[Request] Zwei: The Arges Adventure

[Noire Blackheart]

Game Link: [Link]

Inf HP
Inf MP
Inf Money
anything else you can find

I have tried looking for money in 4byte but I cannot seem to find any, anyway thank you for your time.

[shadowfang82]

played Zwei: The Ilvard Insurrection hope this one just as good so i would love to see a table for this game too thanks

[bandit5]

I found the hitpoint code but it is not working in the game

[bandit5]

the memory code for the hp keeps changing.

[bandit5]

i freeze the hitpoints but it does not freeze in game. going too running steam offline

[bandit5]

does not work

[bandit5]

i can freeze the hearts so they don't go down but the hitpoints still do

[joeyamine]

Did anyone ever find anything for this game? Any CT files out there at all?

[atamax]

I'm a newbie user of cheat engine, I found this following so far:

Code that runs when you use an item (you can nop the instruction and then you can use items indefinitely) (this crashes the game when activated for a while)
Coordinates of both playable characters.

As for scanning, the game stores the values in a weird way so what you see is not what you can search for. Try scanning (4 byte) for unknown initial value first for money then changed / unchanged value to narrow down the search.

Cheat table is for version 1.0.8

EDIT: It seems my "infinite item usage" didn't work with dynamite so I found another code that wrote to that. Updated cheat table, beware that activating it for a while will crash the game. Try adding an hotkey to the script so that if you need to use an item multiple times activate it, then deactivate the script after you're done using the item.

[LarsP]

The usual method for freezing the HP doesn't work in this game, can anyone help?

[fearless123456]

The following scripts are for version 1.8


Godmode/One-hit-kill (Only limited testing done)

1. Enable pBase script
2. Open status window ingame
3. Disable pBase script straightaway!!!
4. Enable No Damage script

Spoiler

Code: Select all

<?xml version="1.0" encoding="utf-8"?>
<CheatTable>
  <CheatEntries>
    <CheatEntry>
      <ID>124</ID>
      <Description>"pBase"</Description>
      <LastState/>
      <VariableType>Auto Assembler Script</VariableType>
      <AssemblerScript>{ Game   : zwei.exe
  Version: 
  Date   : 2019-03-11
  Author : 0

  This script does blah blah blah
}

[ENABLE]

aobscanmodule(PlayerP,gamesys.dal,8A 54 02 0F 88 55 F8) // should be unique
alloc(newmem,$1000)
globalalloc(pBase,4)

label(code)
label(return)

newmem:

code:

  mov [pBase],eax

  mov dl,[edx+eax+0F]
  mov [ebp-08],dl
  jmp return

PlayerP:
  jmp newmem
  nop
  nop
return:
registersymbol(PlayerP)

[DISABLE]

PlayerP:
  db 8A 54 02 0F 88 55 F8

unregistersymbol(PlayerP)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: "gamesys.dal"+A6E11

