vac hack at high level map with 150lv knight

teeking · 01/30/2010, 12:39

hi all

i have did the vac hack can be work on lv55 map and lv65 map,
but when i open my LV150 knight go to lv130 map, the vac hack does not work. is it due to some wrong setting or i need to re-search the code for replace the vac hack?

can someone to advise this?
i only use rexignation by pass and CE 5.5

Your help is very much appreciated.

skabed · 01/30/2010, 12:50

Mm, did you try updating offsets?

If the answer is yes, then post your vac here so we can analyze.

teeking · 01/30/2010, 13:22

no yet , i try it now.will get it back soon
those code is work for all server?

Thanks.

Apocalisse · 01/30/2010, 15:00

these should be some updated offsets

teeking · 01/30/2010, 15:14

i am update the offset already.
but still can not work.

actually i am hack the dekaron server at taiwan now.
i bypass the no-xign and use CE 5.5 edit vac1 / vac 2 /vac 3 and speed hack/store hack
that is work for me at those low level map(below 65lv map) i am learn from below link

but i getting the vac 1 offset is 0045C20E
then i edit the script to
Offsets 4 unpacked Jan 14...
VAC I : 0045C46E-Confirmed
VAC II: 0053D4F5-Confirmed
VAC III: 0053D50A-Confirmed

but still does not work for me.

teeking · 01/30/2010, 16:57

this is vac scrpt i use
[ENABLE]
alloc(MonsterProperties,2048)
label(ReturnMonsterProperties)
label(MonsterRange)
label(ReturnMonsterRange)
label(MonsterAggro)
label(PropertyBace)
registersymbol(MonsterAggro)
registersymbol(PropertyBace)

0045C20E: //8B 80 98 00 00 00 89 81 9C 00
jmp MonsterProperties
nop
ReturnMonsterProperties:

0053BFD5: //89 54 24 48 8B 01 FF 50 0C 8B
jmp MonsterRange
nop
ReturnMonsterRange:

0053BFEA: //0F B7 86 54 01 00 00 8B 0D
mov eax,[MonsterAggro]
nop
nop

MonsterProperties:
push eax
mov eax,[eax+00000098] //Original Code
mov [ecx+0000009C],eax //Original Code
pop eax
mov [PropertyBace],ecx

//mov [ecx+00],00000000 //DwInfoIndex
mov [ecx+04],0000004B //DwExploreRange
mov [ecx+08],0000004B //DwSight
mov [ecx+0C],0000004B //DwPersuitRange
//mov [ecx+10],00000000 //DwAvoidRange
mov [ecx+14],00000000 //DwExploreStandDelay
//mov [ecx+18],00000000 //DwExploreMoveDelay
//mov [ecx+1C],00000000 //DwStandDelay
mov [ecx+20],000001F4 //DwMoveDelay
//mov [ecx+24],00000000 //DwFollowMyMasterRange
//mov [ecx+28],00000000 //DwStopMasterNear
//mov [ecx+2C],00000000 //DwWarpMyMasterRange
//mov [ecx+30],00000000 //DwCallTeamPossibelHP
//mov [ecx+34],00000000 //DwCallTeamCount
//mov [ecx+38],00000000 //DwBlockNFirstAttack
//mov [ecx+3C],00000000 //dwCallTeamCell
mov [ecx+40],000000FA //dwFollowTarget
mov [ecx+44],00000000 //dwSpecialAttackStartHP
mov [ecx+48],00000000 //dwSpecialMeleeAttackRate
mov [ecx+4C],00000000 //dwSpecialRangeAttackRate
mov [ecx+50],00000000 //DwPowerAttacjStartHP
mov [ecx+54],00000000 //dwPowerMeleeAttackProbable
mov [ecx+58],00000000 //dwPowerRangeAttackProbable
//mov [ecx+5C],00000000 //DwUnderAttackAggro
mov [ecx+60],00000000 //DwMeleeAttackRangeInAggro
mov [ecx+64],00000000 //DwRangeAttackRangeInAggro
mov [ecx+68],000003E8 //DwSightInAggro
//mov [ecx+6C],00000000 //DwDefeatAggro
//mov [ecx+70],00000000 //DwBlockedAggro
//mov [ecx+74],00000000 //DwSlideAggro
//mov [ecx+78],00000000 //DwHealAggro
//mov [ecx+7C],00000000 //DwMasterUnderAttackAggro
//mov [ecx+80],00000000 //DwMasterDefeatAggro
//mov [ecx+84],00000000 //DwMasterBlockingAggro
//mov [ecx+88],00000000 //DwMasterSlideAggro
//mov [ecx+8C],00000000 //DwCOmplusionUnderAttackAggro
mov [ecx+90],00000063 //dwMaxSummonsMonsterCount
mov [ecx+94],00000000 //dwReSummonsMonsterTick
mov [ecx+98],00000000 //dwMaxSummonsMonsterRange
mov [ecx+9C],00000000 //dwSummonsStartPcCount
//mov [eax+A0],00000000 //PatternType

