Cheat Engine

btd5 · Cheater Reputation: 0 Joined: 05 Feb 2016 Posts: 40

Well i tried with pointers no luck, but when i noped some opcodes game crashed when i needed to die so i think i found it but can u help me with aa if u can.

Thanks.

ParkourPenguin · Posted: Sat Feb 27, 2016 1:27 am Post subject:

I believe the word you're looking for is "instruction" instead of "opcode". An opcode is a part of the machinecode of an instruction responsible for the operation being performed. It does not include the machinecode for the operands.

Regardless of that terminology, an instruction being replaced with NOPs causing the game to crash has no correlation with it being the instruction that makes you invincible. A lot of instructions could cause the game to crash if they're removed.

What is the instruction?
What is the value you found (i.e. a boolean 0/1, or something else)?
What are the instructions around that instruction?

btd5 · Cheater Reputation: 0 Joined: 05 Feb 2016 Posts: 40

Well i found boolean value. But when im alive is 0 when dead is 1. It is reversed. For fly is same when i jump value decrese and when i go down value increase. I just wanted to tell u that values are reversed, but i think thats not important.

Thanks

realrbn · Posted: Sat Feb 27, 2016 3:55 am Post subject:

Have you tried NOPing the Opcode that writes when you die?

ParkourPenguin · Posted: Sat Feb 27, 2016 11:48 am Post subject:

Try changing squishy.exe+18A9E2 (je squishy.exe+18A9DB) to a jmp instead (i.e. jmp squishy.exe+18A9DB) and see what happens.

btd5 · Cheater Reputation: 0 Joined: 05 Feb 2016 Posts: 40

˝Try changing squishy.exe+18A9E2 (je squishy.exe+18A9DB) to a jmp instead (i.e. jmp squishy.exe+18A9DB) and see what happens.˝

U probably wanted to say Try changing squishy.exe+18A9E2 (je squishy.exe+18AA0C) to a jmp instead (i.e. jmp squishy.exe+18AA0C), or Try changing squishy.exe+18A9B2 (je squishy.exe+18A9DB) to a jmp instead (i.e. jmp squishy.exe+18A9DB) and see what happens, or 3rd options that i didnt understand what u want me to do. But i tried both values je to jmp but i end only with no sound effects so probably wrong adress?

Im gonna try with other adresses i will found.

thanks.

++METHOS · Posted: Sat Feb 27, 2016 2:44 pm Post subject:

If you found a boolean value, and you nop all of the instructions that write to that value but you still die, then that boolean value is worthless for what you are trying to accomplish. Additionally, analyzing the code that handles that value may also be a poor use of your time, as it may or may not even be relative.

btd5 · Cheater Reputation: 0 Joined: 05 Feb 2016 Posts: 40

Well im tring to do god mode that i wont die enymore but it seems that i always got wrong adress or u just cant hack god mode in this game :(

ParkourPenguin · Posted: Sat Feb 27, 2016 3:08 pm Post subject:

Oh. Oops. Yeah, I read that image wrong. I meant squishy.exe+18A9E2 (je squishy.exe+18AA0C) since that conditional jump skips the ASM that writes to that address when you die. I figured maybe that call was the thing that made you die or something; however, from what you said, it seems like the call just plays a sound. So that address is probably worthless.

btd5 · Cheater Reputation: 0 Joined: 05 Feb 2016 Posts: 40

Ye probably wrong adress or u cant just do it. Meaby ill try once again with ultimap but i hate bluescreens :D

btd5 · Cheater Reputation: 0 Joined: 05 Feb 2016 Posts: 40

Can cheat engine somehow scan in assembler or memory for adresses with similar function?

ParkourPenguin · Posted: Tue Mar 01, 2016 11:23 pm Post subject:

Could you elaborate on that? What do you mean by "adresses with similar function"?
If you want to scan for an instruction, go to Memory Viewer -> Search -> Find assembly code
If you want to find what addresses an instruction accesses, right click on the instruction and select that option.

btd5 · Cheater Reputation: 0 Joined: 05 Feb 2016 Posts: 40

If u remember we talked about boolean value for HP. I found 4 adresses + opcodes and if i noped it i cant die when i for exaple jump in lava, get on spines, bomb explode next to me, something drop on me...... They do preaty much same job, so i want to know where primary adress is. Can i scan somehow?

This are adresses but nothing in common
squishy.exe+91E99 // i cant see instructions
squishy.exe+119505 // i cant see instructions
squishy.exe+363C0 // i can see instructions
squishy.exe+91E51 // i can see instructions

i got there adresses from darkbyte's advice
[url]http://www.cheatengine.org/forum/viewtopic.php?t=566966&sid=f8cfe7574a6bde4704b2a63979c0b7d6[/url]

ParkourPenguin · Posted: Thu Mar 03, 2016 12:28 am Post subject:

Again:

btd5 · Cheater Reputation: 0 Joined: 05 Feb 2016 Posts: 40

Well i did that but it's tricky. Let me explain why.

squishy.exe+91E99 // same like 91E51 didnt notice difference
squishy.exe+119505 // well cant die at averything but only specified monster kill me(u must cross ostrich territory), and then i cant deal dmg to boss so good that i cant die and bad i cant kill boss
squishy.exe+363C0 // cant die when rock fall on me so this one is ok
squishy.exe+91E51 // //cant die on lava, spikes but cant releport with game tools(not hack)

so i think somewhere must be primary address for god mode and at other site that i could do dmg.

i scanned adress for squishy.exe+119505 and it's says 235 in byte. When i nop it it's 144. If i freeze it nothing happen but if i change to 0 game freeze. Meaby u will get some clue or some advice on. Well this was last reply. I will try to find it and i wont bouther u more. At least i thing i need to find right address because it seems that is no trick here.

Thank u for all your help.