[MSEA]Hacks/Scripts/Addresses v0.43
Hack-Pack Mirrors - FileFront or MediaFire or SpeedyShare
Table of Contents:
Quote:Usage:
1. Press CTRL+F on your web browser.
2. Copy a phrase from the list - 'Delay DupeX ' for example.
3. Paste in the search dialog.
4. Remove any spaces that comes after the selected phrase.
5. Press ok to get to the desired position.
Page 1:
Quote:Adresses:
CS eax
SS eax
Moob Vac
Meso Drop Control
DupeX Injection Adress
Pointers:
Walls
Item Coordinates
Mouse Coordinates
Character Position
Unlimited Attack
No Breath
People Scanner
CRC Scripts:
Essentials
CRC Bypass
Rushers
PRush
NGRush
Usables
God Mode: V1~9.
Miss God Mode
Tubi
No Breath
Perfect No Breath
Unlimited Attack
Unlimited Attack V2
Unlimited Attack V3
Unlimited Attack V4
Spam Hack
BYOR
Speed Attack
Meso Explosion Exploit
Full Map Item Vac
Mouse Controlled Character Filtered Item Vac
Skill Hack
Pet Training
Misc.
Monsters pID
Shut Maple Down instantly
Grid Lock
Lemmings
Item Filter
Levitate
Air Walk
Memory Loot
Lag Hack: V1; V2;
Instant Drop
Unrandomizer
Fun to play with
Ladder - Super Fast Climb
Can't grab Ladder
Invisible Character
Floating Eyes
Swim Hack
Swear Filter
Shadow Partner
Dark Sight
Fly Hack
Speed Walk
Always Miss Hack
Page 2:Quote: Vacuums
Suck: Left; Right; Up; Down;
Teleport: Left; Right;
Fusion Vac
Uber Vac
Ranged Uber Vac
Momoeagle's Uber Vac
Uzeil's Set Uber Vac
PerVac Outdated x2
Mouse Controlled Zero Vac
Character Controlled Zero Vac
Knock Back Vac
Delay DupeX
Delay DupeX 2
Wix
Selective Wall vac
dICE Vac
dICE Vac
Mouse controlled dICE vac
Character controlled dICE vac
Auto Melee dICE vac
Auto Ranged dICE vac
lamer Vac: V1; V2;
Twister Vac
FADED Vac
YoYo DupeX
YoYo Plus
Mouse Vac
Server Sided Mouse Vac
Ranged dEMI
Timed DupeX
Adresses:Quote:CS eax X - 006C39D5
CS eax Y - 006C3A3A
SS eax X - 006BFB21
SS eax Y - 006BFAFA
Moob Vac - 004978AF, Controlled with ECX
Meso Drop Control - 006BC464, Controlled with EAX
DupeX Injection Adress - 006C27D7
Pointers:Quote:Walls:
Left - 007E1034, Offset C
Top - 007E1034, Offset 10
Right - 007E1034, Offset 14
Bottom - 007E1034, Offset 18
Item X - 007E1B10, Offset 5B8
Item Y - 007E1B10, Offset 5BC
Mouse X - 007E1180, Offsets 980,84
Mouse Y - 007E1180, Offsets 980,84
Character X - 007E1B10, Offset 5C0
Character Y - 007E1B10, Offset 5C4
Unlimited Attack - 007E1B10, Offset 1294
No Breath - 007E1B10, Offset 304
People Scanner - 007E103C, Offset 18
CRC Scripts:Essensials:CRC Bypass + CEM:
Changes the destination of Maple Stroy's Cyclic Redundancy Check.Quote:[Enable]
Alloc(newmem,2048)
Alloc(blaaaa,4517888)
Label(originalcode)
loadbinary(blaaaa,v43.CEM)
newmem:
cmp ecx,00400000
jb originalcode
cmp ecx,00780000
ja originalcode
mov eax,blaaaa
sub eax,00400000
add ecx, eax
originalcode:
mov eax,[ebp+10]
push esi
push edi
jmp 004662D0
004662CB:
jmp newmem
[Disable]
004662CB:
mov eax,[ebp+10]
push esi
push edi
Dealloc(newmem)
Dealloc(blaaaa)
Rushers:
Quote:IF anyone is going to release the GMS version of this, pls include this
release notes.
(at least, for the initial releases)
PRush (Power Rush):
Feature:
1. Cycle thru external portals (F4)
2. Mouse vac (CS) (F5)
3. Cycle thru spawn points (F6)
4. Mouse Tele (double click anywhere on main window)
Notes:
A. F4 to cycle through the portals that leads to other maps. This is the perfect function to
complement NGRushV2.
B. F6 to cycle through spawn points. These are the spots that other people can appear when
they cc to your map. This is primarily for checking your current map to choose a good vac
spot.
C. F5 to turn on mouse vac (CS). This is mainly for teleporting over long distance in the
map.
