V36 Scripts!! - Gamerz-Forum.Com

plozwarrior · #1 (**permalink**) 03-30-2007, 07:34 PM

Code:

This is what i found.

Code:

This thread will be updated if I find more.

Code:

Current Addresses:

Code:

-= Memory View Hacks =-

Code:

GM Hack - 004951C1 [X] ECX type in 1FE log off and log back in and notice all your stats and your job will be SuperGM.

Code:

Shadow Partner - 00665AB6 ZF [X] [ ]

Code:

Super Tubi - 00498FC5 ZF [X] [X]

Code:

Swear Hack - 00458E8E ZF [X] [ ]

Code:

Levitate - 006C137D ZF [X] [X]

Code:

No Hit Godmode - 0067DE96 ZF [X] [ ]

Code:

Dark Sight - 00667BD1 ZF [X] [ ]

Code:

Fly V1 - 006B2D45 ZF [X] [ ]

Code:

Moon Walk - 0066A5DA ZF [X][X]

Code:

Unrandomizer- 00717A4D EAX
0 = 13 STR 
1 = 13 DEX
2 = 13 INT
3 = 13 LUK

-= Pointers And Manual Addresses =-

Code:

Char X - Pointer Address: 007D5D88 Offset: 57C

Code:

Char Y - Pointer Address: 007D5D88 Offset: 580

Code:

Bottom Wall - Pointer Address: 007D5214 Offset: 18

Code:

Top Wall - Pointer Address: 007D5214 Offset: 10

Code:

Right Wall - Pointer Address: 007D5214 Offset: 14

Code:

Left Wall - Pointer Address: 007D5214 Offset: C

Code:

Unlimited Attack - Pointer Address: 007D5CEC Offset: 1358

Code:

No Breath - Pointer Address: 007D5CEC Offset: 2D0

Code:

People Scanner - Pointer Address: 007D521C Offset: 18

Code:

Monster Scanner - Pointer Address: 007D5218 Offset: 10

Code:

Current Scripts:

Code:

BEFORE GOING ANY FURTHER, YOU MUST READ THIS!!!
Some hacks might either crash your MapleStory or not work.

CRC Bypass

Code:

[enable] 
alloc(newmem,2048) 
alloc(blaaaa,3670018) 
label(originalcode) 
loadbinary(blaaaa,v36.CEM) 

newmem: 
cmp ecx,00400000 
jb originalcode 

cmp ecx,00780000 
ja originalcode 

mov eax,blaaaa 
sub eax,00400000 
add ecx, eax 

originalcode: 
mov eax,[ebp+10] 
push esi 
push edi 
jmp 46548f

0046548a: 
jmp newmem

[disable] 
0046548a: 
mov eax,[ebp+10] 
push esi 
push edi 
dealloc(newmem) 
dealloc(blaaaa)

PIN Unrandomizer (Full Keyboard)

Code:

[ENABLE] 
alloc(pinunrandom,128) 
label(returnhere) 

00622A79: 
jmp pinunrandom 
returnhere: 

pinunrandom: 
add eax,edx 
push edx 
shr edx,1 
mov [eax],edx 
pop edx 
cmp byte ptr [eax],ff 
jmp returnhere 

[DISABLE] 
00622A79: 
add eax,edx 
cmp byte ptr [eax],0a 

dealloc(pinunrandom)

Unrandomizer STR

Code:

[ENABLE]
00717A4D:
mov eax,0

[DISABLE]
00717A4D:
and eax,00007fff

Unrandomizer DEX

Code:

[ENABLE]
00717A4D:
mov eax,1

[DISABLE]
00717A4D:
and eax,00007fff

Unrandomizer INT

Code:

[ENABLE]
00717A4D:
mov eax,2

[DISABLE]
00717A4D:
and eax,00007fff

Unrandomizer LUK

Code:

[ENABLE]
00717A4D:
mov eax,3

[DISABLE]
00717A4D:
and eax,00007fff

Instant Drop

Code:

[ENABLE]
0076BC38:
add [eax], al
add [eax], al
add [eax], al
add [eax], al

[DISABLE]
0076BC38:
add [eax], al
add [eax], al
add [eax-71], al
inc eax

No Hit Godmode

Code:

[ENABLE]
0067DE96:
je 0067ed3a

[DISABLE]
0067DE96:
jne 0067ed3a

Super Tubi

Code:

[ENABLE]
00498FC5:
nop

[DISABLE]
00498FC5:
jne 498FFD

Swear Hack

Code:

[ENABLE]
00458E8E:
nop
nop

[DISABLE]
00458E8E:
jne 00451D28

Shadow Partner

Code:

[ENABLE]
00665AB6:
jne 00665F61

[DISABLE]
00665AB6:
je 00665F61

Moon Walk

Code:

[ENABLE]
0066A5DA:
db 90 90

[DISABLE]
0066A5DA:
db 75 38

Selective Wall Vac

Code:

[ENABLE]
alloc(begin,2048)
alloc(olddata,32)
alloc(pointer,4)
alloc(bool,4)
registersymbol(bool)
registersymbol(olddata)
label(set)
label(ret)
label(end)

begin:
cmp [bool],1
je set
ret:
mov esi,olddata
movsd
movsd
movsd
movsd
pop edi
jmp end
set:
mov esi,[007d5214]
mov esi,[esi+0C]
mov [pointer], esi
mov esi,[pointer]
mov [olddata],esi
mov esi,[007d5214]
mov esi,[esi+10]
mov [pointer], esi
mov esi,[pointer]
mov [olddata+04],esi
mov esi,[007d5214]
mov esi,[esi+14]
mov [pointer], esi
mov esi,[pointer]
mov [olddata+08],esi
mov esi,[007d5214]
mov esi,[esi+18]
mov [pointer], esi
mov esi,[pointer]
mov [olddata+0C],esi

mov [bool],0
jmp ret

6b266c:
jmp begin
end:

olddata:
DB 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
pointer:
DB 00 00 00 00
bool:
DB 01 00 00 00

[DISABLE]
dealloc(begin)
dealloc(olddata)
dealloc(pointer)
dealloc(bool)

6b266c:
movsd
movsd
movsd
movsd
pop edi

dICE Vac

Code:

[ENABLE]
alloc(dICE,64)
alloc(right,4)
alloc(left,4)
registersymbol(right)
registersymbol(left)
label(return)

dICE:
pushad

mov edx, [7d5d88] 
mov ebx, [edx+57c] 
mov ecx,[edx+580] 
add ebx, [right] 
sub ebx, [left] 

mov eax,[7d5214] 
mov [eax+C],ebx 
mov [eax+14],ebx 
mov [eax+10],ecx 
mov [eax+18],ecx 
popad

mov [ebx], eax
mov edi,[ebp+10]
jmp return

right: 
db 00 00

left: 
db 00 00

6b68f6: 
jmp dICE
return:

6b9258: 
db 0f 84

6b2d45: 
db 75

6b2fe1: 
db 0f 85

[DISABLE]
6b68f6:
mov [ebx], eax
mov edi,[ebp+10]

6b9258:
db 0f 85

6b2d45:
db 74

6b2fe1:
db 0f 84

dealloc(dICE)
dealloc(left)
dealloc(right)
unregistersymbol(left)
unregistersymbol(right)

Dark Sight

Code:

[ENABLE]
00667BD1:
je 00667BDE

[DISABLE]
00667BD1:
jne 00667BDE

Flying Monsters

Code:

[ENABLE]
006B2A8C:
db 75

[DISABLE]
006B2A8C:
db 74

Assaulter Slide

Code:

[ENABLE]
0067A241:
je 0067A2D5

[DISABLE]
0067A241:
jne 0067A2D5

Teleport Up

Code:

[ENABLE]
006B54D4:
db 76

[DISABLE]
006B54D4:
db 73

Teleport Left

Code:

[ENABLE]
006B53D4:
db 72

[DISABLE]
006B53D4:
db 73

Teleport Right

Code:

[ENABLE]
006B5443:
db 77

[DISABLE]
006B5443:
db 76

Suck Down

Code:

[ENABLE]
006B9258:
je 006b93c8

[DISABLE]
006B9258:
jne 006b93c8

Attack Teleport

Code:

[ENABLE]
0067A1C1:
jne 0067A1C8

[DISABLE]
0067A1C1:
je 0067A1C8

Dragon Vac

Code:

[enable]
00543A0A:
jne 00534a21

00534A1F:
je 00534a31

0076A908:
dd 1

006B53D4:
jb 006b5429

[disable]
00543A0A:
je 00534a21

00534A1F:
jne 00534a31

0076A908:
dd 0

006B53D4:
jae 006b5429

Zero Vac

Code:

[ENABLE]
00534A0A:
jne 00534a21

00534A1F:
je 00534a31

[DISABLE]
00534A0A:
je 00534a21

00534A1F:
jne 00534a31

Mouse Vac

Code:

[Enable]
Alloc(MouserX,512)
Alloc(MouserY,512)
label(back)
label(return)

6B68F6:
jmp MouserX
back:

6B695B:
jmp MouserY
return:

MouserX:
mov eax, [7D5360]
mov eax, [eax+978]
mov eax, [eax+80]
mov [ebx], eax
mov edi,[ebp+10]
jmp back

MouserY:
mov eax, [7D5360]
mov eax, [eax+978]
mov eax, [eax+84]
mov [edi], eax
mov ebx,[ebp+14]
jmp return

[Disable]
6B68F6:
mov [ebx], eax
mov edi,[ebp+10]

6B695B:
mov [edi],eax
mov ebx,[ebp+14]
dealloc(MouserX)
dealloc(MouserY)

Blow Up ETC items like a 50k bag

Code:

[enable] 
004a138b: 
nop 
nop 
nop 
nop 
nop 
nop 
[disable] 
0041a38b: 
je 004a1420

Rep me if I helped XD

Danieru · #2 (**permalink**) 03-31-2007, 04:23 AM

ty + rep

DarkF0x · #3 (**permalink**) 04-01-2007, 12:08 PM

Nice +rep but doesnt dice d/c?

plozwarrior · #4 (**permalink**) 04-02-2007, 09:29 PM

not if u vac it at the bottom right or left corner. Oh and I forgot DupeX

DupeX:

Code:

[ENABLE]
alloc(CodeCave,32)


alloc(Pointer,32)
registersymbol(CodeCave)
registersymbol(Pointer)
label(ReturnHere)

CodeCave:
push ecx
mov ecx,Pointer
mov [ecx],esi
pop ecx
mov [esi+00000114],edi
jmp ReturnHere

006b56f8:
jmp CodeCave
nop
ReturnHere:

[DISABLE]
006b56f8:
mov [esi+00000114],edi

dealloc(CodeCave)
dealloc(Pointer)
unregistersymbol(CodeCave)
unregistersymbol(Pointer)

1.Tick DupeX.
2.Click add address manually.
3.Description is Pointer.
4.Tick the pointer Box.
5.Add pointer the pointer is Pointer and the offset is 110.
6.Tick Pointer.
7.Keep jumping until u fly to a different spot.
Enjoy!!
Dont forget +Rep me if I helped XD

plozwarrior · #5 (**permalink**) 04-05-2007, 05:08 PM

[Only registered and activated users can see links. ]

eli19910 · #6 (**permalink**) 07-11-2007, 12:35 AM

again...ty

LinkBacks (?) LinkBack to this Thread: http://www.gamerz-forum.com/forum/ms-hacks/v36-scripts-1014.html
Posted By	For	Type	Date
Hacks [Archive] - Gamerz-Forum.Com	This thread	Refback	02-05-2008 05:55 PM

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)