Maple Story

[Sub-Zero]

Hey guys, I posted a thread on these hax at gamerzarea.net, so I'm just gonna post them here as well since nobody else did. Credits to somebody else who made the programs lol.

Originally Posted by Ice

Ice here, posting a few hax for EMS. I live in Europe, and the proxy thing don't work with me, do to a screwed up router >.<, so w/e. Here is the EMS Hax Pax. I put the stuff together, but I didn't create the applications and stuff. Credits go to whoever made it xD

Here's a tut on how to vac using Moonlight and jorrick.ct:

Step 1. Open DXwnd. Open ML engine.
Open the 3 injex0rs
and load in the first 2 .dll and typ in in the 1e GameGuard.des and 2e MapleStory.exe and in the 3e load threesome.dll and typ in GameMon.des and open my ct and ML
http://i21.tinypic.com/nfh6xx.jpg

Step 2. Start Malpe from DXwnd. Make sure ur engine is attached to MS, if it is not do setting good
Settings: for ML
General settings
tick the first 7
Scan settings
Tick mem_private and mem_image
File associations/Plugins
Nothing....
Code Finder
Tick: Use debug regsiters...and try to prevent detection of the debugger...
Assembler
Tick all except : Use int3 ....
Extra
Tick the first three and enable use of the process watcher ,use kernelmode debugger options when possible
Those should work if you dont have the settings.reg....
http://i21.tinypic.com/2nqbqs2.jpg

Step 3. Log on. To activate simple : right click on the address (in this case - no hitgodmode) and select Change register here ZF[X][] .
http://i23.tinypic.com/34ew28y.jpg

Step 4. For 2x drop u should tick only the first ZF box. Some need the both boxes ticked. Click OK, the cheat is active:
http://i23.tinypic.com/zy6cgh.jpg

Step 5. Click AutoAssemble on ur engine. A empty box will popup. Paste there the script here script
YoYo


Code:
//EMS0.32 YoYoVac
//Updated by Sezabi
[ENABLE]
alloc(YoYoDupe, 1024)
alloc(RunFlag, 4)
alloc(ESIValue, 4)
alloc(EDIValue, 4)
alloc(ESIAddy,4)
alloc(hookit,128)
registersymbol(YoYoDupe)
registersymbol(hookit)
registersymbol(ESIAddy)

label(NoVac)
label(DupeXVac)
label(DoNormal)

YoYoDupe:
push eax
push ecx
cmp [RunFlag], 2
je DupeXVac
mov eax, 0079ed70
mov eax, [eax]
add eax, 61C
mov eax, [eax]
sub eax, C
mov [ESIValue],eax
mov eax,[eax+114]
mov [EDIValue],eax
inc [RunFlag]
inc [RunFlag]

DupeXVac:
cmp esi,[ESIValue]
je DoNormal
push ecx
mov ecx,ESIAddy
mov [ecx],esi
pop ecx

DoNormal:
mov [esi+00000110],edi
pop ecx
pop eax
jmp 698065

ESIAddy:
db 00 00 00 00

RunFlag:
db 00 00 00 00

ESIValue:
db 00 00 00 00

EDIValue:
db 00 00 00 00

hookit:
cmp [ESIAddy], 0
je NoVac
push eax
push ebx
mov eax,[ESIAddy]
mov ebx,[EDIValue]
mov [eax+110],ebx
mov eax,[eax+110]
mov [eax+4c],ebx
mov [eax+50],ebx
pop ebx
pop eax

NoVac:
mov [ebx+00000400],eax
jmp 51FFBB

[DISABLE]
unregistersymbol(YoYoDupe)
dealloc(YoYoDupe)
dealloc(RunFlag)
dealloc(ESIValue)
dealloc(EDIValue)
dealloc(ESIAddy)
dealloc(hookit)

Step 6. Click Write code. The OK:
http://i21.tinypic.com/29zdili.jpg

Step 7. New window will popup. Now, REMEMBER OR WRITE SOMEWHERE THE VALUES OF YoYoDupe AND hookit!
http://i21.tinypic.com/2bcu86.jpg

Step 8. Half the work is done. Right click on the YoYo Dupex Address and select "Change register here"
http://i21.tinypic.com/14d3j3c.jpg

Step 9. Tick EIP and fill the box next to it with w/e the YoYo Dupe Value from step 9 is. They ALWAYS will be different. Click OK
http://i20.tinypic.com/2hh3imh.jpg

Step 10. Right click on Hookit address>Change register here> Tick EIP and fill it with the Value of hookit from step 9.
When u click OK u will start vaccing. If u have used all 4 addresses u wont be able to stop the vac.