D. double click anywhere to instant teleport to your mouse location. This also automatically
turn off CS MouseVac. When tele over long distance with mousevac, single click to "sync" the
mouse (map) location before double clicking.
E. lastPosn in this script can be sync with the same variable named in ngrush to improve the
way (1) works.
F. This is for u to USE, not for u to SHOW OFF in crowded maps.
ENJOY!
Code:[Enable]
//================================
// pRush v1.00 for MSEA 0.43
// by PedraSimon@CEF
//
// Usage:
// F4: cycle external portals
// F5: toggle cs mouse vac
// F6: cycle spawn points
// dblClick: mouse teleport
//================================
Alloc(chkHotkey, 512)
Label(hotkeyDone)
Label(initParam)
Label(cyclePtl)
Label(cycleSpPtl)
Label(cSpLoop)
Label(cSpPtlNxt)
Label(cSpPtlDone)
Label(cLoop)
Label(cPtlNxt)
Label(cPtlDone)
Label(dClickTele)
Label(dClickTeleDone)
Label(mouseTele)
Label(resetPosn)
Label(chrWarp)
Label(csmvX)
Label(csmvXDone)
Label(csmvY)
Label(csmvYDone)
Label(csmvFlag)
Label(lastPosn)
chkHotkey:
test edi,80000000
jns hotkeyDone
cmp [ebp+c],73
je cyclePtl
cmp [ebp+c],75
je cycleSpPtl
cmp [ebp+c],74
jne hotkeyDone
xor [csmvFlag],1
hotkeyDone:
jmp 6829DB
cyclePtl:
pushad
call initParam
call cPtlNxt
push [eax+10]
sub [esp],a
push [eax+c]
call chrWarp
popad
jmp hotkeyDone
cycleSpPtl:
pushad
call initParam
call cSpPtlNxt
push [eax+10]
sub [esp],a
push [eax+c]
call chrWarp
popad
jmp hotkeyDone
dClickTele:
mov eax, [ecx+9B4]
test eax,eax
jnz dClickTeleDone
cmp [esi],77b64c
je mouseTele
dClickTeleDone:
ret
mouseTele:
pushad
mov edi, [7E1180]
mov edi,[edi+978]
push [edi+84]
push [edi+80]
call chrWarp
mov [csmvFlag],0
popad
ret
initParam:
mov ebx,[7E1BAC]
mov ebx,[ebx+4]
mov edx, [7E1BA8]
mov edx, [edx+5d4]
mov edi, [lastPosn]
ret
//==== cycle external portal
cPtlNxt:
test edi,edi
jnz cLoop
mov edi,[ebx-4]
cLoop:
dec edi
mov ecx,[ebx+8*edi+4]
cmp [ecx+14],edx //skip current-map portal
je cPtlNxt
cmp [ecx+8],7 //accept type7 (fm)
je cPtlDone
cmp [ecx+14],3B9AC9FF //skip portal 99999999
je cPtlNxt
cPtlDone:
mov eax,ecx
mov [lastPosn],edi
ret
//==== cycle spawn points
cSpPtlNxt:
test edi,edi
jnz cSpLoop
mov edi,[ebx-4]
cSpLoop:
dec edi
mov ecx,[ebx+8*edi+4]
cmp [ecx+8],0 //cycle ONLY type 0
jne cSpPtlNxt
cSpPtlDone:
mov eax,ecx
mov [lastPosn],edi
ret
csmvX:
cmp [csmvFlag],0
je csmvXDone
push eax
mov eax, [7E1B10]
mov eax, [eax+5e0]
cmp eax,esi
pop eax
jne csmvXDone
mov eax, [7E1180]
mov eax, [eax+978]
mov eax, [eax+80]
csmvXDone:
mov [ebx], eax
mov edi,[ebp+10]
ret
csmvY:
cmp [csmvFlag],0
je csmvYDone
push eax
mov eax, [7E1B10]
mov eax, [eax+5e0]
cmp eax,esi
pop eax
jne csmvYDone
mov eax, [7E1180]
mov eax, [eax+978]
mov eax, [eax+84]
csmvYDone:
mov [edi], eax
mov ebx,[ebp+14]
ret
chrWarp:
push [esp+8]
push [esp+8]
mov edi, [7E1B10]
mov edi,[edi+5e0]
push edi
mov edi,[edi]
call [edi+40]
ret 8
resetPosn:
mov [lastPosn],0
lea eax,[ebp-18]
mov esi,ecx
ret
csmvFlag:
dd 0
773B64:
lastPosn:
dd 00
4B9FCE:
call chkHotkey
681807:
call resetPosn
6C39D5:
call csmvX
6C3A3A:
call csmvY
6D8208:
call dClickTele
nop
[Disable]
4B9FCE:
call 6829DB
681807:
lea eax,[ebp-18]
mov esi,ecx
6C39D5:
mov [ebx], eax
mov edi,[ebp+10]
6C3A3A:
mov [edi],eax
mov ebx,[ebp+14]
6D8208:
mov eax, [ecx+9B4]
Dealloc(chkHotkey, 512)
// pRush v1.00
// PedraSimon@CEF
NGRush:
Quote:Feature:
1. Multiple paths can be stored in one table, as long as the mapsIDs are unique.
2. No portal coord needed in script. MUCH easier to add new paths.
3. The only public rusher for MSEA, EMS. Mousevac and cseax based rushers DOES NOT work for
MSEA.
