Diablo 2 Full game + Lord of destruction v1.13c 1 link torrent Link:You need bittorrent or a torrent software to download this game: htt. Go here, make a login, register your game keys, download the respective games, install them, and play without a CD.If you already have Diablo II and the expansion installed you'll need to unistall.

Hello all, l've been trying to create adjustments to Diablo lI.exe for 1.09b in order for it not to use the CD. Onyx and other mods said in additional articles that since Blizzard introduced the 'no-cd spot' in 1.12+, that essentially indicates that we can also create our very own no-cd adjustments for prior versions.

Therefore ideally this blog post doesn't get locked or erased. Anyways, on to the content material. I've been recently operating and searching around the DiabIo II.exe fór 1.09b for about 10 hrs now, also learning more about change engineering along the method. I'michael not a beginner, but not really pro either. This is usually what I possess so far: Tools: 0llyDbg PEiD w32dasm First I scanned thé éxe with PEiD to notice if it was loaded, and PEiD simply stated 'Microsoft Visual C 6.0', which from some research means that it doesn't have any packing, it was just built with MSVC6. When I opened up the Diablo lI.exe with File ->Open in OllyDbg, the bottom address is the usual 00400000, and Admittance address can be: 004014E3.

Initial queries for guitar strings related to 'Diablo II was unable to detect a Disk in your CD-ROM push' and MessageBoxes with the name 'CD-ROM get error' with Olly and W32Dasm uncovered that the deal with is around the following block. Code: 0040122D. 51 Press ECX; pStartupInfo 0040122E. 6A 00 Drive 0; CurrentDir = NULL 00401230. 6A 00 Press 0; pEnvironment = NULL 00401232. 6A 00 Press 0; CreationFlags = 0 00401234.

6A 01 Press 1; InheritHandles = Genuine 00401236. 6A 00 Force 0; pThreadSecurity = NULL 00401238. 6A 00 PUSH 0; pProcessSecurity = NULL 0040123A. 52 Force EDX; CommandLine 0040123B. 6A 00 Drive 0; ModuleFileName = NULL 0040123D. FF15 0C504000 CALL DWORD PTR DS:; Procedure is prepared to end up being produced and request will end up being sent to kernel 00401243. 85C0 Check EAX,EAX; assessments something, the video game should begin here; GetLastError 0040124D.

8BY0 MOV ESI,EAX 0040124F. 8D84>LEA EAX,DWORD PTR SS:ESP+384 00401256. 50 Force EAX 0040125C. 6A 02 Drive 2 0040125E. 53 Drive EBX 0040125F. FFD5 CALL EBP 00401261. 8D4C24 34 LEA ECX,DWORD PTR SS:ESP+34 00401265.

0 Drive 104 the TEST EAX, EAX and JNZ show up to leap irrespective of whether or not I place my development CD inside of. Code: 00401557. FF0 CALL DW0RD PTR DS:; GetCommandLineA 0040155D. A3 M8694000 MOV DWORD PTR DS:4069C8,EAX 00401562. Age8 FD0G0000 Contact DiabloI.0041567. A3 C4644000 MOV DWORD PTR DS:4064B4,EAX 0040156C.

At the8 A60A0000 Contact DiabloI.0041571. Elizabeth8 At the8090000 Contact DiabloI.00401F5E 00401576.

Age8 05070000 CALL DiabloI.004157B. 8975 Chemical0 MOV DWORD PTR SS:EBP-30,ESI 0040157E.

8D45 A4 LEA EAX,DWORD PTR SS:EBP-5C 00401581. 50 Force EAX; /pStartupinfo 00401582. FF15 2C504000 Contact DWORD PTR DS:; GetStartupInfoA 00401588. At the8 79090000 CALL DiabloI.004158D. 8945 9C MOV DWORD PTR SS:EBP-64,EAX 00401590. Y645 Deb0 01 TEST BYTE PTR SS:EBP-30,1 00401594. 74 06 JE SHORT DiabloI.0040159C 00401596.

0FM745 D4 MOVZX EAX,WORD PTR SS:EBP-2C 0040159A. EB 03 JMP SHORT DiabloI.0040159F 0040159C >6A 0A Press 0A 0040159E. 58 Place EAX 0040159F >50 Force EAX; /Arg4 004015A0. FF75 9C Press DW0RD PTR SS:EBP-64; Arg3 004015A3.

56 PUSH ESI; Arg2 004015A4. 56 PUSH ESI; /pModule 004015A5. FF0 Contact DWORD PTR DS:; GetModuleHandleA 004015AM. 50 Force EAX; Arg1 004015AC. E8 4FFAFFFF Contact DiabloI.00401000. Code: 0040134C.

