CHEAT and POKES
in game programs
Part 2
(C) 1996-99, Alexander Desyatnichenko
__________________________________________
Thus, our assumption is justified. DEC A team at 46,278
number of lives decreases by one
then again sent to the permanent
storage in cell 48249. Well, let's try
guide the work of this procedure in its
channel, deletion of the command DEC A. The easiest way, of
course, to score a zero, which is translated to machine
language code will be mean that in the cell during the program
will not run no operation (NOP), well, the language
BASIC it sounds even easier - POKE
646278.0.
Now, if you insert a boot
line with an expression before launching
Games team RANDOMIZE USR, how much
would be your hero in the game did not die, it all
will still be in stock 8 other lives, other
words, you make him immortal. Similarly, the game looks and a
procedure that adds life with a successful game:
45314 LD A, (48249)
45317 CP # 08
RET NC 45319
45320 AND A
45 321 INC A
45322 DAA
45323 LD (48249), A
CALL 45326 47988
Rostral first checks to see if the number of lives of eight,
and if it less, there will be increased by one team INC A. Let
no team scares you DAA, - it is needed to prepare a number of
lives to print on the screen subroutine
located at 47988. Takoy same
CALL 47988 you'll find and post-treatment,
defining and consuming lives. Commonly used are two ways to
prepare the numbers for Print: or the same number of lives once
given the # 30 more than necessary, as done in WAR MACHINE (LD
A, # 35), or by adding the number # 30 to the number of lives
before printing (ADD A, # 30).
In many games, given the number of lives, bypassing the
battery, using the register HL. So, in a game CORSARIOS 2 is
done so: LD HL, # 05. Often decrease the life also produced
through the same Register:
LD HL, 24851
DEC (HL)
JP P, 25018
It was a piece of game BATMAN 3, and
Program P-47 the FREEDOM FIGHTER used the combined method:
LD HL, 29964
LD A, (HL)
DEC A
LD (HL), A
Pursuing obessmerchivaniem games soon
you come with such a situation, when
scoring zero command DEC A or DEC (HL),
at the first pogibanii program will
a familiar message: "GAME OVER". The point
that many of the program immediately after
make grabbing the flag checking, and NOP command in that case,
let the program in the wrong steppe. In this case, and, better
yet, in any case, instead of NOP to be used single-byte command
OR A and OR (HL), respectively. This you may have
observed by looking at lists POKES, where
addresses instead of zero is entered 182 or
183.
And now the other, less spreading of ways. The game NETHER
WORLD, for example, you can find another way dec lives:
33547 LD A, (65405)
33550 SUB # 01
33552 LD (65405), A
In this case it is sufficient instead of # 01
put # 00 and let them take at zero lives every time.
Sufficiently original method of taking a life by using the SBC,
as is done in the game SABRINA:
LD HL, (24618)
PUSH DE
EX DE, HL
LD HL, # 01
EX DE, HL
AND A
SBC HL, DE
POP DE
LD (24618), HL
Disrupt the normal operation of such a fragment is more
difficult, but it is also possible, for example, scoring zero
in the SBC HL, DE and yedinichku in LD HL, # 01. By the way,
sometimes it happens that such podprogramy end directive RET
and called from the main program's through CALL. Togda simpler
way - supply RET (from BASIC - 201) in the same
beginning of a subroutine CALL to here
how come, so with nothing and left without doing any edinigo
action. Among hackers is valued precisely this way infinizatsii
games when a small Number POKES achieved the highest returns.
In the complex, difficult and, as a rule,
very interesting games often all limits in the
including the number of lives are saved in
a separate table, the sample from which
made through the index registers.
Thus, the program CASANOVA number of lives given as LD (IX
+43), # 05 and, accordingly, diminish as the DEC (IX +43), a in
the game TERMINATOR 2, you can watch phenomenon: DEC (IY-5).
