NFS Carbon: Hex Editing [Tips & Tricks]

[STAT-X]

Hi Koffy nice to see you
as i did answer "spectre01" before when you you do a search for 0CCDCDCD (car tuning part) the program doesn't find anything
It looks like they have changed the code in some way, so the old MW style don't apply to Carbon. To add cars direct to the garage we need a check sum tool doesn't work with Hex-Workshop (have tried), so for now we have to stick to temporary add cars to the car shop so we can buy them then change the car shop back to original state.

The way Carbon stores car-data is way different then MW.
Using HexWorkshop, the Car Hexcodes begins at offset (about) 00010BC0.
Here are all the car codes we are already using now.
(For more info about this, check this thread)

The Car Data, storing all the modded and tuned parts of the car, starts at offset 00011C20.
See image.


This is the first car, the second starts at offset 00012090.

First car: (at offset 00011C20)

Code: Select all

0000 0000 6CC3 757C 0000 0000 0100 0000 
FF7F FF7F 0000 FF7F FF7F 0000 0000 0000

The 00 behind 757C is the link to the car in the Car Hexcode list.
This one links the car '00'

Second Car: (at offset 00012090)

Code: Select all

0000 0000 D0EA 15E1 0100 0000 0C00 0000 
6B1C 4B1C 0009 FF7F FF7F 0000 0000 0000

This one links to car '01'

So, you understand that the Car Data part is very big, much bigger then MW. In fact, the whole savegame is nearly 5 times as big as the MW savegame. But that makes sense because it has to store much more data, like autosculpt etc.
I haven't figured out how it all works, maybe I'll start on it when I have some more time.

[cparty]

use 02 for careerer car and you can get maximal 6 cars into your garage. Then game tells you "NO SAPCE Sell first then Buy"

if you use 42 you can go to maximal 10 cars. 42 = pinkslip = you won that car, orginaly made to win the 4 boss cars of Carbon. But well you can do any car to 42 to get a bit more space.

42 is a own function
like
20
10
02
01
04

dunno what 41 do, probally crash or something useless

Nice everybody is busy with taking the game apart again.
As far as I know they work as a bitmask where to show that car and can be added together (like the uniques in MW). So 41 would make the car show up in the carlot (I guess 40 stands for won car), if you would put the 03 there, the car should show up in carlot and career etc.
Btw. 80 is the code for your crew member cars, they get added to the carlist during play.

I guess we got all carcodes from the savegame already, just in case here's my list as well:

Code: Select all

CarName                         CarNr
Alfa Romeo Brera                D43C67F8 D43C67F8
Alfa Romeo Brera                C4053AF9 E83BB3AC
Aston Martin DB9                6A1CB6A4 6A1CB6A4
Aston Martin DB9                C4053AF9 74AEF516
Audi LeMans Quattro             2C327487 2C327487
Audi LeMans Quattro             C4053AF9 BDEE5F65
BMW M3 GTR #1                   C4053AF9 961642D4
BMW M3 GTR #1                   4E4ACC23 B35F084E
BMW M3 GTR #2                   4E4ACC23 0EE2332A
Chevrolet Camaro                75D7DF4F 00A497C0
Chevrolet Camaro SS             19459490 19459490
Chevrolet Chevelle SS           4E7EE003 4E7EE003
Chevrolet Corvette Z06          4B95353B 33417A6E
Chevrolet Corvette Z06          C4053AF9 0A2EAACD
Chrysler 300c Hemi SRT8         D1A01768 D1A01768
Chrysler 300c Hemi SRT8         C4053AF9 D3ACA1C8
Dodge Challenger                726790A3 726790A3
Dodge Challenger                38AF78B9 38AF78B9
Dodge Challenger                C4053AF9 79F2F4F0
Dodge Charger R/T               C4053AF9 CD8A9F1D
Dodge Charger R/T               C4053AF9 770FE131
Dodge Charger R/T               C4053AF9 68CC4A72
Dodge Charger R/T               756F8D86 756F8D86 
Dodge Charger SRT8              3A6BA4E2 3A6BA4E2
Dodge Viper SRT10               08D4BE6E 08D4BE6E
Ford GT                         EAA5C042 EAA5C042 
Ford GT                         C4053AF9 35A8BC22
Ford Mustang GT                 4DFD939B 4DFD939B
Infiniti G35                    708E3EE7 708E3EE7
Jaguar XK                       C4053AF9 B31784EA
Jaguar XK                       0A4F24BA 4A3E5F1D
Koenigsegg CCX                  A6DCC132 A6DCC132
Lamborghini Gallardo            0BC42C7B 0BC42C7B
Lamborghini Gallardo            C4053AF9 36DEB2C1
Lamborghini Murciélago          EB77CDC1 EB77CDC1
Lamborghini Murciélago          C4053AF9 48BA06AC
Lamborghini Murciélago LP640    C642ADD6 B367DBE4
Lexus IS300                     B02FFF5B B02FFF5B
Lotus Elise                     36493D31 36493D31
Lotus Europa S                  B40AA291 B40AA291
Mazda RX-7                      33C8098E 33C8098E
Mazda RX-7                      C4053AF9 14589FE1
Mazda RX-7                      C4053AF9 C81AD48C
Mazda RX-8                      374433D6 374433D6
Mazdaspeed 3                    12AC7670 12AC7670
Mazdaspeed 3                    C4053AF9 50D247AB
Mercedes CLK 500                2FAF7782 2FAF7782
Mercedes SL65 AMG               A1F94771 A1F94771
Mercedes SLR McLaren            BBD92AE3 BBD92AE3
Mitsubishi Eclipse 1999         B778D032 1685BFB3
Mitsubishi Eclipse GT           BD0BD7A2 BD0BD7A2
Mitsubishi Eclipse GT           C4053AF9 CB4FF03E
Mitsubishi Lancer Evo IX        4D94417D 4D94417D
Mitsubishi Lancer Evo IX        C4053AF9 5D29CF87
Nissan 240sx                    FC2B6FA8 FC2B6FA8
Nissan 350Z                     39851335 39851335
Nissan Skyline GTR              9901A8DB 9901A8DB
Pagani Zonda F                  89F654AD 89F654AD
Palmont DT1                     C4053AF9 76531977
Palmont FD1                     C4053AF9 A7EED9AC
Palmont PD1                     C4053AF9 69AD7DF5
Palmont PD2                     C4053AF9 2E1636B3
Palmont PD2                     C4053AF9 928F0F95
Palmont PD3                     C4053AF9 DA9CA2D0
Playmouth Road Runner           ACBD671B ACBD671B
Plymouth Hemi Cuda              C6F46D5F C6F46D5F
Plymouth Hemi Cuda              C4053AF9 C3B6D9D2
Pontiac GTO                     C63D48AA C63D48AA
Porsche 911 GT3 RS              60B9FFF2 A3879E6A
Porsche 911 Turbo               39947F5A 39947F5A
Porsche Carrera GT              929986C4 D43D0667
Porsche Carrera GT              C4053AF9 09E1311B
Porsche CaymanS                 EB5B5541 EB5B5541
Porsche CaymanS                 C4053AF9 0B01D71F
Renault Clio V6                 EB6716EB EB6716EB 
Shelby G.T. 500                 03E618F9 500AA602
Shelby GT500                    B6FA2498 4EB727B9
Subaru Impreza WRX              34898C19 C5ED32A2
Subaru Impreza WRX              C4053AF9 7F414C7B
Toyota Corolla GT-S             16431235 16431235
Toyota MR2                      860C8930 860C8930
Toyota Supra                    3434F166 3434F166
Toyota Supra                    C4053AF9 149A47E3
Vauxhall Monaro                 A1E1D3D8 A1E1D3D8
VW Golf R32                     21BF2B94 21BF2B94

As for the structure in the savegame, the carslots and careerslots seem to be pretty much the same, but the customization is completely different. It also looks that they cut it into 2 pieces of customization now. The first one is the actual customization slot the carslot is referring to (having stored performance upgrades, color, etc.), within there is another referrer to a section for the autosculpt and visual stuff (vinyls).

In the savegame the following areas are used:
Carslots: 200 entries using 20Bytes each, 00010bd0h-00011b6fh
Customization slots: 75 entries using 1136Bytes each, 00011b70h-0002683fh
Career slots: 10 entries using 52Bytes each, 00026840h-00026a47h
Somewhere after that comes the 2nd part of the customization which seems to be compressed.

cparty

[STAT-X]

In the savegame the following areas are used:
Carslots: 200 entries using 20Bytes each, 00010bd0h-00011b6fh
Customization slots: 75 entries using 1136Bytes each, 00011b70h-0002683fh
Career slots: 10 entries using 52Bytes each, 00026840h-00026a47h
Somewhere after that comes the 2nd part of the customization which seems to be compressed.

