[RELEASE] Fastest Mass Spawn

any body can make a CE script pl i dont now how to write a CE script and crc bypass suckz on my win7x64 dont loadup ;)

Can some1 give as a movie how to do this ? xD... Its hard to understand if u'r not perfect english... And can some1 give as how to do that same work just with Oread ?

On first editing i have no numbers to change in 0 idk wtf omg :D

+#79-80 reported at 5/10/09 GMT +1 23:27 cause double post

#Posts merged

can ya post it for xp an not vista

i figured out how to not get invalid client - update CRC . i tried again to edit but i couldn`t do it ... there are different files, numbers at Oread . I tried to edit to Oread the same like in your thread but mobs spawn normally:( .. Can someone write a mini-tut about doing spawn hack to oread? thank you :o... and in what i understand oread needs 2 peoples ???

Quote:

Originally Posted by tryyyy i figured out how to not get invalid client - update CRC . i tried again to edit but i couldn`t do it ... there are different files, numbers at Oread . I tried to edit to Oread the same like in your thread but mobs spawn normally:( .. Can someone write a mini-tut about doing spawn hack to oread? thank you :o... and in what i understand oread needs 2 peoples ???

U dont need 2 ppl's just go on 6Drako9 most publick hack's copy [VacPart1]MonsterProperties , and [VacPart2]MonsterRange ... If u dont know how to make a script on hes tut u have ... Good luck ... Better for you find the CSV editing ... Its much better... WIth these 2 VaC u spawn 1 monster 1 second ... So its kind of cr** ... Anyway good luck...

Here's a question... I could get the bottom half of the tut into a script, but how would I get the top part where it says change the time length to 0... how would I incorporate that into my script?

it works for oread too?o.O or if u have to change something can u please tell me what u need to change to work for oread too

Quote:

Originally Posted by cLaTiTuChA it works for oread too?o.O or if u have to change something can u please tell me what u need to change to work for oread too

[ENABLE]
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)

0045C1CD:
jmp newmem
nop
returnhere:

newmem:
//DwExploreRange eax
mov [eax+08],00000020//DwSight eax+08
mov [eax+04],00000020//DwPersuitRange eax+04
//DwAvoidRange eax+0C
//mov [eax+10],00000064//DwExploreStandDelay eax+10
//mov [eax+14],00000064//DwExploreMoveDelay eax+14
//mov [eax+18],00000064//DwStandDelay eax+18
//mov [eax+1C],00000064//DwMoveDelay eax+1C
//DwFollowMyMasterRange eax+20
//DwStopMasterNear eax+24
//DwWarpMyMasterRange eax+28
mov [eax+2C],00000064//DwCallTeamPossibelHP eax+2C
mov [eax+30],00000020//DwCallTeamCount eax+30
mov [eax+34],00000000//DwBlockNFirstAttack eax+34//mov [eax+38],00000020//dwCallTeamCell byte[eax+38]
//dwFollowTarget eax+3C
//dwSpecialAttackStartHP
//dwSpecialMeleeAttackRate
//dwSpecialRangeAttackRate
//DwPowerAttacjStartHP
//dwPowerMeleeAttackProbable
//dwPowerRangeAttackProbable
//mov [eax+40],00000000//DwUnderAttackAggro eax+40
//mov [eax+44],00000000//DwMeleeAttackRangeInAggro eax+44
//mov [eax+48],00000000//DwRangeAttackRangeInAggro eax+48
//DwSightInAggro eax+4C
//DwDefeatAggro eax+50
mov [eax+54],00000000//DwBlockedAggro eax+54
mov [eax+58],00000000//DwSlideAggro eax+58
mov [eax+5C],00000000//DwHealAggro eax+5C
//DwMasterUnderAttackAggro eax+50
//DwMasterDefeatAggro eax+54
//DwMasterBlockingAggro eax+58
//DwMasterSlideAggro eax+5C
//DwCOmplusionUnderAttackAggro eax+60
//dwMaxSummonsMonsterCount eax+64
//dwReSummonsMonsterTick eax+68
//dwMaxSummonsMonsterRange eax+6C
//dwSummonsStartPcCountPatternType eax+70
mov [eax+18],00000000
mov [eax+1C],00000000

originalcode:
mov edx,[eax+1c]
mov [ecx+20],edx


mov edx,999 // number spawn
mov [eax+8c],edx

mov edx,10 // time delay spawn
mov [eax+90],edx

mov edx,999 // # follow monster
mov [eax+3C],edx

//mov [ecx+20],edx // # follow my master
exit:
jmp returnhere


[DISABLE]
dealloc(newmem)