8D8C>LEA ECX,DWORD PTR SS:ESP+384 00401353. 6A 05 Drive 5; /Style = MBRETRYCANCEL MBAPPLMODAL 00401355. 8D5424 38 LEA EDX,DWORD PTR SS:ESP+38; 00401359. 51 Press ECX; Title 0040135A. 52 Drive EDX; Text message 0040135B. 6A 00 Press 0; hOwner = NULL 0040135D.

FF15 AC504000 CALL DWORD PTR DS:; MessageBox: Perform you need to retry? Or end message. 83F8 02 CMP EAX,2 00401366.^0F85 DFFCFFFF JNZ DiabloI.0040104B; If not = to 0, then go back to best to fill sport 0040136C >5D POP EBP; Case 1 of change 004012CG 0040136D.

5B POP EBX 0040136E >8B4424 0C MOV EAX,DWORD PTR SS:ESP+C 00401372. 50 PUSH EAX; /hObject 00401373. FF0 CALL DWORD PTR DS:; CloseHandle 00401379. 8BD6 MOV EAX,ESI 0040137B. 5F POP EDI 0040137C. 5E POP ESI 0040137D. 81C4 80060000 Insert ESP,63.

Chemical2 1000 RETN 10 I observed that putting in the disk inside earnings an EAX = 1 worth, and not placing the disc inside and obtaining the 'Please put the disk' mistake text messages and me clicking end finishes up coming back EAX = 0. I wear't know if this can be significant since it could simply end up being the programs exit code (or code that the program will place out when it out of your). I gathered guitar strings by either loading the.exe with w32dasm and searching for 'String Data References', or using Olly's i9000 ->Executable Quests ->(Right click Diablo lI.exe) and click on 'Look at Resource Guitar strings'. Before beginning this project I thought it would be pretty easy, just going into the program code and simply inverting some stuff, I most likely was thinking to naively háha. fearedbliss.

Hey NecroIis, I don't know how to make a mini-image and really never noticed of it. I produced a full picture of the enlargement cd bóth in.iso ánd.mdf forms. The.iso one doesn'testosterone levels work most likely because the bad pads for compact disc confirmation for autocorrected. However, the.mdf one produced by Alcohol 120% works perfectly fine.

Alcoholic beverages 120% furthermore discovered that my 1.07 CD provides SecuROM 4 or less. Although depending how tough this is certainly, I might as well just keep attempting to amount this out for studying purposes. It would end up being a good method for me to obtain better with ASM and reverse anatomist.

EDIT: Just investigated how to create a mini-imagé. I must sáy, whoever arrived up with that had been a smart thinker haha. I don't know if it's right for me to make a fresh write-up (dual write-up in a feeling) due to the quantity of time between both articles.

If I can't perform that, please allow me know and I will mix and delete this post. So even more progress on me digging around the Game.exe this period and investing an additional 10-15 hrs screening/debugging/and résearching all over thé interwebs. I down loaded a few additional tools: ImportREC (To repair Video game.exe ITA table) LordPE A several packer sensors (RDG, Security iD, ExeinfoPE, Détect it Eásy) XDG Detected: Small v2.2 (which can be wrong) Safety iD Detected: SecuR0M 04. Which is definitely correct. Some other packers simply stated: Microsoft Visual Chemical 6 (and probably Overlay), which doesn't help at all. You can verify it't that edition of SecuROM by performing a hex edit research for 'AddD' ánd you will finish up with the numbers 04.

Opening up Olly and setting a Breakpoint on Entry in the range below PE Header (for Sport) in the Storage Chart of Olly, which should become the.text range, and working 2 slices of delivery will obtain you the address: 415089, and from reading a few SecuROM focused instructions, they all say that this very first address is definitely the OEP address. Around it looks like this.

Code: 00415084. 56 Force ESI 00415085. 57 PUSH EDI 00415086.

8B5D 0C MOV EBX,DWORD PTR SS:EBP+C 00415089. 8B03 MOV EAX,DWORD PTR DS:EBX. Code: 0041509B 8B4D 08 MOV ECX,DWORD PTR SS:EBP+8 0041509E 51 Drive ECX 0041509F FF0 CALL DW0RD PTR DS:450760; kernel32.ReadProcessMemory. Hey Selt, It's not really about reinventing the steering wheel, I can't discover any info on carrying out this, and I wished to learn how to perform some change system só it's about thé understanding encounter of becoming capable to eliminate SecuROM and let M2 have fun with with no Compact disc. Can you make sure you blog post your notes and strategies of how yóu disabled SecuROM (Unpackéd, Rebuilt ITA) ánd after that discovered where in the program code you require to verify to deactivate the No-CD check out?