4. Compact script (compared to traditional rushers).
What's New in this version:
1. Automatic direction control (Do not need rushDir).
2. Directly control spawn position as opposed to using platform shifts in v1.
3. Automatically place char at portals that lead to other maps, even if the map is not in your
path.
note:
Due to (2), rushing in EOS tower (lvl95-99?) will not be "automatic" (those who used NGRushv1
would know what i mean).
How-to-use:
1. tick NGRush in CT.
2. cc or change map to see its POWER.
</SPAN>Code:[Enable]
//================================
// NGRush v2.01 for MSEA 0.43
// by PedraSimon@CEF
//
// 1. Works best with godMode
//================================
Alloc(NGR, 384)
Label(chkDirn)
Label(dirnDone)
Label(mapFind)
Label(mapNxt)
Label(mapDone)
Label(ptlFind)
Label(ptlFindDone)
Label(rtnNGR)
Label(NgrL001)
Label(NgrL002)
Label(NgrL003)
Label(cLoop)
Label(getCPtlNxt)
Label(cPtlNxt)
Label(cPtlDone)
Label(lastPosn)
Label(prevMapId)
Label(oppDirn)
Label(rushDir)
Alloc(paths,2048)
NGR:
pushad
call mapFind
call ptlFind
push [eax+c]
pop [ebp-18]
push [eax+10]
pop [ebp-14]
popad
jmp rtnNGR
ptlFind:
mov [lastPosn],0
call getCPtlNxt
//cycle nxt if portal leads back prevMap
push eax
NgrL003:
mov ebx,[prevMapId]
cmp [eax+14],ebx
jne ptlFindDone
xor eax,eax
call getCPtlNxt
cmp eax,[esp]
je ptlFindDone
cmp [ecx+8],3
je NgrL003
ptlFindDone:
pop ebx
mov [prevMapId],edx
ret
getCPtlNxt:
mov ebx,[7E1BAC]
mov ebx,[ebx+4]
mov edx, [7E1BA8]
mov edx, [edx+5d4]
mov edi, [lastPosn]
cPtlNxt:
test edi,edi
jnz cLoop
mov edi,[ebx-4]
cLoop:
dec edi
mov ecx,[ebx+8*edi+4]
cmp edi,[lastPosn]
jne NgrL002
xor eax,eax
NgrL002:
cmp [ecx+14],edx
je cPtlNxt
cmp [ecx+8],7
je NgrL001
cmp [ecx+14],3B9AC9FF
je cPtlNxt
NgrL001:
test eax,eax
je cPtlDone
cmp [ecx+14],eax
je cPtlDone
jmp cPtlNxt
cPtlDone:
mov eax,ecx
mov [lastPosn],edi
ret
mapFind:
mov ebx, [7E1BA8]
mov ebx, [ebx+5d4]
xor edi,edi
mapNxt:
inc edi
mov eax, [paths+edi*4]
cmp eax,ebx
jz mapDone
test eax,eax
jnz mapNxt
mapDone:
call chkDirn
add edi, [rushDir]
mov eax, [paths+edi*4]
ret
chkDirn:
push edi
mov [oppDirn],0
mov ecx,[prevMapId]
cmp ebx, ecx
je dirnDone
test eax,eax
jz dirnDone
add edi, [rushDir]
cmp ecx, [paths+edi*4]
jne dirnDone
neg [rushDir]
mov [oppDirn],1
dirnDone:
pop edi
ret
prevMapId:
dd 0
oppDirn:
dd 0
rushDir:
dd 1
paths:
dd 0
include(paths.cea)
dd 0
773B64:
lastPosn:
dd 00
681919:
jmp NGR
db 90 90
rtnNGR:
db eb
[Disable]
681919:
db 83 7f 10 00 89 45 ec 74
Dealloc(NGR, 384)
Dealloc(paths,2048)
Dealloc(lastPosn,4)
Dealloc(prevMapId,4)
Dealloc(oppDirn,4)
Dealloc(rushDir,4)
// NGRush v2.01
// PedraSimon@CEF
Required File - paths.cea
OR
Save as "paths.cea" and place in the engine's directory:
Code://save this as paths.cea in UCE directory
dd 623A7C0 //Kerning City
dd 623A7C6 //Kerning Repair Shop
//---- Orbis Tower
dd BECFAE4 //Orbis : Entrance to Orbis Tower
dd BECFAE5 //Orbis : The Unknown Tower
dd BECFB48 //Orbis : Orbis Tower <20th Floor>
dd BECFBAC
dd BECFC10
dd BECFC74
dd BECFCD8
dd BECFD3C
dd BECFDA0
dd BECFE04
dd BECFE68
dd BECFECC
dd BECFF30
dd BECFF94
dd BECFFF8
