This are the new scripts thanks to the new offest and Draco.I made the CE scripts.To find the new offest scan the array of bytes in the script,and copy the adress
I will add GM detect and """"LVL hack"""' if you want.Pm me for skill and shield hack.You will need always a CRC download it from here [Only registered and activated users can see links. Click Here To Register...]
VAC HACK
I will add GM detect and """"LVL hack"""' if you want.Pm me for skill and shield hack.You will need always a CRC download it from here [Only registered and activated users can see links. Click Here To Register...]
VAC HACK
MOB SPEEDQuote:
[ENABLE]
alloc(MonsterProperties,2048)
label(ReturnMonsterProperties)
label(MonsterRange)
label(ReturnMonsterRange)
label(MonsterAggro)
label(PropertyBace)
registersymbol(MonsterAggro)
registersymbol(PropertyBace)
0045C74E: //8B 80 98 00 00 00 89 81 9C 00
jmp MonsterProperties
nop
ReturnMonsterProperties:
0053D055: //89 54 24 48 8B 01 FF 50 0C 8B
jmp MonsterRange
nop
ReturnMonsterRange:
0053D06A: //0F B7 86 54 01 00 00 8B 0D
mov eax,[MonsterAggro]
nop
nop
MonsterProperties:
push eax
mov eax,[eax+00000098] //Original Code
mov [ecx+0000009C],eax //Original Code
pop eax
mov [PropertyBace],ecx
//mov [ecx+00],00000000 //DwInfoIndex
mov [ecx+04],0000004B //DwExploreRange
mov [ecx+08],0000004B //DwSight
mov [ecx+0C],0000004B //DwPersuitRange
//mov [ecx+10],00000000 //DwAvoidRange
mov [ecx+14],00000000 //DwExploreStandDelay
//mov [ecx+18],00000000 //DwExploreMoveDelay
//mov [ecx+1C],00000000 //DwStandDelay
mov [ecx+20],000001F4 //DwMoveDelay
//mov [ecx+24],00000000 //DwFollowMyMasterRange
//mov [ecx+28],00000000 //DwStopMasterNear
//mov [ecx+2C],00000000 //DwWarpMyMasterRange
//mov [ecx+30],00000000 //DwCallTeamPossibelHP
//mov [ecx+34],00000000 //DwCallTeamCount
//mov [ecx+38],00000000 //DwBlockNFirstAttack
//mov [ecx+3C],00000000 //dwCallTeamCell
mov [ecx+40],000000FA //dwFollowTarget
mov [ecx+44],00000000 //dwSpecialAttackStartHP
mov [ecx+48],00000000 //dwSpecialMeleeAttackRate
mov [ecx+4C],00000000 //dwSpecialRangeAttackRate
mov [ecx+50],00000000 //DwPowerAttacjStartHP
mov [ecx+54],00000000 //dwPowerMeleeAttackProbable
mov [ecx+58],00000000 //dwPowerRangeAttackProbable
//mov [ecx+5C],00000000 //DwUnderAttackAggro
mov [ecx+60],00000000 //DwMeleeAttackRangeInAggro
mov [ecx+64],00000000 //DwRangeAttackRangeInAggro
mov [ecx+68],000003E8 //DwSightInAggro
//mov [ecx+6C],00000000 //DwDefeatAggro
//mov [ecx+70],00000000 //DwBlockedAggro
//mov [ecx+74],00000000 //DwSlideAggro
//mov [ecx+78],00000000 //DwHealAggro
//mov [ecx+7C],00000000 //DwMasterUnderAttackAggro
//mov [ecx+80],00000000 //DwMasterDefeatAggro
//mov [ecx+84],00000000 //DwMasterBlockingAggro
//mov [ecx+88],00000000 //DwMasterSlideAggro
//mov [ecx+8C],00000000 //DwCOmplusionUnderAttackAggro
mov [ecx+90],00000063 //dwMaxSummonsMonsterCount
mov [ecx+94],00000000 //dwReSummonsMonsterTick
mov [ecx+98],00000000 //dwMaxSummonsMonsterRange
mov [ecx+9C],00000000 //dwSummonsStartPcCount
//mov [eax+A0],00000000 //PatternType
mov eax,[ecx+0000009C] //Original Code
jmp ReturnMonsterProperties
