[RELEASE] Fastest Mass Spawn

[blackheaf]

any body can make a CE script pl i dont now how to write a CE script and crc bypass suckz on my win7x64 dont loadup

[pipe121]

Can some1 give as a movie how to do this ? xD... Its hard to understand if u'r not perfect english... And can some1 give as how to do that same work just with Oread ?

On first editing i have no numbers to change in 0 idk wtf omg

[~Kakkarot~]

+#79-80 reported at 5/10/09 GMT +1 23:27 cause double post

[trane.]

#Posts merged

[Iulyyan]

can ya post it for xp an not vista

[tryyyy]

i figured out how to not get invalid client - update CRC . i tried again to edit but i couldn`t do it ... there are different files, numbers at Oread . I tried to edit to Oread the same like in your thread but mobs spawn normally .. Can someone write a mini-tut about doing spawn hack to oread? thank you ... and in what i understand oread needs 2 peoples ???

[pipe121]

Originally Posted by tryyyy

i figured out how to not get invalid client - update CRC . i tried again to edit but i couldn`t do it ... there are different files, numbers at Oread . I tried to edit to Oread the same like in your thread but mobs spawn normally .. Can someone write a mini-tut about doing spawn hack to oread? thank you ... and in what i understand oread needs 2 peoples ???

U dont need 2 ppl's just go on 6Drako9 most publick hack's copy [VacPart1]MonsterProperties , and [VacPart2]MonsterRange ... If u dont know how to make a script on hes tut u have ... Good luck ... Better for you find the CSV editing ... Its much better... WIth these 2 VaC u spawn 1 monster 1 second ... So its kind of cr** ... Anyway good luck...

[bloombloom244]

Here's a question... I could get the bottom half of the tut into a script, but how would I get the top part where it says change the time length to 0... how would I incorporate that into my script?

[cLaTiTuChA]

it works for oread too?o.O or if u have to change something can u please tell me what u need to change to work for oread too

[trane.]

Originally Posted by cLaTiTuChA

it works for oread too?o.O or if u have to change something can u please tell me what u need to change to work for oread too

[ENABLE]
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)

0045C1CD:
jmp newmem
nop
returnhere:

newmem:
//DwExploreRange eax
mov [eax+08],00000020//DwSight eax+08
mov [eax+04],00000020//DwPersuitRange eax+04
//DwAvoidRange eax+0C
//mov [eax+10],00000064//DwExploreStandDelay eax+10
//mov [eax+14],00000064//DwExploreMoveDelay eax+14
//mov [eax+18],00000064//DwStandDelay eax+18
//mov [eax+1C],00000064//DwMoveDelay eax+1C
//DwFollowMyMasterRange eax+20
//DwStopMasterNear eax+24
//DwWarpMyMasterRange eax+28
mov [eax+2C],00000064//DwCallTeamPossibelHP eax+2C
mov [eax+30],00000020//DwCallTeamCount eax+30
mov [eax+34],00000000//DwBlockNFirstAttack eax+34//mov [eax+38],00000020//dwCallTeamCell byte[eax+38]
//dwFollowTarget eax+3C
//dwSpecialAttackStartHP
//dwSpecialMeleeAttackRate
//dwSpecialRangeAttackRate
//DwPowerAttacjStartHP
//dwPowerMeleeAttackProbable
//dwPowerRangeAttackProbable
//mov [eax+40],00000000//DwUnderAttackAggro eax+40
//mov [eax+44],00000000//DwMeleeAttackRangeInAggro eax+44
//mov [eax+48],00000000//DwRangeAttackRangeInAggro eax+48
//DwSightInAggro eax+4C
//DwDefeatAggro eax+50
mov [eax+54],00000000//DwBlockedAggro eax+54
mov [eax+58],00000000//DwSlideAggro eax+58
mov [eax+5C],00000000//DwHealAggro eax+5C
//DwMasterUnderAttackAggro eax+50
//DwMasterDefeatAggro eax+54
//DwMasterBlockingAggro eax+58
//DwMasterSlideAggro eax+5C
//DwCOmplusionUnderAttackAggro eax+60
//dwMaxSummonsMonsterCount eax+64
//dwReSummonsMonsterTick eax+68
//dwMaxSummonsMonsterRange eax+6C
//dwSummonsStartPcCountPatternType eax+70
mov [eax+18],00000000
mov [eax+1C],00000000

originalcode:
mov edx,[eax+1c]
mov [ecx+20],edx


mov edx,999 // number spawn
mov [eax+8c],edx

mov edx,10 // time delay spawn
mov [eax+90],edx

mov edx,999 // # follow monster
mov [eax+3C],edx

//mov [ecx+20],edx // # follow my master
exit:
jmp returnhere


[DISABLE]
dealloc(newmem)