"gamesys.dal"+A6DF5: 8D 47 7E           -  lea eax,[edi+7E]
"gamesys.dal"+A6DF8: 50                 -  push eax
"gamesys.dal"+A6DF9: 6A 30              -  push 30
"gamesys.dal"+A6DFB: 53                 -  push ebx
"gamesys.dal"+A6DFC: E8 3F E8 FF FF     -  call gamesys.dal+A5640
"gamesys.dal"+A6E01: A1 C0 4F 4B 10     -  mov eax,[gamesys.dal+4B4FC0]
"gamesys.dal"+A6E06: 33 C9              -  xor ecx,ecx
"gamesys.dal"+A6E08: 8A 48 13           -  mov cl,[eax+13]
"gamesys.dal"+A6E0B: 8D 51 FF           -  lea edx,[ecx-01]
"gamesys.dal"+A6E0E: 83 E2 03           -  and edx,03
// ---------- INJECTING HERE ----------
"gamesys.dal"+A6E11: 8A 54 02 0F        -  mov dl,[edx+eax+0F]
"gamesys.dal"+A6E15: 88 55 F8           -  mov [ebp-08],dl
// ---------- DONE INJECTING  ----------
"gamesys.dal"+A6E18: 8D 51 FE           -  lea edx,[ecx-02]
"gamesys.dal"+A6E1B: 83 E2 03           -  and edx,03
"gamesys.dal"+A6E1E: 8A 54 02 0F        -  mov dl,[edx+eax+0F]
"gamesys.dal"+A6E22: 88 55 F9           -  mov [ebp-07],dl
"gamesys.dal"+A6E25: 8B D1              -  mov edx,ecx
"gamesys.dal"+A6E27: 83 E2 03           -  and edx,03
"gamesys.dal"+A6E2A: 41                 -  inc ecx
"gamesys.dal"+A6E2B: 83 E1 03           -  and ecx,03
"gamesys.dal"+A6E2E: 8A 54 02 0F        -  mov dl,[edx+eax+0F]
"gamesys.dal"+A6E32: 8A 44 01 0F        -  mov al,[ecx+eax+0F]
}
</AssemblerScript>
      <CheatEntries>
        <CheatEntry>
          <ID>125</ID>
          <Description>"pBase"</Description>
          <LastState Value="0000000D" RealAddress="0FAB0000"/>
          <ShowAsHex>1</ShowAsHex>
          <VariableType>4 Bytes</VariableType>
          <Address>pBase</Address>
        </CheatEntry>
        <CheatEntry>
          <ID>129</ID>
          <Description>"Luck (Actualx2+2?)"</Description>
          <VariableType>Byte</VariableType>
          <Address>pBase</Address>
          <Offsets>
            <Offset>F</Offset>
          </Offsets>
        </CheatEntry>
      </CheatEntries>
    </CheatEntry>
    <CheatEntry>
      <ID>128</ID>
      <Description>"No damage2"</Description>
      <LastState/>
      <VariableType>Auto Assembler Script</VariableType>
      <AssemblerScript>[ENABLE]

aobscanmodule(Damage,gamesys.dal,2B 85 00 FF FF FF) // should be unique
alloc(newmem,$1000)

label(code)
label(return)
label(code2)

newmem:


mov ecx,[pBase]

cmp ecx,[ebp-FC] // Player compare
jne code2



code:

//  sub eax,[ebp-00000100]  //Remove comment to disable to God Mode
  jmp return

code2:
sub eax,FFFF  // comment out to disable One Hit Kill

jmp return

Damage:
  jmp newmem
  nop
return:

registersymbol(Damage)

[DISABLE]

Damage:
  db 2B 85 00 FF FF FF

unregistersymbol(Damage)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: "gamesys.dal"+13B704

"gamesys.dal"+13B6DC: 8B 95 04 FF FF FF     -  mov edx,[ebp-000000FC]
"gamesys.dal"+13B6E2: 33 C0                 -  xor eax,eax
"gamesys.dal"+13B6E4: 8A 42 04              -  mov al,[edx+04]
"gamesys.dal"+13B6E7: 83 C0 01              -  add eax,01
"gamesys.dal"+13B6EA: 83 E0 03              -  and eax,03
"gamesys.dal"+13B6ED: 8B 8D 04 FF FF FF     -  mov ecx,[ebp-000000FC]
"gamesys.dal"+13B6F3: 8A 14 01              -  mov dl,[ecx+eax]
"gamesys.dal"+13B6F6: 88 95 0B FF FF FF     -  mov [ebp-000000F5],dl
"gamesys.dal"+13B6FC: 8B 85 08 FF FF FF     -  mov eax,[ebp-000000F8]
"gamesys.dal"+13B702: D1 F8                 -  sar eax,1
// ---------- INJECTING HERE ----------
"gamesys.dal"+13B704: 2B 85 00 FF FF FF     -  sub eax,[ebp-00000100]
// ---------- DONE INJECTING  ----------
"gamesys.dal"+13B70A: 89 85 0C FF FF FF     -  mov [ebp-000000F4],eax
"gamesys.dal"+13B710: 8B 8D 0C FF FF FF     -  mov ecx,[ebp-000000F4]
"gamesys.dal"+13B716: 51                    -  push ecx
"gamesys.dal"+13B717: 8B 8D 04 FF FF FF     -  mov ecx,[ebp-000000FC]
"gamesys.dal"+13B71D: E8 BE 52 F1 FF        -  call gamesys.dal+509E0
"gamesys.dal"+13B722: 8B 55 08              -  mov edx,[ebp+08]
"gamesys.dal"+13B725: 33 C0                 -  xor eax,eax
"gamesys.dal"+13B727: 8A 82 E0 2C 4A 10     -  mov al,[edx+gamesys.dal+4A2CE0]
"gamesys.dal"+13B72D: 85 C0                 -  test eax,eax
"gamesys.dal"+13B72F: 0F 84 04 02 00 00     -  je gamesys.dal+13B939
}
</AssemblerScript>
    </CheatEntry>
  </CheatEntries>
</CheatTable>