mov eax,[ecx+0000009C] //Original Code
jmp ReturnMonsterProperties

MonsterRange:
mov [esp+48],edx
mov [esp+30],00000000
mov [esp+4c],00000000
//mov [esi+00000240],0000000 //other attack range to 0
//mov [esi+0000023c],0000000 //other attack range to 0
//mov [esi+00000238],0000000 //other attack range to 0
mov eax,[ecx]
jmp ReturnMonsterRange

MonsterAggro:
db 03 00 00 00
PropertyBace:
db 00 00 00 00
[DISABLE]
dealloc(MonsterProperties)
unregistersymbol(MonsterAggro)
unregistersymbol(PropertyBace)
0045C20E:
mov eax,[eax+00000098]
0053BFD5:
mov [esp+48],edx
mov eax,[ecx]
0053BFEA:
movzx eax,word ptr [esi+00000154]

so i need to change it to new offset 5.6.1?

thanks.
your help is very much appreciated

skabed · 01/30/2010, 17:00

Yes you must update the 3 offsets of this script in order to make it working.

teeking · 01/30/2010, 17:02

i try the new offset 5.6.1

vac totally no working for me

[ENABLE]
alloc(MonsterProperties,2048)
label(ReturnMonsterProperties)
label(MonsterRange)
label(ReturnMonsterRange)
label(MonsterAggro)
label(PropertyBace)
registersymbol(MonsterAggro)
registersymbol(PropertyBace)

0045C46E: //8B 80 98 00 00 00 89 81 9C 00
jmp MonsterProperties
nop
ReturnMonsterProperties:

0053D4F5: //89 54 24 48 8B 01 FF 50 0C 8B
jmp MonsterRange
nop
ReturnMonsterRange:

0053D50A: //0F B7 86 54 01 00 00 8B 0D
mov eax,[MonsterAggro]
nop
nop

MonsterProperties:
push eax
mov eax,[eax+00000098] //Original Code
mov [ecx+0000009C],eax //Original Code
pop eax
mov [PropertyBace],ecx

