View previous topic :: View next topic |
Author |
Message |
nipslip How do I cheat?
Reputation: 0
Joined: 13 Sep 2019 Posts: 1
|
Posted: Fri Sep 13, 2019 11:13 am Post subject: Borderlands 3 found experience memory address, modify code |
|
|
Hi all, finally got my hands dirty with CE in Borderlands 3 and its hella fun
I found the memory location for the experience and my goal is to modify the opcode so everytime I kill something it will give me 500 xp (this will let me lvl fast)
When I see what writes to this address it shows me
7FF91D296F31 - 48 8B 03 - mov rax,[rbx]
7FF91D296F34 - 48 8D 49 04 - lea rcx,[rcx+04]
7FF91D296F38 - C7 44 01 FC FFFFFFFF - mov [rcx+rax-04],FFFFFFFF <<
7FF91D296F40 - 48 83 EA 01 - sub rdx,01
7FF91D296F44 - 75 EB - jne PhysX3_x64.dll+D6F31
RAX=0000000062BB8010
RBX=0000000115496FA0
RCX=0000000000003664
RDX=00000000000009AC
RSI=0000000000000000
RDI=0000000000001744
RSP=00000000008CEB30
RBP=0000000000000000
RIP=00007FF91D296F40
R8=00000000B7355330
R9=0000000115496EB8
R10=0000000096AD0000
R11=00000000008CEA48
R12=0000000000000001
R13=0000000000000001
R14=00000000B7355330
R15=00000000520E0040
im trying to understand what the opcode does line by line
7FF91D296F31 - 48 8B 03 - mov rax,[rbx] /// moves the value of rbx into rax
7FF91D296F34 - 48 8D 49 04 - lea rcx,[rcx+04] //loads the value from the offset rcx+04 into rcx
7FF91D296F38 - C7 44 01 FC FFFFFFFF - mov [rcx+rax-04],FFFFFFFF << //im not sure about this?
7FF91D296F40 - 48 83 EA 01 - sub rdx,01 // subtracting rdx by 1
7FF91D296F44 - 75 EB - jne PhysX3_x64.dll+D6F31 //??
can someone help me make more sense of this?
p.s. does anyone have a list of Geri's tutorials? they sound epic and very useful
thanks!
|
|
Back to top |
|
 |
atom0s Moderator
Reputation: 205
Joined: 25 Jan 2006 Posts: 8587 Location: 127.0.0.1
|
Posted: Fri Sep 13, 2019 12:39 pm Post subject: |
|
|
Wrong section, moved to General Gamehacking.
_________________
- Retired. |
|
Back to top |
|
 |
nipslip How do I cheat?
Reputation: 0
Joined: 13 Sep 2019 Posts: 1
|
Posted: Fri Sep 13, 2019 1:06 pm Post subject: |
|
|
thanks for moving the post,
I figured it out for anyone interested.
I had to inject code to add the value of 500 in hex ( 0000001F4) to that memory address so it ended up looking like:
code:
add esi,0000001F4 //code we are injecting
mov [rdi+000001D8],esi
jmp return
this way it automatically adds 500 xp + whatever the base xp gained is and it works beautifully
best of luck all
|
|
Back to top |
|
 |
Csimbi I post too much
Reputation: 97
Joined: 14 Jul 2007 Posts: 3322
|
Posted: Fri Sep 13, 2019 3:02 pm Post subject: |
|
|
Why not go to Fearless?
They hacked it to smithereens already.
|
|
Back to top |
|
 |
|