[fearless123456]

Item Duplicator

1. Go to the lockbox that is located at your house
2. Enable the script
3. Put two of same item kind into the box (if there was none of the same kind in the lockbox)
4. Disable script
5. Exit out of the lockbox
6. Save and exit to title. (Leaving the script running while playing crashes the game...)

Spoiler

Code: Select all

<?xml version="1.0" encoding="utf-8"?>
<CheatTable>
  <CheatEntries>
    <CheatEntry>
      <ID>143</ID>
      <Description>"Duplicate v3"</Description>
      <LastState/>
      <VariableType>Auto Assembler Script</VariableType>
      <AssemblerScript>[ENABLE]

aobscanmodule(INJECT,gamesys.dal,0B F0 89 34 8A) // should be unique
alloc(newmem,$1000)

label(code)
label(return)

newmem:

code:
  mov esi,00630000
  or esi,eax
  mov [edx+ecx*4],esi
  jmp return

INJECT:
  jmp newmem
return:
registersymbol(INJECT)

[DISABLE]

INJECT:
  db 0B F0 89 34 8A

unregistersymbol(INJECT)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: "gamesys.dal"+B626B

"gamesys.dal"+B6244: 8B C2                 -  mov eax,edx
"gamesys.dal"+B6246: C1 E8 1F              -  shr eax,1F
"gamesys.dal"+B6249: 8D 74 02 FC           -  lea esi,[edx+eax-04]
"gamesys.dal"+B624D: EB 76                 -  jmp gamesys.dal+B62C5
"gamesys.dal"+B624F: 8B 15 88 2C 4A 10     -  mov edx,[gamesys.dal+4A2C88]
"gamesys.dal"+B6255: 8B 04 8A              -  mov eax,[edx+ecx*4]
"gamesys.dal"+B6258: 8B F0                 -  mov esi,eax
"gamesys.dal"+B625A: 25 FF FF 00 00        -  and eax,0000FFFF
"gamesys.dal"+B625F: 81 E6 00 00 FF FF     -  and esi,FFFF0000
"gamesys.dal"+B6265: 81 C6 00 00 01 00     -  add esi,00010000
// ---------- INJECTING HERE ----------
"gamesys.dal"+B626B: 0B F0                 -  or esi,eax
"gamesys.dal"+B626D: 89 34 8A              -  mov [edx+ecx*4],esi
// ---------- DONE INJECTING  ----------
"gamesys.dal"+B6270: 66 A1 C0 ED 3D 10     -  mov ax,[gamesys.dal+3DEDC0]
"gamesys.dal"+B6276: 66 3D A0 0F           -  cmp ax,0FA0
"gamesys.dal"+B627A: 0F BF C8              -  movsx ecx,ax
"gamesys.dal"+B627D: B8 D3 4D 62 10        -  mov eax,gamesys.dal+624DD3
"gamesys.dal"+B6282: 7C 10                 -  jl gamesys.dal+B6294
"gamesys.dal"+B6284: F7 E9                 -  imul ecx
"gamesys.dal"+B6286: C1 FA 06              -  sar edx,06
"gamesys.dal"+B6289: 8B CA                 -  mov ecx,edx
"gamesys.dal"+B628B: C1 E9 1F              -  shr ecx,1F
"gamesys.dal"+B628E: 8D 44 0A FC           -  lea eax,[edx+ecx-04]
}
</AssemblerScript>
    </CheatEntry>
  </CheatEntries>
</CheatTable>

