[RELEASE] CE Scripts

Hi, I saw lifs2000 posting this.
For all the people who are searching for this ;)

ALL CREDITS TO lifs2000 FOR THIS!

Quote:
Originally Posted by lifs2000
I can't belive you all trying to sell already public hacks lmao, that's so rude.

Here are all the auto updated scripts.

Auto Pots:

Spoiler

[ENABLE]
aobscan(_aPots,83 78 08 13 0F 85)
label(_aPotsLabel)
registersymbol(_aPotsLabel)
alloc(newmem,1024)
label(returnhere)
label(originalcode)
label(exit)
label(check_mana)
label(finished_check)

_aPots:
_aPotsLabel:
jmp newmem
nop
nop
nop
nop
nop
returnhere:

newmem:
originalcode:
cmp dword ptr [eax+08],01 // checking for HP pot?
jne check_mana
mov dword ptr[eax+08],11 // change to auto pot
mov dword ptr[eax+10],11
check_mana:
cmp dword ptr [eax+08],02 // checking for MP pot?
jne finished_check
mov dword ptr[eax+08],12 // change to auto pot
mov dword ptr[eax+10],12
finished_check:
cmp dword ptr [eax+08],13
je 0052d13a

exit:
jmp returnhere

[DISABLE]
dealloc(newmem)
_aPotsLabel:
cmp dword ptr [eax+08],13
db 0F 84 91 00 00 00
unregistersymbol(_aPotsLabel)

Far Eye: FIXED BUG

Spoiler

[ENABLE]
aobscan(FarEye,8B 48 08 8B 50 04 51 8B 4C 24)
label(Label)
registersymbol(Label)
alloc(ChangeClipDistance,64)
label(ReturnClip)
label(ClipDistance)
registersymbol(ClipDistance)

ChangeClipDistance:
mov ecx,[ClipDistance]
mov [eax+08],ecx
mov edx,[eax+04]
jmp ReturnClip
ClipDistance:
db 00 00 48 43

FarEye:
Label:
jmp ChangeClipDistance
nop
ReturnClip:

[DISABLE]
Label:
mov ecx,[eax+08]
mov edx,[eax+04]
dealloc(ChangeClipDistance,64)
unregistersymbol(ClipDistance)
unregistersymbol(FarEye)

Spawn hack:

Spoiler

[ENABLE]
aobscan(_aSpawn,8B 50 1C 89 51 20)
label(_aSpawnLabel)
registersymbol(_aSpawnLabel)
alloc(spawn,2048)
label(returnhere)
label(originalcode)
label(exit)

_aSpawn:
_aSpawnLabel:
jmp spawn
nop
returnhere:

spawn:
mov [eax+08],00000020
mov [eax+04],00000020
mov [eax+10],00000064
mov [eax+14],00000064
mov [eax+18],00000258
mov [eax+1C],00000258
mov [eax+2C],00000064
mov [eax+30],00000020
mov [eax+34],00000000
mov [eax+54],00000000
mov [eax+58],00000000
mov [eax+5C],00000000

originalcode:
mov edx,[eax+1c]
mov [ecx+20],edx
mov edx,100 // number of mob to spawn
mov [eax+8c],edx
mov edx,01 // time delay between spawn
mov [eax+90],edx
mov edx,100 // # of spawn to follow you
mov [eax+3C],edx

exit:
jmp returnhere

[DISABLE]
dealloc(spawn)
_aSpawnLabel:
mov edx,[eax+1c]
mov [ecx+20],edx
unregistersymbol(_aSpawnLabel)

Melee Attack Range Hack:

Spoiler

[ENABLE]
aobscan(_aRange,88 81 AC 00 00 00 88 81 B8 00 00 00 F3 0F 11 81 C0 00 00 00 C7 81 B0 00 00 00 D0 07 00 00 88 81 AD 00 00 00 E8 97)
label(_aRangeLabel)
registersymbol(_aRangeLabel)
alloc(ModRange, 1024)
label(ReturnRange)
label(Range)
registersymbol(Range)

_aRange:
_aRangeLabel:
jmp ModRange
nop
ReturnRange:

ModRange:
mov al,[Range]
mov [ecx+000000ac],al
jmp ReturnRange
Range:
db 40

[DISABLE]
dealloc(ModRange)
unregistersymbol(Range)
_aRangeLabel:
mov [ecx+000000ac],al
unregistersymbol(_aRangeLabel)

Mob Speedhack:

