Trove Hack ( ce script ) 11/11/2015

Posts 1–15 of 78 · Page 1 of 6

Updated all hack and instant kill, enjoy everyone

Updated Infinite Dodge
Freeze Fly not updated work with new update
Updated Fly Speed X5 to Fly Speed X10
Updated SpeedHack x10
Updated Super Jump x10 to Super Jump x20
Updated Remove Fog

Copy and paste lua script on notepad, and save as trove.ct

Bug with spoiler ( remove space from +4568 30] / Device+EB71 5 / Device+442D BC] / Device+47C5 F4] / Device+4FBF AC] / Device+57D0 C8] ) Juste remove space and save as trove.ct

Trove Table

<?xml version="1.0" encoding="utf-8"?>
<CheatTable CheatEngineTableVersion="18">
<CheatEntries>
<CheatEntry>
<ID>380</ID>
<Description>"Fly Speed X10"</Description>
<LastState Activated="0"/>
<Color>80000008</Color>
<VariableType>Auto Assembler Script</VariableType>
<AssemblerScript>[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)

newmem: //this is allocated memory, you have read,write,execute access
//place your code here

originalcode:
movaps xmm3,[trove.exe+BBA1A0]

exit:
jmp returnhere

"trove.exe"+3BDA3A:
jmp newmem
nop
nop
returnhere:

[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
"trove.exe"+3BDA3A:
movaps xmm3,[trove.AK::MotionEngine::AddPlayerMotionDevice+4568 30]
//Alt: db 0F 28 1D A0 59 95 01
</AssemblerScript>
</CheatEntry>
<CheatEntry>
<ID>371</ID>
<Description>"Freeze Fly"</Description>
<LastState Activated="0"/>
<Color>800040</Color>
<VariableType>Auto Assembler Script</VariableType>
<AssemblerScript>{ Game : Trove.exe
Version:
Date : 2015-11-05
Author : darkm125

This script does blah blah blah
}

[ENABLE]

aobscanmodule(FREEZEFLY,trove.exe,F3 0F 10 89 B4 00 00 00 F3) // should be unique
alloc(newmem,$1000)

label(code)
label(return)

newmem:

code:
movss xmm1,[ecx+000000D0]
jmp return

FREEZEFLY:
jmp code
nop
nop
nop
return:
registersymbol(FREEZEFLY)

[DISABLE]

FREEZEFLY:
db F3 0F 10 89 B4 00 00 00

unregistersymbol(FREEZEFLY)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: "trove.exe"+517B1F

"trove.exe"+517B0C: CC - int 3
"trove.exe"+517B0D: CC - int 3
"trove.exe"+517B0E: CC - int 3
"trove.exe"+517B0F: CC - int 3
"trove.exe"+517B10: 55 - push ebp
"trove.exe"+517B11: 8B EC - mov ebp,esp
"trove.exe"+517B13: 51 - push ecx
"trove.exe"+517B14: 8B 81 18 01 00 00 - mov eax,[ecx+00000118]
"trove.exe"+517B1A: 83 E8 02 - sub eax,02
"trove.exe"+517B1D: 74 35 - je trove.exe+517B54
// ---------- INJECTING HERE ----------
"trove.exe"+517B1F: F3 0F 10 89 B4 00 00 00 - movss xmm1,[ecx+000000B4]
// ---------- DONE INJECTING ----------
"trove.exe"+517B27: F3 0F 10 05 10 38 07 01 - movss xmm0,[trove.exe+803810]
"trove.exe"+517B2F: 0F 2F C1 - comiss xmm0,xmm1
"trove.exe"+517B32: 72 0C - jb trove.exe+517B40
"trove.exe"+517B34: F3 0F 11 4D FC - movss [ebp-04],xmm1
"trove.exe"+517B39: D9 45 FC - fld dword ptr [ebp-04]
"trove.exe"+517B3C: 8B E5 - mov esp,ebp
"trove.exe"+517B3E: 5D - pop ebp
"trove.exe"+517B3F: C3 - ret
"trove.exe"+517B40: F3 0F 10 05 2C 17 23 01 - movss xmm0,[trove.exe+9C172C]
"trove.exe"+517B48: F3 0F 11 45 FC - movss [ebp-04],xmm0
}
</AssemblerScript>
</CheatEntry>
<CheatEntry>
<ID>0</ID>
<Description>"Infinite Dodge"</Description>
<LastState Activated="0"/>
<Color>0000FF</Color>
<VariableType>Auto Assembler Script</VariableType>
<AssemblerScript>[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)

newmem: //this is allocated memory, you have read,write,execute access
//place your code here

originalcode:
fcomip st(0),st(0)
fstp st(0)
ja trove.AK::MotionEngine::AddPlayerMotionDevice+EB71 5

exit:
jmp returnhere

"trove.exe"+53A87C:
jmp newmem
nop
returnhere:

[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
"trove.exe"+53A87C:
fcomip st(0),st(1)
fstp st(0)
ja trove.AK::MotionEngine::AddPlayerMotionDevice+EB71 5
//Alt: db DF F1 DD D8 77 03
</AssemblerScript>
</CheatEntry>
<CheatEntry>
<ID>378</ID>
<Description>"Remove Fog"</Description>
<LastState Activated="0"/>
<Color>80000008</Color>
<VariableType>Auto Assembler Script</VariableType>
<AssemblerScript>[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)

newmem: //this is allocated memory, you have read,write,execute access
//place your code here

originalcode:
mulss xmm0,[trove.AK::MotionEngine::AddPlayerMotionDevice+442D BC]

exit:
jmp returnhere

"trove.exe"+6567EC:
jmp newmem
nop
nop
nop
returnhere:

[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
"trove.exe"+6567EC:
mulss xmm1,[trove.AK::MotionEngine::AddPlayerMotionDevice+442D BC]
//Alt: db F3 0F 59 05 2C 1F 94 01
</AssemblerScript>
</CheatEntry>
<CheatEntry>
<ID>381</ID>
<Description>"SpeedHack x10"</Description>
<LastState Activated="0"/>
<Color>80000008</Color>
<VariableType>Auto Assembler Script</VariableType>
<AssemblerScript>[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)

newmem: //this is allocated memory, you have read,write,execute access
//place your code here

originalcode:
fmul dword ptr [trove.AK::MotionEngine::AddPlayerMotionDevice+47C5 F4]

exit:
jmp returnhere

"trove.exe"+576FB0:
jmp newmem
nop
returnhere:

[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
"trove.exe"+576FB0:
fmul dword ptr [trove.AK::MotionEngine::AddPlayerMotionDevice+4FBF AC]
//Alt: db D8 0D 1C B1 9F 01
</AssemblerScript>
</CheatEntry>
<CheatEntry>
<ID>382</ID>
<Description>"Super Jump x20"</Description>
<LastState Activated="0"/>
<Color>80000008</Color>
<VariableType>Auto Assembler Script</VariableType>
<AssemblerScript>[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)

newmem: //this is allocated memory, you have read,write,execute access
//place your code here

originalcode:
movss xmm0,[trove.exe+BBC3F0]

exit:
jmp returnhere

"trove.exe"+4D9040:
jmp newmem
nop
nop
nop
returnhere:

[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
"trove.exe"+4D9040:
movss xmm0,[trove.AK::MotionEngine::AddPlayerMotionDevice+57D0 C8]
//Alt: db F3 0F 10 05 38 C2 A7 01
</AssemblerScript>
</CheatEntry>
</CheatEntries>
<UserdefinedSymbols/>
</CheatTable>

Instant Kill

alloc(newmem,256)

label(orig_01818602)

newmem:
mov [esp+50],00000000
mov [esp+20],eax
lea ecx,[esp+50]
lea eax,[esp+20]
mov [esp+54],00000000
push eax
push trove.AK::MotionEngine::AddPlayerMotionDevice+50F5 E8
mov [esp+60],00000000
call trove.AK::MotionEngine::AddPlayerMotionDevice+2B6F 0
push 08
lea ecx,[esp+7C]
mov [esp+7C],00000000
mov [esp+00000080],00000000
mov [esp+00000084],00000000
mov byte ptr [esp+0000010C],01
call trove.AK::MotionEngine::AddPlayerMotionDevice+33B2 00
mov ecx,[esp+7C]
mov eax,[esp+00000080]
cmp ecx,eax
jne trove.AK::MotionEngine::AddPlayerMotionDevice+3194 A6
sub eax,[esp+78]
sar eax,04
cmp eax,08
lea ecx,[eax+08]
jmp trove.AK::MotionEngine::AddPlayerMotionDevice+3194 98

Hello im a noob on this area, but i can't seem to get instakill to work? I paste it in notepad and save as .ct but i get error

Seems he hasn't put in the values for insta kill. Not sure what I am looking for.. mind pming me and lead me on the right path?

