[Source]Trove hack

Posts 1–15 of 42 · Page 1 of 3

[Source]Trove hack

It's up to you to make this script, anyone say ( how to make this ) I invite you to go to google and look for cheat engine tutorial It's very easy

Instant kill

Code:

label(orig_005958E5)
label(orig_005958EB)

newmem:
mov [eax],ecx
mov ecx,edi
call trove.AK::MotionEngine::SetPlayerVolume+67E0
mov ecx,[eax+04]
mov eax,AAAAAAAB
mul ecx
mov [esp+7C],00000000
mov edi,edx
mov [esp+00000080],00000000
shr edi,1
mov [esp+00000098],edi
mov [esp+00000084],00000000
je trove.AK::SoundEngine::ClearPreparedEvents+4A6F
mov eax,[trove.NvOptimusEnablement+22444]
test al,01
or eax,01
push trove.AK::GetWwiseXAudio2Interface+524EB8
mov [trove.NvOptimusEnablement+22444],eax
call trove.AK::SoundEngine::DynamicSequence::Open+B930
mov ecx,eax
add esp,04
mov [trove.NvOptimusEnablement+223A8],ecx

orig_005958E5:
mov ecx,[trove.NvOptimusEnablement+223A8]

orig_005958EB:
push ecx
mov eax,esp
mov [eax],ecx
mov ecx,[esp+00000098]
call trove.AK::MotionEngine::SetPlayerVolume+67E0

Super Jump

Code:

alloc(newmem,256)

label(orig_009EE961)

newmem:
mov [esp+7C],00000000
mov [esp+00000080],00000000
mov [esp+00000084],00000000
call trove.AK::GetWwiseXAudio2Interface+AD4D0
add esp,04
lea ecx,[esp+78]
push eax
push trove.AK::GetWwiseXAudio2Interface+58C98C
call trove.AK::SoundEngine::PrepareBank+B80
push [trove.AK::GetWwiseXAudio2Interface+5F0280]
mov ecx,edi
or ebx,04
call trove.AK::SoundEngine::PrepareEvent+3600
lea ecx,[esp+78]
push ecx
mov ecx,eax
call trove.AK::GetWwiseXAudio2Interface+DC510
mov byte ptr [esp+13],01
test al,al
mov byte ptr [esp+13],00

orig_009EE961:
test bl,04
je trove.AK::GetWwiseXAudio2Interface+30A3BB
push [esp+7C]
lea ecx,[esp+00000088]
and ebx,-05
push [esp+00000084]
call trove.AK::SoundEngine::UnregisterAllGameObj+56D0
mov [esp+00000080],00000000

Show all map markers

Code:

alloc(newmem,256)


newmem:
mov [esp+7C],00000000
call trove.AK::GetWwiseXAudio2Interface+316EA0
mov ecx,[eax+08]
mov eax,[esp+3C]
mov [ecx+08],eax
lea ecx,[esp+6C]
push [esp+64]
push [esp+6C]
call trove.AK::SoundEngine::UnregisterAllGameObj+56D0
push [esp+14]
lea ecx,[esp+20]
mov [esp+6C],00000000
push [esp+1C]
mov [esp+6C],00000000
mov [esp+68],00000000
call trove.AK::SoundEngine::UnregisterAllGameObj+56D0
mov eax,[esp+28]
mov ecx,[esp+34]
mov [esp+18],00000000
mov [esp+14],00000000
mov [esp+10],00000000
add eax,04
mov [esp+28],eax
cmp eax,trove.AK::GetWwiseXAudio2Interface+63FCEC
jl trove.AK::GetWwiseXAudio2Interface+313245

