UCE guide for 2moons Working vac,wall hack, speed hack & auto pots

08/03/2009 03:29 Markh96#601
hi, when I press on launch it says Access is denied and I really don' t know why :S
08/03/2009 07:46 zazco#602
Hello. I followed this tutorial word for word. For some reason I can check my Vac script but I cannot check my Non-Aggro script (it just doesnt check if I click it). In addition, whenever I run around to get mobs, I can still only grab 3, and I never made any adjustments to any of the CODE on this tutorial. Not to mention they still attack me because non-aggro isn't working.

Am I missing a checkmark somewhere? Or is my game bugged? Any suggestions? Thanks :)
08/03/2009 08:43 Vaidas B#603
did u update ur offsets?
08/03/2009 08:50 zazco#604
Could you explain to me what an offset is? It was not in the tutorial and I didn't see anything in CE saying "OFFSET". lol
08/03/2009 09:13 Vaidas B#605
Vac code


Code:
[ENABLE]
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)

[color="red"]00459D8D:[/color]
jmp newmem
nop
returnhere:

newmem:
//DwExploreRange eax
mov [eax+08],00000020//DwSight eax+08
mov [eax+04],00000020//DwPersuitRange eax+04
//DwAvoidRange eax+0C
//mov [eax+10],00000064//DwExploreStandDelay eax+10
//mov [eax+14],00000064//DwExploreMoveDelay eax+14
//mov [eax+18],00000064//DwStandDelay eax+18
//mov [eax+1C],00000064//DwMoveDelay eax+1C
//DwFollowMyMasterRange eax+20
//DwStopMasterNear eax+24
//DwWarpMyMasterRange eax+28
mov [eax+2C],00000064//DwCallTeamPossibelHP eax+2C
mov [eax+30],00000020//DwCallTeamCount eax+30
mov [eax+34],00000000//DwBlockNFirstAttack eax+34//mov [eax+38],00000020//dwCallTeamCell byte[eax+38]
//dwFollowTarget eax+3C
//dwSpecialAttackStartHP
//dwSpecialMeleeAttackRate
//dwSpecialRangeAttackRate
//DwPowerAttacjStartHP
//dwPowerMeleeAttackProbable
//dwPowerRangeAttackProbable
//mov [eax+40],00000000//DwUnderAttackAggro eax+40
//mov [eax+44],00000000//DwMeleeAttackRangeInAggro eax+44
//mov [eax+48],00000000//DwRangeAttackRangeInAggro eax+48
//DwSightInAggro eax+4C
//DwDefeatAggro eax+50
mov [eax+54],00000000//DwBlockedAggro eax+54
mov [eax+58],00000000//DwSlideAggro eax+58
mov [eax+5C],00000000//DwHealAggro eax+5C
//DwMasterUnderAttackAggro eax+50
//DwMasterDefeatAggro eax+54
//DwMasterBlockingAggro eax+58
//DwMasterSlideAggro eax+5C
//DwCOmplusionUnderAttackAggro eax+60
//dwMaxSummonsMonsterCount eax+64
//dwReSummonsMonsterTick eax+68
//dwMaxSummonsMonsterRange eax+6C
//dwSummonsStartPcCountPatternType eax+70

originalcode:
mov edx,[eax+1c]
mov [ecx+20],edx


mov edx,10 // number spawn
mov [eax+8c],edx

mov edx,64 // time delay spawn
mov [eax+90],edx

mov edx,30 // # follow monster
mov [eax+3C],edx

//mov [ecx+20],edx // # follow my master
exit:
jmp returnhere


[DISABLE]
dealloc(newmem)
[color="red"]00459D8D:[/color]
mov edx,[eax+1c]
mov [ecx+20],edx
alloc(newmem,256)
label(orig_00883AC2)

newmem:
push 60
push 00a9f448
call 00889d18
mov edi,00000094
mov eax,edi
call 00886430
mov [ebp-18],esp
mov esi,esp
mov [esi],edi
push esi
call dword ptr [00a2519c]
mov ecx,[esi+10]
mov [00c154a8],ecx
mov eax,[esi+04]
mov [00c154b4],eax
mov edx,[esi+08]
mov [00c154b8],edx
mov esi,[esi+0c]
and esi,00007fff
mov [00c154ac],esi
cmp ecx,02
or esi,00008000
mov [00c154ac],esi

orig_00883AC2:
shl eax,08
add eax,edx
mov [00c154b0],eax
xor esi,esi
push esi
mov edi,[00a251b0]
call edi
cmp word ptr [eax],5a4d
jne 00883afd
mov ecx,[eax+3c]
add ecx,eax
non aggro