Spoiler

[ENABLE]
aobscan(_aMobSpeed,80 7C 24 04 00 74 06 D9 40 70)
label(_aMobSpeedLabel)
registersymbol(_aMobSpeedLabel)
alloc(DrakoMobSpeedBace,2048)
label(MobIsWalking)
label(MobRunSpeedValue)
label(MobWalkSpeedValue)
label(ReturnMobSpeed)
registersymbol(MobRunSpeedValue)
registersymbol(MobWalkSpeedValue)

DrakoMobSpeedBace:
cmp byte ptr [esp+04],00
je MobIsWalking
fld dword ptr [MobRunSpeedValue]
ret 0004
MobIsWalking:
fld dword ptr [MobWalkSpeedValue]
ret 0004

MobRunSpeedValue:
db 00 00 60 41
MobWalkSpeedValue:
db 00 00 40 40

_aMobSpeed:
_aMobSpeedLabel:
jmp DrakoMobSpeedBace
ReturnMobSpeed:

[DISABLE]
dealloc(DrakoMobSpeedBace)
unregistersymbol(MobRunSpeedValue)
unregistersymbol(MobWalkSpeedValue)
_aMobSpeedLabel:
cmp byte ptr [esp+04],00
unregistersymbol(_aMobSpeedLabel)

No aggro :

Spoiler

[ENABLE]
aobscan(_aNoAggro,0F B7 86 54 01 00 00 8B 0D)
aobscan(_aMobRange,89 54 24 48 8B 01 FF 50 0C 8B)
label(_aNoAggroLabel)
label(_aMobRangeLabel)
registersymbol(_aNoAggroLabel)
registersymbol(_aMobRangeLabel)
alloc(newmem, 2048)
alloc(MonsterRange, 2048)
label(returnhere)
label(originalcode)
label(ReturnMonsterRange)
label(exit)

_aNoAggro:
_aNoAggroLabel:
jmp newmem
nop
nop
returnhere:

_aMobRange:
_aMobRangeLabel:
jmp MonsterRange
nop
ReturnMonsterRange:

MonsterRange:
mov [esp+48],edx
mov [esp+30],00000000
mov [esp+4c],00000000
//mov [esi+00000240],0000000 //other attack range to 0
//mov [esi+0000023c],0000000 //other attack range to 0
//mov [esi+00000238],0000000 //other attack range to 0
mov eax,[ecx]
jmp ReturnMonsterRange

newmem:

originalcode:
movzx eax,word ptr [esi+00000154]

//mov eax,01
//mov word ptr [esi+00000156],ax
//mov [esi+00000070], 41400000 // speed mob
//40c00000 = 6 lv 1 (to replace the above blue color)
//40400000 = 12 lv 2 (to replace the above blue color)
//41c00000 = 24 lv 3 (to replace the above blue color)
mov byte ptr [esi+00000174],00 // malee attack range = 0
mov byte ptr [esi+00000244],00 // magic attack range = 0
mov [esi+00000240],0000000 //other attack range = 0
mov [esi+0000023c],0000000 //other attack range = 0
mov [esi+00000238],0000000 //other attack range = 0
mov eax,03
mov word ptr [esi+00000154],ax

exit:
jmp returnhere

[DISABLE]
dealloc(newmem)
dealloc(MonsterRange)
_aNoAggroLabel:
movzx eax,word ptr [esi+00000154]
unregistersymbol(_aNoAggroLabel)
_aMobRangeLabel:
mov [esp+48],edx
mov eax,[ecx]
unregistersymbol(_aMobRangeLabel)

No DC vac :

Spoiler

[ENABLE]
aobscan(_aVac,8B 50 1C 89 51 20)
label(_aVacLabel)
registersymbol(_aVacLabel)
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)

_aVac:
_aVacLabel:
jmp newmem
nop
returnhere:

newmem:
//DwExploreRange eax
mov [eax+08],00000040//DwSight eax+08
mov [eax+04],00000040//DwPersuitRange eax+04
//DwAvoidRange eax+0C
//mov [eax+10],00000500//DwExploreStandDelay eax+10
//mov [eax+14],00000500//DwExploreMoveDelay eax+14
mov [eax+18],00000100//DwStandDelay eax+18
mov [eax+1C],00000100//DwMoveDelay eax+1C
//DwFollowMyMasterRange eax+20
//DwStopMasterNear eax+24
//DwWarpMyMasterRange eax+28
//mov [eax+2C],00000064//DwCallTeamPossibelHP eax+2C
//mov [eax+30],00000020//DwCallTeamCount eax+30
mov [eax+34],00000000//DwBlockNFirstAttack eax+34//mov [eax+38],00000020//dwCallTeamCell byte[eax+38]
//dwFollowTarget eax+3C
//dwSpecialAttackStartHP
//dwSpecialMeleeAttackRate
//dwSpecialRangeAttackRate
//DwPowerAttacjStartHP
//dwPowerMeleeAttackProbable
//dwPowerRangeAttackProbable
mov [eax+40],00000000//DwUnderAttackAggro eax+40
mov [eax+44],00000000//DwMeleeAttackRangeInAggro eax+44
mov [eax+48],00000000//DwRangeAttackRangeInAggro eax+48
//DwSightInAggro eax+4C
//DwDefeatAggro eax+50
mov [eax+54],00000000//DwBlockedAggro eax+54
mov [eax+58],00000000//DwSlideAggro eax+58
mov [eax+5C],00000000//DwHealAggro eax+5C
//DwMasterUnderAttackAggro eax+50
//DwMasterDefeatAggro eax+54
//DwMasterBlockingAggro eax+58
//DwMasterSlideAggro eax+5C
//DwCOmplusionUnderAttackAggro eax+60
//dwMaxSummonsMonsterCount eax+64
//dwReSummonsMonsterTick eax+68
//dwMaxSummonsMonsterRange eax+6C
//dwSummonsStartPcCountPatternType eax+70

originalcode:
mov edx,[eax+1c]
mov [ecx+20],edx

//mov edx,30 // number spawn
//mov [eax+8c],edx

//mov edx,64 // time delay spawn
//mov [eax+90],edx

mov edx,99 // # follow monster
mov [eax+3C],edx

mov [ecx+20],edx // # follow my master
exit:
jmp returnhere

[DISABLE]
dealloc(newmem)
_aVacLabel:
mov edx,[eax+1c]
mov [ecx+20],edx
unregistersymbol(_aVacLabel)

Shophack :

Spoiler

[ENABLE]
aobscan(_aShop,8A 41 08 C3 CC CC CC CC CC CC CC CC CC CC CC CC 8B 0D)
label(_aShopLabel)
registersymbol(_aShopLabel)
_aShop:
_aShopLabel:
mov al,01
ret

[DISABLE]
_aShopLabel:
mov al,[ecx+08]
unregistersymbol(_aShopLabel)

Speedhack + Workaround return bug:

Spoiler

Spoiler

[Only registered and activated users can see links. Click Here To Register...]

[ENABLE]
aobscan(_aSpeed,D9 40 08 5F 5E C3 8B 0D)
label(_aSpeedLabel)
registersymbol(_aSpeedLabel)
alloc(newmem,16)
label(ReturnSpeed)
label(SpeedValue)
registersymbol(SpeedValue)

_aSpeed:
_aSpeedLabel:
jmp newmem
ReturnSpeed:

newmem:
fld dword ptr [SpeedValue]
pop edi
pop esi
jmp ReturnSpeed
push esi
push edi
call dword ptr [SpeedValue]
SpeedValue:
db 00 00 C0 40

0082523F:
ret

[DISABLE]
dealloc(newmem)
unregistersymbol(SpeedValue)
_aSpeedLabel:
fld dword ptr [eax+08]
pop edi
pop esi
unregistersymbol(_aSpeedLabel)

Wallhack :

Spoiler

[ENABLE]
aobscan(_aWall,8D BC 24 88 00 00 00 b9 3f 04 00 00 f3 a5 8b 8c 24)
label(_aWallLabel)
registersymbol(_aWallLabel)
alloc(Wall,64)
label(ReturnWall)

_aWall:
_aWallLabel:
jmp Wall
nop
nop
ReturnWall:

Wall:
lea edi,ss:[esp+00000088]
cmp [eax+00000402],5f626577
je ReturnWall
mov [eax+00000402],5f626577
mov [eax+00000406],67616d69
mov [eax+0000040a],616d2e65
mov [eax+0000040e],00000063
jmp ReturnWall

[DISABLE]
dealloc(Wall)
_aWallLabel:
lea edi,[esp+00000088]
unregistersymbol(_aWallLabel)

Zoom hack :

Spoiler

[ENABLE]
aobscan(_aZoom,F3 0F 10 47 04 EB)
label(_aZoomLabel)
registersymbol(_aZoomLabel)
alloc(newmem,1024)
label(_returnhere)

newmem:
mov [edi+04],427f0000 // change value to maximum zoom
movss xmm0,[edi+04]
jmp _returnhere