Often these plates are kept separate and after the GAME
OVER LDIR holds her to a job
as is done in PRINCE CLUMSY or RETURN
of the JEDI:
LD HL, 54079
LD DE, 54059
LD BC, 20
LDIR
And shortly after taking a life itself:
LD HL, 54059
LD A, (HL)
OR A
SCF
RET Z
DEC (HL)
In some programs, events
planned in such a way that the number of
errors with every bad case of increases and, when reaching a
certain value the game ends. For the first time I have a I saw
the game HAMMER BOY:
LD A, (42097)
INC A
LD (42097), A
Incidentally, in this game, counting errors in a similar way
is in two places and if even one of them reaches the limit,
you'll need to start playing again. Similar kind of methods are
also applicable in cases where control of one and the same
limit of one and the same fragment program is not possible or
if the various Error consuming different amounts of lives.
It is natural that after the hackers
began to "cycle" of the game, the programmers
manufacturers have begun to take action
against such activities. In
routines that reduce the number of lives
began to be applied, as in a game TARGET RENEGADE, undocumented
commands, or as in JUNGLE WARRIOR, a shift of bits in a byte.
Find things much harder, and that
can you say, if you make a good coder
pose the problem to taking a life
so that no one has found, I think
many would have coped. In such cases, you can go for a trick
and do something another. So, once I could not find
taking a life in the game MAD MIX, but easy
found a site where to set the number of lives and a fragment,
where there was a check remaining values are:
LD A, # 03
LD (24624), A
.....
LD A, (24624)
AND A
RET Z
Even this was enough to her
immortalize, because each test is
times after once they take away life. A
What if instead of checking to do again
entering in the 24624 C grade? Especially because
such a programm will occupy as
proverochki program, the same five bytes. So the game will now
take life, but immediately after that, instead of
test, install all of the same three lives.
5. Infinite time, weapons, energy.
It frequently happens that in the heat
quickly shoot all the ammunition,
and then suck his finger, until they kill. Naturally, there is
a desire to do it all infinitely eternal. Well, that complex
nothing, especially as it is done roughly the same methods. For
example, in the game HAWKSTORM you are given 50 rounds.
Exploring native code, it is easy to detect LD A, 50, and then,
respectively, and cherished DEC A.
Time is also often given, and
subtract the standard, that's how it looks in the game ROBOCOP
2:
LD HL, 43224
DEC (HL)
RET NZ
But in some cases and harder when the hours, minutes and
seconds are set, checked and subtracted (or increase)
separately. Well, very very often faced with the most
interesting kind of limits - of energy. Let's start with the
simplest form of the representation of energy - a numeric,
when the energy is displayed as a large
number such as 100 or 1000 units. This can be seen for example
in the game CAPITAN TRUENO, but, once again, everything is
standard:
LD HL, 58943
DEC (HL)
JP Z, 24042
In contrast, the number of lives, often
subtract several units of energy,
as in the game TIME MACHINE:
LD A, (60499)
SUB # 03
LD (60499), A
Sometimes the most difficult task is
determine how many units of energy is our character at the
beginning of the game to from what was then danced in the
search process. Because energy is often displayed on screen in
the form of stripes. Well, if it consists of individual
elements and their like in Game FORGOTTEN WORLDS, for example,
can count. But when such a gradation is not,
on that just do not have to hope -
take it slowly when killed, through the
how many strokes will Khan or, say,
estimate for the pixels around, and
then try to find something like that ...
Well, now the most extended ones method of grabbing power of
games in the series SIRWOOD. So, it was possible to determine
what was originally given 48 units of energy and stored it is
in the 59850 cell, subtract the same with the command SUB:
LD C, 2
LD A, (59850)
SUB C
BIT 7, A
JP NZ, 39989
BIT 7, C
JR Z, LOOP
CP 1948
JR C, LOOP
LD A, 48
LD (59850), A
JP 42272
LOOP LD (59850), A
How to see a number of drifting
takes energy, it is subtracted from A
with subsequent testing. This grabbing
has many advantages, because you can deduct different amounts
of energy. Such it may be necessary when, for example, requires
that different kinds of monsters of varying strength applied to
the hero of damage. Agree, it makes the game more attractive
and realistic. In principle, this subroutine provides plenty of
space for your Creativity can be for her to pick up a few
different POKES and each will sell its infinite life, well,
very simple here, of course, just score zero command SUB C.
Something like this found in Teenage Mutant Ninja Turtles
(TURTLES):
LD A, (24422)
LD B, A
LD A, 16
SUB B
Moreover, in this game one program
subtract the energy of all four turtles
which is certainly convenient in terms of obessmerchivaniya.
