POE - MapHack w Fllbright, Zoom, etc : Path Of Exile Discussions | Submissions

Posted: March 11th, 2013, 11:13 am

DJRockingIt

Total Posts: 19
Joined: March 11th, 2013, 9:45 am DJRockingIt's Reps: 16

Fullbright:
I found out that for lighting settings to apply instantly you can just doubleclick PoE's window titlebar or otherwise resize it instead of going between areas.
This enhanced version allows to override lighting settings for some areas where global illumination has very low brightness or otherwise tweak brightness levels to your preference,

Zoomhack:created by SKU, open/close inventory if you get black screen upon zooming far out.

Maphack - found no issues with this one so far.

Uses AoBScan to try to work with future minor patches without need for updatess.

Only source CT here now, compiled exe version removed because of widespread youtube fakes/viruses and related BS accusations.

For those that don't know you open CT files with Cheatengine.

Particles control also included in this CT.

Some explanation for those new to Cheatengine(which is really surprised to be necessary as it's a no-brainer):
You don't need to create exe file with CheatEngine, all that does is package a version of CheatEngine into that exe hiding most of it's functions from users, you can just open CT file, press open process button that looks like magnifying glass over PC and is in upper left corner, select Client.exe, say you do want to keep addresses, and tick away the checkboxes in the table, though make sure to tick meaningfull ones and not group headers.

Download Link - SEE thread below for updated version

Last edited by DJRockingIt on March 20th, 2013, 7:25 pm, edited 1 time in total.

Posted: March 20th, 2013, 7:25 pm

DJRockingIt

Total Posts: 19
Joined: March 11th, 2013, 9:45 am DJRockingIt's Reps: 16

Update to 1.0.4... Lemme know if you like this:

Fullbright pattern updated for 0.10.4

Fullbright:
On on some GPUs/drivers for lighting settings to apply instantly you can just doubleclick PoE's window titlebar or otherwise resize it instead of going between areas.
Allows to tweak brightness levels to your preference,

Zoomhack:created by SKU, open/close inventory if you get black screen upon zooming far out.
You can set custom farplane/culling value for it to be more cooperative with shadows if you don't want to disable them completely, don't forget to open/close inv to reapply.

Maphack

Uses AoBScan to try to work with future minor patches without need for updatess.

Cheat Engine Code:

(!empty($user->lang['CODE'])) ? $user->lang['CODE'] : ucwords(strtolower(str_replace('_', ' ', 'CODE'))):

<?xml version="1.0" encoding="utf-8"?>
<CheatTable CheatEngineTableVersion="14">
  <CheatEntries>
    <CheatEntry>
      <ID>333</ID>
      <Description>"Zoomhack"</Description>
      <Color>80000008</Color>
      <GroupHeader>1</GroupHeader>
      <CheatEntries>
        <CheatEntry>
          <ID>291</ID>
          <Description>"Enable Zoomhack"</Description>
          <Color>80000008</Color>
          <VariableType>Auto Assembler Script</VariableType>
          <AssemblerScript>[ENABLE]
aobscan(_zh1,8D 44 24 1C F3 0F 10 00 0F 2F C2 76 04 8D 44 24 28)
label(zh1)
registerSymbol(zh1)
aobscan(_zh2,8D 44 24 04 F3 0F 10 00 0F 2F C2 76 04 8D 44 24 08)
label(zh2)
registerSymbol(zh2)
aobscan(_zh3,DB 83 64 01 00 00 F3 0F 10 83 60 01 00 00 8B 93 64 01)
label(zh3)
registerSymbol(zh3)
label(zh4)
registerSymbol(zh4)
aobscan(_zh4,FF 15 ?? ?? ?? ?? F3 0F 10 84 24 14 02 00 00 83 EC 10)

alloc(zfar,4)
registerSymbol(zfar)
zfar:
dd 47C40000

_zh1+B:
zh1:
db EB

_zh2+B:
zh2:
db EB

_zh3+6:
zh3:
movss xmm0, dword ptr [zfar]

_zh4+6:
zh4:
movss xmm0, dword ptr [zfar]
nop

[DISABLE]

zh1:
db 76

zh2:
db 76

zh3:
movss   xmm0,[ebx+160]

zh4:
movss xmm0,[esp+214]

dealloc(zfar)
</AssemblerScript>

        </CheatEntry>
        <CheatEntry>
          <ID>323</ID>
          <Description>"Custom FarPlane/Culling "</Description>
          <Color>80000008</Color>
          <VariableType>Float</VariableType>
          <Address>zfar</Address>
        </CheatEntry>
      </CheatEntries>
    </CheatEntry>
    <CheatEntry>
      <ID>316</ID>
      <Description>"Enable maphack"</Description>
      <Color>80000008</Color>
      <VariableType>Auto Assembler Script</VariableType>
      <AssemblerScript>[ENABLE]
aobScan(_mapHack, D9 00 8B 0C 24 D9 19 8B 0C 24 03 CA 89 0C 24 D9 00 D9 19 8B 0C 24 03 CA 89 0C 24)
label(mapHack1)
registerSymbol(mapHack1)
label(mapHack2)
registerSymbol(mapHack2)
label(mapHack3)
registerSymbol(mapHack3)
label(mapHack4)
registerSymbol(mapHack4)
_mapHack:
mapHack1:
fld1

