[Release] PoE Multihack : Fullbright/Lighting control, Zoomhack, Maphack 0.10.1b+

[Wrongusername]

Updated for 0.10.8, good idea on zh1 pattern more robust towards vars moving on stack, szbadman, probabably many other patterns could be made more resilient to updates but too lazy to do that.

Zh1 pattern updated for 0.10.7

Fullbright:
On some GPUs/drivers for lighting settings to apply instantly you can just doubleclick PoE's window titlebar or otherwise resize it instead of going between areas.
Allows to tweak brightness levels to your preference.

Zoomhack:created by SKU, open/close inventory if you get black screen upon zooming far out.
You can set custom farplane/culling value for it to be more cooperative with shadows if you don't want to disable them completely, don't forget to open/close inv to reapply.

Maphack

Uses AoBScan to try to work with future minor patches without need for updatess.

<?xml version="1.0" encoding="utf-8"?>
<CheatTable CheatEngineTableVersion="14">
  <CheatEntries>
    <CheatEntry>
      <ID>333</ID>
      <Description>"Zoomhack"</Description>
      <Color>80000008</Color>
      <GroupHeader>1</GroupHeader>
      <CheatEntries>
        <CheatEntry>
          <ID>291</ID>
          <Description>"Enable Zoomhack"</Description>
          <Color>80000008</Color>
          <VariableType>Auto Assembler Script</VariableType>
          <AssemblerScript>[ENABLE]
aobscan(_zh1,8D 44 24 ?? F3 0F 10 00 0F 2F C2 76 04 8D 44 24 ?? D9 00)
label(zh1)
registerSymbol(zh1)
aobscan(_zh2,8D 44 24 04 F3 0F 10 00 0F 2F C2 76 04 8D 44 24 08)
label(zh2)
registerSymbol(zh2)
aobscan(_zh3,DB 83 64 01 00 00 F3 0F 10 83 60 01 00 00 8B 93 64 01)
label(zh3)
registerSymbol(zh3)
label(zh4)
registerSymbol(zh4)
aobscan(_zh4,FF 15 ?? ?? ?? ?? F3 0F 10 84 24 14 02 00 00 83 EC 10)

alloc(zfar,4)
registerSymbol(zfar)
zfar:
dd 47C40000

_zh1+B:
zh1:
db EB

_zh2+B:
zh2:
db EB

_zh3+6:
zh3:
movss xmm0, dword ptr [zfar]

_zh4+6:
zh4:
movss xmm0, dword ptr [zfar]
nop

[DISABLE]

zh1:
db 76

zh2:
db 76

zh3:
movss   xmm0,[ebx+160]

zh4:
movss xmm0,[esp+214]

dealloc(zfar)
</AssemblerScript>

        </CheatEntry>
        <CheatEntry>
          <ID>323</ID>
          <Description>"Custom FarPlane/Culling "</Description>
          <Color>80000008</Color>
          <VariableType>Float</VariableType>
          <Address>zfar</Address>
        </CheatEntry>
      </CheatEntries>
    </CheatEntry>
    <CheatEntry>
      <ID>316</ID>
      <Description>"Enable maphack"</Description>
      <Color>80000008</Color>
      <VariableType>Auto Assembler Script</VariableType>
      <AssemblerScript>[ENABLE]
aobScan(_mapHack, D9 00 8B 0C 24 D9 19 8B 0C 24 03 CA 89 0C 24 D9 00 D9 19 8B 0C 24 03 CA 89 0C 24)
label(mapHack1)
registerSymbol(mapHack1)
label(mapHack2)
registerSymbol(mapHack2)
label(mapHack3)
registerSymbol(mapHack3)
label(mapHack4)
registerSymbol(mapHack4)
_mapHack:
mapHack1:
fld1

_mapHack+F:
mapHack2:
fld1

_mapHack+1B:
mapHack3:
fld1

_mapHack+27:
mapHack4:
fld1


[DISABLE]
mapHack1:
fld dword ptr [eax]

mapHack2:
fld dword ptr [eax]

mapHack3:
fld dword ptr [eax]

mapHack4:
fld dword ptr [eax]
</AssemblerScript>
    </CheatEntry>
    <CheatEntry>
      <ID>334</ID>
      <Description>"Lighting control"</Description>
      <Color>80000008</Color>
      <GroupHeader>1</GroupHeader>
      <CheatEntries>
        <CheatEntry>
          <ID>290</ID>
          <Description>"Enable Lighting control aob"</Description>
          <Color>80000008</Color>
          <VariableType>Auto Assembler Script</VariableType>
          <AssemblerScript>[ENABLE]

alloc(fbcave,200)
label(bEnableLigtingOverrides)
registersymbol(bEnableLigtingOverrides)
label(one)
registersymbol(one)
label(OverrideBrightness)
registersymbol(OverrideBrightness)


label(lightsettings)
label(lightsettingsRet)

AobScan(_fullBright,8B BB 40 06 00 00 8B 83 B4 07 00 00 8A 4F 30 81 C3 B4 07 00 00)
label(fullBright)
registerSymbol(fullBright)
_fullBright+C:
fullBright:
mov cl,01
nop