But when you try to pass further, you will have another limit -
time during which the turtles must have time
turn off all computers, so have
"Cycle" is now more and his! Do not be surprised, like you find
a good yet many, especially in games where each
a new level a new job. Or here's another
situation - in the game HUMAN KILLING MACHINE
after you immortalize it, the first
levels will walk easily, but then at the last level, after each
of your stroke the enemy as quickly rests, that you do not
have time to knock him this energy! Hence,
will have to find a place where it is added
energy and eliminate this surprise.
And here is an atypical case of grabbing power from the full
game XENON:
LD HL, 52262
NEG
ADD A, (HL)
LD (HL), A
RET C
LD (HL), # 00
Is sufficiently original to work with
energy in the game BRONX:
LD A, (64813)
XOR (IY-107)
LD (64813), A
Again, the games of ATLANTIS SOFTWARE
(SHOW BROTHERS), written at some
macro language and compiled into machine
code. All limits are given here in terms of HL, and
protsedurkoy handled working with
memory cell in which this limit is stored. Enough to put there
RET, to immortalize one reception all the limitations.
And yet such zamorochki. The game CORSARIOS
with the numerical representation of energy, according to the
screen is given 600 units. Digging in
program failed to find a place to
featured a number. After playing a little more closely and
looked closer to the way diminish the energy, I noticed that
enabled only the first two digits, and Last zero there like a
beauty ... A minute later my assumption is justified since
found LD HL, 60, and more a minute later the game was already
in obessmerchenom form.
6. IMMORTAL as the most powerful form of
immortality.
Compared with INFINITE LIVES, word
IMMORTAL (invulnerability) appeared in the lexicon sinkleristov
not so long ago. In 1992, in England was released programm
HAKER AMAZING, which contains numerous POKES and firm cheats,
among whom there were also a new word. Many users experienced
published there IMMORTAL, were simply amazed by their work,
then this concept is firmly stuck in our own midst. Remember,
VN Rodionov in the game R-TYPE called this mystical POKE?
What is it? You've probably seen
how many games, after your hero uhryukayut, he appears again,
but while a few seconds pomigivaet, though preparing for new
adventures. Moreover, until it blinks, it is virtually
invulnerable that is, it does not take a bullet, do not press
the tanks, and sometimes he did not even sink in water. Who
porastoropney, that in those seconds could even contrive
proprygat several sites, passing thus difficult place,
thing, where your hero is honored to be murdered last time. But
what if you do, so that the character of all time, the game
became so invincible, only to not pomigival? This is what will
be the most that neither is IMMORTAL! But how do I find it? You
can, for the time that the character pomigivaet somewhere is
given and taken away. Here's an example, perhaps the most
famous games BUBBLE BOBBLE:
43832 BIT Z, (IY +90)
43836 JP Z, 43998
Time of invulnerability is stored in the plate
go check it and if we replace JP Z by
JP and put the number instead of 90 150 (in the
cell is always what we need now)
You can easily become invulnerable. And now, a fragment of
SOLOMON'S KEY:
49318 LD HL, (49813)
49321 LD A, L
49322 OR H
49323 JP Z, 49390
49326 LD DE, (43206)
CALL 49330 49356
49333 OR A
49334 RET Z
If this fragment to replace the conventional
RET Z output to a cardinal, and RET,
thus cutting off part of the program responsible for handling
the collision with the enemy, there would be more on them
distractions and concentrate on the logical specification of
this very exciting game. And in the game JACK the NIPPER 2 to
address 41218 is an entire subroutine is responsible for the
conditions of the collision with the enemy, water and the walls
and if these protsedurkah substitute for solid OR A XOR A, then
we can customize the program completely on your
taste, such as jumping, no breaking, with
any height.
Now the main principle of the search invulnerability. So,
you first need to find where in the game away the life and then
watch from the this place higher, figuring that perform those
portions of programs that worked before take life. So you can
find a fragment, where the collision is being processed, and
then let him in your scenario. Usually have to do
RET to a subroutine or circumvent it,
putting an unconditional JR. Sometimes, though,
is sufficient, as in CABAL, scoring zero DEC A, or, as in F1
TORNADO SIMULATOR, fix SUB # 01.
the end of the second part
__________________________________________