Fly Speed

Code:

alloc(newmem,256)

label(orig_009F8241)
label(orig_009F8247)
label(orig_009F8255)

newmem:
mov [esp+7C],00000000
mov byte ptr [esp+00000104],01
call trove.AK::GetWwiseXAudio2Interface+3D08E0
mov eax,[esp+20]
mov ecx,trove.NvOptimusEnablement+22CA0
test eax,eax
cmovne ecx,eax
push ecx
lea ecx,[esp+74]
call trove.AK::GetWwiseXAudio2Interface+3D0100
mov eax,[edi+00000168]
mov ecx,[esp+74]
mov [esp+14],eax
mov eax,[esp+78]
cmp ecx,eax
sub eax,[esp+70]
sar eax,04
cmp eax,08
lea ecx,[eax+08]

orig_009F8241:
mov ecx,eax
shr ecx,1
add ecx,eax

orig_009F8247:
push ecx
lea ecx,[esp+74]
call trove.AK::GetWwiseXAudio2Interface+3D08E0
mov ecx,[esp+74]

orig_009F8255:
fild dword ptr [esp+14]
mov eax,ecx
add ecx,10
mov [esp+74],ecx
fstp qword ptr [eax+08]
mov [eax],00000004
mov eax,[edi+0000016C]

Speedhack

Code:

alloc(newmem,256)


newmem:
mov [esp+7C],00000000
call trove.AK::SoundEngine::LoadBank+4B00
push 01
push 10
push [esp+000000BC]
call trove.AK::GetWwiseXAudio2Interface+22B4B0
mov eax,[esp+7C]
lea ecx,[esp+00000084]
add esp,0C
mov [esp+000000B4],00000000
add eax,eax
push eax
push [esp+78]
call trove.AK::SoundEngine::UnregisterAllGameObj+56D0
push [esp+60]
lea ecx,[esp+6C]
mov [esp+78],00000000
push [esp+68]
mov [esp+78],00000000
mov [esp+74],00000000
call trove.AK::SoundEngine::UnregisterAllGameObj+56D0
lea eax,[esp+2C]
push eax
lea eax,[esp+000000C0]
push eax
call trove.AK::GetWwiseXAudio2Interface+23AE80
push 01
push 10

freeze fly

Code:

alloc(newmem,256)

label(orig_00ACA833)

newmem:
mov [esp+7C],00000000
mov [esp+4C],00000000
mov [esp+50],00000000
mov [esp+54],00000000
call trove.AK::GetWwiseXAudio2Interface+AD4D0
add esp,04
lea ecx,[esp+48]
push eax
push trove.AK::GetWwiseXAudio2Interface+4BB47C
call trove.AK::SoundEngine::PrepareBank+B80
mov ecx,[ebp+08]
lea eax,[esp+48]
push eax
push esi
call trove.AK::GetWwiseXAudio2Interface+236080
mov edi,eax
mov ecx,edi
call trove.AK::GetWwiseXAudio2Interface+234E60
test al,al
mov [esp+18],3F800000
jmp trove.AK::GetWwiseXAudio2Interface+3E6293

orig_00ACA833:
cmp dword ptr [edi+40],06
je trove.AK::GetWwiseXAudio2Interface+3E6288
push 06
lea eax,[esp+000000EC]
mov ecx,edi
push eax
call trove.AK::SoundEngine::SetPanningRule+7D30
push 01
push 10
push [esp+000000F4]
call trove.AK::GetWwiseXAudio2Interface+22B4B0

On a tutorials I understood nothing. What is it needed to change or add to this script?
Maybe, it`s stupid question for you, but many do not understand it.

Thanks for this Dark! But I'm with Zeiro on this one. I've searched many tuts about CE and it's address searching and all. We just need to know what we need to search.

I agree its very easy to learn how to find addresses and use cheat engine but then again i dont know what we are supposed to know what we are looking for too, But otherwise Thanks for the post !

Thanks,

I been playing around trying to find the instant kill, as mentioned above - also help if we knew where to look.

Regards,
HaHaItsJake

please teach us how to use

Originally Posted by ienne

please teach us how to do
edit: i think you have any ideia about what this code is talking about and you is shit

I couldn't understand, should i be mad at ienne calling me shit or who is ienne calling shit?

Originally Posted by InfiniteSynteX

I couldn't understand, should i be mad at ienne calling me shit or who is ienne calling shit?