dd BED005C
dd BED00C0
dd BED0124
dd BED0188
dd BED01EC
dd BED0250
dd BED02B4 //Orbis : Orbis Tower <1st Floor>
dd BED0318 //Orbis : Orbis Tower<B1>
dd BED037C //Orbis : Orbis Tower<B2>
//---- ElNath <-> zk Door
dd C939B88 //El Nath : Snowy Hill
dd C93C1D0
dd C93E8E0
dd C940FF0
dd C943700
dd C943764
dd C9437C8
dd C94382C
dd C943890
dd C9438F4
dd C943958
dd C9439BC
dd C943A20
dd C943A84
dd C943AE8
dd C943B4C
dd C943BB0
dd C943C14
dd C943C78
dd C943CDC
dd C943D40
dd C943DA4
dd C943E08
dd C943E6C
dd C943ED0
dd C943F34
dd C943F98
dd C943FFC
dd C944060
//---- Clock Tower
dd D1CF090 //Ludi : Eos Tower Entrance
dd D1D1804 //Ludi : Terrace Hall
dd D1D3E4C //Ludi : Toy Factory <Main Process 1>
dd D1D64F8 //Ludi : Toy Factory <Main Process 2>
dd D1D8C08 //Ludi : Crossroad of Time
dd D1DB2B4 //Ludi : Whirlpool of Time
dd D1DB37C //Ludi : Path of Time
//---- Warp Path
dd D1DD960 //Ludi : Warped Path of Time<1>
dd D1DD9C4 //Ludi : Warped Path of Time<2>
dd D1DDA28 //Ludi : Warped Path of Time<3>
//dd D1DDA29 // Hidden : Unbalanced Time
dd D1DDA8C //Ludi : Warped Path of Time<4>
dd D1DDA8D //Hidden : Twisted Time
dd D1DDAF0 //Ludi : Warped Passage
dd D1E2780 //Ludi : Deep Inside the Clocktower
dd D1E2781 //Ludi : Origin of Clocktower
//---- Forgotten Path
dd D1E0070 //Ludi : Forgotten Path of Time<1>
dd D1E00D4 //Ludi : Forgotten Path of Time<2>
dd D1E0138 //Ludi : Forgotten Path of Time<3>
//dd D1E0139 // Ludi : Lost Time
dd D1E019C //Ludi : Forgotten Path of Time<4>
dd D1E019D //Hidden : Forbidden Time
dd D1E0200 //Ludi : Forgotten Passage
//---- Aqua West
dd DB5AC90 //Aqua : Ocean I.C
dd DB5ACF4
dd DB5AD58
//dd DB5AD59
dd DB5ADBC
dd DB5AE20 //Aqua : Forked Road : West Sea
dd DB58580 //Aquarium : Aquarium
//---- Aqua Dungeon
dd DB621C0 //Aqua : Deep Sea Gorge I
dd DB62224 //Aqua : Deep Sea Gorge II
dd DB62350 //Aqua : The Grave of a Wrecked Ship
dd DB622EC //Aqua : Dangerous Sea Gorge II
dd DB62288 //Aqua : Dangerous Sea Gorge I
//---- Aqua East
dd DB5D3A0 //Aqua : Forked Road : East Sea
dd DB5D404 //Aqua : The Seaweed Tower
dd DB5D468 //Aqua : Sand Castle Playground
dd DB5D469 //Aqua : Two Palm Trees
dd DB5D4CC //Aqua : Big Fish Valley
dd DB5FAB0 //Aqua : Blue Seaweed Road
dd DB5FB14 //Aqua : Mushroom Coral Hill
dd DB5FB15 //Aqua : Tae Gong's Ferry
dd DB5FB78 //Aqua : The Sharp Unknown
//---- Orbis Cloud Park
dd BEBE910 //Orbis : Cloud Park I
dd BEC1020 //Orbis : Cloud Park II
dd BEC3730 //Orbis : Strolling Path
dd BEC5E40 //Orbis : Cloud Park III
dd BEC8550 //Orbis : Cloud Park IV
dd BECAC60 //Orbis : Strolling Path II
dd BECD370 //Orbis : Cloud Park V
dd BECFA80 //Orbis : Cloud Park VI
//---- Orbis garden
dd BEBE974 //Orbis : The Road to Garden of 3 Colors
dd BEBE97E //Orbis : Garden of Red I
dd BEBE97F //Orbis : Garden of Red II
dd BEBE988 //Orbis : Garden of Yellow I
dd BEBE989 //Orbis : Garden of Yellow II
dd BEBE992 //Orbis : Garden of Green I
dd BEBE993 //Orbis : Garden of Green II
dd BEBE9D8 //Orbis : Stairway to the Sky I
dd BEBEA3C //Orbis : Stairway to the Sky II
dd BEBEA3D //Orbis : Garden of Darkness I
dd BEBEA3E //Orbis : Garden of Darkness II
