Jump to content
Moopler
YeeShin

Outdated [116.2] BlackHeaven Act Teleporter/Skipper.

Recommended Posts

Hello Mooplers~

 

I've found this exploit lately and wanted to share it.

In Black Heaven Questline you have to go through 6 acts to finish the questline and get the final reward.

By using this script and pressing the following hotkeys will pop up the act quest. (You can go directly to Act 6 and finish the questline)

And you can use these hotkeys anywhere to make the dialog pop up. 

 

F1 = Act 1

F2 = Act 2

F3 = Act 3

F5 = Act 4

F6 = Act 5

F7 = Act 6

 

Here's the script and enjoy using it. (I made it really fast so... it can be shorter)

Spoiler

//Black Heaven Questline Teleporter/Skipper eMS 116.2
//Moopler.net
//YeeShin

[Enable]
alloc(Act_Filter,128)
alloc(Header_Check, 100)
alloc(Header_Replace, 100)
label(Header_Return)
label(BlackHeavenExploit_Return)
alloc(Act1,24)
alloc(Act2,24)
alloc(Act3,24)
alloc(Act4,24)
alloc(Act5,24)
alloc(Act6,24)

Header_Check:
cmp cx,00c4
je Header_Replace
mov [edx+eax],cx
add dword ptr [esi+08],02
jmp Header_Return

Header_Replace:
mov cx,021f
mov [edx+eax],cx
add dword ptr [esi+08],02
jmp Header_Return

00499613:
jmp Header_Check
nop
nop
nop
Header_Return:


013a2993:
jmp Act_Filter
nop
BlackHeavenExploit_Return:

Act_Filter:
cmp eax,00000001
je Act1
cmp eax,00000002
je Act2
cmp eax,00000003
je Act3
cmp eax,00000004
je Act4
cmp eax,00000005
je Act5
cmp eax,00000006
je Act6
xor ecx,BAADF00D
jmp BlackHeavenExploit_Return

Act1:
mov eax,00000000
xor ecx,BAADF00D
jmp BlackHeavenExploit_Return

Act2:
mov eax,00000100
xor ecx,BAADF00D
jmp BlackHeavenExploit_Return

Act3:
mov eax,00000200
xor ecx,BAADF00D
jmp BlackHeavenExploit_Return

Act4:
mov eax,00000300
xor ecx,BAADF00D
jmp BlackHeavenExploit_Return

Act5:
mov eax,00000400
xor ecx,BAADF00D
jmp BlackHeavenExploit_Return

Act6:
mov eax,00000500
xor ecx,BAADF00D
jmp BlackHeavenExploit_Return

[Disable]

00499613:
mov [edx+eax],cx
add dword ptr [esi+08],02

013a2993:
xor ecx,BAADF00D

 

Notice : The script is packets based and can't be converted to gMS only if you know the packets.

  • Like 8

Share this post


Link to post
Act_Filter:
sub eax, 1
imul eax, eax, 100
cdq //idunno if needed
xor ecx,BAADF00D
jmp BlackHeavenExploit_Return

 

looks cleaner instead of all the Act# labels :ohyou:

 

nice exploit, nonetheless, moopler could use more releases like this.

Edited by DAVHEED
  • Like 2

Share this post


Link to post

Would be easier to send the packet lol. Afaik this method also works to skip chapters of some other questlines. With the right packet of course

Share this post


Link to post
Just now, Cotopian said:

Would be easier to send the packet lol. Afaik this method also works to skip chapters of some other questlines. With the right packet of course

Some people prefer Scripts over injecting a packet editor + sending a packet.

 

Share this post


Link to post
Guest
This topic is now closed to further replies.
×