Additional Lost Sandcastle Cheats (stamping on floor removed)

[SubDrag]

I was looking into the assembly code behind what happens when you stomp on the sandcastle floor. The basic gist is that first it updates the 80283400 value (which is the cheats opened/collected), then it checks which cheat it is, and if 1, is certain warp and view for nabnut, if 2 is something else, then it shows view for an amount of time, then returns. I didn't examine every line of code, so theoretically could be more, but didn't notice anything crazy. Anyways, I noticed in the assembly that any cheat value greater than or equal to 0x14 (decimal 20) has its own separate functions (and always moos, regardless if not correct?). Below this 0x14 is the eggs and ice key (01 - 07), and CHEAT = 0. This leads me to believe that they slotted 18 spots for secret stuff, but only used 01-07

8038CAE5 00XX to modify which cheat is done, after doing the nabnut yellow egg cheat. There's a table in memory at 8038CAE4 that shows you which is which for all the cheats. You can notice also a weirdly huge gap. The save state attached you fix that location (8038CAE5) and then stamp the E.

You notice that 8B-90 are missing!! 8B refills your health, the others are unknown...



0 CHEAT
1 8038D914 NOW BANJO WILL BE ABLE TO SEE IT ON NABUTS TABLE
2 8038D93C THIS SECRET YOULL BE GRABBIN IN THE CAPTAINS CABIN
3 8038D968 AMIDST THE HAUNTED GLOOM A SECRET IN THE BATHROOM
4 8038D994 A DESERT DOOR SWINGS OPEN WIDE ANCIENT SECRETS WAIT INSIDE
5 8038D9C4 OUT OF THE SEA IT RISES TO REVEAL MORE SECRET PRIZES
6 8038D9F0 DONT YOU GO AND TELL HER ABOUT THE SECRET IN HER CELLAR
7 8038DA20 NOW YOU CAN SEE A NICE ICE KEY WHICH YOU CAN HAVE FOR FREE
7A 8038DA50 THESE GO RIGHT ON THROUGH NOTE DOOR TWO
7B 8038DA6C NOTE DOOR THREE GET IN FOR FREE
7C 8038DA88 TAKE A TOUR THROUGH NOTE DOOR FOUR
7D 8038DAA8 USE THIS CHEAT NOTE DOOR FIVE IS BEAT
7E 8038DAC8 THIS TRICKS USED TO OPEN NOTE DOOR SIX
7F 8038DAE8 THE SEVENTH NOTE DOOR IS NOW NO MORE
80 8038DB08 YOU CAN GET WET FEET NOW CLANKERS JIGGY IS COMPLETE
81 8038DB34 THE JIGGYS FULL OFF YOU STOMP INTO DINGY BUBBLEGLOOP SWAMP
82 8038DB68 THE JIGGYS DONE SO OFF YOU GO INTO FREEZEEZY PEAK AND ITS SNOW
83 8038DB9C GOBIS JIGGY IS NOW DONE TREK ON IN AND GET SOME SUN
84 8038DBC8 THE JIGGYS NOW MADE WHOLE INTO THE MANSION YOU CAN STROLL
85 8038DBF8 THE JIGGYS DONE SO TAKE A TRIP ONTO THE RUSTY BUCKET SHIP
86 8038DC28 CLICK CLOCK WOOD IS LOTS OF FUN GO ON IN THE JIGGYS DONE
87 8038DC58 LOTS OF GOES WITH MANY BANJOS
88 8038DC74 BANJO BEGS FOR PLENTY OF EGGS
89 8038DC90 NOW YOU CAN FLY HIGH IN THE SKY
8A 8038DCAC A GOLDEN GLOW TO PROTECT BANJO
91 8038DCC8 BOTH PIPES ARE THERE TO CLANKERS LAIR
92 8038DCE8 YOULL CEASE TO GRIPE WHEN UP GOES A PIPE
93 8038DD0C THERES NOWHERE DANKER THAN IN WITH CLANKER
94 "8038DD34 YOULL BE AMAZED NOW THE SWAMP PICCY GRILLE IS RAISED
"
95 8038DD60 DONT DESPAIR THE TREE JIGGY PODIUM IS NOW THERE
96 8038DD88 SHES AN UGLY BAT SO LETS REMOVE HER GRILLE AND HAT
97 8038DDB4 ITS YOUR LUCKY DAY AS THE ICE BALL MELTS AWAY
98 8038DDDC NOW INTO THE SWAMP YOU CAN STOMP
99 8038DDF8 THEY CAUSE TROUBLE BUT NOW THEYRE RUBBLE
9A 8038DE1C YOULL BE GLAD TO SEE THE SHOCK JUMP PAD
9B 8038DE3C THIS COMES IN HANDY TO OPEN SOME WHERE SANDY
9C 8038DE64 WEBS STOP YOUR PLAY SO TAKE THEM AWAY
9D 8038DE84 GRUNTY WILL CRY NOW YOUVE SMASHED HER EYE
9E 8038DEA8 YOU WONT BE SAD NOW YOU CAN USE THE FLY PAD
9F 8038DECC NOW YOU CAN GO AND TRUDGE IN THE SNOW
A0 8038DEEC THE MANSION OF GHOSTS ARE NOW YOUR HOSTS
A1 8038DF10 YOU WONT HAVE TO WAIT NOW THERES NO CRYPT GATE
A2 8038DF38 THIS SHOULD GET RID OF THE CRYPT COFFIN LID
A3 8038DF5C UP YOU GO WITHOUT A HITCH UP TO THE WATER LEVEL SWITCH
A4 WHY NOT TAKE A TRIP INSIDE GRUNTYS RUSTY SHIP
A5 8038DFB0 THE GRILLE GOES BOOM TO THE SHIP PICTURE ROOM
A6 8038DFD8 ONCE IT SHONE BUT THE LONG TUNNEL GRILLE IS GONE
A7 8038E000 THIS ONES GOOD AS YOU CAN ENTER THE WOOD
A8 8038E024 AN ENERGY BAR TO GET YOU FAR
A9 8038E03C DONT BE A DUMBO GO SEE MUMBO
AA 8038E054 GIVE THE BEAR LOTS OF AIR

