This is my indept Marco Polo script which does not patch anything nor trigger the "activated Polo/Marco" variables but activates by abusing the functions them self.
(Probably undetected in multiplayer)
Downsides is that you cant click on the objects (to see info), units outside your actually Fog range. Actions works outside your Fog Area.
Havent found the trigger for this yet.
Add to CheatTable and add "OnOff" 1 means on and 0 means off
Code: Select all
// Polo/Marco(Avoiding Cheat Detection)
// Nickerian
// Base - 75 ?? 83 3D ?? ?? ?? ?? 00 74 ?? 8B ?? ?? ?? ?? ?? ?? 6A 00 6A 00 6A 03
// Offset 1 (D44) - C7 ?? ?? ?? 00 00 00 00 00 00 8B ?? xx xx 00 00 52 E8 ?? ?? ?? ?? 8B ??
// Offsets 2 (84)/3 (5AEC) - E8 ?? ?? ?? ?? 8B CB E8 ?? ?? ?? ?? 8B 8B xx ?? 00 00 68 00 04 00 00 8B 89 xx xx 00 00 84 C0 75 19
// Call = (Offset Address) First Call after jne and call of dest of jump
[enable]
alloc(OnOff, 4)
registersymbol(OnOff)
alloc(MyThread,512)
CREATETHREAD(MyThread);
alloc(ecxbak, 4)
label(_continue)
label(_off)
label(_exit)
OnOff:
dd 1
MyThread:
cmp [OnOff], AA // destroy thread value
je _exit
// Polo
mov ecx, ["AoK HD.exe"+2255F9+4] // Base - 75 ?? 83 3D ?? ?? ?? ?? 00 74 ?? 8B ?? ?? ?? ?? ?? ?? 6A 00 6A 00 6A 03
mov ecx, [ecx]
test ecx, ecx
je _continue
mov ecx, [ecx+D44] // Offset 1 (D44) - C7 ?? ?? ?? 00 00 00 00 00 00 8B ?? xx xx 00 00 52 E8 ?? ?? ?? ?? 8B ??
mov ecx, [ecx+84] // Offsets 2 (84)/3 (5AEC) - E8 ?? ?? ?? ?? 8B CB E8 ?? ?? ?? ?? 8B 8B xx ?? 00 00 68 00 04 00 00 8B 89 xx xx 00 00 84 C0 75 19
mov ecx, [ecx+5AEC]
mov [ecxbak], ecx
cmp [OnOff], 1
jne _off
// Polo ON
push 00000400
call "AoK HD.exe"+482DB0 // Call = (Offset Address) First Call after jne
// Marco ON
mov ecx, [ecxbak]
push 04000000
call "AoK HD.exe"+482DB0
jmp _continue
_off:
// Polo OFF
push 00000400
call "AoK HD.exe"+483670 // Call = (Offset Address) call of dest of jump
// Marco FF
mov ecx, [ecxbak]
push 04000000
call "AoK HD.exe"+483670
jmp _continue
_continue:
push 1000
call sleep
jmp MyThread
_exit:
ret
[disable]
dealloc(OnOff)
unregistersymbol(OnOff)
OnOff:
dd AA