_mapHack+F:
mapHack2:
fld1

_mapHack+1B:
mapHack3:
fld1

_mapHack+27:
mapHack4:
fld1


[DISABLE]
mapHack1:
fld dword ptr [eax]

mapHack2:
fld dword ptr [eax]

mapHack3:
fld dword ptr [eax]

mapHack4:
fld dword ptr [eax]
</AssemblerScript>
    </CheatEntry>
    <CheatEntry>
      <ID>334</ID>
      <Description>"Lighting control"</Description>
      <Color>80000008</Color>
      <GroupHeader>1</GroupHeader>
      <CheatEntries>
        <CheatEntry>
          <ID>290</ID>
          <Description>"Enable Lighting control aob"</Description>
          <Color>80000008</Color>
          <VariableType>Auto Assembler Script</VariableType>
          <AssemblerScript>[ENABLE]

alloc(fbcave,200)
label(bEnableLigtingOverrides)
registersymbol(bEnableLigtingOverrides)
label(one)
registersymbol(one)
label(OverrideBrightness)
registersymbol(OverrideBrightness)


label(lightsettings)
label(lightsettingsRet)

AobScan(_fullBright,8B BB C0 05 00 00 8B 83 34 07 00 00 8A 4F 30 81 C3 34 07 00 00)
label(fullBright)
registerSymbol(fullBright)
_fullBright+C:
fullBright:
mov cl,01
nop

_fullBright+4C:
nop
nop
nop
nop
nop
nop

fbcave:
bEnableLigtingOverrides:
dd 0
OverrideBrightness:
dd 3F800000
one:
dd 3F800000

lightsettings:
movss   xmm3, dword ptr [edi+48]
mov eax,[bEnableLigtingOverrides]
test eax,eax
jz lightsettingsRet
movss xmm0, dword ptr [OverrideBrightness]
movss xmm1, dword ptr [one]
movss xmm2, dword ptr [one]
movss xmm3, dword ptr [one]
jmp lightsettingsRet



_fullBright+90:
jmp lightsettings
lightsettingsRet:


[DISABLE]

fullBright:
mov cl,[edi+30]

fullBright+40:
db 0F 85 8E 01 00 00

fullBright+84:
movss xmm3,[edi+48]

dealloc(fbcave)

</AssemblerScript>
        </CheatEntry>
        <CheatEntry>
          <ID>336</ID>
          <Description>"customize brightness"</Description>
          <Color>80000008</Color>
          <GroupHeader>1</GroupHeader>
          <CheatEntries>
            <CheatEntry>
              <ID>322</ID>
              <Description>"bEnableCustomBrightness"</Description>
              <Color>80000008</Color>
              <VariableType>Auto Assembler Script</VariableType>
              <AssemblerScript>[ENABLE]
bEnableLigtingOverrides:
dd 1

[DISABLE]
bEnableLigtingOverrides:
dd 0
</AssemblerScript>
            </CheatEntry>
            <CheatEntry>
              <ID>318</ID>
              <Description>"CustomBrightnessValue"</Description>
              <Color>80000008</Color>
              <VariableType>Float</VariableType>
              <Address>OverrideBrightness</Address>
            </CheatEntry>
          </CheatEntries>
        </CheatEntry>
      </CheatEntries>
    </CheatEntry>
    <CheatEntry>
      <ID>335</ID>
      <Description>"Parcitcles control"</Description>
      <Color>80000008</Color>
      <GroupHeader>1</GroupHeader>
      <CheatEntries>
        <CheatEntry>
          <ID>339</ID>
          <Description>"Disable spawning of particle emitters"</Description>
          <Color>80000008</Color>
          <VariableType>Auto Assembler Script</VariableType>
          <AssemblerScript>[ENABLE]
aobscan(_emitterControl, F3 0F 10 54 24 08 80 7E 48 00 0F 85 4B 01 00 00 8B 46 08 80 B8 14 01 00 00 00 75 12)
label(emitterControl)
registerSymbol(emitterControl)

_emitterControl+13:
emitterControl:
db E9 43 01 00 00 90 90

 
 
[DISABLE]
emitterControl:
cmp byte ptr [eax+00000114],00


//code from here till the end of the code will be used to disable the cheat
</AssemblerScript>
        </CheatEntry>
        <CheatEntry>
          <ID>332</ID>
          <Description>"No projectile impacts AoB"</Description>
          <Color>80000008</Color>
          <VariableType>Auto Assembler Script</VariableType>
          <AssemblerScript>[ENABLE]
aobscan(_projImpact, 57 88 48 08 F3 0F 10 ?? ?? ?? ?? ?? F3 0F 10 ?? ?? ?? ?? ?? C7 40 0C ?? ?? ?? ?? F3 0F 11 40 10)

label(projImpact)
registerSymbol(projImpact)

