Hi if you want God mode and infinite mana here some script you can add
God Mode
Code: Select all
[ENABLE]
aobscanmodule(GodMode,Diablo.exe,29 BE E0 65 68 00) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
newmem:
push eax
mov eax, [esi+Diablo.exe+2865E4]
mov [esi+Diablo.exe+2865E0],eax
mov [esi+Diablo.exe+2865D8],eax
pop eax
jmp return
code:
sub [esi+Diablo.exe+2865E0],edi
sub [esi+Diablo.exe+2865D8],edi
jmp return
GodMode:
jmp newmem
nop
nop
nop
nop
nop
nop
nop
return:
registersymbol(GodMode)
[DISABLE]
GodMode:
db 29 BE E0 65 68 00 29 BE D8 65 68 00
unregistersymbol(GodMode)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "Diablo.exe"+34B01
"Diablo.exe"+34AE3: 8B 86 9C B8 68 00 - mov eax,[esi+Diablo.exe+28B89C]
"Diablo.exe"+34AE9: C1 E0 06 - shl eax,06
"Diablo.exe"+34AEC: 03 F8 - add edi,eax
"Diablo.exe"+34AEE: 83 FF 40 - cmp edi,40
"Diablo.exe"+34AF1: 7D 03 - jnl Diablo.exe+34AF6
"Diablo.exe"+34AF3: 6A 40 - push 40
"Diablo.exe"+34AF5: 5F - pop edi
"Diablo.exe"+34AF6: 8B 45 FC - mov eax,[ebp-04]
"Diablo.exe"+34AF9: 3B 05 44 64 68 00 - cmp eax,[Diablo.exe+286444]
"Diablo.exe"+34AFF: 75 0C - jne Diablo.exe+34B0D
// ---------- INJECTING HERE ----------
"Diablo.exe"+34B01: 29 BE E0 65 68 00 - sub [esi+Diablo.exe+2865E0],edi
// ---------- DONE INJECTING ----------
"Diablo.exe"+34B07: 29 BE D8 65 68 00 - sub [esi+Diablo.exe+2865D8],edi
"Diablo.exe"+34B0D: F6 86 9B B8 68 00 04 - test byte ptr [esi+Diablo.exe+28B89B],04
"Diablo.exe"+34B14: 74 31 - je Diablo.exe+34B47
"Diablo.exe"+34B16: 6A 03 - push 03
"Diablo.exe"+34B18: B1 63 - mov cl,63
"Diablo.exe"+34B1A: 5A - pop edx
"Diablo.exe"+34B1B: E8 2B 2A FE FF - call Diablo.exe+1754B
"Diablo.exe"+34B20: 8B 55 FC - mov edx,[ebp-04]
"Diablo.exe"+34B23: 40 - inc eax
"Diablo.exe"+34B24: 8D 8B C4 D3 64 00 - lea ecx,[ebx+Diablo.exe+24D3C4]
}
For freeze mana
Code: Select all
[ENABLE]
aobscanmodule(InfMana,Diablo.exe,29 86 F4 65 68 00) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
newmem:
pop eax
mov eax,[esi+Diablo.exe+2865F8]
mov [esi+Diablo.exe+2865F4],eax
mov [esi+Diablo.exe+2865ec],eax
push eax
jmp return
code:
sub [esi+Diablo.exe+2865F4],eax
jmp return
InfMana:
jmp newmem
nop
nop
nop
nop
nop
nop
nop
return:
registersymbol(InfMana)
[DISABLE]
InfMana:
db 29 86 F4 65 68 00 29 86 EC 65 68 00
unregistersymbol(InfMana)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "Diablo.exe"+5756C
"Diablo.exe"+57553: 74 12 - je Diablo.exe+57567
"Diablo.exe"+57555: 48 - dec eax
"Diablo.exe"+57556: 74 09 - je Diablo.exe+57561
"Diablo.exe"+57558: 48 - dec eax
"Diablo.exe"+57559: 75 27 - jne Diablo.exe+57582
"Diablo.exe"+5755B: 5E - pop esi
"Diablo.exe"+5755C: E9 E1 76 FC FF - jmp Diablo.exe+1EC42
"Diablo.exe"+57561: 5E - pop esi
"Diablo.exe"+57562: E9 83 75 FC FF - jmp Diablo.exe+1EAEA
"Diablo.exe"+57567: E8 E2 FE FF FF - call Diablo.exe+5744E
// ---------- INJECTING HERE ----------
"Diablo.exe"+5756C: 29 86 F4 65 68 00 - sub [esi+Diablo.exe+2865F4],eax
// ---------- DONE INJECTING ----------
"Diablo.exe"+57572: 29 86 EC 65 68 00 - sub [esi+Diablo.exe+2865EC],eax
"Diablo.exe"+57578: C7 05 A4 87 4B 00 01 00 00 00 - mov [Diablo.exe+B87A4],00000001
"Diablo.exe"+57582: 5E - pop esi
"Diablo.exe"+57583: C3 - ret
"Diablo.exe"+57584: 33 C0 - xor eax,eax
"Diablo.exe"+57586: 56 - push esi
"Diablo.exe"+57587: 40 - inc eax
"Diablo.exe"+57588: 83 7C 24 0C 00 - cmp dword ptr [esp+0C],00
"Diablo.exe"+5758D: 57 - push edi
"Diablo.exe"+5758E: 8B FA - mov edi,edx
}