//---- EOS Tower
dd D2C90F4
dd D2C9090 //Ludi : Eos Tower 100th Floor
dd D2C902C
dd D2C8FC8
dd D2C8F64
dd D2C8F00
dd D2C8E9C
dd D2C8E38
dd D2C8DD4
dd D2C8D70
dd D2C8D0C
dd D2C8CA8
dd D2C8C44
dd D2C8BE0
dd D2C8B7C
dd D2C8B18
dd D2C8AB4
dd D2C8A50
dd D2C89EC
dd D2C8988
dd D2C8924
dd D2C88C0
dd D2C885C
dd D2C87F8
dd D2C8794
dd D2C8730
dd D2C86CC
dd D2C8668
dd D2C8604
dd D2C85A0
dd D2C853C
dd D2C84D8
dd D2C8474
dd D2C8410
dd D2C83AC
dd D2C8348
dd D2C82E4
dd D2C8280
dd D2C821C
dd D2C81B8
dd D2C8154
dd D2C80F0
dd D2C808C
dd D2C8028
dd D2C7FC4
dd D2C7F60 //Ludi : Eos Tower 1st Floor
dd D2C32D0 //Safety Zone
//---- Omega Sector
dd D2C3208 //OS : Silo
dd D2C31A4 //OS : HQ
dd D2C3140 //OS : Omega Sector
dd D2CA670 //OS : Off-Limits
dd D2CA6D4 //OS : Boswell Field I
dd D2CA738
dd D2CA79C
dd D2CA79D //Hidden : Mateon Field
dd D2CA800
//dd D2CA801 // Hidden : Plateon Field
dd D2CA864
//dd D2CA865 // Hidden : Mecateon Field
dd D2CA8C8 //OS : Boswell Field VI
dd D2CA8C9 //Hidden : Defeat Monsters
dd D2CCD80 //OS : Kulan Field I
dd D2CCDE4
dd D2CCE48
//dd D2CCE49 // Hidden : Barnard Field
dd D2CCEAC
dd D2CCF10 //OS : Kulan Field V
//dd D2CCF11 // Hidden : Entrance to Dogon's HQ
//dd D2CCF12 // Hidden : Dogon's HQ
//---- Florina
dd 068E7790 //Florina : Florina Beach
dd 068E9E90 //Florina : A Look-Out Shed Around the Beach
dd 068EC5A0 //Florina : Lorang Lorang
//dd 068EC5A1 //Florina : Lorang Lorang Lorang
dd 068EECB0 //Florina : Lorang and Clang
//dd 068EECB1 //Florina : Clang and Lorang
dd 068F13C0 //Florina : Hot Sand
//---- Excavation Site
dd 0605BF80 //Vic : Perion Street Corner
dd 0605999C
dd 06059938
dd 060598D4
dd 060598D5 //Vic : Excavation Site I
dd 060598D6
dd 060598D7
dd 060598D8 //Vic : Excavation Site <Camp>
dd 060598D9
dd 060598DA
dd 060598DB
dd 060598DC
dd 060598DD //Vic : Remains <Cliff>
//---- Rocky Mountain
dd 06059A00 //Vic : East Rocky Mountain I
dd 06059A01
dd 06059A02
dd 06059A03
dd 06059A04
dd 06059A05
dd 06059A06 //Vic : East Rocky Mountain VII
//---- Warning Street
dd 0660B0C0 //WrngStr : The Swamp of Despair I
dd 0660B124
dd 0660B188
dd 0660B1EC
dd 0660B250
//---- Burnt Land
dd 06516EE5 //WrngStr : The Burnt Land I
dd 06516EEE
dd 06516EF8
dd 06516F02
dd 06516F0C //WrngStr : The Burnt Land V
//---- Perion Dungeon Path
dd 06516E80
dd 06516EE4
dd 06516F48 //WrngStr : Deep Valley III
dd 06516FAC //Perion Dungeon Entrance
dd 0642A170 //Deep Forest
dd 0642C880 //Swampy land in deep forest
dd 0642C9AC //Sleepwood
//---- Ant Tunnel
dd 0642EF90 //Dungeon : Ant Tunnel I
dd 0642EFF4
dd 0642F058
dd 0642F0BC
dd 0642F120
dd 064316A0
dd 06431704
dd 06433DB0
dd 06433DB1 //Dungeon : Ant Tunnel Park
dd 06433E14
dd 06433E78
dd 06433EDC
dd 06433F40
dd 064364C0
dd 06438BD0
dd 06438C34
dd 06438C98 //Dungeon : Another Entrance
//---- Cursed Sanctuary
dd 06438D60 //Dungeon : Another Path
dd 06438DC4
dd 06438E28
dd 06438E8C
dd 06438EF0
dd 06438F54 //Dungeon : The Cursed Sanctuary
//---- Wild Cargo
dd 06438CFC //Dungeon : Drake's Meal Table
dd 06438CFD //Dungeon : Wild Cargo's Area
//---- Drake
dd 06438D06 //Dungeon : Drake Area
