naut How do I cheat?
Reputation: 0
Joined: 20 Jan 2015 Posts: 2
|
Posted: Tue Jan 20, 2015 10:58 pm Post subject: Looking For Some Help With Code Injection - MedianXL |
|
|
Hey guys, first off I am new to the site and I would like to say this program and the community that has developed around it is great, I look forward to applying what I learn from this particular game to many more in the future
I recently started playing a modded version of D2 known and MedianXL. I am playing this game purely in single player as I have played the game unmodded for many years and would like a change.
First off before I am spammed for not doing a simple google search, any hero editors do not work for this mod, after editing with a hero editor the character becomes unplayable. The creator of the mod is anti-hacking and did everything he could to prevent it, however fortunately not much can be done to prevent altering the game code with CE
I have managed to alter my experience, stats, skill points, as well as freeze my gold and arrows using simple exact value searches with no issues. However I would like to take things a step further and edit my characters items. I realise this sounds like something that could not be done using a scan however this particular mod has items that can be exploited to make this possible.
In MedianXL you can purchase orbs from a vendor which add stats to an item of your choice, however to prevent unlimited use of these items, each time they are used they add an additional +2 to the level requirement of that item.
I originally had 2 possible ideas to exploit this:
1. Scan for the added level requirement and freeze the value from increasing, essentially allow unlimited number of orbs to be applied to an item and still be able to be equipped.
2. Scan for the particular stat being modified by the orb and hack it to a very high value without needing to use further orbs on the item, therefore avoiding the increased level requirement.
My results:
1.
Pros:
-Using a simple exact value search I am able to find the address of this added level requirement and freeze it, applying unlimited orbs while still allowing me to equip the item.
Negatives:
-Upon relogging into the game, the level requirement of the item is set back to what it should be had I not froze the value, and the item has a level requirement higher then that obtainable in the game and is essentially unusable.
2.
Pros:
-Using a simple exact value search I am able to find the address of the particular stat being modified and increase it to whatever value I want.
Negatives:
-Although the stat appears to be altered on the item, I do not actually gain the added benefits, my characters stats remain unchanged.
-Upon logging in and out of the game, the item stats are reset back to their original values.
In this game addresses for particular values change each time you log in and out of the game, so it is not so easy as just to save the addresses and alter them each time I log in and out of the game. I must scan for the address each time I log in, this is not feasible with what I am trying to accomplish as once the level requirement reaches a certain value it no longer changes, so adding additional orbs does not allow me to narrow down the address using exact values.
Due to my results, I decided that the best route would be to alter the added level requirement of the item, due to the fact that method only had 1 negative and changing the stats of the item itself had 2 negatives.
My thoughts to continue were:
-Instead of freezing the value of the added level requirement, find out what writes to the address, and inject code that prevents the added level requirement from ever actually being added to the item.
Results:
The added level requirement is linked to 2 different addresses. Upon checking what writes to both of these addresses and adding an additional orb, I can see that in both cases they are being written to by 1 instruction:
6FF6B787 - 8B FB - mov edi,ebx
In autoassembler this is the original code :
Code: | originalcode:
mov edi,ebx
repe movsd
mov ecx,edx |
I'm just a little bit stumped as to where I should go from here.
Any help would be greatly appreciated.
|
|
haunted5 Cheater
Reputation: 1
Joined: 23 Aug 2011 Posts: 35
|
Posted: Thu Jan 29, 2015 3:41 pm Post subject: |
|
|
If I have understood correctly then commenting out that line of code should work. So in AA script just add 2 // to that line of code or delete that line altogether.
Try this:
originalcode:
//mov edi,ebx
repe movsd
mov ecx,edx
Hope this helps
|
|