Nice find, I really had some troube spotting the beginning and ending of the custumization parts.

Anyway, I took another look into the carlist data ...
I left some data out in the beginning because I didn't think it was important at the time, but it was so here's an updated list. It's list of car hexcodes as found in your savegame, in that exact same order. Only this time with some more data included. It's only usefull if you know you're way around hexcodes.

Now, let's break it down ... again

Code: Select all

8E000000 EB5B5541 EB5B5541 02 00 0F 00 23 01 0000
8F000000 34898C19 C5ED32A2 04 00 0F 00 24 FF 0000
F0301F03 33C8098E 33C8098E 10 00 0F 00 25 FF 0000
92000000 0BC42C7B 0BC42C7B 02 00 0F 00 27 03 0000
FFFFFFFF 33C8098E 33C8098E 42 00 0F 00 26 02 0000

aaaaaaaa bbbbbbbb bbbbbbbb cc dd ee ff gg hh iiii

These are the last 5 cars in my savegame, from top to bottom it is:
Porsche Cayman S
Subaru Impreza WRX
Mazda RX7
Lamborghini Gallardo
Mazda RX7

The part I left out last time is part a. I first thought it was just an index of some sort (maybe it stil is), but this part ALSO links the the custumization part, like part g. Don't know why, don't know how but it's there. It appears to be for Bonus/Custom/PreTuned cars only.

Also, notice that the RX7 appears twice, one time as Boss car (42) and one time as Custom car (10). This is because if you win a Boss car, it also becomes available in Custom Cars. Also, the last RX7 has FFFFFFFF in front of it (part a), which means it's not active (I sold it). That's how the game know wich cars are active or not.

The rest is pretty much the same, but I'll sum it up again anyway (Hoorah for copy/paste):

Part b is the car code we al know from MW.

Part c defines the location of the car, 01 stands for the carshop.
01 = carshop
02 = Career Garage
04 = My Cars
08 = Pretuned Cars (Quick Race)
10 = 'Custom' Cars
20 = Bonus Cars (unlockable??) and Traffic Cars
New finds:
40 = Boss cars / Won cars
80 = Wingman Cars

Part d doesn't do much ... at the moment

Part e states the car class, I think. Didn't tested this yet, but all muscle cars have the same number etc.
01 = Muscle
02 = Exotic
04 = Tuner

Part f also unknown.

Part g links to the car data part of the savegame, where all the tuning stuff is stored.

Part h is some kind of counter, counting how many career cars you got.

Part i also unknown.

[Koffy]

Hi Koffy nice to see you
as i did answer "spectre01" before when you you do a search for 0CCDCDCD (car tuning part) the program doesn't find anything
It looks like they have changed the code in some way, so the old MW style don't apply to Carbon. To add cars direct to the garage we need a check sum tool doesn't work with Hex-Workshop (have tried), so for now we have to stick to temporary add cars to the car shop so we can buy them then change the car shop back to original state.

Nice to see you too (Stat-X and Cparty too). Sorry, I dind't have time (or will) to read all 4 pages . I can't wait to get my hands on the game to see how this works. Will have to wait.

[GodSpeed]

Did the performance bars show higher on the faster car or did you have to drive it to find out the difference? Just wondering.

I have drove both Audi's they both have the same performance bars in garage.

The difference in those 2 sets of hexcode is probably some difference in performce, but I haven't checked that yet. (Like the M3 GTR in MW, it had 2 different sets of hexcodes, one was a faster version then the other)

Just Checked The BMW M3 GTR has a nice amount of difference in performance in the car lot when they show performance. on each of the two cars

[BrontoX]

Yes you have 2 sets of hex codes cuz there are 2 BMW's the first one in the Canyon (Carbon) or Beggining of MW that are slower and the ones that you unlock afterwards that are faster

[Ceano]

Yes you have 2 sets of hex codes cuz there are 2 BMW's the first one in the Canyon (Carbon) or Beggining of MW that are slower and the ones that you unlock afterwards that are faster

4E4ACC23 B35F084E 20000200 FFFF0000 <<BMW M3 GTR Race (fast)
4E4ACC23 0EE2332A 20000200 FFFF0000 <<BMW M3 GTR Race (slow)

[cparty]

The part I left out last time is part a. I first thought it was just an index of some sort (maybe it stil is), but this part ALSO links the the custumization part, like part g. Don't know why, don't know how but it's there. It appears to be for Bonus/Custom/PreTuned cars only.

