Non Aggro AoB search.

07/19/2012 08:39 iCraziE#1
I can not remember the name right now but, an auto update CE table has been released some time ago, and most of the scripts work. clearly the AoB for non aggro is outdated. because when you try to search the aob to update the offsets. there is no results. could someone tell me how i would go about searching for the correct aob. should i use winhex? or ollydbg? or is it less complicated than that. any info would be appreciated thanks.
07/19/2012 11:12 demonkiller19#2
here you go:

Code:
[ENABLE]
aobscan(_aNoAggro,0F B7 86 64 01 00 00 8B) //OLD005B4D13 NEW005BADDF
aobscan(_aMobRange,89 4C 24 48 8B 4F 0C 8B 11 FF 52 0C 8B 10)
label(_aNoAggroLabel)
label(_aMobRangeLabel)
registersymbol(_aNoAggroLabel)
registersymbol(_aMobRangeLabel)
alloc(newmem, 2048)
alloc(MonsterRange, 2048)
label(returnhere)
label(originalcode)
label(ReturnMonsterRange)
label(exit)

005BE26F:
_aNoAggroLabel:
jmp newmem
db 55
db 55
returnhere:

005BE257:
_aMobRangeLabel:
jmp MonsterRange
db 55
db 55
ReturnMonsterRange:

MonsterRange:
mov [esp+48],ecx
mov [esp+30],00000000
mov [esp+4c],00000000
mov [esi+00000240],0000000 //other attack range to 0
mov [esi+0000023c],0000000 //other attack range to 0
mov [esi+00000238],0000000 //other attack range to 0
MOV ECX,DWORD PTR DS:[EDI+C]
jmp ReturnMonsterRange

newmem:

originalcode:
movzx eax,word ptr [esi+00000160]

//mov eax,01
//mov word ptr [esi+00000156],ax
//mov [esi+00000070], 41200000 // speed mob
//40c00000 = 6 lv 1 (to replace the above blue color)
//40400000 = 12 lv 2 (to replace the above blue color)
//41c00000 = 24 lv 3 (to replace the above blue color)
mov byte ptr [esi+00000180],00 // malee attack range = 0
mov byte ptr [esi+00000250],00 // magic attack range = 0
mov [esi+0000024c],0000000 //other attack range = 0
mov [esi+00000248],0000000 //other attack range = 0
mov [esi+00000244],0000000 //other attack range = 0
mov eax,06
mov word ptr [esi+00000160],ax



exit:
jmp returnhere


[DISABLE]
dealloc(newmem)
dealloc(MonsterRange)
_aNoAggroLabel:
movzx eax,word ptr [esi+00000160]
unregistersymbol(_aNoAggroLabel)
_aMobRangeLabel:
mov [esp+48],edx
MOV ECX,DWORD PTR DS:[EDI+C]
unregistersymbol(_aMobRangeLabel)
Regards,

Demon
07/19/2012 19:13 iCraziE#3
Thanks, but i still would like to know how to get those new strings.