Missing 8B - 90
8B = refill health
others, unknown!

NOTE: Allocates up to 14 for "special" cheats such as ice key or eggs, plus CHEAT





(technical details of gibberish it is unlikely anyone can interpret or use)


80283400 secret egg collection/secrets opened variable


8038B834 JAL 8025BBDC (updating secret egg collection/secrets opened variable)

8025BBDC set levels open

jr [802783A8] table for functions, all of these functions around here set the level parts opened, or collected stuff?


8025BBDC: JAL 8025B998 (update the what secrets opened variable 80283400)


8038B84C goto nabnuts warp spot


8038B908 Check if < 0x14

8038CAE4 Check the value of cheat, 01 = nabnuts, 07 = ice key, prob just nabnut's spot here


if you want to modify the warp view spot of nabnuts:
8038B84F 006A warp level
8038B857 0083 camera view

8038BEF0

8B refill health

if == 0 return prob

if > 14
A0 = value - 14


A0 = A1 = value - 14
T8 = [803831D8 + (A1 >> 3)]
T9 = A1 & 0x7
T1 = 1 << (A1 & 0x7)
T2 = [803831D8 + (A1 >> 3)] & (1 << (A1 & 0x7))
V1 = 0

if T2 == 0
V0 = 1
else
V0 = 0

[bobbynicjr]

so what does that mean? is there more unknown codes?

[Yuoko]

Originally Posted by bobbynicjr

so what does that mean? is there more unknown codes?

Just skimmed as I didn't have time to read it all, but that would seem to be the basic gist of it.

[slaphappy]

No, it doesn't mean there are more BK codes. It means there is a potential for more codes.

Here is what I know and what I am still looking for. I am just going to include an image because typing out all the memory addresses, no thanks.

SECTION 1 is where the non-Cheat codes are handled. I haven't cracked this nut yet but I am looking at it.

scmemory-section1.jpg


SECTION 2 is where the CHEAT codes are handled.

scmemory-section2.jpg

The green square at 8038CF2C is a counter for when you are pounding in C-H-E-A-T.

The black rectangles show the counters as you are entering correct codes. Note at 8038CB04 I am only the S away from the sharkfood island code. The 2 digits next to those match what Sub is referring to.

The orange square is near and dear to me. It is an indicator if you currently are in the middle of a valid cheat sequence. It will be 0 until you enter your first letter after C-H-E-A-T. Then it remain at 1 until you finish your code or pound a letter that doesn't fit into the code. At that point it will become 2 until you leave the room. This is how I hacked out the codes. I have not found any corresponding indicators for SECTION 1, which is what I'm still looking for.

The red rectangles are interesting. I assumed they are used to group cheats differently. I assumed certain cheats bring Grunty's Game Erase and others do not. I haven't even begun looking at that though.

So back to what Sub posted. There is a gap between 8B - 90. Also, it seems there is something unique about 87 - 8A since they are not in the red rectangle. Maybe because no function to open anything is needed.

I've been looking at 8038CC70 as well. Throwing read breakpoints on it, it somewhat behaves as the other cheat data memory addresses. Possible a dynamic holder for a cheat. That is purely speculation however at this point.

[MikeHive]

Sub (or slaphappy, both of you can probably help), I have a theory which isn't based on very much and probably isn't right, but this would seem like a good place to bring it up, and I've been meaning for a while to get someone who knows more about these things than me to have a think on it.