[fearless123456]

Random Amount of Money

1. Go to one of the shops and open the sell menu.
2. Enable the script
3. Sell an item
4. Profit
5. Disable the script
6. Save and exit to title. (Leaving the script running while playing crashes the game...)

Spoiler

Code: Select all

<?xml version="1.0" encoding="utf-8"?>
<CheatTable>
  <CheatEntries>
    <CheatEntry>
      <ID>145</ID>
      <Description>"Money v3"</Description>
      <LastState/>
      <VariableType>Auto Assembler Script</VariableType>
      <AssemblerScript>[ENABLE]

aobscanmodule(Money,gamesys.dal,8A 54 02 23 88 55 FC) // should be unique
alloc(newmem,$1000)

label(code)
label(return)

newmem:

mov [edx+eax+23],01010203

code:
  mov dl,[edx+eax+23]
  mov [ebp-04],dl
  jmp return

Money:
  jmp newmem
  nop
  nop
return:
registersymbol(Money)

[DISABLE]

Money:
  db 8A 54 02 23 88 55 FC

unregistersymbol(Money)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: "gamesys.dal"+B553A

"gamesys.dal"+B5514: 83 C4 04                       -  add esp,04
"gamesys.dal"+B5517: A3 14 15 56 10                 -  mov [gamesys.dal+561514],eax
"gamesys.dal"+B551C: A1 C0 4F 4B 10                 -  mov eax,[gamesys.dal+4B4FC0]
"gamesys.dal"+B5521: 33 C9                          -  xor ecx,ecx
"gamesys.dal"+B5523: C7 05 18 15 56 10 00 00 00 00  -  mov [gamesys.dal+561518],00000000
"gamesys.dal"+B552D: 6A 00                          -  push 00
"gamesys.dal"+B552F: 8A 48 27                       -  mov cl,[eax+27]
"gamesys.dal"+B5532: 6A 00                          -  push 00
"gamesys.dal"+B5534: 8D 51 FF                       -  lea edx,[ecx-01]
"gamesys.dal"+B5537: 83 E2 03                       -  and edx,03
// ---------- INJECTING HERE ----------
"gamesys.dal"+B553A: 8A 54 02 23                    -  mov dl,[edx+eax+23]
"gamesys.dal"+B553E: 88 55 FC                       -  mov [ebp-04],dl
// ---------- DONE INJECTING  ----------
"gamesys.dal"+B5541: 8D 51 FE                       -  lea edx,[ecx-02]
"gamesys.dal"+B5544: 83 E2 03                       -  and edx,03
"gamesys.dal"+B5547: 8A 54 02 23                    -  mov dl,[edx+eax+23]
"gamesys.dal"+B554B: 88 55 FD                       -  mov [ebp-03],dl
"gamesys.dal"+B554E: 8B D1                          -  mov edx,ecx
"gamesys.dal"+B5550: 83 E2 03                       -  and edx,03
"gamesys.dal"+B5553: 41                             -  inc ecx
"gamesys.dal"+B5554: 83 E1 03                       -  and ecx,03
"gamesys.dal"+B5557: 8A 54 02 23                    -  mov dl,[edx+eax+23]
"gamesys.dal"+B555B: 8A 44 01 23                    -  mov al,[ecx+eax+23]
}
</AssemblerScript>
    </CheatEntry>
  </CheatEntries>
</CheatTable>