MonsterRange:
mov [esp+48],edx
mov [esp+30],00000000
mov [esp+4c],00000000
//mov [esi+00000240],0000000 //other attack range to 0
//mov [esi+0000023c],0000000 //other attack range to 0
//mov [esi+00000238],0000000 //other attack range to 0
mov eax,[ecx]
jmp ReturnMonsterRange
MonsterAggro:
db 03 00 00 00
PropertyBace:
db 00 00 00 00
[DISABLE]
dealloc(MonsterProperties)
unregistersymbol(MonsterAggro)
unregistersymbol(PropertyBace)
0045C74E:
mov eax,[eax+00000098]
0053D055:
mov [esp+48],edx
mov eax,[ecx]
0053D06A:
movzx eax,word ptr [esi+00000154]
WALL HACKQuote:
[ENABLE]
alloc(DrakoMobSpeed,64)
label(MobIsWalking)
label(ReturnMobSpeed)
label(MobRunSpeed)
label(MobWalkSpeed)
registersymbol(MobRunSpeed)
registersymbol(MobWalkSpeed)
0053E090: //80 7C 24 04 00 74 06 D9 40 70
jmp DrakoMobSpeed
ReturnMobSpeed:
DrakoMobSpeed:
cmp byte ptr [esp+04],00
je MobIsWalking
fld dword ptr [MobRunSpeed]
ret 0004
MobIsWalking:
fld dword ptr [MobWalkSpeed]
ret 0004
MobRunSpeed:
db 00 00 20 41
MobWalkSpeed:
db 00 00 40 40
[DISABLE]
dealloc(DrakoMobSpeed)
unregistersymbol(MobRunSpeed)
unregistersymbol(MobWalkSpeed)
0053E090:
cmp byte ptr [esp+04],00
SPEED HACKQuote:
[ENABLE]
alloc(Wall,64)
label(ReturnWall)
00766E93: //8D BC 24 88 00 00 00
jmp Wall
nop
nop
ReturnWall:
Wall:
lea edi,ss:[esp+00000088]
cmp [eax+00000402],5f626577
je ReturnWall
mov [eax+00000402],5f626577
mov [eax+00000406],67616d69
mov [eax+0000040a],616d2e65
mov [eax+0000040e],00000063
jmp ReturnWall
[DISABLE]
dealloc(Wall)
00766E93:
lea edi,ss:[esp+00000088]
TELEPORT HACKQuote:
[ENABLE]
alloc(DrakoSpeed,16)
label(ReturnSpeed)
label(SpeedValue)
registersymbol(SpeedValue)
007E811A: //D9 40 08 5F 5E C3 8B 0D
jmp DrakoSpeed
ReturnSpeed:
DrakoSpeed:
fld dword ptr [SpeedValue]
pop edi
pop esi
jmp ReturnSpeed
SpeedValue:
db 00 00 20 41
[DISABLE]
dealloc(DrakoSpeed)
unregistersymbol(SpeedValue)
007E811A:
fld dword ptr [eax+08]
pop edi
pop esi
AUTO POTIONSQuote:
[ENABLE]
alloc(TeleHack,1024)
label(ChangeTele)
label(SkipChange)
label(ReturnTele)
005536E3: //0F B7 98 04 01 00 00 8B 45 00
jmp TeleHack
nop
nop
ReturnTele:
TeleHack:
movzx ebx,word ptr [eax]
cmp bx,0483 // check for Python Castle -> Tomb of the Black Dragon
je ChangeTele
cmp bx,4E20 // check for Braiken Castle -> Draco Desert
je ChangeTele
cmp bx,2B8C // check for North Morte -> Acquirai Ruins
je ChangeTele
cmp bx,048D // check for tomb of the black dragon -> Cursed Mazed
je ChangeTele
jmp SkipChange
ChangeTele:
mov word ptr [eax+00000106],0005
mov word ptr [eax+0000010C],0005
SkipChange:
movzx ebx,word ptr [eax+00000104]
jmp ReturnTele
[DISABLE]
dealloc(TeleHack)
005536E3:
movzx ebx,word ptr [eax+00000104]
SHOP HACKSQuote:
[ENABLE]
alloc(newmem,1024)
label(returnhere)
label(originalcode)
label(exit)
label(check_mana)
label(finished_check)
0052CFEF: //83 78 08 13 0F 84
jmp newmem
nop
nop
nop
nop
nop
returnhere:
newmem:
originalcode:
cmp dword ptr [eax+08],01 // checking for HP pot?
jne check_mana
mov dword ptr[eax+08],11 // change to auto pot
mov dword ptr[eax+10],11
check_mana:
cmp dword ptr [eax+08],02 // checking for MP pot?