Also, notice that the RX7 appears twice, one time as Boss car (42) and one time as Custom car (10). This is because if you win a Boss car, it also becomes available in Custom Cars. Also, the last RX7 has FFFFFFFF in front of it (part a), which means it's not active (I sold it). That's how the game know wich cars are active or not.
...
Part h is some kind of counter, counting how many career cars you got.
Part i also unknown.

As you said for some reason some of the cars have the aaaaaaaa region filled with some kind of code (it was also like this in MW, but I think it didn't have any meaning there), for the others its just the number I usually refer to as 'CarSlot Number'. The numbers just count up each slot. For those bonus cars having the special code as carslot number, we should check if something happens if we change it to the number that would normaly be at this carslot.

gg is the careerslot number (just like the customization number) those slots start at 00026840h in the savegame, I haven't looked at them closely but I guess they are pretty much the same structure as in MW.

iiii probably doesn't have any meaning, it's just padding (and was CDCD in MW) to make the whole slot 4Byte aligned.

What I know so far about the careerslot:
AABBCCDD EEEEEEEE FFFFFFFF GG etc.
AA = careerslot number.
BB = unknown, probably always 00 and part of AA because careerslot number is 2Bytes in size.
CC = the number of impounds your car can take (default 03, max 05).
DD = the current number of impounds your car has.
EEEEEEEE = unknown, looks like it always 00000000 here.
FFFFFFFF = the car's heat stored as a float.
GG etc. = the statistics, eg. number of times busted, number of times escaped...

When I can find some more time, I'll check the rest of the careerslot. And post some stuff about the customization slot. What I found is that it's first 12Bytes seem to be 00, followed by a 2Byte referrer to the visual part of the customization (autosculpt, vinyl etc.), the next 2Byte unknown and then 7 times 8Byte for all the performance upgrades.


greets
cparty

[darknight788]

i got a question about tsearch when i try to search for a cars hex code i get a huge amount of results, what am i doing wrong btw it is v. 1.6

[GodSpeed]

i got a question about tsearch when i try to search for a cars hex code i get a huge amount of results, what am i doing wrong btw it is v. 1.6

Try as a test, open process (nfsc.exe) then click the (hex editor) at top then search for..
4E4ACC23 B35F084E 2000 <<BMW M3 GTR Race (fast)
just change the 20 to 21 goto game get car from car lot then save it. go back to Tsearch and change back to 20 from the 21 you changed it to before go back to game save it again so it's the same as it was or you can keep it at 21 if you want remember to use +6 or +19 CH trainer before buying or before choosing the car, for that matter even driving it.

[darknight788]

nvm i got it i was going by your first post in this topic and it didnt say go to hex editor i wasnt searching in the hex editor. i got it now g/j Ceano
EDIT----- how do i add more cars to the shop, i know you have to make the game think your current cars are cars that were won but how do you do that

[BooGhost]

Has anybody tried adding the BMW or the stock R8 to "My Cars". I've managed to but if i try to customize any of them the game will crash. i've got AE86 and MR2 on "My cars" with the HEX method and i can customize them allright, they've even got bodykits (one each).

PLEaSE help me , i'd really like to get those cars at "My Cars"

[prince1142003]

Use the +XI trainer to unlock ALL cars in the game. This will allow you to have the R8 and M3 in your My Cars and will allow customization without a game crash.

[GodSpeed]

Use the +XI trainer to unlock ALL cars in the game. This will allow you to have the R8 and M3 in your My Cars and will allow customization without a game crash.

people who never used hex editors or memory editors Should Listen to this Post from prince1142003

The game won't crash. The noob's trying to add cars is a bad idea, you will most likly have more headaches then anything else. The easy and fast way is the Trainer XI by gnagna2000.

[STAT-X]

how do i add more cars to the shop, i know you have to make the game think your current cars are cars that were won but how do you do that

Search for the car you want to change, for example the Gallardo:
(add the 02 to the car code, because you're searching for the car in your garage)

0BC42C7B 0BC42C7B 02

When you found it, change the 02 to 42.
That's all ...

[darknight788]

thanks alot man

[STAT-X]

thanks alot man

No problem dude.