_projImpact+1B:
projImpact:
xorps xmm0,xmm0
movss [eax+10],xmm0
 
[DISABLE]
projImpact:
movss [eax+10],xmm0
xorps xmm0,xmm0
</AssemblerScript>
        </CheatEntry>
        <CheatEntry>
          <ID>329</ID>
          <Description>"Enable particles per second override AOB"</Description>
          <Color>80000008</Color>
          <VariableType>Auto Assembler Script</VariableType>
          <AssemblerScript>[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(ppsCave,200)
aobScan(_ppsOverride,F3 0F 10 4C 81 34 F3 0F 5C 4C 81 30 0F 57 ED F3 0F 2A E8 F3 0F 5C C5 F3 0F 59 C8 F3 0F 58 4C 81 30)
label(ppsOverride)
registerSymbol(ppsOverride)
label(ppsOverride2)
registerSymbol(ppsOverride2)
label(particlesPerSec)
registerSymbol(particlesPerSec)
label(ppsDetour1)
label(ppsDetour1Ret)
label(ppsDetour2)
label(ppsDetour2Ret)

ppsCave:

particlesPerSec:
dd 3F800000

ppsDetour1:
movss xmm1,[particlesPerSec]
jmp ppsDetour1Ret

ppsDetour2:
addss xmm1,[particlesPerSec]
jmp ppsDetour2Ret


_ppsOverride:
ppsOverride:
jmp ppsDetour1
nop
ppsDetour1Ret:

_ppsOverride+1B:
ppsOverride2:
jmp ppsDetour2
nop
ppsDetour2Ret:


[DISABLE]
ppsOverride:
movss xmm1,[ecx+eax*4+34]
ppsOverride2:
addss xmm1,[ecx+eax*4+30]
dealloc(ppsCave)
</AssemblerScript>
        </CheatEntry>
        <CheatEntry>
          <ID>330</ID>
          <Description>"particlesPerSecValue"</Description>
          <Color>80000008</Color>
          <VariableType>Float</VariableType>
          <Address>particlesPerSec</Address>
        </CheatEntry>
      </CheatEntries>
    </CheatEntry>
  </CheatEntries>
  <UserdefinedSymbols>
    <SymbolEntry>
      <Name>origPeekMsgRetA</Name>
      <Address>03570000</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>newPeekMsgRetA</Name>
      <Address>03570081</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>resumePeekMsg</Name>
      <Address>75EB05BF</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>msgHandlingDone</Name>
      <Address>0357014B</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>PeekMsgHook</Name>
      <Address>03570067</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>cursorHookX</Name>
      <Address>03570004</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>cursorHookY</Name>
      <Address>03570008</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>bEnablescreenToWorldOverride</Name>
      <Address>0357000C</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>screenToWorldPtr</Name>
      <Address>03570018</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>screenToWorldOverrideX</Name>
      <Address>03570010</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>screenToWorldOverrideY</Name>
      <Address>03570014</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>mapHack1</Name>
      <Address>0064E457</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>mapHack2</Name>
      <Address>0064E466</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>mapHack3</Name>
      <Address>0064E472</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>mapHack4</Name>
      <Address>0064E47E</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>OverrideRIntensity</Name>
      <Address>01120008</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>OverrideGIntensity</Name>
      <Address>0112000C</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>OverrideBIntensity</Name>
      <Address>01120010</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>zh1</Name>
      <Address>014E1C48</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>zh2</Name>
      <Address>014E4632</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>zh3</Name>
      <Address>017303F1</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>zh4</Name>
      <Address>017238BA</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>projImpact</Name>
      <Address>013267FA</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>ppsOverride</Name>
      <Address>0147CC0F</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>ppsOverride2</Name>
      <Address>0147CC2A</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>particlesPerSec</Name>
      <Address>034D0000</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>customEmitterDisable</Name>
      <Address>00FB7B30</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>emitterControl</Name>
      <Address>00FB7B5D</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>emitterLoader</Name>
      <Address>005B0039</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>emitterLoaderCall</Name>
      <Address>005B0210</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>bEnableLigtingOverrides</Name>
      <Address>03C50000</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>one</Name>
      <Address>03C50008</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>OverrideBrightness</Name>
      <Address>03C50004</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>fullBright</Name>
      <Address>00260BFE</Address>
    </SymbolEntry>
  </UserdefinedSymbols>
  <LuaScript>
</LuaScript>
</CheatTable>

How-to:
1.Copy above code
2.Open Cheatengine
3.Press ctrl+v
4.Press save button, save CT for later usage.
5.Open Client.exe process, say yes to question if you want to keep address list.
6.Tick away your options.

Also for some people double-clicking CT files seems to not work, in that case you can run CT first and use open file option.