[LarsP]

The following scripts are for version 1.8


Godmode/One-hit-kill (Only limited testing done)

1. Enable pBase script
2. Open status window ingame
3. Disable pBase script straightaway!!!
4. Enable No Damage script

Spoiler

Code: Select all

<?xml version="1.0" encoding="utf-8"?>
<CheatTable>
  <CheatEntries>
    <CheatEntry>
      <ID>124</ID>
      <Description>"pBase"</Description>
      <LastState/>
      <VariableType>Auto Assembler Script</VariableType>
      <AssemblerScript>{ Game   : zwei.exe
  Version: 
  Date   : 2019-03-11
  Author : 0

  This script does blah blah blah
}

[ENABLE]

aobscanmodule(PlayerP,gamesys.dal,8A 54 02 0F 88 55 F8) // should be unique
alloc(newmem,$1000)
globalalloc(pBase,4)

label(code)
label(return)

newmem:

code:

  mov [pBase],eax

  mov dl,[edx+eax+0F]
  mov [ebp-08],dl
  jmp return

PlayerP:
  jmp newmem
  nop
  nop
return:
registersymbol(PlayerP)

[DISABLE]

PlayerP:
  db 8A 54 02 0F 88 55 F8

unregistersymbol(PlayerP)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: "gamesys.dal"+A6E11

"gamesys.dal"+A6DF5: 8D 47 7E           -  lea eax,[edi+7E]
"gamesys.dal"+A6DF8: 50                 -  push eax
"gamesys.dal"+A6DF9: 6A 30              -  push 30
"gamesys.dal"+A6DFB: 53                 -  push ebx
"gamesys.dal"+A6DFC: E8 3F E8 FF FF     -  call gamesys.dal+A5640
"gamesys.dal"+A6E01: A1 C0 4F 4B 10     -  mov eax,[gamesys.dal+4B4FC0]
"gamesys.dal"+A6E06: 33 C9              -  xor ecx,ecx
"gamesys.dal"+A6E08: 8A 48 13           -  mov cl,[eax+13]
"gamesys.dal"+A6E0B: 8D 51 FF           -  lea edx,[ecx-01]
"gamesys.dal"+A6E0E: 83 E2 03           -  and edx,03
// ---------- INJECTING HERE ----------
"gamesys.dal"+A6E11: 8A 54 02 0F        -  mov dl,[edx+eax+0F]
"gamesys.dal"+A6E15: 88 55 F8           -  mov [ebp-08],dl
// ---------- DONE INJECTING  ----------
"gamesys.dal"+A6E18: 8D 51 FE           -  lea edx,[ecx-02]
"gamesys.dal"+A6E1B: 83 E2 03           -  and edx,03
"gamesys.dal"+A6E1E: 8A 54 02 0F        -  mov dl,[edx+eax+0F]
"gamesys.dal"+A6E22: 88 55 F9           -  mov [ebp-07],dl
"gamesys.dal"+A6E25: 8B D1              -  mov edx,ecx
"gamesys.dal"+A6E27: 83 E2 03           -  and edx,03
"gamesys.dal"+A6E2A: 41                 -  inc ecx
"gamesys.dal"+A6E2B: 83 E1 03           -  and ecx,03
"gamesys.dal"+A6E2E: 8A 54 02 0F        -  mov dl,[edx+eax+0F]
"gamesys.dal"+A6E32: 8A 44 01 0F        -  mov al,[ecx+eax+0F]
}
</AssemblerScript>
      <CheatEntries>
        <CheatEntry>
          <ID>125</ID>
          <Description>"pBase"</Description>
          <LastState Value="0000000D" RealAddress="0FAB0000"/>
          <ShowAsHex>1</ShowAsHex>
          <VariableType>4 Bytes</VariableType>
          <Address>pBase</Address>
        </CheatEntry>
        <CheatEntry>
          <ID>129</ID>
          <Description>"Luck (Actualx2+2?)"</Description>
          <VariableType>Byte</VariableType>
          <Address>pBase</Address>
          <Offsets>
            <Offset>F</Offset>
          </Offsets>
        </CheatEntry>
      </CheatEntries>
    </CheatEntry>
    <CheatEntry>
      <ID>128</ID>
      <Description>"No damage2"</Description>
      <LastState/>
      <VariableType>Auto Assembler Script</VariableType>
      <AssemblerScript>[ENABLE]