jne finished_check
mov dword ptr[eax+08],12 // change to auto pot
mov dword ptr[eax+10],12
finished_check:
cmp dword ptr [eax+08],13
je 0052d13a
exit:
jmp returnhere
[DISABLE]
dealloc(newmem)
0052CFEF:
cmp dword ptr [eax+08],13
db 0F 84 91 00 00 00
RANGE HACKQuote:
[ENABLE]
007D8DE0: //8A 41 08 C3 CC CC CC CC CC CC CC CC CC CC CC CC 8B 0D
mov al,01
ret //by Drako
[DISABLE]
007D8DE0:
mov al,[ecx+08]
[GM]COMMAND(GMteleport)Quote:
[ENABLE]
alloc(ModRange,21)
label(ReturnRange)
label(Range)
registersymbol(Range)
00668C60: //88 81 AC 00 00 00 C2 04 00 CC
jmp ModRange
nop
ReturnRange:
ModRange:
mov al,[Range]
mov [ecx+000000ac],al
jmp ReturnRange
Range:
db 00 00 48 43
[DISABLE]
dealloc(ModRange)
unregistersymbol(Range)
00668C60:
mov [ecx+000000ac],al
ZOOM HACKQuote:
[ENABLE]
alloc(newmem,1024)
label(returnhere)
label(exit)
004EBB63:
returnhere:
mov eax,00000002
nop
ret
exit:
jmp returnhere
[DISABLE]
dealloc(newmem)
004EBB63: // 8B 80 A8 00 00 00 C3
mov eax,[eax+000000a8]
ret
FAR EYEQuote:
[ENABLE]
alloc(DrakoZoom,512)
label(ReturnZoom)
label(ZoomMax)
registersymbol(ZoomMax)
005D25E6: //D9 47 04 D9 44 24 28 83 C4 08
jmp DrakoZoom
nop
nop
ReturnZoom:
DrakoZoom:
push eax
mov eax,[ZoomMax]
mov [edi+04],eax
fld dword ptr [edi+04]
fld dword ptr [esp+28]
pop eax
jmp ReturnZoom
ZoomMax:
db 00 00 8C 42
[DISABLE]
dealloc(DrakoZoom)
unregistersymbol(ZoomMax)
005D25E6:
fld dword ptr [edi+04]
fld dword ptr [esp+28]
GM DETECTQuote:
[ENABLE]
alloc(DrakoClipDistance,64)
label(ReturnClip)
label(ClipDistance)
registersymbol(ClipDistance)
005D3BE5: //8B 48 08 8B 50 04 51 8B 4C 24
jmp DrakoClipDistance
nop
ReturnClip:
DrakoClipDistance:
mov ecx,[ClipDistance]
mov [eax+08],ecx
mov edx,[eax+04]
jmp ReturnClip
ClipDistance:
db 00 00 48 43
[DISABLE]
dealloc(DrakoClipDistance,64)
unregistersymbol(ClipDistance)
005D3BE5:
mov ecx,[eax+08]
mov edx,[eax+04]
DRAKO HACKQuote:
[ENABLE]
alloc(DetectGM,25)
label(ReturnName)
005535E3: //C7 46 0C 00 00 00 00 89 47 04
jmp DetectGM
nop
nop
ReturnName:
DetectGM:
cmp [eax+70],5D4D475B //[GM]
je 00000000
mov [esi+0c],00000000
jmp ReturnName
[DISABLE]
dealloc(DetectGM)
005535E3:
mov [esi+0c],00000000
Quote:
[ENABLE]
alloc(DrakoVac,1024)
label(GetCharAddress)
label(SkipGetCharAddress)
label(ReturnVac)
label(ReturnCharAddress)
label(CharAddress)
label(AddX)
label(AddY)
registersymbol(CharAddress)
registersymbol(AddX)
registersymbol(AddY)
005F3513: //89 56 10 8B 48 0C 89 4E 14 8B
jmp DrakoVac
nop
ReturnVac:
005A6D11: //89 0E C1 EA 10 F3 0F 11 46 08
jmp GetCharAddress
ReturnCharAddress:
DrakoVac:
push ebx
mov ebx,[CharAddress]
fld [ebx+08]
fadd [AddX]
fstp [esi+0c]
fld [ebx+0c]
fadd [AddY]
fstp [esi+10]
pop ebx
mov ecx,[eax+0c]
jmp ReturnVac
GetCharAddress:
cmp [CharAddress],00
jne SkipGetCharAddress
mov [CharAddress],esi
SkipGetCharAddress:
mov [esi],ecx
shr edx,10
jmp ReturnCharAddress
CharAddress:
db 00 00 00 00
AddX:
db 00 00 00 00
AddY:
db 00 00 00 00
[DISABLE]
dealloc(DrakoVac)
unregistersymbol(CharAddress)
unregistersymbol(AddX)
unregistersymbol(AddY)
005F3513:
mov [esi+10],edx
mov ecx,[eax+0c]
005A6D11:
mov [esi],ecx
shr edx,10