0045C1CD:
mov edx,[eax+1c]
mov [ecx+20],edx
alloc(newmem,256)
label(orig_00883AC2)

newmem:
push 60
push 00a9f448
call 00889d18
mov edi,00000094
mov eax,edi
call 00886430
mov [ebp-18],esp
mov esi,esp
mov [esi],edi
push esi
call dword ptr [00a2519c]
mov ecx,[esi+10]
mov [00c154a8],ecx
mov eax,[esi+04]
mov [00c154b4],eax
mov edx,[esi+08]
mov [00c154b8],edx
mov esi,[esi+0c]
and esi,00007fff
mov [00c154ac],esi
cmp ecx,02
or esi,00008000
mov [00c154ac],esi

orig_00883AC2:
shl eax,08
add eax,edx
mov [00c154b0],eax
xor esi,esi
push esi
mov edi,[00a251b0]
call edi
cmp word ptr [eax],5a4d
jne 00883afd
mov ecx,[eax+3c]
add ecx,eax

[Crazyskillz]

[ENABLE]
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)

0045C1CD:
jmp newmem
nop
returnhere:

newmem:
//DwExploreRange eax
mov [eax+08],00000020//DwSight eax+08
mov [eax+04],00000020//DwPersuitRange eax+04
//DwAvoidRange eax+0C
//mov [eax+10],00000064//DwExploreStandDelay eax+10
//mov [eax+14],00000064//DwExploreMoveDelay eax+14
//mov [eax+18],00000064//DwStandDelay eax+18
//mov [eax+1C],00000064//DwMoveDelay eax+1C
//DwFollowMyMasterRange eax+20
//DwStopMasterNear eax+24
//DwWarpMyMasterRange eax+28
mov [eax+2C],00000064//DwCallTeamPossibelHP eax+2C
mov [eax+30],00000020//DwCallTeamCount eax+30
mov [eax+34],00000000//DwBlockNFirstAttack eax+34//mov [eax+38],00000020//dwCallTeamCell byte[eax+38]
//dwFollowTarget eax+3C
//dwSpecialAttackStartHP
//dwSpecialMeleeAttackRate
//dwSpecialRangeAttackRate
//DwPowerAttacjStartHP
//dwPowerMeleeAttackProbable
//dwPowerRangeAttackProbable
//mov [eax+40],00000000//DwUnderAttackAggro eax+40
//mov [eax+44],00000000//DwMeleeAttackRangeInAggro eax+44
//mov [eax+48],00000000//DwRangeAttackRangeInAggro eax+48
//DwSightInAggro eax+4C
//DwDefeatAggro eax+50
mov [eax+54],00000000//DwBlockedAggro eax+54
mov [eax+58],00000000//DwSlideAggro eax+58
mov [eax+5C],00000000//DwHealAggro eax+5C
//DwMasterUnderAttackAggro eax+50
//DwMasterDefeatAggro eax+54
//DwMasterBlockingAggro eax+58
//DwMasterSlideAggro eax+5C
//DwCOmplusionUnderAttackAggro eax+60
//dwMaxSummonsMonsterCount eax+64
//dwReSummonsMonsterTick eax+68
//dwMaxSummonsMonsterRange eax+6C
//dwSummonsStartPcCountPatternType eax+70
mov [eax+18],00000000
mov [eax+1C],00000000

originalcode:
mov edx,[eax+1c]
mov [ecx+20],edx


mov edx,999 // number spawn
mov [eax+8c],edx

mov edx,10 // time delay spawn
mov [eax+90],edx

mov edx,999 // # follow monster
mov [eax+3C],edx

//mov [ecx+20],edx // # follow my master
exit:
jmp returnhere


[DISABLE]
dealloc(newmem)

0045C1CD:
mov edx,[eax+1c]
mov [ecx+20],edx
alloc(newmem,256)
label(orig_00883AC2)

newmem:
push 60
push 00a9f448
call 00889d18
mov edi,00000094
mov eax,edi
call 00886430
mov [ebp-18],esp
mov esi,esp
mov [esi],edi
push esi
call dword ptr [00a2519c]
mov ecx,[esi+10]
mov [00c154a8],ecx
mov eax,[esi+04]
mov [00c154b4],eax
mov edx,[esi+08]
mov [00c154b8],edx
mov esi,[esi+0c]
and esi,00007fff
mov [00c154ac],esi
cmp ecx,02
or esi,00008000
mov [00c154ac],esi

orig_00883AC2:
shl eax,08
add eax,edx
mov [00c154b0],eax
xor esi,esi
push esi
mov edi,[00a251b0]
call edi
cmp word ptr [eax],5a4d
jne 00883afd
mov ecx,[eax+3c]
add ecx,eax

how u search it pls tell me
i need the array of bytes numbers pls

[Cr0_Fr3aK]

It's a normal, modified VAC script

// Array Of Bytes Scan : 8B 50 1C 89 51 20

[tryyyy]

and what this modified VAC script have ?

[Cr0_Fr3aK]

This :

mov edx,999 // number spawn
mov [eax+8c],edx

mov edx,10 // time delay spawn
mov [eax+90],edx

[tryyyy]

anyway ... how can i do this hack with winhex ? i edit the numbers like in this tut?