//mov [ecx+00],00000000 //DwInfoIndex
mov [ecx+04],0000004B //DwExploreRange
mov [ecx+08],0000004B //DwSight
mov [ecx+0C],0000004B //DwPersuitRange
//mov [ecx+10],00000000 //DwAvoidRange
mov [ecx+14],00000000 //DwExploreStandDelay
//mov [ecx+18],00000000 //DwExploreMoveDelay
//mov [ecx+1C],00000000 //DwStandDelay
mov [ecx+20],000001F4 //DwMoveDelay
//mov [ecx+24],00000000 //DwFollowMyMasterRange
//mov [ecx+28],00000000 //DwStopMasterNear
//mov [ecx+2C],00000000 //DwWarpMyMasterRange
//mov [ecx+30],00000000 //DwCallTeamPossibelHP
//mov [ecx+34],00000000 //DwCallTeamCount
//mov [ecx+38],00000000 //DwBlockNFirstAttack
//mov [ecx+3C],00000000 //dwCallTeamCell
mov [ecx+40],000000FA //dwFollowTarget
mov [ecx+44],00000000 //dwSpecialAttackStartHP
mov [ecx+48],00000000 //dwSpecialMeleeAttackRate
mov [ecx+4C],00000000 //dwSpecialRangeAttackRate
mov [ecx+50],00000000 //DwPowerAttacjStartHP
mov [ecx+54],00000000 //dwPowerMeleeAttackProbable
mov [ecx+58],00000000 //dwPowerRangeAttackProbable
//mov [ecx+5C],00000000 //DwUnderAttackAggro
mov [ecx+60],00000000 //DwMeleeAttackRangeInAggro
mov [ecx+64],00000000 //DwRangeAttackRangeInAggro
mov [ecx+68],000003E8 //DwSightInAggro
//mov [ecx+6C],00000000 //DwDefeatAggro
//mov [ecx+70],00000000 //DwBlockedAggro
//mov [ecx+74],00000000 //DwSlideAggro
//mov [ecx+78],00000000 //DwHealAggro
//mov [ecx+7C],00000000 //DwMasterUnderAttackAggro
//mov [ecx+80],00000000 //DwMasterDefeatAggro
//mov [ecx+84],00000000 //DwMasterBlockingAggro
//mov [ecx+88],00000000 //DwMasterSlideAggro
//mov [ecx+8C],00000000 //DwCOmplusionUnderAttackAggro
mov [ecx+90],00000063 //dwMaxSummonsMonsterCount
mov [ecx+94],00000000 //dwReSummonsMonsterTick
mov [ecx+98],00000000 //dwMaxSummonsMonsterRange
mov [ecx+9C],00000000 //dwSummonsStartPcCount
//mov [eax+A0],00000000 //PatternType

mov eax,[ecx+0000009C] //Original Code
jmp ReturnMonsterProperties

MonsterRange:
mov [esp+48],edx
mov [esp+30],00000000
mov [esp+4c],00000000
//mov [esi+00000240],0000000 //other attack range to 0
//mov [esi+0000023c],0000000 //other attack range to 0
//mov [esi+00000238],0000000 //other attack range to 0
mov eax,[ecx]
jmp ReturnMonsterRange

MonsterAggro:
db 03 00 00 00
PropertyBace:
db 00 00 00 00
[DISABLE]
dealloc(MonsterProperties)
unregistersymbol(MonsterAggro)
unregistersymbol(PropertyBace)
0045C46E:
mov eax,[eax+00000098]
0053D4F5:
mov [esp+48],edx
mov eax,[ecx]
0053D50A:
movzx eax,word ptr [esi+00000154]

i just try it out at LV150 map
the preavious offset is work...

0045C20E: //8B 80 98 00 00 00 89 81 9C 00
jmp MonsterProperties
nop
ReturnMonsterProperties:

0053BFD5: //89 54 24 48 8B 01 FF 50 0C 8B
jmp MonsterRange
nop
ReturnMonsterRange:

0053BFEA: //0F B7 86 54 01 00 00 8B 0D
mov eax,[MonsterAggro]

confusing now

Apocalisse · 02/02/2010, 20:18

try to put in CE these separately:

VAC 1

Code:

[ENABLE]
alloc(MonsterProperties,2048)
label(ReturnMonsterProperties)
label(PropertyBace)
registersymbol(PropertyBace)

0045C46E: //8B 80 98 00 00 00 89 81 9C 00
jmp MonsterProperties
nop
ReturnMonsterProperties:

MonsterProperties:
push eax
mov eax,[eax+00000098] //Original Code
mov [ecx+0000009C],eax //Original Code
pop eax
mov [PropertyBace],ecx

