Zoomhack and brightness [Steam]

[deama]

Here's a more updated version; this time it's got brightness, viewing radius, removing those black things, and zooming out.

It's a cheat engine table.



https://www.virustotal.com/en/file/5...is/1457983947/
https://virusscan.jotti.org/en-US/fi...job/innhxdqpcm

[wtfwtf7777777]

1 Day Ago. its time

[[MPGH]Hero]

Approved, not tested.

[mikilopta12]

Do i have to use strictly steam version of game? Because on normal version downloaded from their official webpage this cheat doesn't seems to work.

[deama]

Yep, only on steam.

[dseo80]

Hi deama. Thank you for this! Can you help point me in right direction?

Regarding blackness fixing. In your code area how did you know addresses to fix were ecx+28 and ecx+2c ?

Is it always 8 and c off from moveups ecx+20? Or is there another way to find these address?


Edit_ for ppl who wanna use on nonsteam version replace all pathofexilesteam.exe to pathofexile.exe and change the zoom aobscan address to f3 0f 10 8f b4 17 00 00 8d

[deama]

Basically, xmm0 at that point has the rendering values, it looks something like this inside of it:

4B = 4 bytes

4B 4B 4B 4B
l 1.2 l 1.4 l 0.9 l 0.53 l

you just play around with them and see what each one does. For example, 0.9 and 0.53 in this case were dealing with the black stuff; I think the other ones have something to do with the black stuff as well (forgot lol), but the ones I picked were the main ones for what I needed my script to do.

Each map has a different rendering value, so you just search for that and swap maps and you'll find it. I searched for float, you might find a double version of it too.


It may or may not be 8/C away. Problem is, it may not even use XMM registers in the next iteration, it might switch over to the FPU stack.

[dseo80]

Thanks for the insights deama!

I played around with the values it seems 1st and 2nd value are camera offsets so character is no longer in center. I think 4th is related to zoom and 3rd defines culling height.

Actual values in xmm0 moved to ecx+20 for me at that step was 0 0 1.09 1.0

I found that setting 28 address to 1.02 and light intensity to 1500 and rgb to 2.0 renders better at higher zoom with less far away squares that are lighted differently.


One more question as well please:

Looking into the call for d3dmatrixmultiply (it seems to be lea eax, [esp+28] then push eax, then call esi (d3dmatrixmultiply).
SO my understanding is eax (which is loaded to esp+28) is being used as arguments to d3dmatrixmultiply call.

However in cheat code, we change addresses ecx+28/2C

is this where the changed values from above are being used? what is the best way to find out what esp+28 is and how exactly the written changes to [ecx+28] and [ecx+2C] are actually being used?

[deama]

I don't really know what you're asking; all we're doing here is just changing the values that the game uses to render the world.

You mean like, find out how to search for that "1.09" value? It's a float, so just search for a float.

Or do you want to find out how the game translates those values into rendering? That I have no idea.

[dseo80]

yeah question was regarding 2nd part

[deama]

So the "You mean like, find out how to search for that "1.09" value? It's a float, so just search for a float."?

I think I remember seeing some movss's somewhere above that put stuff into xmm0 from some addresses; probably that's how those floats ended up in xmm0.

[Nalansara]

Finally i found why i had SOOO many crashes in last day (even in town when simply standing, but dunno, why there)
It crashed because of bright hack and clicking some area (in Crematorium for example)
But this only occured when i ended normal difficulty and came to cruel act3

Сигнатура проблемы:
  Имя события проблемы:	APPCRASH
  Имя приложения:	PathOfExile.exe
  Версия приложения:	0.0.0.0
  Отметка времени приложения:	56f0b77e
  Имя модуля с ошибкой:	PathOfExile.exe
  Версия модуля с ошибкой:	0.0.0.0
  Отметка времени модуля с ошибкой:	56f0b77e
  Код исключения:	c0000005
  Смещение исключения:	006f135e
  Версия ОС:	6.1.7601.2.1.0.256.1
  Код языка:	1049
  Дополнительные сведения 1:	0a9e
  Дополнительные сведения 2:	0a9e372d3b4ad19135b953a78882e789
  Дополнительные сведения 3:	0a9e
  Дополнительные сведения 4:	0a9e372d3b4ad19135b953a78882e789

[deama]

Well, I can't read Russian.

I haven't been able to replicate those crashes. So you were just standing in town in act 3 normal difficulty?

[Nalansara]

it's standard win7 theme crash, so you can just paste english version to theese words. I'm crashing often in Crematorium (cruel) by clicking random parts of location (could be the walls, or other parts) crashes in Sarn are more rare (maybe 1 in 10 min, or none for a whole day)

[deama]

Hmm, I can't replicate them. Try and disable the hack and see if it still crashes; if it doesn't then try and enable a single feature and see if that crashes.