Code:
[ENABLE]
alloc(newmem,1024)
label(returnhere)
label(originalcode)
label(exit)

[color="red"]0053DB4A[/color]:
jmp newmem
nop
nop
returnhere:

newmem:

originalcode:
movzx eax,word ptr [esi+00000154]

//mov eax,01
//mov word ptr [esi+00000156],ax
mov [esi+00000070], 41400000 // speed mob
//40c00000 = 6 lv 1 (to replace the above blue color)
//40400000 = 12 lv 2 (to replace the above blue color)
//41c00000 = 24 lv 3 (to replace the above blue color)
mov byte ptr [esi+00000174],00 // malee attack range = 0
mov byte ptr [esi+00000244],00 // magic attack range = 0
mov [esi+00000240],0000000 //other attack range = 0
mov [esi+0000023c],0000000 //other attack range = 0
mov [esi+00000238],0000000 //other attack range = 0
mov eax,03
mov word ptr [esi+00000154],ax

exit:
jmp returnhere


[DISABLE]
dealloc(newmem)

[color="red"]0053DB4A[/color]:
movzx eax,word ptr [esi+00000154]
change the red numbers to the numbers below (they are offsets) (remeber vac code goes to vac script, non aggro goes to non aggro)


non aggro: 0053A30A
Auto Pots: 0052A05F
Speed: 007BFFAA
Vac: 004599BD
Map/Teleport: 00550963
08/03/2009 12:38 Daravil#606
When im on the launcher and it trys to launch unpackedekaron4.7.17.exe it doesnt launch it and it gives me the error: the file cannnot be started because binkw32.dll cannot be found
i runned it as administrator still doesnt work,i tryed to reput everything it still doesnt work,any help?
08/03/2009 16:05 thecronic10#607
go in google and typee in binkw32.dll.rar download the file and put it in your bin folder
08/03/2009 19:18 kikichan#608
Or he can go to page 59 and click link to download it.
08/03/2009 20:23 Daravil#609
Quote:
Originally Posted by waidas123 View Post
Vac code


Code:
[ENABLE]
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)

[color="red"]00459D8D:[/color]
jmp newmem
nop
returnhere:

newmem:
//DwExploreRange eax
mov [eax+08],00000020//DwSight eax+08
mov [eax+04],00000020//DwPersuitRange eax+04
//DwAvoidRange eax+0C
//mov [eax+10],00000064//DwExploreStandDelay eax+10
//mov [eax+14],00000064//DwExploreMoveDelay eax+14
//mov [eax+18],00000064//DwStandDelay eax+18
//mov [eax+1C],00000064//DwMoveDelay eax+1C
//DwFollowMyMasterRange eax+20
//DwStopMasterNear eax+24
//DwWarpMyMasterRange eax+28
mov [eax+2C],00000064//DwCallTeamPossibelHP eax+2C
mov [eax+30],00000020//DwCallTeamCount eax+30
mov [eax+34],00000000//DwBlockNFirstAttack eax+34//mov [eax+38],00000020//dwCallTeamCell byte[eax+38]
//dwFollowTarget eax+3C
//dwSpecialAttackStartHP
//dwSpecialMeleeAttackRate
//dwSpecialRangeAttackRate
//DwPowerAttacjStartHP
//dwPowerMeleeAttackProbable
//dwPowerRangeAttackProbable
//mov [eax+40],00000000//DwUnderAttackAggro eax+40
//mov [eax+44],00000000//DwMeleeAttackRangeInAggro eax+44
//mov [eax+48],00000000//DwRangeAttackRangeInAggro eax+48
//DwSightInAggro eax+4C
//DwDefeatAggro eax+50
mov [eax+54],00000000//DwBlockedAggro eax+54
mov [eax+58],00000000//DwSlideAggro eax+58
mov [eax+5C],00000000//DwHealAggro eax+5C
//DwMasterUnderAttackAggro eax+50
//DwMasterDefeatAggro eax+54
//DwMasterBlockingAggro eax+58
//DwMasterSlideAggro eax+5C
//DwCOmplusionUnderAttackAggro eax+60
//dwMaxSummonsMonsterCount eax+64
//dwReSummonsMonsterTick eax+68
//dwMaxSummonsMonsterRange eax+6C
//dwSummonsStartPcCountPatternType eax+70