dd 06438D07 //Dungeon : Cold Cradle
dd 06438D08 //Dungeon : Drake's Nest
//---- MapleIsland
dd 0002710 //10000 Maple Road : Mushroom Town
dd 0004E20 //20000 Maple Road : Mushroom Town
dd 0007530 //30000 Maple Road : East Entrance to Mushroom Town
dd 0009C40 //40000 Maple Road : snail Hunting Ground I
dd 0009C41 //40001 Maple Road : snail Hunting Ground II
dd 0009C42 //40002 Maple Road : snail Hunting Ground III
dd 000C350 //50000 Maple Road : A Split Road
dd 000EA60 //60000 Maple Road : Southperry
dd 00F4240 //1000000 Rainbow Street : The Field West of Amherst
dd 00F6950 //1010000 Rainbow Street : Amherst
//---- Unused
dd D3B9C21 //Hidden : Haunted House
dd D3BC1A0 //Ludi : Helios Tower <Library>
dd D3BC204 //Ludi : Helios Tower <2nd Floor>
dd D3BC20E //Ludi : Elevator <To Ludi>
dd D3BC20F //Ludi : Elevator <To Ludi>
dd D3BC268 //Ludi : Helios Tower <99th Floor>
dd D3BC272 //Ludi : Elevator <To Korean Folk Town>
dd D3BC273 //Ludi : Elevator <To Korean Folk Town>
dd D3BC2CC //Ludi : Helios Tower (100th Floor)
dd D1CF0F4 //Ludi : Helios Tower Entrance
dd D1D1610 //Ludi : Cloud Terrace<5>
dd D1D1611 //Ludi : Cloud Balcony
dd D1D1674 //Ludi : Cloud Terrace<4>
dd D1D16D8
dd D1D173C
dd D1D17A0 //Ludi : Cloud Terrace<1>
dd D1D19F9 //Ludi : Sky Terrace
dd D1D1868 //Ludi : Sky Terrace<1>
dd D1D18CC
dd D1D1930
dd D1D1994
dd D1D19F8 //Ludi : Sky Terrace<5>
dd D1D3D20 //Ludi : Toy Factory <Process 1> Zone 1
dd D1D3D84 //Ludi : Toy Factory <Process 1> Zone 2
dd D1D3DE8 //Ludi : Toy Factory <Process 1> Zone 3
dd D1D3EB0 //Ludi : Toy Factory <Process 1> Zone 5
dd D1D3F14 //Ludi : Toy Factory <Process 1> Zone 6
dd D1D3F78 //Ludi : Toy Factory <Aparatus Room>
dd D1D6430 //Ludi : Toy Factory <Process 2> Zone 1
dd D1D6494 //Ludi : Toy Factory <Process 2> Zone 2
dd D1D655C //Ludi : Toy Factory <Process 2> Zone 3
dd D1D65C0 //Ludi : Toy Factory <Process 2> Zone 4
dd D1DB250 //Ludi : Lost Time <1>
dd D1DB318 //Ludi : Lost Time <2>
dd D1D8B40 //Ludi : The Path of Time <1>
dd D1D8BA4
dd D1D8C6C
dd D1D8CD0 //Ludi : The Path of Time <4>
//Zipangu Undead Zone
dd 2FAF0800 //MushRoom Shrine
dd 2FAF2F11 //mountain of cloud fox
dd 2FAF5685 //Crow Forest II
dd 2FAF568E //A night in the forest
dd 2FAF5698 //Vanished Village
dd 2FAF56A2 //Encounter Buddha
dd 2FAF2F10 //Mushroom Forest
//2FAF2F74 //Hall of Mushroom
// mushroom to showa
dd 2FAF5620 //Crow Forest I
dd 2FAF7D30 //Forest of Animals
dd 2FBEBF70 //Showa Street 3
dd 2FBE9860 //Showa Street 2
dd 2FBE7150 //Showa Street 1
//2FBE4A40 //Showa Town
//Zipangu Hideout
dd 2FBEE680 //Near the hideout
dd 2FBEE681 //Parking Lot
dd 2FBEE682 //Finance of flaming Raccon
dd 2FBEE683 //Parlour
dd 2FBEE684 //Armory
Usables:
God Mode:
Makes you invulnerable to monsters' attack Quote:
God Mode V1:
</SPAN>Quote:[Enable]
0068A06D:
db 0f 84
[Disable]
0068A06D:
db 0f 85
God Mode V2:
Quote:[Enable]
0068A07F:
db 0f 85
[Disable]
0068A07F:
db 0f 84
God Mode v3:
Quote:[Enable]
0068A094:
db 75
[Disable]
0068A094:
db 74
God Mode v4:
Quote:[Enable]
0068A09A:
jns 0068afed
[Disable]
0068A09A:
js 0068afed
God Mode V5:
Quote:[Enable]
