
ashdexx, there is also a "wider rear wheel" effect, got that one?

Not YET, but that did occur to me when i was poking about, and i dont know why it would be anywhere else, there's a ton of wheel stuff in that area, so im gonna have another look.
PM
  Top
 

 
ModelingMan  
Posted: May 17 2004, 18:35
Quote Post


Crackalacking!
Group Icon
Group: Members
Joined: Jan 23, 2004

sj.gif

Member Award




I haven't really read this topic until ashdexx pointed it out. I started mem hacking with N64 ROMs with the use of TSearch. Looking at all the things that you all have found/hacked makes me want to start hacking Vice City myself, which I am going to do now.

.:EDIT:.
I got the address for the current car in the vercetti mansion garage:

8223480 > The value is the Car number in the Default.IDE. I'm still trying to figure out the car colors address.

.:EDIT2:.
Another addition to garage editing, this is for the El Casa something mansion:

8221880 > Again the Default.IDE number.

I still can't figure out the car colors address.

This post has been edited by ModelingMan on May 17 2004, 21:35
PM
  Top
 

 
Cray  
Posted: May 18 2004, 18:49
Quote Post


MTA Developer
Group Icon
Group: Members
Joined: Jul 1, 2002

XXXXX



QUOTE (ModelingMan @ May 17 2004, 18:35)
I still can't figure out the car colors address.

Try +416 (color 1, primary) and +417 (color 2, secondary) on the vehicle object.
Users WebsitePM
  Top
 

 
JernejL  
Posted: May 18 2004, 19:28
Quote Post


Big Homie
Group Icon
Group: Retired Staff
Joined: Mar 11, 2002

se.gif

Member Award




just to announce for anyone that remembers "P_trainer" - gta-vc admin console,
the thing moved far, it now works with a system-wide keyboard hook (i don't intend to scare you tounge.gif)
so it captures key presses even if in the background and it does it real-time
so no more sticky keys or stuff.. but because of this larger parts for console
writing input.. there will be also a parameter hint and autocomplete function biggrin.gif

stay tuned and post things you would like to see implemented in the console.
Users WebsitePMMSN
  Top
 

 
0 User(s) are reading this topic (0 Guests and 0 Anonymous Users)
0 Members:

Topic Options Pages: (47) « First ... 2 3 [4] 5 6 ... Last » Reply to this topicStart new topicStart Poll
Search topic for posted by (exact match)



 
IMG IMG
     

 
     
Message Boards and Forums Directory