A19 Auto Update Scripts

[iCraziE]

Updated Dec 07, 2018 : Wall / NoAggro / Vac

Zoom:

 Spoiler

[ENABLE]
alloc(DrakoZoom,512)
label(ReturnZoom)
label(ZoomMax)
registersymbol(ZoomMax)
aobscan(zoomz,D9 47 04 D9 5C 24 30 83 C4 08 D9 44 24 28 D9 44)
label(zlblz)
registersymbol(zlblz)

zoomz:
zlblz: //D9 47 04 D9 5c 24 30 83 c4 08 d9 44 24 28 d9 44
jmp DrakoZoom
nop
nop
ReturnZoom:

DrakoZoom:

mov eax,[ZoomMax]
mov [edi+04],eax
fld dword ptr [edi+04]
fstp dword ptr [esp+30]

jmp ReturnZoom
ZoomMax:
db 00 00 16 43

[DISABLE]
dealloc(DrakoZoom)
unregistersymbol(ZoomMax)
zlblz:
fld dword ptr [edi+04]
fstp dword ptr [esp+30]

FarEye: <--- load at char screen or switch maps after you activate.

 Spoiler

[ENABLE]
aobscan(FarEyez,8B 51 08 89 50 10 8B 49 0C 89 48 14 D9 40 10)
label(EyezLabel)
registersymbol(EyezLabel)
alloc(ChangeEyez,64)
label(ReturnEyez)
label(ClipDistance)
registersymbol(ClipDistance)

ChangeEyez:
mov edx,[ClipDistance]
mov [eax+10],edx
jmp ReturnEyez
ClipDistance:
db 00 00 96 43 //edit this value to change FarEyez distance. (backwards float)

FarEyez:
EyezLabel:
jmp ChangeEyez
nop
ReturnEyez:

[DISABLE]
EyezLabel:
mov edx,[ecx+08]
mov [eax+10],edx
dealloc(ChangeEyez,64)
unregistersymbol(ClipDistance)
unregistersymbol(EyezLabel)

Auto Pots:

 Spoiler

[ENABLE]
aobscan(_aPots,83 78 08 13 0F 85)
label(_aPotsLabel)
registersymbol(_aPotsLabel)
alloc(newmem,1024)
label(returnhere)
label(originalcode)
label(exit)
label(check_mana)
label(finished_check)

_aPots:
_aPotsLabel:
jmp newmem
nop
nop
nop
nop
nop
returnhere:

newmem:
originalcode:
cmp dword ptr [eax+08],01 // checking for HP pot?
jne check_mana
mov dword ptr[eax+08],11 // change to auto pot
mov dword ptr[eax+10],11
check_mana:
cmp dword ptr [eax+08],02 // checking for MP pot?
jne finished_check
mov dword ptr[eax+08],12 // change to auto pot
mov dword ptr[eax+10],12
finished_check:
cmp dword ptr [eax+08],13
je 0052d13a

exit:
jmp returnhere

[DISABLE]
dealloc(newmem)
_aPotsLabel:
cmp dword ptr [eax+08],13
db 0F 85 91 00 00 00
unregistersymbol(_aPotsLabel)

Tele/Shop:

 Spoiler

[Enable]
aobscan(telez,8B 80 A0 00 00 00 C3 CC CC CC CC CC CC)
aobscan(shopz,8A 41 08 C3 CC CC CC CC CC CC CC CC CC CC CC CC 6A FF)
label(tlblz)
label(slblz)
registersymbol(tlblz)
registersymbol(slblz)

telez:
tlblz:
mov eax,3
nop
ret

shopz:
slblz:
mov al,01
ret


[Disable]
tlblz:
mov eax,[eax+000000A0]

slblz: // 8A 41 08 C3 CC CC CC CC CC CC CC CC CC CC CC CC 6A FF
mov al,[ecx+08]

Wall Hack:

 Spoiler

[ENABLE]
alloc(Wall,64)
aobscan(nowall,8D 4C 24 6C 51 E8 * * * * 0F B7)
label(ReturnWall)
label(wlz)
registersymbol(wlz)
globalalloc(mapstart,64)
nowall:
wlz:
jmp Wall
ReturnWall:

Wall:
lea ecx,ss:[esp+6C]
push ecx
push edx
mov edx,[eax+2]
mov [mapstart],edx
pop edx
cmp dword ptr [eax+00000402],5F626577 //web_image.mac //(compare if map is equal to 'web_')
je ReturnWall
cmp dword ptr [eax+402],65647261 //ardeca_global.mac //('arde')
je ReturnWall
mov dword ptr [eax+402],5F626577
mov dword ptr [eax+406],67616D69
mov dword ptr [eax+40A],616D2E65
mov dword ptr [eax+40E],00000063
jmp ReturnWall

[DISABLE]
dealloc(Wall)
dealloc(mapstart)
wlz:
lea ecx,[esp+6C]
push ecx

NonAggro:

 Spoiler

[ENABLE]
alloc(NoRange,420)
label(NoRangeRet)
aobscan(nrange,0F B7 96 61 01 00 00 8B 01 8B 40 08 52)
aobscan(start,0F B6 8E 7B 01 00 00 89 4C 24 3C)
aobscan(fin,8B 4F 0C 89 54 24 48 8B 01 8B 50 0C)
label(nrlbl)
registersymbol(nrlbl)
alloc(noaggro,1024)
label(lblstart)
registersymbol(lblstart)

start:
lblstart:
jmp noaggro
nop
nop

nrange:
nrlbl:
jmp NoRange
nop
nop
NoRangeRet:


NoRange:
movzx edx,word ptr [esi+00000161]
mov edx,06
mov word ptr [esi+00000161],dx
jmp NoRangeRet

noaggro:
mov ecx,0
mov [esp+3C],ecx
mov edx,0
mov [esp+40],edx
mov eax,0
mov [esp+44],eax
mov ecx,0
mov [esp+48],ecx
mov edx,0
mov [esp+4C],edx
mov eax,0
mov [esp+50],eax
mov ecx,0
mov [esp+58],ecx
mov edx,0
mov [esp+5C],edx
mov eax,0
mov [esp+60],eax
mov ecx,0
add esp,0C { 12 }
mov [esp+58],ecx
mov edx,0
mov [esp+5C],edx
mov eax,0
mov [esp+60],eax
mov ecx,0
mov [esp+68],ecx
mov edx,0
mov [esp+6C],edx
mov eax,0
mov [esp+70],eax
mov ecx,0
mov [esp+74],ecx
mov edx,0
mov [esp+78],edx
mov eax,0
mov [esp+7C],eax
mov ecx,0
mov [esp+00000080],ecx
mov edx,0
mov [esp+00000084],edx
mov eax,0
mov [esp+00000088],eax
mov ecx,0
mov [esp+0000008C],ecx
mov edx,0
mov [esp+00000090],edx
mov eax,0
mov [esp+00000094],eax
mov ecx,0
mov [esp+64],ecx
mov edx,0
jmp fin

[DISABLE]
nrlbl:
movzx edx,word ptr [esi+00000161]
lblstart:
movzx ecx,byte ptr [esi+0000017B]
dealloc(NoRange)
dealloc(noaggro)
unregistersymbol(nrlbl)
unregistersymbol(lblstart)

BetterVac:

 Spoiler

[ENABLE]
aobscan(_aVac,8B 50 1C 89 51 20)
label(_aVacLabel)
registersymbol(_aVacLabel)
alloc(newmem,2048)
label(returnhere)