_fullBright+4C:
nop
nop
nop
nop
nop
nop

fbcave:
bEnableLigtingOverrides:
dd 0
OverrideBrightness:
dd 3F800000
one:
dd 3F800000

lightsettings:
movss   xmm3, dword ptr [edi+48]
mov eax,[bEnableLigtingOverrides]
test eax,eax
jz lightsettingsRet
movss xmm0, dword ptr [OverrideBrightness]
movss xmm1, dword ptr [one]
movss xmm2, dword ptr [one]
movss xmm3, dword ptr [one]
jmp lightsettingsRet



_fullBright+90:
jmp lightsettings
lightsettingsRet:


[DISABLE]

fullBright:
mov cl,[edi+30]

fullBright+40:
db 0F 85 8E 01 00 00

fullBright+84:
movss xmm3,[edi+48]

dealloc(fbcave)

</AssemblerScript>
        </CheatEntry>
        <CheatEntry>
          <ID>336</ID>
          <Description>"customize brightness"</Description>
          <Color>80000008</Color>
          <GroupHeader>1</GroupHeader>
          <CheatEntries>
            <CheatEntry>
              <ID>322</ID>
              <Description>"bEnableCustomBrightness"</Description>
              <Color>80000008</Color>
              <VariableType>Auto Assembler Script</VariableType>
              <AssemblerScript>[ENABLE]
bEnableLigtingOverrides:
dd 1

[DISABLE]
bEnableLigtingOverrides:
dd 0
</AssemblerScript>
            </CheatEntry>
            <CheatEntry>
              <ID>318</ID>
              <Description>"CustomBrightnessValue"</Description>
              <Color>80000008</Color>
              <VariableType>Float</VariableType>
              <Address>OverrideBrightness</Address>
            </CheatEntry>
          </CheatEntries>
        </CheatEntry>
      </CheatEntries>
    </CheatEntry>
    <CheatEntry>
      <ID>335</ID>
      <Description>"Parcitcles control"</Description>
      <Color>80000008</Color>
      <GroupHeader>1</GroupHeader>
      <CheatEntries>
        <CheatEntry>
          <ID>339</ID>
          <Description>"Disable spawning of particle emitters"</Description>
          <Color>80000008</Color>
          <VariableType>Auto Assembler Script</VariableType>
          <AssemblerScript>[ENABLE]
aobscan(_emitterControl, F3 0F 10 54 24 08 80 7E 48 00 0F 85 4B 01 00 00 8B 46 08 80 B8 14 01 00 00 00 75 12)
label(emitterControl)
registerSymbol(emitterControl)

_emitterControl+13:
emitterControl:
db E9 43 01 00 00 90 90

 
 
[DISABLE]
emitterControl:
cmp byte ptr [eax+00000114],00


//code from here till the end of the code will be used to disable the cheat
</AssemblerScript>
        </CheatEntry>
        <CheatEntry>
          <ID>332</ID>
          <Description>"No projectile impacts AoB"</Description>
          <Color>80000008</Color>
          <VariableType>Auto Assembler Script</VariableType>
          <AssemblerScript>[ENABLE]
aobscan(_projImpact, 57 88 48 08 F3 0F 10 ?? ?? ?? ?? ?? F3 0F 10 ?? ?? ?? ?? ?? C7 40 0C ?? ?? ?? ?? F3 0F 11 40 10)

label(projImpact)
registerSymbol(projImpact)

_projImpact+1B:
projImpact:
xorps xmm0,xmm0
movss [eax+10],xmm0
 
[DISABLE]
projImpact:
movss [eax+10],xmm0
xorps xmm0,xmm0
</AssemblerScript>
        </CheatEntry>
        <CheatEntry>
          <ID>329</ID>
          <Description>"Enable particles per second override AOB"</Description>
          <Color>80000008</Color>
          <VariableType>Auto Assembler Script</VariableType>
          <AssemblerScript>[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(ppsCave,200)
aobScan(_ppsOverride,F3 0F 10 4C 81 34 F3 0F 5C 4C 81 30 0F 57 ED F3 0F 2A E8 F3 0F 5C C5 F3 0F 59 C8 F3 0F 58 4C 81 30)
label(ppsOverride)
registerSymbol(ppsOverride)
label(ppsOverride2)
registerSymbol(ppsOverride2)
label(particlesPerSec)
registerSymbol(particlesPerSec)
label(ppsDetour1)
label(ppsDetour1Ret)
label(ppsDetour2)
label(ppsDetour2Ret)

ppsCave:

particlesPerSec:
dd 3F800000

ppsDetour1:
movss xmm1,[particlesPerSec]
jmp ppsDetour1Ret

ppsDetour2:
addss xmm1,[particlesPerSec]
jmp ppsDetour2Ret


_ppsOverride:
ppsOverride:
jmp ppsDetour1
nop
ppsDetour1Ret:

_ppsOverride+1B:
ppsOverride2:
jmp ppsDetour2
nop
ppsDetour2Ret:


[DISABLE]
ppsOverride:
movss xmm1,[ecx+eax*4+34]
ppsOverride2:
addss xmm1,[ecx+eax*4+30]
dealloc(ppsCave)
</AssemblerScript>
        </CheatEntry>
        <CheatEntry>
          <ID>330</ID>
          <Description>"particlesPerSecValue"</Description>
          <Color>80000008</Color>
          <VariableType>Float</VariableType>
          <Address>particlesPerSec</Address>
        </CheatEntry>
      </CheatEntries>
    </CheatEntry>
  </CheatEntries>
  <UserdefinedSymbols>
    <SymbolEntry>
      <Name>origPeekMsgRetA</Name>
      <Address>03570000</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>newPeekMsgRetA</Name>
      <Address>03570081</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>resumePeekMsg</Name>
      <Address>75EB05BF</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>msgHandlingDone</Name>
      <Address>0357014B</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>PeekMsgHook</Name>
      <Address>03570067</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>cursorHookX</Name>
      <Address>03570004</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>cursorHookY</Name>
      <Address>03570008</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>bEnablescreenToWorldOverride</Name>
      <Address>0357000C</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>screenToWorldPtr</Name>
      <Address>03570018</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>screenToWorldOverrideX</Name>
      <Address>03570010</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>screenToWorldOverrideY</Name>
      <Address>03570014</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>mapHack1</Name>
      <Address>0064E457</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>mapHack2</Name>
      <Address>0064E466</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>mapHack3</Name>
      <Address>0064E472</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>mapHack4</Name>
      <Address>0064E47E</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>OverrideRIntensity</Name>
      <Address>01120008</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>OverrideGIntensity</Name>
      <Address>0112000C</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>OverrideBIntensity</Name>
      <Address>01120010</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>zh1</Name>
      <Address>014E1C48</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>zh2</Name>
      <Address>014E4632</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>zh3</Name>
      <Address>017303F1</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>zh4</Name>
      <Address>017238BA</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>projImpact</Name>
      <Address>013267FA</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>ppsOverride</Name>
      <Address>0147CC0F</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>ppsOverride2</Name>
      <Address>0147CC2A</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>particlesPerSec</Name>
      <Address>034D0000</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>customEmitterDisable</Name>
      <Address>00FB7B30</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>emitterControl</Name>
      <Address>00FB7B5D</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>emitterLoader</Name>
      <Address>005B0039</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>emitterLoaderCall</Name>
      <Address>005B0210</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>bEnableLigtingOverrides</Name>
      <Address>03C50000</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>one</Name>
      <Address>03C50008</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>OverrideBrightness</Name>
      <Address>03C50004</Address>
    </SymbolEntry>
    <SymbolEntry>
      <Name>fullBright</Name>
      <Address>00260BFE</Address>
    </SymbolEntry>
  </UserdefinedSymbols>
  <LuaScript>
</LuaScript>
</CheatTable>

How-to:
1.Copy above code
2.Open Cheatengine
3.Press ctrl+v
4.Press save button, save CT for later usage.
5.Open Client.exe process, say yes to question if you want to keep address list.
6.Tick away your options.

Also for some people double-clicking CT files seems to not work, in that case you can run CT first and use open file option.

[histachii]

great work !

[saybrook]

well done and thank you for adding the other features and the ct !

[Goldenrice]

thanks bby

edit: my god.. using MH to farm large chests is amazing

[DonaldChump]

what do large chests look like on the map, and which maps are you farming them on? (church of sins?)

[Goldenrice]

dread thicket. its pretty obvious when its there (giant rectangle at the end)
also cavern of wrath or catacombs.

cavern of wrath is very obvious also.

[appudda]

I went in and out dread thicket 30+ times (ctrl click), don't see big red at the end. How do you do it?

[mvelten]

What are the odds of getting caught and banned for this ?

[iKweli]

Is this another one of those maphacks that only work for windows 7 and vista?

[FattyXP]

Is this another one of those maphacks that only work for windows 7 and vista?

Time to upgrade bro, you are going to run into this issue quite a bit. People don't want to program in old languages and IDE's, they want .NET and shit.
About this though... not sure. Do Cheat Engine generated hacks work on XP? do a google.

[tmleavitt]

+rep

Thank you for the all-in-one.

[Page up] and [Page down] sometimes crashes my client, but other than that, this is very useful.

[DonaldChump]

What are the odds of getting caught and banned for this ?

Honestly, don't even use the hack if you're worried about getting banned

[AK2337]

I have not tried this from here, but just so everyone is aware in case it is not the same with this, there are a few passing the zoom hack around the net with credits to ownedcore, which also steals log in info from the production_config and spams the hell out of browser windows to a youtube link.

Be weary of which you get and be sure it can be trusted before use.

[appudda]

the ct is included so make your own trainer if you don't want to use the precompiled exe. credits to Wrongusername of course :]

[AK2337]

the ct is included so make your own trainer if you don't want to use the precompiled exe. credits to Wrongusername of course :]

I noticed the table included, but thank you for pointing it out. Just wanted to be sure the OP was aware that a compromised version of it is floating about, and for others to be sure of what they get. I wasn't :/