originalcode:
mov edx,[eax+1c]
mov [ecx+20],edx


mov edx,10 // number spawn
mov [eax+8c],edx

mov edx,64 // time delay spawn
mov [eax+90],edx

mov edx,30 // # follow monster
mov [eax+3C],edx

//mov [ecx+20],edx // # follow my master
exit:
jmp returnhere


[DISABLE]
dealloc(newmem)
[color="red"]00459D8D:[/color]
mov edx,[eax+1c]
mov [ecx+20],edx
alloc(newmem,256)
label(orig_00883AC2)

newmem:
push 60
push 00a9f448
call 00889d18
mov edi,00000094
mov eax,edi
call 00886430
mov [ebp-18],esp
mov esi,esp
mov [esi],edi
push esi
call dword ptr [00a2519c]
mov ecx,[esi+10]
mov [00c154a8],ecx
mov eax,[esi+04]
mov [00c154b4],eax
mov edx,[esi+08]
mov [00c154b8],edx
mov esi,[esi+0c]
and esi,00007fff
mov [00c154ac],esi
cmp ecx,02
or esi,00008000
mov [00c154ac],esi

orig_00883AC2:
shl eax,08
add eax,edx
mov [00c154b0],eax
xor esi,esi
push esi
mov edi,[00a251b0]
call edi
cmp word ptr [eax],5a4d
jne 00883afd
mov ecx,[eax+3c]
add ecx,eax
non aggro

Code:
[ENABLE]
alloc(newmem,1024)
label(returnhere)
label(originalcode)
label(exit)

[color="red"]0053DB4A[/color]:
jmp newmem
nop
nop
returnhere:

newmem:

originalcode:
movzx eax,word ptr [esi+00000154]

//mov eax,01
//mov word ptr [esi+00000156],ax
mov [esi+00000070], 41400000 // speed mob
//40c00000 = 6 lv 1 (to replace the above blue color)
//40400000 = 12 lv 2 (to replace the above blue color)
//41c00000 = 24 lv 3 (to replace the above blue color)
mov byte ptr [esi+00000174],00 // malee attack range = 0
mov byte ptr [esi+00000244],00 // magic attack range = 0
mov [esi+00000240],0000000 //other attack range = 0
mov [esi+0000023c],0000000 //other attack range = 0
mov [esi+00000238],0000000 //other attack range = 0
mov eax,03
mov word ptr [esi+00000154],ax

exit:
jmp returnhere


[DISABLE]
dealloc(newmem)

[color="red"]0053DB4A[/color]:
movzx eax,word ptr [esi+00000154]
change the red numbers to the numbers below (they are offsets) (remeber vac code goes to vac script, non aggro goes to non aggro)


non aggro: 0053A30A
Auto Pots: 0052A05F
Speed: 007BFFAA
Vac: 004599BD
Map/Teleport: 00550963
Do i need to change the injection codes too?
08/03/2009 20:25 Vaidas B#610
u dont, but if it dosint work when u update, u can try that
08/03/2009 20:27 Daravil#611
Quote:
Originally Posted by waidas123 View Post
u dont, but if it dosint work when u update, u can try that
Hm the vac doesnt work me for,i followed everystep tryed both codes both injections every single combination and it still doesn't work i made a new char and tryed it at larvas,but none comes any help?
08/03/2009 20:33 Vaidas B#612
first off its a CE script and u need to change the red NUMBERS i mark'ed (nothing else) to the numbers i gave u. there are 2 number lines in one script so u have to change them both
08/03/2009 20:44 Daravil#613
Quote:
Originally Posted by waidas123 View Post
first off its a CE script and u need to change the red NUMBERS i mark'ed (nothing else) to the numbers i gave u. there are 2 number lines in one script so u have to change them both
Oh didn't see that there are 2 red numbers,should look better next time,thank you!
08/04/2009 02:54 Daravil#614
Quote:
Originally Posted by waidas123 View Post
Vac code


Code:
[ENABLE]
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)

[color="red"]00459D8D:[/color]
jmp newmem
nop
returnhere:

newmem:
//DwExploreRange eax
mov [eax+08],00000020//DwSight eax+08
mov [eax+04],00000020//DwPersuitRange eax+04
//DwAvoidRange eax+0C
//mov [eax+10],00000064//DwExploreStandDelay eax+10
//mov [eax+14],00000064//DwExploreMoveDelay eax+14
//mov [eax+18],00000064//DwStandDelay eax+18
//mov [eax+1C],00000064//DwMoveDelay eax+1C
//DwFollowMyMasterRange eax+20
//DwStopMasterNear eax+24
//DwWarpMyMasterRange eax+28
mov [eax+2C],00000064//DwCallTeamPossibelHP eax+2C
mov [eax+30],00000020//DwCallTeamCount eax+30
mov [eax+34],00000000//DwBlockNFirstAttack eax+34//mov [eax+38],00000020//dwCallTeamCell byte[eax+38]
//dwFollowTarget eax+3C
//dwSpecialAttackStartHP
//dwSpecialMeleeAttackRate
//dwSpecialRangeAttackRate
//DwPowerAttacjStartHP
//dwPowerMeleeAttackProbable
//dwPowerRangeAttackProbable
//mov [eax+40],00000000//DwUnderAttackAggro eax+40
//mov [eax+44],00000000//DwMeleeAttackRangeInAggro eax+44
//mov [eax+48],00000000//DwRangeAttackRangeInAggro eax+48
//DwSightInAggro eax+4C
//DwDefeatAggro eax+50
mov [eax+54],00000000//DwBlockedAggro eax+54
mov [eax+58],00000000//DwSlideAggro eax+58
mov [eax+5C],00000000//DwHealAggro eax+5C
//DwMasterUnderAttackAggro eax+50
//DwMasterDefeatAggro eax+54
//DwMasterBlockingAggro eax+58
//DwMasterSlideAggro eax+5C
//DwCOmplusionUnderAttackAggro eax+60
//dwMaxSummonsMonsterCount eax+64
//dwReSummonsMonsterTick eax+68
//dwMaxSummonsMonsterRange eax+6C
//dwSummonsStartPcCountPatternType eax+70

originalcode:
mov edx,[eax+1c]
mov [ecx+20],edx


mov edx,10 // number spawn
mov [eax+8c],edx

mov edx,64 // time delay spawn
mov [eax+90],edx

mov edx,30 // # follow monster
mov [eax+3C],edx

//mov [ecx+20],edx // # follow my master
exit:
jmp returnhere


[DISABLE]
dealloc(newmem)
[color="red"]00459D8D:[/color]
mov edx,[eax+1c]
mov [ecx+20],edx
alloc(newmem,256)
label(orig_00883AC2)

newmem:
push 60
push 00a9f448
call 00889d18
mov edi,00000094
mov eax,edi
call 00886430
mov [ebp-18],esp
mov esi,esp
mov [esi],edi
push esi
call dword ptr [00a2519c]
mov ecx,[esi+10]
mov [00c154a8],ecx
mov eax,[esi+04]
mov [00c154b4],eax
mov edx,[esi+08]
mov [00c154b8],edx
mov esi,[esi+0c]
and esi,00007fff
mov [00c154ac],esi
cmp ecx,02
or esi,00008000
mov [00c154ac],esi

orig_00883AC2:
shl eax,08
add eax,edx
mov [00c154b0],eax
xor esi,esi
push esi
mov edi,[00a251b0]
call edi
cmp word ptr [eax],5a4d
jne 00883afd
mov ecx,[eax+3c]
add ecx,eax
non aggro

Code:
[ENABLE]
alloc(newmem,1024)
label(returnhere)
label(originalcode)
label(exit)

[color="red"]0053DB4A[/color]:
jmp newmem
nop
nop
returnhere:

newmem:

originalcode:
movzx eax,word ptr [esi+00000154]

//mov eax,01
//mov word ptr [esi+00000156],ax
mov [esi+00000070], 41400000 // speed mob
//40c00000 = 6 lv 1 (to replace the above blue color)
//40400000 = 12 lv 2 (to replace the above blue color)
//41c00000 = 24 lv 3 (to replace the above blue color)
mov byte ptr [esi+00000174],00 // malee attack range = 0
mov byte ptr [esi+00000244],00 // magic attack range = 0
mov [esi+00000240],0000000 //other attack range = 0
mov [esi+0000023c],0000000 //other attack range = 0
mov [esi+00000238],0000000 //other attack range = 0
mov eax,03
mov word ptr [esi+00000154],ax

exit:
jmp returnhere


[DISABLE]
dealloc(newmem)

[color="red"]0053DB4A[/color]:
movzx eax,word ptr [esi+00000154]
change the red numbers to the numbers below (they are offsets) (remeber vac code goes to vac script, non aggro goes to non aggro)


non aggro: 0053A30A
Auto Pots: 0052A05F
Speed: 007BFFAA
Vac: 004599BD
Map/Teleport: 00550963
How did u get the offset for non aggro? cant seem to find any guide for that one
08/04/2009 07:58 Vaidas B#615
[Only registered and activated users can see links. Click Here To Register...] thanks goes to poster