0068A0AA:
jg 0068a0b2
[Disable]
0068A0AA:
jle 0068a0b2
God Mode V6:
Quote:[Enable]
0068A0B8:
jns 0068afed
[Disable]
0068A0B8:
js 0068afed
God Mode V7:
Quote:[Enable]
0068A107:
db 0f 84
[Disable]
0068A107:
db 0f 85
God Mode V8:
Quote:[Enable]
0068A127:
db 75
[Disable]
0068A127:
db 74
God Mode V9:
Quote:[Enable]
0068A162:
db 74
[Disable]
0068A162:
db 75
Miss God Mode:
Making the monters' attacks to result with a 'MISS' sign.Quote:[Enable]
0068A188:
db 0f 85
[Disable]
0068A188:
db 0f 84
Tubi:
Makes you loot items faster.Quote:[Enable]
0049B73A:
nop
nop
[Disable]
0049B73A:
db 75 36
No Breath:
Removes the breath you need to take after each attack.Quote:[Enable]
0067251E:
db 90 90 90 90 90 90 90 90 90 90
[Disable]
0067251E:
mov [esi+00000304],00001388
Perfect No-breath:
Quote:[enable]
0049DAC9:
jmp 0049dadc
004C19DF:
jmp 004c1a05
006E91EF:
jmp 006e9205
[disable]
0049DAC9:
jle 0049dadc
004C19DF:
jle 004c1a05
006E91EF:
jle 006e9205
//YL is so bored
Unlimited Attack V1:
Removes the attacking counter.Quote:[Enable]
00685768:
nop
nop
nop
nop
nop
nop
[Disable]
00685768:
jnl 006857f5
Unlimited Attack V2:
Ignoress the attacking counter.Quote:[Enable]
006857DD:
and [ebx+00001294],00000100
nop
nop
nop
[Disable]
006857DD:
and dword ptr [ebx+00001294],00
Unlimited Attack V3:
Chanes position in order to rest the attack counter.Quote:[Enable]
// NON D/C Unlimited Attack!
// By Gthuggin of CEF
Alloc(UnlimitedAttack,64)
Alloc(CheckIf,44)
Label(returnme)
UnlimitedAttack:
mov eax,[007E1B10]
mov ebx,[eax+5b8]
sub ebx,00000001
mov [eax+5b8],ebx
popad
cmp eax,edi
mov [ebp-20],eax
je 00540051
jmp returnme
CheckIf:
pushad
mov eax,[007E1B10]
mov eax,[eax+1294]
cmp eax,00000050
jnl UnlimitedAttack
popad
cmp eax,edi
mov [ebp-20],eax
je 00540051
jmp returnme
0053FFEB:
jmp CheckIf
nop
nop
returnme:
[Disable]
0053FFEB:
cmp eax,edi
mov [ebp-20],eax
je 00540051
Dealloc(UnlimitedAttack)
Dealloc(CheckIf)
Unlimited Attack V4:
Forces new character coordinates to reset the counterQuote:[Enable]
//By DoomsDay @ CEF
Alloc(UnlimitedAttack,40)
Label(returnhere)
006C39D5:
jmp UnlimitedAttack
returnhere:
UnlimitedAttack:
push ebx
push eax
mov eax,[007E1B10]
mov ebx,[eax+5C0]
inc ebx
mov eax,[eax+1294]
cmp eax,50
pop eax
cmovge eax,ebx
pop ebx
mov [ebx],eax
mov edi,[ebp+10]
jmp returnhere
[Disable]
006C39D5:
mov [ebx],eax
mov edi,[ebp+10]
Dealloc(UnlimitedAttack)
Spam Hack:
Allows you to repeat the same line over and over again.Quote:[Enable]
004598C0:
db EB
00459904:
db EB
[Disable]
004598C0:
db 74
00459904:
db 73
BYOR - Bring Your Own Rope
Quote:[Enable]
//================================
// BYORope v1.00 for MSEA 0.42
// by PedraSimon@CEF
// converted by strikeboy
//================================
Alloc(BYORope,32)
Alloc(rope,32)
BYORope:
mov [rope+c],eax
mov eax,rope
push [ecx+10]
pop [eax+10]
push [ecx+18]
pop [eax+14]
ret 10
rope:
dd 1 0 1 0 0 0 1
0070B7E4:
jmp BYORope
nop
nop
[Disable]
0070B7E4:
PUSH EBP
MOV EBP, ESP
PUSH ECX
MOV EDX, [EBP+8]
Dealloc(BYORope,128)
Dealloc(rope)
Speed Attack:
Allowing you to attack two times fast, and then attacks one time in normal speed.