Melee godmode - 0065BA9F ZF [x] []
No-hit godmode - 0065BA40 ZF [x] []
1-hit godmode - 0064E08C ZF [x] []
Swear filter - 0044DEF0 ZF [x] []
2x drop rate - 0043A3D3 ZF [x] []
Unrandomizer addy - 006EA9AD Change eax to 0 for STR, 1 - DEX, 2 - INT and 3 - LUK
Super Tubi - 0048AA95 ZF [x] [x]
YoYo address: 0069805F
Hookit address: 0051FFB5
EIP: 51FE67

UA script

[enable]
alloc(UnlimitedAttack,64)
alloc(UnlimitedCheck,44)
registersymbol(UnlimitedCheck)

UnlimitedAttack:
mov eax,[0079ed70]
mov ebx,[eax+5F4]
sub ebx,00000001
mov [eax+5F4],ebx
popad
cmp eax,edi
mov [ebp-20],eax
je 0051FECD
jmp 0051FE6E

UnlimitedCheck:
pushad
mov eax,[0079ed70]
mov eax,[eax+13C4]
cmp eax,00000062
jnl UnlimitedAttack
popad
cmp eax,edi
mov [ebp-20],eax
je 0051FECD
jmp 0051FE6E

[DISABLE]
dealloc(UnlimitedAttack)
dealloc(UnlimitedCheck)
unregistersymbol(UnlimitedCheck)

That's the UA ^^^^^

Anyway, have fun haxing and press the thanks button


EDIT: Forgot the upload (again). Also, I'm scanning it now
Spencer

EDIT 2: OMG I THIS UPLOAD SYSTEM. Heres the rapidshare link:

RapidShare: 1-Click Webhosting

*Sigh, I'm getting a new computer for Christmas, so maybe then I'll be able to properly upload things.

There you have it!

Make sure you press the thanks button xD

EDIT: Virus Total says that it is infected, but go and scan any Injector and you will find the same thing. It's really not infected >.<

Originally Posted by VirusTotal

Antivirus Version Last Update Result
AhnLab-V3 2007.11.16.0 2007.11.16 -
AntiVir 7.6.0.34 2007.11.16 HEUR/Malware
Authentium 4.93.8 2007.11.17 -
Avast 4.7.1074.0 2007.11.18 Win32:Agent-GXO
AVG 7.5.0.503 2007.11.18 IRC/BackDoor.SdBot3.VDR
BitDefender 7.2 2007.11.18 Backdoor.Bot.3455
CAT-QuickHeal 9.00 2007.11.17 -
ClamAV 0.91.2 2007.11.18 PUA.Packed.Themida
DrWeb 4.44.0.09170 2007.11.18 MULDROP.Trojan
eSafe 7.0.15.0 2007.11.14 -
eTrust-Vet 31.2.5304 2007.11.17 -
Ewido 4.0 2007.11.18 -
FileAdvisor 1 2007.11.18 -
Fortinet 3.11.0.0 2007.11.18 -
F-Prot 4.4.2.54 2007.11.18 W32/Heuristic-KPP!Eldorado
F-Secure 6.70.13030.0 2007.11.18 W32/DLoader.DWRL
Ikarus T3.1.1.12 2007.11.18 Virus.Win32.Agent.GXO
Kaspersky 7.0.0.125 2007.11.18 -
McAfee 5165 2007.11.16 Exploit-RAR
Microsoft 1.3007 2007.11.18 VirTool:WinNT/Rootkitdrv.gen!A
NOD32v2 2665 2007.11.17 -
Norman 5.80.02 2007.11.16 -
Panda 9.0.0.4 2007.11.18 Suspicious file
Prevx1 V2 2007.11.18 Heuristic: Suspicious File With Bad Child Associations
Rising 20.18.61.00 2007.11.18 -
Sophos 4.23.0 2007.11.18 Mal/Basine-C
Sunbelt 2.2.907.0 2007.11.15 VIPRE.Suspicious
Symantec 10 2007.11.18 -
TheHacker 6.2.9.133 2007.11.17 -
VBA32 3.12.2.5 2007.11.16 suspected of Backdoor.Delf.202 (paranoid heuristics)
VirusBuster 4.3.26:9 2007.11.18 -
Webwasher-Gateway 6.0.1 2007.11.18 Win32.Malware.gen#PECompact!92 (suspicious)

[Skyline1535]

Where can you get Proxies so I can DL eMS?

[Sub-Zero]

[TUT]How to play MS without country restriction

See here that link. It's a tut. press the thanx button T_T

[stefan212]

If seen this on gamecheetah.com you bastard!

[Sub-Zero]

Well duh. I told you, I leeched this from myself all over the place. I'm active on ***, GameCheetah, Here, GzA, tux-pack, aimboyd, dbp forums, etc.

[woodcutterni]

"Give thanks where thanks is needed" I thanked you this tutorial actualy worked for me!

How do you use UA?

[jampa]

this dont work for me i do all the things settings etc. and when i open ms my pc reboots every time pls help me out

[Upmar]

I can't even change the settings. there all blacked/greyed out.

[unexist]

where do you need to change the settings

i cant find where and can you maby make a screen shot from it...

thnx and i press the thnx button.



update: never mind if you open maple and dont click op play you can change the settings

press thanx butten if i helpt you

[sm1101]

can you send that hack to my email if you can here is it siavash102000@hotmail.com