_aVac:
_aVacLabel:
jmp newmem
nop
returnhere:

newmem:
mov dword ptr [eax+04],000003E7
mov dword ptr [eax+08],000003E7
mov dword ptr [eax+1C],00000001
mov dword ptr [eax+10],00000001

mov dword ptr [eax+3C],000007D0
mov dword ptr [eax+000000A8],00000000 //# of monster to spawn
mov dword ptr [eax+000000AC],00000000
mov dword ptr [eax+000000B0],00000000
mov dword ptr [eax+000000B4],00000000

mov edx,[eax+1C]
mov [ecx+20],edx

jmp returnhere

[DISABLE]
dealloc(newmem)
_aVacLabel:
mov edx,[eax+1C]
mov [ecx+20],edx
unregistersymbol(_aVacLabel)

MobSpeed:

 Spoiler

[ENABLE]
aobscan(_aMobSpeed,80 7C 24 04 00 74 06 D9 40 79)
label(_aMobSpeedLabel)
registersymbol(_aMobSpeedLabel)
alloc(DrakoMobSpeedBace,2048)
label(MobIsWalking)
label(MobRunSpeedValue)
label(MobWalkSpeedValue)
label(ReturnMobSpeed)
registersymbol(MobRunSpeedValue)
registersymbol(MobWalkSpeedValue)

DrakoMobSpeedBace:
cmp byte ptr [esp+04],00
je MobIsWalking
fld dword ptr [MobRunSpeedValue]
ret 0004
MobIsWalking:
fld dword ptr [MobWalkSpeedValue]
ret 0004

MobRunSpeedValue:
db 00 00 60 41
MobWalkSpeedValue:
db 00 00 40 40

_aMobSpeed:
_aMobSpeedLabel:
jmp DrakoMobSpeedBace
ReturnMobSpeed:

[DISABLE]
dealloc(DrakoMobSpeedBace)
unregistersymbol(MobRunSpeedValue)
unregistersymbol(MobWalkSpeedValue)
_aMobSpeedLabel:
cmp byte ptr [esp+04],00
unregistersymbol(_aMobSpeedLabel)

CharSpeed:

 Spoiler

[ENABLE]
aobscan(_aSpeed,D9 40 08 5F 5E C3)
label(_aSpeedLabel)
registersymbol(_aSpeedLabel)
alloc(newmem,16)
label(ReturnSpeed)
label(SpeedValue)
registersymbol(SpeedValue)

_aSpeed:
_aSpeedLabel:
jmp newmem
ReturnSpeed:

newmem:
fld dword ptr [SpeedValue]
pop edi
pop esi
jmp ReturnSpeed
push esi
push edi
call dword ptr [SpeedValue]
SpeedValue:
db 00 00 D0 40

[DISABLE]
dealloc(newmem)
unregistersymbol(SpeedValue)
_aSpeedLabel:
fld dword ptr [eax+08]
pop edi
pop esi
unregistersymbol(_aSpeedLabel)

[magitekmethod]

Much appreciated

[louisxsyla]

the wall hack address is wrong thats why need load map twice.

the right address you dont need load twice.

[iCraziE]

Yea i figured that, but I cant be bothered to go find it. Maybe if i get bored again :O

[louisxsyla]

your NonAggro only for melee mobs. the magic mobs or boss you will die

[iCraziE]

bro stop commenting on my post and go sell ur hacks.. lol these are the free public hacks.. why would i give out anything else.. <_<

[iamlegend93]

thx for this!
anybody can pm for bypass help? i will pay for help :-)

[DrLiar55]

anybody can pm for bypass help? i will pay for help

[gauco0]

Nice1 but you should make bypass if u make some hacks -1.

[jhonkevin]

how to do the scripts i want to try it

[iCraziE]

Try my trainer, it includes bypass.

[Spazman6117]

Yo CraziE,

Do these auto update scripts work for private servers also? Or just papaya?

[iCraziE]

if the pserver is a9-based, its a good chance most will work. other may need to be modified abit.

This will most likely fail in Core/Prime/Rising since i believe they have modified the client.

[bayhomurtuu]

hi sir i m newbie on cheat engine... how to can i encoding cheat engine ? pls help me

[Naniooooo]

find undetected cheat engine
to make your own undetected cheat engine is really hard but there are tutorials on youtube or forums