Quote:[Enable]
Alloc(SpeedAttack,128)
Label(Speed)
Label(retunhere)
Label(counter)
SpeedAttack:
cmp [counter],03
jl Speed
mov [counter],00
add eax,0A
Speed:
add [counter],01
mov [ebp+0c],eax
jmp retunhere
counter:
db 00
00435ED8:
jmp SpeedAttack
nop
retunhere:
[Disable]
00435ED8:
add eax, 0a
mov [ebp+0c],eax
Dealloc(SppedAttack,128)
Meso Explosion Exploit:
Allows you to explode all items as a Chief BanditQuote:[Enable]
004A3A62:
nop
nop
nop
nop
nop
nop
[Disable]
004A3A62:
je 004a3af7
Full Map Item Vac:
Increases your looting range to the entire screen.Quote:[Enable]
Alloc(ItemVac, 1024)
ItemVac:
pushad
mov ecx,[ebp+8]
mov ebx,[ebp-24]
mov [ecx],ebx
mov [ecx+4],eax
mov ecx,eax
mov eax,ebx
lea edx,[eax-19]
mov [ebp-34],edx
lea edx,[ecx-32]
add eax,19
add ecx,A
mov [ebp-30], edx
mov [ebp-2C], eax
mov [ebp-28], ecx
popad
push eax
push [ebp-24]
lea eax, [ebp-34]
jmp 004A2AA3
004A2A9C:
jmp ItemVac
nop
nop
[Disable]
004A2A9C:
push EAX
push [ebp-24]
lea eax, [ebp-34]
Mouse Controlled Character Filtered Item Vac:
Quote:[enable]
alloc(tom, 256)
alloc(jerry, 256)
label(XendX)
label(YendY)
label(XreturnX)
label(YreturnY)
tom:
push ecx
push edx
mov ecx, [007e1180]
mov ecx, [ecx+978]
mov ecx, [ecx+80]
mov edx, [007E1B10]
add edx, 5b8 //5b8
mov [edx], ecx
pop edx
pop ecx
jmp XendX
XendX:
mov [ebx], eax
mov edi, [ebp+10]
jmp XreturnX
jerry:
push ecx
push edx
mov ecx, [007e1180]
mov ecx, [ecx+978]
mov ecx, [ecx+84]
mov edx, [007E1B10]
add edx, 5bc
mov [edx], ecx
pop edx
pop ecx
jmp YendY
YendY:
mov [edi], eax
mov ebx, [ebp+14]
jmp YreturnY
006C39D5:
jmp tom
XreturnX:
006C3A3A:
jmp jerry
YreturnY:
[disable]
006C39D5:
mov [ebx], eax
mov edi, [ebp+10]
006C3A3A:
mov [edi], eax
mov ebx, [ebp+14]
dealloc(tom)
dealloc(jerry)
Skill Hack:
Replaces the beginner skills with Flash Jump and Teleport.Quote:[Enable]
Alloc(SkID,2048)
Label(Sklvl)
Label(skRecover)
Label(skNormal)
Label(SkBack)
Label(lvlRecover)
Label(lvlNormal)
Label(SklvlBack)
SkID:
cmp [eax],3EA
jne skRecover
mov [eax], 4C4F2f //Teleport
jmp skNormal
skRecover:
cmp [eax],3E9
jne skNormal
mov [eax], 3EBA9E //FJ
jmp skNormal
Sklvl:
cmp [edi], 4C4F2f //Teleport
jne lvlRecover
mov [edi],3EA
jmp lvlNormal
skNormal:
push [ebp+08]
mov edi,[eax]
jmp SkBack
lvlRecover:
cmp [edi], 3EBA9E //FJ
jne lvlNormal
mov [edi],3E9
jmp lvlNormal
lvlNormal:
mov eax,[edi]
push 05
push eax
jmp SklvlBack
006250BA:
jmp SkID
SkBack:
0045367B:
jmp Sklvl
SklvlBack:
[Disable]
006250BA:
push [ebp+08]
mov edi,[eax]
0045367B:
mov eax,[edi]
push 05
push eax
Dealloc(SkID)
Pet Training:
Allows you to traion your pet easier.Quote:[Enable]
registersymbol(UberY)
Alloc(UberY,64)
Alloc(CharY,16)
UberY:
push eax
mov eax, [007E1B10]
lea eax, [eax+5C4]
cmp edi, eax
je CharY
mov eax, [eax]
mov [edi], eax
pop eax
mov ebx,[ebp+14]
jmp 006C3621
CharY:
pop eax
mov [edi], eax
mov ebx,[ebp+14]
jmp 006C3621
006C3A3A:
jmp UberY
[Disable]
006C3A3A:
mov [edi],eax
mov ebx,[ebp+14]
unregistersymbol(UberY)
Dealloc(UberY)
Dealloc(CharY)