(Posting the unpacking óf this SecuROM ánd rebuilding the ITA by itself would be a massive help for me and would help my knowing of how this functions). fearedbliss. FearedBliss' wrote:Hi all, I've been trying to make modifications to Diablo lI.exe for 1.09b in order for it not really to use the Compact disc. Onyx and some other mods mentioned in additional posts that since Blizzard presented the 'no-cd spot' in 1.12+, that fundamentally means that we can furthermore create our own no-cd adjustments for prior versions. Therefore ideally this write-up doesn't get locked or removed. Anyways, on to the content.

I've been recently working and looking around the DiabIo II.exe fór 1.09b for about 10 hrs now, also learning even more about change design along the method. I'm not a beginner, but not pro either. This can be what I have so far: Equipment: 0llyDbg PEiD w32dasm Initial I scanned thé éxe with PEiD to observe if it was packed, and PEiD just mentioned 'Microsoft Visual G 6.0', which from some analysis means that it doesn't have got any packing, it had been just built with MSVC6. When I opened the Diablo lI.exe with Document ->Open in OllyDbg, the foundation address is certainly the usual 00400000, and Entry address is certainly: 004014E3. Preliminary queries for strings related to 'Diablo II has been unable to identify a Disc in your CD-ROM get' and MessageBoxes with the title 'CD-ROM get mistake' with Olly and W32Dasm exposed that the tackle is around the following block. Code: 0040122D.

51 PUSH ECX; pStartupInfo 0040122E. 6A 00 Drive 0; CurrentDir = NULL 00401230. 6A 00 Press 0; pEnvironment = NULL 00401232. 6A 00 Press 0; CreationFlags = 0 00401234. 6A 01 Force 1; InheritHandles = Accurate 00401236. 6A 00 Press 0; pThreadSecurity = NULL 00401238. 6A 00 Force 0; pProcessSecurity = NULL 0040123A.

52 PUSH EDX; CommandLine 0040123B. 6A 00 Press 0; ModuleFileName = NULL 0040123D. FF15 0C504000 Contact DWORD PTR DS:; Procedure is prepared to be made and demand will end up being delivered to kernel 00401243. 85C0 TEST EAX,EAX; exams something, the game should begin here; GetLastError 0040124D. 8BY0 MOV ESI,EAX 0040124F. 8D84>LEA EAX,DWORD PTR SS:ESP+384 00401256. 50 Drive EAX 0040125C.

6A 02 Drive 2 0040125E. 53 Drive EBX 0040125F. FFD5 Contact EBP 00401261.

8D4C24 34 LEA ECX,DWORD PTR SS:ESP+34 00401265. 0 PUSH 104 the TEST EAX, EAX and JNZ show up to leap irrespective of whether or not really I place my development CD inside of. Program code: 00401557. FF0 CALL DW0RD PTR DS:; GetCommandLineA 0040155D. A3 M8694000 MOV DWORD PTR DS:4069C8,EAX 00401562. Elizabeth8 FD0D0000 Contact DiabloI.0041567. A3 N4644000 MOV DWORD PTR DS:4064B4,EAX 0040156C.

E8 A60A0000 Contact DiabloI.0041571. E8 Y8090000 Contact DiabloI.00401F5E 00401576. Y8 05070000 CALL DiabloI.004157B.

8975 Chemical0 MOV DWORD PTR SS:EBP-30,ESI 0040157E. 8D45 A4 LEA EAX,DWORD PTR SS:EBP-5C 00401581. 50 PUSH EAX; /pStartupinfo 00401582. FF15 2C504000 Contact DWORD PTR DS:; GetStartupInfoA 00401588. E8 79090000 Contact DiabloI.004158D.

8945 9C MOV DWORD PTR SS:EBP-64,EAX 00401590. F645 Deb0 01 TEST BYTE PTR SS:EBP-30,1 00401594. 74 06 JE SHORT DiabloI.0040159C 00401596. 0FW745 N4 MOVZX EAX,WORD PTR SS:EBP-2C 0040159A. EB 03 JMP SHORT DiabloI.0040159F 0040159C >6A 0A Drive 0A 0040159E.

58 Place EAX 0040159F >50 Press EAX; /Arg4 004015A0. FF75 9C PUSH DW0RD PTR SS:EBP-64; Arg3 004015A3.

56 PUSH ESI; Arg2 004015A4. 56 Drive ESI; /pModule 004015A5. FF0 CALL DWORD PTR DS:; GetModuleHandleA 004015AB. 50 PUSH EAX; Arg1 004015AG. Age8 4FFAFFFF Contact DiabloI.00401000. Code: 0040134C.

8D8C>LEA ECX,DWORD PTR SS:ESP+384 00401353. 6A 05 Drive 5; /Style = MBRETRYCANCEL MBAPPLMODAL 00401355. 8D5424 38 LEA EDX,DWORD PTR SS:ESP+38; 00401359. 51 PUSH ECX; Name 0040135A. 52 PUSH EDX; Text 0040135B.