//mov [ecx+00],00000000 //DwInfoIndex
  mov [ecx+04],0000004B //DwExploreRange
  mov [ecx+08],0000004B //DwSight
  mov [ecx+0C],0000004B //DwPersuitRange
//mov [ecx+10],00000000 //DwAvoidRange
  mov [ecx+14],00000000 //DwExploreStandDelay
//mov [ecx+18],00000000 //DwExploreMoveDelay
//mov [ecx+1C],00000000 //DwStandDelay
  mov [ecx+20],00000001 //DwMoveDelay
//mov [ecx+24],00000000 //DwFollowMyMasterRange
//mov [ecx+28],00000000 //DwStopMasterNear
//mov [ecx+2C],00000000 //DwWarpMyMasterRange
//mov [ecx+30],00000000 //DwCallTeamPossibelHP
//mov [ecx+34],00000000 //DwCallTeamCount
//mov [ecx+38],00000000 //DwBlockNFirstAttack
//mov [ecx+3C],00000000 //dwCallTeamCell
  mov [ecx+40],000000FA //dwFollowTarget
  mov [ecx+44],00000000 //dwSpecialAttackStartHP
  mov [ecx+48],00000000 //dwSpecialMeleeAttackRate
  mov [ecx+4C],00000000 //dwSpecialRangeAttackRate
  mov [ecx+50],00000000 //DwPowerAttacjStartHP
  mov [ecx+54],00000000 //dwPowerMeleeAttackProbable
  mov [ecx+58],00000000 //dwPowerRangeAttackProbable
//mov [ecx+5C],00000000 //DwUnderAttackAggro
  mov [ecx+60],00000000 //DwMeleeAttackRangeInAggro
  mov [ecx+64],00000000 //DwRangeAttackRangeInAggro
  mov [ecx+68],000003E8 //DwSightInAggro
//mov [ecx+6C],00000000 //DwDefeatAggro
//mov [ecx+70],00000000 //DwBlockedAggro
//mov [ecx+74],00000000 //DwSlideAggro
//mov [ecx+78],00000000 //DwHealAggro
//mov [ecx+7C],00000000 //DwMasterUnderAttackAggro
//mov [ecx+80],00000000 //DwMasterDefeatAggro
//mov [ecx+84],00000000 //DwMasterBlockingAggro
//mov [ecx+88],00000000 //DwMasterSlideAggro
//mov [ecx+8C],00000000 //DwCOmplusionUnderAttackAggro
  mov [ecx+90],00000063 //dwMaxSummonsMonsterCount
  mov [ecx+94],00000000 //dwReSummonsMonsterTick
  mov [ecx+98],00000000 //dwMaxSummonsMonsterRange
  mov [ecx+9C],00000000 //dwSummonsStartPcCount
//mov [eax+A0],00000000 //PatternType

mov eax,[ecx+0000009C] //Original Code
jmp ReturnMonsterProperties
PropertyBace:
db 00 00 00 00

[DISABLE]
dealloc(MonsterProperties)
unregistersymbol(PropertyBace)
0045C46E:
mov eax,[eax+00000098]

VAC 2

Code:

[ENABLE]
alloc(MonsterRange,1024)
label(ReturnMonsterRange)

0053D4F5: //89 54 24 48 8B 01 FF 50 0C 8B
jmp MonsterRange
nop
ReturnMonsterRange:

MonsterRange:
mov [esp+48],edx
mov [esp+30],00000000
mov [esp+4c],00000000
//mov [esi+00000240],0000000 //other attack range to 0 
//mov [esi+0000023c],0000000 //other attack range to 0 
//mov [esi+00000238],0000000 //other attack range to 0 
mov eax,[ecx]
jmp ReturnMonsterRange

[DISABLE]
dealloc(MonsterRange)
0053D4F5:
mov [esp+48],edx
mov eax,[ecx]

VAC 3

Code:

[ENABLE]
alloc(MonsterAggro,4)
registersymbol(MonsterAggro)

0053D50A: //0F B7 86 54 01 00 00 8B 0D
mov eax,[MonsterAggro]
nop
nop
MonsterAggro:
db 03 00 00 00
[DISABLE]
unregistersymbol(MonsterAggro)
0053D50A:
movzx eax,word ptr [esi+00000154]