Only things I can seem to turn on are, fly speed, super jump and freeze. Good work as always though

I get error at line 8
Can anyone help me ?

So it doesnt work for me

Originally Posted by olz

So it doesnt work for me

Bug with spoiler ( remove space from +4568 30] / Device+EB71 5 / Device+442D BC] / Device+47C5 F4] / Device+4FBF AC] / Device+57D0 C8] ) Juste remove space and save as trove.ct

Ok, it works now.
But how about Insta kill, any hint how to search the address? please

For lazy peoples:

Code:

<?xml version="1.0" encoding="utf-8"?>
<CheatTable CheatEngineTableVersion="18">
<CheatEntries>
<CheatEntry>
<ID>0</ID>
<Description>"Infinite Dodge"</Description>
<LastState Activated="0"/>
<Color>0000FF</Color>
<VariableType>Auto Assembler Script</VariableType>
<AssemblerScript>[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)

newmem: //this is allocated memory, you have read,write,execute access
//place your code here

originalcode:
fcomip st(0),st(0)
fstp st(0)
ja trove.AK::MotionEngine::AddPlayerMotionDevice+EB715

exit:
jmp returnhere

"trove.exe"+53A87C:
jmp newmem
nop
returnhere:




[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
"trove.exe"+53A87C:
fcomip st(0),st(1)
fstp st(0)
ja trove.AK::MotionEngine::AddPlayerMotionDevice+EB715
//Alt: db DF F1 DD D8 77 03
</AssemblerScript>
</CheatEntry>
<CheatEntry>
<ID>371</ID>
<Description>"Freeze Fly"</Description>
<LastState Activated="0"/>
<Color>800040</Color>
<VariableType>Auto Assembler Script</VariableType>
<AssemblerScript>{ Game : Trove.exe
Version: 
Date : 2015-11-05
Author : darkm125

This script does blah blah blah
}

[ENABLE]

aobscanmodule(FREEZEFLY,trove.exe,F3 0F 10 89 B4 00 00 00 F3) // should be unique
alloc(newmem,$1000)

label(code)
label(return)

newmem:

code:
movss xmm1,[ecx+000000D0]
jmp return

FREEZEFLY:
jmp code
nop
nop
nop
return:
registersymbol(FREEZEFLY)

[DISABLE]

FREEZEFLY:
db F3 0F 10 89 B4 00 00 00

unregistersymbol(FREEZEFLY)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: "trove.exe"+517B1F

"trove.exe"+517B0C: CC - int 3 
"trove.exe"+517B0D: CC - int 3 
"trove.exe"+517B0E: CC - int 3 
"trove.exe"+517B0F: CC - int 3 
"trove.exe"+517B10: 55 - push ebp
"trove.exe"+517B11: 8B EC - mov ebp,esp
"trove.exe"+517B13: 51 - push ecx
"trove.exe"+517B14: 8B 81 18 01 00 00 - mov eax,[ecx+00000118]
"trove.exe"+517B1A: 83 E8 02 - sub eax,02
"trove.exe"+517B1D: 74 35 - je trove.exe+517B54
// ---------- INJECTING HERE ----------
"trove.exe"+517B1F: F3 0F 10 89 B4 00 00 00 - movss xmm1,[ecx+000000B4]
// ---------- DONE INJECTING ----------
"trove.exe"+517B27: F3 0F 10 05 10 38 07 01 - movss xmm0,[trove.exe+803810]
"trove.exe"+517B2F: 0F 2F C1 - comiss xmm0,xmm1
"trove.exe"+517B32: 72 0C - jb trove.exe+517B40
"trove.exe"+517B34: F3 0F 11 4D FC - movss [ebp-04],xmm1
"trove.exe"+517B39: D9 45 FC - fld dword ptr [ebp-04]
"trove.exe"+517B3C: 8B E5 - mov esp,ebp
"trove.exe"+517B3E: 5D - pop ebp
"trove.exe"+517B3F: C3 - ret 
"trove.exe"+517B40: F3 0F 10 05 2C 17 23 01 - movss xmm0,[trove.exe+9C172C]
"trove.exe"+517B48: F3 0F 11 45 FC - movss [ebp-04],xmm0
}
</AssemblerScript>
</CheatEntry>
<CheatEntry>
<ID>380</ID>
<Description>"Fly Speed X10"</Description>
<LastState Activated="0"/>
<Color>80000008</Color>
<VariableType>Auto Assembler Script</VariableType>
<AssemblerScript>[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)