_aZoom:
_aZoomLabel:
jmp newmem
_returnhere:

[DISABLE]
_aZoomLabel:
movss xmm0,[edi+04]
dealloc(newmem)
unregistersymbol(_aZoomLabel)

GM Hack / teleport :

Spoiler

[ENABLE]
aobscan(_aGM,8B 80 A8 00 00 00 C3)
label(_aGMLabel)
registersymbol(_aGMLabel)
alloc(newmem, 4096)
label(returnhere)
label(exit)

_aGM:
_aGMLabel:
jmp newmem
nop
returnhere:

newmem:
mov eax,00000002
nop
ret

exit:
jmp returnhere

[DISABLE]
dealloc(newmem)
_aGMLabel:
mov eax,[eax+000000a8]
ret
unregistersymbol(_aGMLabel)

GM Detect :

Spoiler

[ENABLE]
aobscan(_aDetectGM,C7 46 0C 00 00 00 00 89 47 04)
label(_aDetectGMLabel)
registersymbol(_aDetectGMLabel)
alloc(DetectGM,25)
label(ReturnName)

_aDetectGM:
_aDetectGMLabel:
jmp DetectGM
nop
nop
ReturnName:

DetectGM:
cmp [eax+70],5D4D475B //[GM]
je 00000000
mov [esi+0c],00000000
jmp ReturnName

[DISABLE]
dealloc(DetectGM)
_aDetectGMLabel:
mov [esi+0c],00000000
unregistersymbol(aDetectGMLabel)

Scripts provided by: [Only registered and activated users can see links. Click Here To Register...] (give [Only registered and activated users can see links. Click Here To Register...] to him for this ones)
Elusive:Teleports you from any position on the map to position 0:0 when enabled.
Spoiler
Code:
[ENABLE]
aobscan(_aelu,8B 08 8B 50 04 89 4C 24 20)
label(_aelusiv)
registersymbol(_aelusiv) 
alloc(newmem,2048) 
label(returnhere) 
label(originalcode) 
label(x_location) 
label(y_location) 
label(z_location) 
registersymbol(x_location) 
registersymbol(y_location) 
registersymbol(z_location) 
label(exit) 

_aelu:
_aelusiv: 
jmp newmem 
returnhere: 

newmem: 

mov ecx,x_location 
mov ecx,[ecx] 
cmp ecx,0 
//je originalcode 
mov [eax],ecx 

mov ecx,y_location 
mov ecx,[ecx] 
cmp ecx,0 
//je originalcode 
mov [eax+04],ecx 

mov ecx,z_location 
mov ecx,[ecx]  
cmp ecx,0 
//je originalcode  
mov [eax+08],ecx 


originalcode: 
mov ecx,[eax] 
mov edx,[eax+04] 
exit: 
jmp returnhere 

x_location: 
dd 00000000 

y_location: 
dd 00000000 

z_location:  
dd 00000000 

[DISABLE] 
dealloc(newmem) 
_aelusiv: 
mov ecx,[eax] 
mov edx,[eax+04]
unregistersymbol(_aelusiv)
0:0 Teleport Hack: Changes the Teleport Location of the map specified to 0,0 as well as the teleport destination.
[Spoiler]
Code:
[ENABLE]
aobscan(_atele,0F B7 98 04 01 00 00 8B 45 00)
label(_ateleport)
registersymbol(_ateleport) 
alloc(TeleHack,1024)
label(ChangeTele)
label(SkipChange)
label(ReturnTele)

_atele:
_ateleport:
jmp TeleHack
nop
nop
ReturnTele:

TeleHack:
movzx ebx,word ptr [eax]
cmp bx,0483 // check for Python Castle -> Tomb of the Black Dragon
je ChangeTele
cmp bx,4E20 // check for Braiken Castle -> Draco Desert
je ChangeTele
cmp bx,2B8C // check for North Morte  -> Acquirai Ruins
je ChangeTele
cmp bx,048D // check for tomb of the black dragon -> Cursed Mazed
je ChangeTele
jmp SkipChange
ChangeTele:
mov word ptr [eax+00000106],0005
mov word ptr [eax+0000010C],0005
SkipChange:
movzx ebx,word ptr [eax+00000104]
jmp ReturnTele

[DISABLE]
dealloc(TeleHack)
_ateleport:
movzx ebx,word ptr [eax+00000104]
unregistersymbol(_ateleport)

Regards,

Demon