So, i used 3D000000 and found some addresses. What?! I just told you 'BaseOfRegion1=3D000000, size=3d2f000', where does that 3D032000 come from? harizsama wrote: Then the base of region 1 should be 3D032000 with size=3CFD000, right? But it only works after enabling 'Get crypto key'. Normally a new datatype (AGE Engine encrypted int) should be available in your 'value type' drop down list, allowing you to see through the encryption, you can even make your scans with it.

Remember the 0b and 0x19 I told you to note in step 5? Calculate ror_count (0x19) - ror_count (0B) = E (14 in decimal) and replace the 14 from those #14 with the result of your calculation.ġ3-Save your table, restart cheat engine and open your table table. Hint: use the 'ret 4' lines as marks: Code:ĪGE.EXE+1B328 - C2 0400 - ret 0004 show table lua script, you'll notice 4 instances of '#14' in this script. This will be the first offset of your pointer. Based on madou koukaku's hacks and harizsama's feedback it is likely that the correct pointer base will look like 'AGE.EXE+00270xxx' (warning: unreliable hint).ģ-Locate the in-game value that you want to hack via changed/unchanged scans.Ĥ-Find out what accessed this address, and play until you have a result that reads this address (ie: the '' brackets are on the right side of the comma ',' ).ĥ-Select it and click show disassembler and scroll up until you find the equivalent of my 5D3D0 in your game. Subtract 8 from this address and scan for it as a 4 byte integer (hex mode).Ģ-Add all green results to your cheat table, they are all potential pointer bases. Its address should end with a small number (it's xxxx0028 for MK). It works for madou koukaku (MK), I hope it still works on other versions of the interpreter (given the shortcuts I've taken).ĮDIT: rewrote this tutorial after guiding harizsama.ġ-Scan for the string 'ARCGameEngine' (NOT unicode) there should be only one result that is not green.

If you or anyone else is interested, here is how to make a table that keeps working once you've located the variable you wanna hack, regardless of whether is is encrypted or not. Just use unknown initial value (datatype=4 bytes) and only filter with changed/unchanged. Otherwise if all you need is 'set to a random huge value' and 'freezing' (and 'scanning') you can do that without decrypting. I know their engines are backward compatible, so if there aren't too many new engine features in their latest game, 1 generation forward compatibility *might* work. That being said age.exe itself is just a script interpreter so you could try to run la dea with madou koukaku's exe. Assembly knowledge is needed to read the en/decryption function and identify 2 parameters I need.

Kamidori alchemy meister