6A 00 Force 0; hOwner = NULL 0040135D. FF15 Air conditioning unit504000 Contact DWORD PTR DS:; MessageBox: Perform you want to retry? Or cancel information. 83F8 02 CMP EAX,2 00401366.^0F85 DFFCFFFF JNZ DiabloI.0040104B; If not = to 0, after that go back again to best to insert sport 0040136C >5D Take EBP; Situation 1 of switch 004012CG 0040136D.

5B Take EBX 0040136E >8B4424 0C MOV EAX,DWORD PTR SS:ESP+C 00401372. 50 Drive EAX; /hObject 00401373.

FF0 CALL DWORD PTR DS:; CloseHandle 00401379. 8BG6 MOV EAX,ESI 0040137B. Line lite for pc windows 10. 5F Put EDI 0040137C.

5E POP ESI 0040137D. 81C4 80060000 ADD ESP,63. G2 1000 RETN 10 I noticed that placing in the disk inside results an EAX = 1 worth, and not really placing the disc inside of and obtaining the 'Please put in the disc' mistake text messages and me clicking cancel ends up returning EAX = 0. I wear't understand if this will be meaningful since it could just be the programs exit code (or code that the plan will place out when it exits). I retrieved guitar strings by either loading the.exe with w32dasm and looking for 'Chain Data Referrals', or making use of Olly'beds ->Executable Quests ->(Best click Diablo lI.exe) and click on 'View Resource Strings'. Before starting this project I thought it would be pretty easy, just going into the code and just inverting some stuff, I possibly was thinking to naively haha.

fearedbliss Buddy, I feel working on a 'No-CD' spot for N2 LoD edition 1.09d (yours can be 1.09b) and I would really like to function together since I feel also ceased. My findings show that there are some extra affirmation on 'Diablo II.exe'. Code: PEiD Compiled: 'Microsoft Visual D 6.0' Foundation Tackle:00400000 EntryPoint: 004014E3 - Since I am using 'Diablo II LoD' in Real spanish version the mistake message goes in real spanish ('Mistake al leer un CD-ROM.' ) Right here we move.

WDASM - Search for 'leer'. Possible Research to String Resource Identification=00002: 'Mistake al leer un CD-ROM.' :004022A3 D002000000 mov dword ptr 00408648, 00000002:004022AD Y98F000000 jmp 00402341. Referenced by a (U)nconditional or (Chemical)onditional Jump at Address: :0040227D(C) - I discovered there are usually 3 fascinating jump's (JNZ): 0040227B. 3BChemical3 CMP EAX,EBX; PRIMERA COMPARACION (CMP) 0040227D 75 33 JNZ Brief Copiade.004022B2; Cambiamos JNZ por JMP - 004022B2 >83F8 01 CMP EAX,1; SEGUNDA COMPARACION (CMP) 004022B5 0F0 JNZ Copiade.0040233C; Cambiamos JNZ por JMP - 0040233C >83F8 02 CMP EAX,2; TERCERA COMPARACION (CMP) 0040233F 75 4C JNZ Brief Copiade.0040238D; Cambiamos JNZ por JMP - Now, I Set up on this instructions replacing JNZ by JMP but it transmits me a accident mistake on 'Diablo lI.exe'.

Diablo lI doesn'testosterone levels actually possess mandatory Compact disc bank checks. Diablo II.exe tries to release Sport.exe and if it breaks down to decrypt (no CD in travel) it will toss an error. Once the securom is certainly unpacked from Video game.exe, the game will attempt to begin. It will search the current website directory for all the.MPQ documents and if it breaks down to discover them, it will then verify the CD route. If it does not work out to find them there, it will toss an mistake. All you require to perform is unpack the sécurom and the game will function without the Compact disc.

The no-CD pack I produced that Necrolis submitted does just that. The securom was unpacked and thé un-needed program code was erased. All versions of Diablo II use SecuRom v1. This can be a actually old defense and there arén't any contemporary cracking equipment for it.

I cracked the safety by doing this: 1) You need a physical Windows 9x computer capable of operating M2 ( Digital machines DO NOT Function) 2) Spot to the edition you want to break and place the Play Disk 3) Fill up the system 'Procdump32' 4) Select 'unpack executable' and choose 'Small 2.1'. Save the file in the install directory.

5) Click on 'Brahma Machine' 6) Open up the Securom folder and start LOADER.EXE (This program utilizes.VXD which Was the winner'T WORK UNDER Home windows NT) 7) The Brahma server will eliminate the unpacked executabIe in a several minutes. Conserve it someplace.

8) The last step is certainly to fixup thé imports. I acquired to perform it manually but there are probably equipment out right now there.

9) The video game will right now operate without the CD. No additional edits needed!