Tried something today:
I know people want to add cars directly to the career garage, but that wasn't really posible until now.
It's not exactly adding cars to the garage, but rather swapping them with cars from 'my cars'.

It works like this: (Using Tsearch)
Pick the cars you want to swap in your career garage and in 'my cars', in this example I'm swapping a Mazda RX8 with a Carrera GT.

Mazda RX8 hexcode in garage:
8F000000 374433D6 374433D6 02000F00 20030000

Carrera GT hexcode in 'my cars':
92000000 929986C4 D43D0667 04000F00 25FF0000

It's very easy actually, just swap the bold parts of the carcodes, so the codes should look like this now:

Mazda RX8 hexcode in garage:
8F000000 374433D6 374433D6 04000F00 20FF0000

Carrera GT hexcode in 'my cars':
92000000 929986C4 D43D0667 02000F00 25030000

Now, the Carrera GT should be in your garage and the RX8 in 'my cars'.

[darknight788]

hmmm pretty cool i found the tsearch way of adding cars into the shop to be pretty easy also, is it posible to add more than 10 cars i have 9 atm maybe fill that last space with the bmw ?

[STAT-X]

You only have 10 career slots in a savegame, so you can add the BMW, but then your garage is really full.

[GodSpeed]

How about upgrading performance on the bonus cars. When you buy a boss car, when it go's to garage slot it removes performance.

Wanted to know in MW was there ways to add performance to cars that weren't ment for the upgrades.

I want the Eclipse to have power like the Audi and handling? Is this possible?

I have looked at the MW-Guide but not really sure how much to edit for performance & Handling?

Is there anyone who has tried this yet?

[Burn-Exhaust]

this Audi have low nos in online 2C327487 2C327487 and is not good

and this 2C327487 CB5A6245<<Audi Lemans R8 dosent work in Car Lot

[Cool-spot]

Is there any way to add the 71 challenger to the carshop without the trainer?
Because the 71 challenger has the 01 in the code, but without the trainer it dosent show up!

[STAT-X]

In the savegame the following areas are used:
Carslots: 200 entries using 20Bytes each, 00010bd0h-00011b6fh
Customization slots: 75 entries using 1136Bytes each, 00011b70h-0002683fh
Career slots: 10 entries using 52Bytes each, 00026840h-00026a47h
Somewhere after that comes the 2nd part of the customization which seems to be compressed.

I think I found another interesting part of the savegame, containing racedata.
It starts at 00010080 and the last entry ends at 00010B90. There are about 177 entries using 16bytes each.

It works like this:

Code: Select all

5FC142F7 1E 000000 CBDB0000AE130A0E
AAAAAAAA BB CCCCCC DDDDDDDDDDDDDDDD

(The top code is the first race in the savegame)

A = race hexcode, like a car hexcode, this stands for any race

B = race status, meaning this code changes if a race in locked, open or finished.
I haven't worked out all codes yet, but here are some of them:

08 = Locked
0C = Open
0D = Open + Finisehd
18 = Locked
1C = Open
1D = Open + Finished
1E = ???
1F = ???

C = seems to be al zero's

D = this part contains result data, like times or scores.


Note, all races are in here, including challenge serie races.
Don't think it's gonna be usefull right now, since we don't know what race links up with what race hexcode.
It's gonna take some of time figuring that out ...

[cparty]

Note, all races are in here, including challenge serie races.
Don't think it's gonna be usefull right now, since we don't know what race links up with what race hexcode.
It's gonna take some of time figuring that out ...

I've done that for MW, but I'm really not sure if its worth it, you wouldn't want to unlock single races anyway. It's format was AAAAAAAA BBBBBBBB CCCCCCCC DDDDEEEE.
In MW, the 4 Bytes (C) after the 4Byte race-status identifier (B) were the time for finishing that race (float), followed by 2Byte Max Speed (D) and 2Byte Avg Speed (E). Could be the same here.
As for the 1D/1E/1F, I don't know the difference but they all seem to refer to a won race. Maybe it's a difference if you won or your crewmember won?
*edit* one more idea: maybe it indicates whether you have beaten the record for this track or not?

[GodSpeed]

Just to let you guys know there has been a break through today you can Now Edit any valid savegame file.

Posted here for more info
http://forum.nfsunlimited.net/viewtopic.php?t=13035

Thanks to gnagna2000