aobscanmodule(Damage,gamesys.dal,2B 85 00 FF FF FF) // should be unique
alloc(newmem,$1000)

label(code)
label(return)
label(code2)

newmem:


mov ecx,[pBase]

cmp ecx,[ebp-FC] // Player compare
jne code2



code:

//  sub eax,[ebp-00000100]  //Remove comment to disable to God Mode
  jmp return

code2:
sub eax,FFFF  // comment out to disable One Hit Kill

jmp return

Damage:
  jmp newmem
  nop
return:

registersymbol(Damage)

[DISABLE]

Damage:
  db 2B 85 00 FF FF FF

unregistersymbol(Damage)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: "gamesys.dal"+13B704

"gamesys.dal"+13B6DC: 8B 95 04 FF FF FF     -  mov edx,[ebp-000000FC]
"gamesys.dal"+13B6E2: 33 C0                 -  xor eax,eax
"gamesys.dal"+13B6E4: 8A 42 04              -  mov al,[edx+04]
"gamesys.dal"+13B6E7: 83 C0 01              -  add eax,01
"gamesys.dal"+13B6EA: 83 E0 03              -  and eax,03
"gamesys.dal"+13B6ED: 8B 8D 04 FF FF FF     -  mov ecx,[ebp-000000FC]
"gamesys.dal"+13B6F3: 8A 14 01              -  mov dl,[ecx+eax]
"gamesys.dal"+13B6F6: 88 95 0B FF FF FF     -  mov [ebp-000000F5],dl
"gamesys.dal"+13B6FC: 8B 85 08 FF FF FF     -  mov eax,[ebp-000000F8]
"gamesys.dal"+13B702: D1 F8                 -  sar eax,1
// ---------- INJECTING HERE ----------
"gamesys.dal"+13B704: 2B 85 00 FF FF FF     -  sub eax,[ebp-00000100]
// ---------- DONE INJECTING  ----------
"gamesys.dal"+13B70A: 89 85 0C FF FF FF     -  mov [ebp-000000F4],eax
"gamesys.dal"+13B710: 8B 8D 0C FF FF FF     -  mov ecx,[ebp-000000F4]
"gamesys.dal"+13B716: 51                    -  push ecx
"gamesys.dal"+13B717: 8B 8D 04 FF FF FF     -  mov ecx,[ebp-000000FC]
"gamesys.dal"+13B71D: E8 BE 52 F1 FF        -  call gamesys.dal+509E0
"gamesys.dal"+13B722: 8B 55 08              -  mov edx,[ebp+08]
"gamesys.dal"+13B725: 33 C0                 -  xor eax,eax
"gamesys.dal"+13B727: 8A 82 E0 2C 4A 10     -  mov al,[edx+gamesys.dal+4A2CE0]
"gamesys.dal"+13B72D: 85 C0                 -  test eax,eax
"gamesys.dal"+13B72F: 0F 84 04 02 00 00     -  je gamesys.dal+13B939
}
</AssemblerScript>
    </CheatEntry>
  </CheatEntries>
</CheatTable>

I'm kind of new to this, been getting all kids of errors. "Unexpected symbol next to '<' " or "Not all code is injectable"

[fearless123456]

You can just copy and paste it in the main window. Click on the address window first before using Ctrl+V.
If the script works, remember to save it as a cheat table.