newmem: //this is allocated memory, you have read,write,execute access
//place your code here

originalcode:
movaps xmm3,[trove.exe+BBA1A0]

exit:
jmp returnhere

"trove.exe"+3BDA3A:
jmp newmem
nop
nop
returnhere:




[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
"trove.exe"+3BDA3A:
movaps xmm3,[trove.AK::MotionEngine::AddPlayerMotionDevice+456830]
//Alt: db 0F 28 1D A0 59 95 01
</AssemblerScript>
</CheatEntry>
<CheatEntry>
<ID>381</ID>
<Description>"SpeedHack x10"</Description>
<LastState Activated="0"/>
<Color>80000008</Color>
<VariableType>Auto Assembler Script</VariableType>
<AssemblerScript>[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)

newmem: //this is allocated memory, you have read,write,execute access
//place your code here

originalcode:
fmul dword ptr [trove.AK::MotionEngine::AddPlayerMotionDevice+47C5F4]

exit:
jmp returnhere

"trove.exe"+576FB0:
jmp newmem
nop
returnhere:




[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
"trove.exe"+576FB0:
fmul dword ptr [trove.AK::MotionEngine::AddPlayerMotionDevice+4FBFAC]
//Alt: db D8 0D 1C B1 9F 01
</AssemblerScript>
</CheatEntry>
<CheatEntry>
<ID>382</ID>
<Description>"Super Jump x20"</Description>
<LastState Activated="0"/>
<Color>80000008</Color>
<VariableType>Auto Assembler Script</VariableType>
<AssemblerScript>[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)

newmem: //this is allocated memory, you have read,write,execute access
//place your code here

originalcode:
movss xmm0,[trove.exe+BBC3F0]

exit:
jmp returnhere

"trove.exe"+4D9040:
jmp newmem
nop
nop
nop
returnhere:




[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
"trove.exe"+4D9040:
movss xmm0,[trove.AK::MotionEngine::AddPlayerMotionDevice+57D0C8]
//Alt: db F3 0F 10 05 38 C2 A7 01
</AssemblerScript>
</CheatEntry>
<CheatEntry>
<ID>378</ID>
<Description>"Remove Fog"</Description>
<LastState Activated="0"/>
<Color>80000008</Color>
<VariableType>Auto Assembler Script</VariableType>
<AssemblerScript>[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)

newmem: //this is allocated memory, you have read,write,execute access
//place your code here

originalcode:
mulss xmm0,[trove.AK::MotionEngine::AddPlayerMotionDevice+442DBC]

exit:
jmp returnhere

"trove.exe"+6567EC:
jmp newmem
nop
nop
nop
returnhere:




[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
"trove.exe"+6567EC:
mulss xmm1,[trove.AK::MotionEngine::AddPlayerMotionDevice+442DBC]
//Alt: db F3 0F 59 05 2C 1F 94 01
</AssemblerScript>
</CheatEntry>
</CheatEntries>
<UserdefinedSymbols/>
</CheatTable>

dang wished instkill worked

Originally Posted by InfiniteSynteX

dang wished instkill worked

Nah, its not gonna happen (for us - normal players), its for the smart guys, that knows how to hack

How to install Instant Kill?
I`m paste the code in notepad and save to InstKill.ct but it`s does not work :\
ERROR: Failure loading the trainer. Reason: data error

Originally Posted by ZeiroPro

How to install Instant Kill?
I`m paste the code in notepad and save to InstKill.ct but it`s does not work :\
ERROR: Failure loading the trainer. Reason: data error

For instant kill i release just my source, you need to find address.