{RELEASE} My HAXPAX

Sub-Zero · #1 12-01-2007, 10:03 AM

Heh, I'm back with another haxpax.

I'm not gonna give you a full tut, so if you don't know what to do after what i've given you, then go look somewhere else >.<

Here, I'm just gonna quote it from my old thread:

Quote:

Originally Posted by grindrail

Quote:

Originally Posted by grindrail

Step 1. Open DXwnd. Open ML engine.
Open the 3 injex0rs
and load in the first 2 .dll and typ in in the 1e GameGuard.des and 2e MapleStory.exe and in the 3e load threesome.dll and typ in GameMon.des and open my ct and ML
http://i21.tinypic.com/nfh6xx.jpg

Step 2. Start Malpe from DXwnd. Make sure ur engine is attached to MS, if it is not do setting good
Settings: for ML
General settings
tick the first 7
Scan settings
Tick mem_private and mem_image
File associations/Plugins
Nothing....
Code Finder
Tick: Use debug regsiters...and try to prevent detection of the debugger...
Assembler
Tick all except : Use int3 ....
Extra
Tick the first three and enable use of the process watcher ,use kernelmode debugger options when possible
Those should work if you dont have the settings.reg....
http://i21.tinypic.com/2nqbqs2.jpg

Step 3. Log on. To activate simple : right click on the address (in this case - no hitgodmode) and select Change register here ZF[X][] .
http://i23.tinypic.com/34ew28y.jpg

Step 4. For 2x drop u should tick only the first ZF box. Some need the both boxes ticked. Click OK, the cheat is active:
http://i23.tinypic.com/zy6cgh.jpg

Step 5. Click AutoAssemble on ur engine. A empty box will popup. Paste there the script here script
YoYo

Code:
//EMS0.32 YoYoVac
//Updated by Sezabi
[ENABLE]
alloc(YoYoDupe, 1024)
alloc(RunFlag, 4)
alloc(ESIValue, 4)
alloc(EDIValue, 4)
alloc(ESIAddy,4)
alloc(hookit,128)
registersymbol(YoYoDupe)
registersymbol(hookit)
registersymbol(ESIAddy)

label(NoVac)
label(DupeXVac)
label(DoNormal)

YoYoDupe:
push eax
push ecx
cmp [RunFlag], 2
je DupeXVac
mov eax, 0079ed70
mov eax, [eax]
add eax, 61C
mov eax, [eax]
sub eax, C
mov [ESIValue],eax
mov eax,[eax+114]
mov [EDIValue],eax
inc [RunFlag]
inc [RunFlag]

DupeXVac:
cmp esi,[ESIValue]
je DoNormal
push ecx
mov ecx,ESIAddy
mov [ecx],esi
pop ecx

DoNormal:
mov [esi+00000110],edi
pop ecx
pop eax
jmp 698065

ESIAddy:
db 00 00 00 00

RunFlag:
db 00 00 00 00

ESIValue:
db 00 00 00 00

EDIValue:
db 00 00 00 00

hookit:
cmp [ESIAddy], 0
je NoVac
push eax
push ebx
mov eax,[ESIAddy]
mov ebx,[EDIValue]
mov [eax+110],ebx
mov eax,[eax+110]
mov [eax+4c],ebx
mov [eax+50],ebx
pop ebx
pop eax

NoVac:
mov [ebx+00000400],eax
jmp 51FFBB

[DISABLE]
unregistersymbol(YoYoDupe)
dealloc(YoYoDupe)
dealloc(RunFlag)
dealloc(ESIValue)
dealloc(EDIValue)
dealloc(ESIAddy)
dealloc(hookit)

Step 6. Click Write code. The OK:
http://i21.tinypic.com/29zdili.jpg

Step 7. New window will popup. Now, REMEMBER OR WRITE SOMEWHERE THE VALUES OF YoYoDupe AND hookit!
http://i21.tinypic.com/2bcu86.jpg

Step 8. Half the work is done. Right click on the YoYo Dupex Address and select "Change register here"
http://i21.tinypic.com/14d3j3c.jpg

Step 9. Tick EIP and fill the box next to it with w/e the YoYo Dupe Value from step 9 is. They ALWAYS will be different. Click OK
http://i20.tinypic.com/2hh3imh.jpg

Step 10. Right click on Hookit address>Change register here> Tick EIP and fill it with the Value of hookit from step 9.
When u click OK u will start vaccing. If u have used all 4 addresses u wont be able to stop the vac.

Melee godmode - 0065BA9F ZF [x] []
No-hit godmode - 0065BA40 ZF [x] []
1-hit godmode - 0064E08C ZF [x] []
Swear filter - 0044DEF0 ZF [x] []
2x drop rate - 0043A3D3 ZF [x] []
Unrandomizer addy - 006EA9AD Change eax to 0 for STR, 1 - DEX, 2 - INT and 3 - LUK
Super Tubi - 0048AA95 ZF [x] [x]
YoYo address: 0069805F
Hookit address: 0051FFB5
EIP: 51FE67

UA script

[enable]
alloc(UnlimitedAttack,64)
alloc(UnlimitedCheck,44)
registersymbol(UnlimitedCheck)

UnlimitedAttack:
mov eax,[0079ed70]
mov ebx,[eax+5F4]
sub ebx,00000001
mov [eax+5F4],ebx
popad
cmp eax,edi
mov [ebp-20],eax
je 0051FECD
jmp 0051FE6E

UnlimitedCheck:
pushad
mov eax,[0079ed70]
mov eax,[eax+13C4]
cmp eax,00000062
jnl UnlimitedAttack
popad
cmp eax,edi
mov [ebp-20],eax
je 0051FECD
jmp 0051FE6E

[DISABLE]
dealloc(UnlimitedAttack)
dealloc(UnlimitedCheck)
unregistersymbol(UnlimitedCheck)

That's the UA ^^^^^

Anyway, have fun haxing and press the thanks button

Bah have fun and THANKS BUTTON FOOLS >=O

OH heres the sendspace link:

Send big files the easy way. Files too large for email attachments? No problem!

REP+ THANKS cuz i'm a THANKS AND REP WH0RE