0045C1CD:
mov edx,[eax+1c]
mov [ecx+20],edx
alloc(newmem,256)
label(orig_00883AC2)

newmem:
push 60
push 00a9f448
call 00889d18
mov edi,00000094
mov eax,edi
call 00886430
mov [ebp-18],esp
mov esi,esp
mov [esi],edi
push esi
call dword ptr [00a2519c]
mov ecx,[esi+10]
mov [00c154a8],ecx
mov eax,[esi+04]
mov [00c154b4],eax
mov edx,[esi+08]
mov [00c154b8],edx
mov esi,[esi+0c]
and esi,00007fff
mov [00c154ac],esi
cmp ecx,02
or esi,00008000
mov [00c154ac],esi

orig_00883AC2:
shl eax,08
add eax,edx
mov [00c154b0],eax
xor esi,esi
push esi
mov edi,[00a251b0]
call edi
cmp word ptr [eax],5a4d
jne 00883afd
mov ecx,[eax+3c]
add ecx,eax

Quote:

[ENABLE] alloc(newmem,2048) label(returnhere) label(originalcode) label(exit) 0045C1CD: jmp newmem nop returnhere: newmem: //DwExploreRange eax mov [eax+08],00000020//DwSight eax+08 mov [eax+04],00000020//DwPersuitRange eax+04 //DwAvoidRange eax+0C //mov [eax+10],00000064//DwExploreStandDelay eax+10 //mov [eax+14],00000064//DwExploreMoveDelay eax+14 //mov [eax+18],00000064//DwStandDelay eax+18 //mov [eax+1C],00000064//DwMoveDelay eax+1C //DwFollowMyMasterRange eax+20 //DwStopMasterNear eax+24 //DwWarpMyMasterRange eax+28 mov [eax+2C],00000064//DwCallTeamPossibelHP eax+2C mov [eax+30],00000020//DwCallTeamCount eax+30 mov [eax+34],00000000//DwBlockNFirstAttack eax+34//mov [eax+38],00000020//dwCallTeamCell byte[eax+38] //dwFollowTarget eax+3C //dwSpecialAttackStartHP //dwSpecialMeleeAttackRate //dwSpecialRangeAttackRate //DwPowerAttacjStartHP //dwPowerMeleeAttackProbable //dwPowerRangeAttackProbable //mov [eax+40],00000000//DwUnderAttackAggro eax+40 //mov [eax+44],00000000//DwMeleeAttackRangeInAggro eax+44 //mov [eax+48],00000000//DwRangeAttackRangeInAggro eax+48 //DwSightInAggro eax+4C //DwDefeatAggro eax+50 mov [eax+54],00000000//DwBlockedAggro eax+54 mov [eax+58],00000000//DwSlideAggro eax+58 mov [eax+5C],00000000//DwHealAggro eax+5C //DwMasterUnderAttackAggro eax+50 //DwMasterDefeatAggro eax+54 //DwMasterBlockingAggro eax+58 //DwMasterSlideAggro eax+5C //DwCOmplusionUnderAttackAggro eax+60 //dwMaxSummonsMonsterCount eax+64 //dwReSummonsMonsterTick eax+68 //dwMaxSummonsMonsterRange eax+6C //dwSummonsStartPcCountPatternType eax+70 mov [eax+18],00000000 mov [eax+1C],00000000 originalcode: mov edx,[eax+1c] mov [ecx+20],edx mov edx,999 // number spawn mov [eax+8c],edx mov edx,10 // time delay spawn mov [eax+90],edx mov edx,999 // # follow monster mov [eax+3C],edx //mov [ecx+20],edx // # follow my master exit: jmp returnhere [DISABLE] dealloc(newmem) 0045C1CD: mov edx,[eax+1c] mov [ecx+20],edx alloc(newmem,256) label(orig_00883AC2) newmem: push 60 push 00a9f448 call 00889d18 mov edi,00000094 mov eax,edi call 00886430 mov [ebp-18],esp mov esi,esp mov [esi],edi push esi call dword ptr [00a2519c] mov ecx,[esi+10] mov [00c154a8],ecx mov eax,[esi+04] mov [00c154b4],eax mov edx,[esi+08] mov [00c154b8],edx mov esi,[esi+0c] and esi,00007fff mov [00c154ac],esi cmp ecx,02 or esi,00008000 mov [00c154ac],esi orig_00883AC2: shl eax,08 add eax,edx mov [00c154b0],eax xor esi,esi push esi mov edi,[00a251b0] call edi cmp word ptr [eax],5a4d jne 00883afd mov ecx,[eax+3c] add ecx,eax

how u search it pls tell me :)
i need the array of bytes numbers pls :rolleyes:

It's a normal, modified VAC script

Quote:

// Array Of Bytes Scan : 8B 50 1C 89 51 20

and what this modified VAC script have ?

This :

Quote:

mov edx,999 // number spawn mov [eax+8c],edx mov edx,10 // time delay spawn mov [eax+90],edx

anyway ... how can i do this hack with winhex ? :)i edit the numbers like in this tut?