Page 1 of 1
Hacking health old games - DOOM 1/HL
Posted: Fri Sep 29, 2017 1:47 pm
by Ezilkannan
Hi,
I have been trying to use simple memory search/editing to hack old games like DOOM 1 and Half Life. However, even though I narrow down to the address and freeze the value, I still end up dying. What am I doing wrong?
Re: Hacking health old games - DOOM 1/HL
Posted: Fri Sep 29, 2017 6:02 pm
by Bloodybone
Ezilkannan wrote: ↑Fri Sep 29, 2017 1:47 pm
Hi,
I have been trying to use simple memory search/editing to hack old games like DOOM 1 and Half Life. However, even though I narrow down to the address and freeze the value, I still end up dying. What am I doing wrong?
In a game like Half Life or games made with source there is a client.dll and a server.dll That means that you probably locked the graphical adress you can try locking every adress and see what adress is the right one or you can rightclick on an adress choose find out what writes to this adress and then click onto show disassembler and look at the left and if you see client.dll its the wrong adress and if you see server.dll than it is the right on.
Re: Hacking health old games - DOOM 1/HL
Posted: Sat Sep 30, 2017 8:20 am
by Ezilkannan
Bloodybone wrote: ↑Fri Sep 29, 2017 6:02 pm
Ezilkannan wrote: ↑Fri Sep 29, 2017 1:47 pm
Hi,
I have been trying to use simple memory search/editing to hack old games like DOOM 1 and Half Life. However, even though I narrow down to the address and freeze the value, I still end up dying. What am I doing wrong?
In a game like Half Life or games made with source there is a client.dll and a server.dll That means that you probably locked the graphical adress you can try locking every adress and see what adress is the right one or you can rightclick on an adress choose find out what writes to this adress and then click onto show disassembler and look at the left and if you see client.dll its the wrong adress and if you see server.dll than it is the right on.
Tried that. But I am unable to freeze or change the value for that address. It updates too fast, tried setting the update and freeze interval to 1ms didn't work. Tried pointer scan, one of the expected pointer address returned no results so I guess its the other one, however there is no expected value in this one. Just "push word or doubleword onto the stack(sign extended)". I don't know how to proceed further. Changing the code to nop crashes the game so can't do that.
Re: Hacking health old games - DOOM 1/HL
Posted: Sat Sep 30, 2017 8:43 am
by Bloodybone
I made a video showing how to find Health. I used Half Life 2 for it but i was made with the same engine, I hope it helps
[Link]
Re: Hacking health old games - DOOM 1/HL
Posted: Sat Sep 30, 2017 9:23 am
by Ezilkannan
Bloodybone wrote: ↑Sat Sep 30, 2017 8:43 am
I made a video showing how to find Health. I used Half Life 2 for it but i was made with the same engine, I hope it helps
[Link]
That didn't work. Like I said, some of the address cannot be changed/frozen. It is updated back to the original value anyway
Re: Hacking health old games - DOOM 1/HL
Posted: Sat Sep 30, 2017 9:43 am
by Bloodybone
Ezilkannan wrote: ↑Sat Sep 30, 2017 9:23 am
Bloodybone wrote: ↑Sat Sep 30, 2017 8:43 am
I made a video showing how to find Health. I used Half Life 2 for it but i was made with the same engine, I hope it helps
[Link]
That didn't work. Like I said, some of the address cannot be changed/frozen. It is updated back to the original value anyway
Try locking every adress you found at once and see if you can still get killed
Re: Hacking health old games - DOOM 1/HL
Posted: Sat Sep 30, 2017 10:39 am
by Ezilkannan
Bloodybone wrote: ↑Sat Sep 30, 2017 9:43 am
Ezilkannan wrote: ↑Sat Sep 30, 2017 9:23 am
Bloodybone wrote: ↑Sat Sep 30, 2017 8:43 am
I made a video showing how to find Health. I used Half Life 2 for it but i was made with the same engine, I hope it helps
[Link]
That didn't work. Like I said, some of the address cannot be changed/frozen. It is updated back to the original value anyway
Try locking every adress you found at once and see if you can still get killed
Tried that too. Every address seem to be reverting back to the actual value even when I freeze/change it at 1ms. It seems the game is updating it faster than CE can freeze/update.
Re: Hacking health old games - DOOM 1/HL
Posted: Sat Sep 30, 2017 10:48 am
by Bloodybone
Ezilkannan wrote: ↑Sat Sep 30, 2017 10:39 am
Bloodybone wrote: ↑Sat Sep 30, 2017 9:43 am
Ezilkannan wrote: ↑Sat Sep 30, 2017 9:23 am
That didn't work. Like I said, some of the address cannot be changed/frozen. It is updated back to the original value anyway
Try locking every adress you found at once and see if you can still get killed
Tried that too. Every address seem to be reverting back to the actual value even when I freeze/change it at 1ms. It seems the game is updating it faster than CE can freeze/update.
I think that all of them are graphical adresses then... You could maybe Backtrace a graphical one and get to the real one
Re: Hacking health old games - DOOM 1/HL
Posted: Thu Oct 19, 2017 12:27 pm
by Blayde
Half-Life v1.1.1.1
Re: Hacking health old games - DOOM 1/HL
Posted: Sat Dec 23, 2017 12:12 pm
by Ezilkannan
Blayde wrote: ↑Thu Oct 19, 2017 12:27 pm
Half-Life v1.1.1.1
This health script affects the monsters too
Re: Hacking health old games - DOOM 1/HL
Posted: Sat Dec 23, 2017 2:30 pm
by Blayde
Ezilkannan wrote: ↑Sat Dec 23, 2017 12:12 pm
Blayde wrote: ↑Thu Oct 19, 2017 12:27 pm
Half-Life v1.1.1.1
This health script affects the monsters too
UuuuPS
Code: Select all
[ENABLE]
aobscanmodule(health,hl.dll,D8 64 24 64 D9 98 60 01 00 00)
alloc(newmem,$100)
label(code)
label(return)
newmem:
cmp [eax+104],0
jne code
fstp dword ptr [eax+00000160]
mov [eax+00000160],(float)100
jmp return
code:
fsub dword ptr [esp+64]
fstp dword ptr [eax+00000160]
jmp return
health:
jmp newmem
nop
nop
nop
nop
nop
return:
registersymbol(health)
[DISABLE]
health:
db D8 64 24 64 D9 98 60 01 00 00
unregistersymbol(health)
dealloc(newmem)
Re: Hacking health old games - DOOM 1/HL
Posted: Mon Dec 25, 2017 5:09 am
by Ezilkannan
Blayde wrote: ↑Sat Dec 23, 2017 2:30 pm
Ezilkannan wrote: ↑Sat Dec 23, 2017 12:12 pm
Blayde wrote: ↑Thu Oct 19, 2017 12:27 pm
Half-Life v1.1.1.1
This health script affects the monsters too
UuuuPS
Code: Select all
[ENABLE]
aobscanmodule(health,hl.dll,D8 64 24 64 D9 98 60 01 00 00)
alloc(newmem,$100)
label(code)
label(return)
newmem:
cmp [eax+104],0
jne code
fstp dword ptr [eax+00000160]
mov [eax+00000160],(float)100
jmp return
code:
fsub dword ptr [esp+64]
fstp dword ptr [eax+00000160]
jmp return
health:
jmp newmem
nop
nop
nop
nop
nop
return:
registersymbol(health)
[DISABLE]
health:
db D8 64 24 64 D9 98 60 01 00 00
unregistersymbol(health)
dealloc(newmem)
That worked! thanks