I have no idea who she is referring to but I wouldn't pay too much attention to him/her because I could barely understand what she is saying with that statement. From what I can see I believe that she thinks that the OP is "shit" because he might have no idea what he's talking about. I've looked around for other insta-kill codes but from what I've seen, Dark seems to be the originator so I wouldn't be calling him "shit" period. So unless if you have any proof otherwise, keep your mouth shut (at) ienne. Good day.

My work is real, all who know me know that it's true I never make fake

why don't you post a youtube tutorial?

Originally Posted by darkm125

It's up to you to make this script, anyone say ( how to make this ) I invite you to go to google and look for cheat engine tutorial It's very easy

Instant kill

Code:

label(orig_005958E5)
label(orig_005958EB)

newmem:
mov [eax],ecx
mov ecx,edi
call trove.AK::MotionEngine::SetPlayerVolume+67E0
mov ecx,[eax+04]
mov eax,AAAAAAAB
mul ecx
mov [esp+7C],00000000
mov edi,edx
mov [esp+00000080],00000000
shr edi,1
mov [esp+00000098],edi
mov [esp+00000084],00000000
je trove.AK::SoundEngine::ClearPreparedEvents+4A6F
mov eax,[trove.NvOptimusEnablement+22444]
test al,01
or eax,01
push trove.AK::GetWwiseXAudio2Interface+524EB8
mov [trove.NvOptimusEnablement+22444],eax
call trove.AK::SoundEngine::DynamicSequence::Open+B930
mov ecx,eax
add esp,04
mov [trove.NvOptimusEnablement+223A8],ecx

orig_005958E5:
mov ecx,[trove.NvOptimusEnablement+223A8]

orig_005958EB:
push ecx
mov eax,esp
mov [eax],ecx
mov ecx,[esp+00000098]
call trove.AK::MotionEngine::SetPlayerVolume+67E0

Super Jump

Code:

alloc(newmem,256)

label(orig_009EE961)

newmem:
mov [esp+7C],00000000
mov [esp+00000080],00000000
mov [esp+00000084],00000000
call trove.AK::GetWwiseXAudio2Interface+AD4D0
add esp,04
lea ecx,[esp+78]
push eax
push trove.AK::GetWwiseXAudio2Interface+58C98C
call trove.AK::SoundEngine::PrepareBank+B80
push [trove.AK::GetWwiseXAudio2Interface+5F0280]
mov ecx,edi
or ebx,04
call trove.AK::SoundEngine::PrepareEvent+3600
lea ecx,[esp+78]
push ecx
mov ecx,eax
call trove.AK::GetWwiseXAudio2Interface+DC510
mov byte ptr [esp+13],01
test al,al
mov byte ptr [esp+13],00

orig_009EE961:
test bl,04
je trove.AK::GetWwiseXAudio2Interface+30A3BB
push [esp+7C]
lea ecx,[esp+00000088]
and ebx,-05
push [esp+00000084]
call trove.AK::SoundEngine::UnregisterAllGameObj+56D0
mov [esp+00000080],00000000

Show all map markers

Code:

alloc(newmem,256)


newmem:
mov [esp+7C],00000000
call trove.AK::GetWwiseXAudio2Interface+316EA0
mov ecx,[eax+08]
mov eax,[esp+3C]
mov [ecx+08],eax
lea ecx,[esp+6C]
push [esp+64]
push [esp+6C]
call trove.AK::SoundEngine::UnregisterAllGameObj+56D0
push [esp+14]
lea ecx,[esp+20]
mov [esp+6C],00000000
push [esp+1C]
mov [esp+6C],00000000
mov [esp+68],00000000
call trove.AK::SoundEngine::UnregisterAllGameObj+56D0
mov eax,[esp+28]
mov ecx,[esp+34]
mov [esp+18],00000000
mov [esp+14],00000000
mov [esp+10],00000000
add eax,04
mov [esp+28],eax
cmp eax,trove.AK::GetWwiseXAudio2Interface+63FCEC
jl trove.AK::GetWwiseXAudio2Interface+313245