I'm sure you're aware of the theory that the SnS codes (and the other useless ones, like the one to open TTC and the ones that break down walls) are in fact debug codes. This seems to me... at least reasonably likely? Now my theory is: what if these codes were never meant to be activated by the sandcastle, and the fact that you can spell out debug codes is actually a mistake or bug in the game? Because

1) A cheat to open a level you have to be in to activate the cheat is probably not a cheat at all.
2) They don't give you proper fanfares or cut-scenes or anything when you type them in.
3) Rare refuse to acknowledge their existence.
4) Even after you've used the 'cheats' and got the SnS items, you can't do anything at all with them... seems really pointless.

But then, on the other hand,

1) If the SnS codes were debug codes to test the secret area triggers, you'd expect there to be codes to de-activate them.
2) All the codes are nicely rhymed, something I basically wouldn't bother to do if I were making debug codes for my game.
3) The ones which probably are cheats - like the infinite lives and Wonderwing cheats - are right in the middle of the table, with SnS codes above and useless wall-breakers below (unless these are debug codes that Rare just decided to release).

So, I put this to you, as people who have searched the code extensively - what do you think? Do you think they are debug codes mistakenly activated by the sandcastle?
(And by the way, if all these codes are in the same place, how did it take so long for hackers to find them??)

Thank you

[Fox McBanjo]

I dont get it.Why would Rare deny that they exist,if Bottles TELLS you some? If your gonna deny something,dont leave an obvious cheat activator in...wait a sec...what if ther are more cheat activators? That would explain Sub's new ones.You cant use the Bottles bonus codes until you talk to him.Why wouldn't this work in other places?

[Duker]

Actually, Sub, you forgot Bottles cheats. (Im not certain if they are but that might be that void there). And I dont see no PICY GRILLE there!

[bobbynicjr]

ok im confused? will these new sandcastle codes prove helpful to us in any way? any clue what they do or if you can try them?

[slaphappy]

Originally Posted by MikeHive

1) A cheat to open a level you have to be in to activate the cheat is probably not a cheat at all.
2) They don't give you proper fanfares or cut-scenes or anything when you type them in.
3) Rare refuse to acknowledge their existence.

I do not think they are debug codes, and were intended to be in the game. Why threaten to erase your game if you used too many codes if they were only debug.

1. Check the first topic on the Lost Sandcastle Codes from a week or so ago. There is no code to open TTC.

2. The first cheat codes 01 - 07 give you a cutscene. They rest give the Moo.

3. Rare acknowledged several of them CHEAT codes at the end of the BT Rumor Mill I believe.

[edit - it was the BK Rumor Mill]

Q: Why do I get a mooing sound when I spell out 'CHEAT' in the
Treasure Trove Cove sandcastle?

A: That's because there are some craftily-hidden codes that can be
spelt out after the word 'CHEAT' is entered. We're not gloating, but
we obviously know what these are, whereas you probably don't. Generous
to a fault, we will release a different one of these codes to each of
the first three people who email us with the correct answer to this
little poser...

Take the number of keys on Motzand's organ in Mad Monster
Mansion, add this to the number of red bands on the snowman's scarf in
Freezeezy Peak, multiply the number you have now by the number of
crabs in Treasure Trove Cove and send us the total. Have fun.

[MikeHive]

Ah, okay... *is less confused*

I still don't understand about the breakable walls cheats, though.

Since punching in the code takes fifty times longer than just smashing the wall anyway.

[SubDrag]

I'm pretty sure every one of them are debug codes. Note that the original cheats were not included because they are above it, and use a different set of bitflags (none are missing, I don't know where they write "currently active" bitflags on, but they must somewhere). I hadn't notice that stuff below, I'll breakpoint and see where my refill health 8B is going, and what checks it.

[thatguyjr]

So are we drawing the idea that there may have been more debug codes, and that access to these codes, and the codes themselves were removed from gameplay, but we may still be able to reach the effects, as we can at least hit that heal effect of the first missing digit/word/whatever it's called?

[SubDrag]

Essentially yes. They might have been removed cause they sucked or were redundant or were never programmed. 8B refills your health only, so it's a bit silly after all that to run to the sandcastle to do so.

[MikeHive]

Ahhh... right. I'm not sure what a bitflag is, but I'm assuming it's the yes/no condition that the game checks to see if the cheats are active and should be taken into account.
If they are all debug codes, then, do you think it is possible that Rare forgot to remove the 'CHEAT' letter confirmation moos, and released a handful of the more helpful codes to make us forget about it and go away and hopefully not probe and find the SnS codes?
Another question: when you say the effects of 8B-90 are 'unknown' do you mean that you have verified that they do do something, you just can't figure out what, or that they don't do anything as far as you can tell and they're just gaps in the list?

[SubDrag]

They're gaps in the list, so no cheat you stomp actually activates them. However, they may very well do something, and it's very difficult to actually figure out what since it could be anything. 8B was just easily recognizable because your health bar pops on the screen, the rest seemingly nothing happens, but it may very well do something (like open that one note door that had no sandcastle code, for example).