Fly Speed

Code:

alloc(newmem,256)

label(orig_009F8241)
label(orig_009F8247)
label(orig_009F8255)

newmem:
mov [esp+7C],00000000
mov byte ptr [esp+00000104],01
call trove.AK::GetWwiseXAudio2Interface+3D08E0
mov eax,[esp+20]
mov ecx,trove.NvOptimusEnablement+22CA0
test eax,eax
cmovne ecx,eax
push ecx
lea ecx,[esp+74]
call trove.AK::GetWwiseXAudio2Interface+3D0100
mov eax,[edi+00000168]
mov ecx,[esp+74]
mov [esp+14],eax
mov eax,[esp+78]
cmp ecx,eax
sub eax,[esp+70]
sar eax,04
cmp eax,08
lea ecx,[eax+08]

orig_009F8241:
mov ecx,eax
shr ecx,1
add ecx,eax

orig_009F8247:
push ecx
lea ecx,[esp+74]
call trove.AK::GetWwiseXAudio2Interface+3D08E0
mov ecx,[esp+74]

orig_009F8255:
fild dword ptr [esp+14]
mov eax,ecx
add ecx,10
mov [esp+74],ecx
fstp qword ptr [eax+08]
mov [eax],00000004
mov eax,[edi+0000016C]

Speedhack

Code:

alloc(newmem,256)


newmem:
mov [esp+7C],00000000
call trove.AK::SoundEngine::LoadBank+4B00
push 01
push 10
push [esp+000000BC]
call trove.AK::GetWwiseXAudio2Interface+22B4B0
mov eax,[esp+7C]
lea ecx,[esp+00000084]
add esp,0C
mov [esp+000000B4],00000000
add eax,eax
push eax
push [esp+78]
call trove.AK::SoundEngine::UnregisterAllGameObj+56D0
push [esp+60]
lea ecx,[esp+6C]
mov [esp+78],00000000
push [esp+68]
mov [esp+78],00000000
mov [esp+74],00000000
call trove.AK::SoundEngine::UnregisterAllGameObj+56D0
lea eax,[esp+2C]
push eax
lea eax,[esp+000000C0]
push eax
call trove.AK::GetWwiseXAudio2Interface+23AE80
push 01
push 10

freeze fly

Code:

alloc(newmem,256)

label(orig_00ACA833)

newmem:
mov [esp+7C],00000000
mov [esp+4C],00000000
mov [esp+50],00000000
mov [esp+54],00000000
call trove.AK::GetWwiseXAudio2Interface+AD4D0
add esp,04
lea ecx,[esp+48]
push eax
push trove.AK::GetWwiseXAudio2Interface+4BB47C
call trove.AK::SoundEngine::PrepareBank+B80
mov ecx,[ebp+08]
lea eax,[esp+48]
push eax
push esi
call trove.AK::GetWwiseXAudio2Interface+236080
mov edi,eax
mov ecx,edi
call trove.AK::GetWwiseXAudio2Interface+234E60
test al,al
mov [esp+18],3F800000
jmp trove.AK::GetWwiseXAudio2Interface+3E6293

orig_00ACA833:
cmp dword ptr [edi+40],06
je trove.AK::GetWwiseXAudio2Interface+3E6288
push 06
lea eax,[esp+000000EC]
mov ecx,edi
push eax
call trove.AK::SoundEngine::SetPanningRule+7D30
push 01
push 10
push [esp+000000F4]
call trove.AK::GetWwiseXAudio2Interface+22B4B0

Instakill can never work correct? cause dmg is server sided?

Damage / Attack speed is server sided, I don't use damage stats or attack speed stats, it's other method.

Originally Posted by darkm125

Damage / Attack speed is server sided, I don't use damage stats or attack speed stats, it's other method.

That's what we're all trying to figure out Dark. There's an unknown value that has to be uncovered! We must find it! You are just sitting there just waiting for us to find it. He's like an mad scientist teaching his minions. He knows the value but he ain't giving it out

Originally Posted by TwiggyHD

If that is the case, I like it. It's filtering out those people who really want it so it motivates them to learn some, if not, many new things along the way. I've found some useful new addresses to play with while trying to figure out where/what to change.

But, I'm also getting pissed because I just want to figure this out already lol.