[gms V39] Hacks/scripts/tools (hack Pack Also) H4x Maple Nao - NetworkTemple - (NT) -

~ dICE} porn pl0x · 22-06-2007, 07:17 AM

Hey im known as god on a forum named dfo. I think this is pretty nice for my first post.

NOTE: Please post in this topic to keep it alive ^_^ And also: HERE'S A HACK PACK THAT INCLUDES ALL YOU NEED SUCH AS CEM AND CT: http://rapidshare.com/files/37176468/H4X.rar.html

~~~~~~~~~~~~~~~~~~~~~SOME POINTERS~~~~~~~~~~~~~~~~~~~~~

People Scanner : 7db2ec / Offset :2c
Unlimited attack : 007DBDBC / Offset : 13D4
Item/Character Y : 007DBDBC / Offset :60C
Item/Character X : 007DBDBC / Offset : 608
Mouse X : 007DBD98 / Offset : 94
Mouse Y : 007DBD98 / Offset 98
bool: Adress: bool
Thanks to b6ooy for the following pointers ^_^
speed attack: 007DBDBC / Offset : 358
pID: 007DBDBC / Offset : 618
No Breath: 007DBDBC / Offset : 348

~~~~~~~~~~~~~~~~~~~~~CRC BYPASS & PIN UNRANDOMISER~~~~~~~~~~~~~~~~~~~~~

HOW TO BYPASS GG CRC CHECK:

here's a smal tut: Cheat Engine :: View topic - How to make your own GG CRC Bypass

CRC Bypass

Code:

[enable] 
ALLOC(CRC,128) 
ALLOC(DUMP,3670018) 
LABEL(OLDMEM) 
LABEL(RET) 
LOADBINARY(DUMP,v39.CEM) 

CRC: 
CMP ECX,00400000 
JB OLDMEM 
CMP ECX,00780000 
JA OLDMEM 
MOV EAX,DUMP 
ADD ECX, DUMP-400000 

OLDMEM: 
MOV EAX,[EBP+10] 
DB 56 57 
JMP RET 

465379: 
JMP CRC 
RET: 
[disable] 
465379: 
MOV EAX,[EBP+10] 
DB 56 57 
DEALLOC(dump) 
DEALLOC(crc)

[DISABLE]
00465379:
mov eax,[EBP+10]
db 56 57
dealloc(CRC)
dealloc(dump)

Pin Unrandomizer

Code:

[enable]
alloc(pinunrandom,128)
label(returnhere)

006289d5:    
jmp pinunrandom
returnhere:

pinunrandom:
add eax,edx
push edx
shr edx,1
mov [eax],edx
pop edx
cmp byte ptr [eax],ff
jmp returnhere
// by god of dfo

[disable]
006289d5:
add eax,edx
cmp byte ptr [eax],0a

~~~~~~~~~~~~~~~~~~~~~UNRANDOMISERS~~~~~~~~~~~~~~~~~~~~~

STR

Code:

[Enable] 
0071DBC8: 
mov eax,0 

[Disable] 
0071DBC8: 
mov eax,00007fff

DEX

Code:

 
[Enable] 
0071DBC8: 
mov eax,1 

[Disable] 
0071DBC8: 
mov eax,00007fff

INT

Code:

[Enable] 
0071DBC8: 
mov eax,2 

[Disable] 
0071DBC8: 
mov eax,00007fff

LUK

Code:

 
[Enable] 
0071DBC8: 
mov eax,3 

[Disable] 
0071DBC8: 
mov eax,00007fff

~~~~~~~~~~~~~~~~~~~~~BASICS~~~~~~~~~~~~~~~~~~~~~

Godmode

Code:

[Enable] 
683BA9: 
db 0F 84 
[Disable] 
683BA9: 
db 0f 85

Miss godmode

Code:

[ENABLE] 
00683CC4: 
jne 00684709 
[DISABLE] 
00683CC4: 
je 00684709

Perfect no breath

Code:

[Enable] 
4bbeb5: 
db eb 
49b703: 
db eb 
6E7EEA: 
db eb 
[Disable] 
4bbeb5: 
db 7e 
49b703: 
db 7e 
6E7EEA: 
db 7e

Super Tubi

Code:

[enable]
0049918a:
nop
nop
// by b6ooy of NT
[disable]
0049918a:
jne 004991c2

Unlimited Attack

Code:

[enable] 
// NON D/C Unlimited Attack!  
// GMS v39 
alloc(UnlimitedAttack,64) 
alloc(SecksyCheck,44) 

UnlimitedAttack: 
mov eax,[007DBDBC] 
mov ebx,[eax+608] 
sub ebx,00000001 
mov [eax+608],ebx 
popad 
cmp eax,edi 
mov [ebp-20],eax 
je 0053813c 

jmp 005380DD 

SecksyCheck: 
pushad 
mov eax,[007DBDBC] 
mov eax,[eax+13d4] 
cmp eax,00000062 
jnl UnlimitedAttack 
popad 
cmp eax,edi 
mov [ebp-20],eax 
je 0053813c 
jmp 005380DD 

005380D6: 
jmp SecksyCheck 
nop 
nop 

[disable] 

005380D6: 
cmp eax,edi 
mov [ebp-20],eax 
je 0053813c 

dealloc(UnlimitedAttack) 
dealloc(SecksyCheck)

Instant Drop

Code:

[enable]
00771c68:
add [eax],al
add [eax],al
add [eax],al
add [eax],al
// b6ooy of NT

[disable]
00771c68:
add [eax],al
add [eax],al
add [eax-71],al
inc eax

Spam hack

Code:

[enable] 
//Spam Hack! by Gthuggin 
00458886: 
db eb 
004588D0: 
db eb 
[disable] 
00458886: // stops you from spamming the same thing more than 3 times 
db 74 
004588D0: // stops you from typing too fast! 
db 73

Swear Filter Bypass

Code:

[Enable]
00458C98: 
db 90 90
// b6ooy of NT

[Disable]
00458C98: 
db 74 1c

Item vac

Code:

[enable] 
alloc(ItemVac,128) 
label(return) 
ItemVac: 
pushad 
mov ecx,[ebp+8] 
mov ebx,[ebp-24] 
mov [ecx],ebx 
mov [ecx+4],eax 
mov ecx,eax 
mov eax,ebx 
lea edx,[eax-19] 
mov [ebp-34],edx 
lea edx,[ecx-32] 
add eax,19 
add ecx,A 
mov [ebp-30],edx 
mov [ebp-2C],eax 
mov [ebp-28],ecx 
popad 
push eax 
push [ebp-24] 
lea eax,[ebp-34] 
jmp return 
004A07FE: 
jmp ItemVac 
nop 
nop 
return: 
[disable] 
004A07FE: 
push eax 
push [ebp-24] 
lea eax,[ebp-34]

Item Filter

Code:

[ENABLE] 
Alloc(filter,124) 
label(ifreject) 
label(end) 
label(skip) 
Alloc(iftable,16024) 
label(ifexit) 

filter: 
push ebx 
push esi 
xor ebx, ebx 
mov esi,iftable 

ifreject: 
cmp eax,[esi] 
je skip 
cmp [esi],ebx 
je end 
add esi,4 
jmp ifreject 

skip: 
mov eax,00 

end: 
pop esi 
pop ebx 
mov [edi+34], eax 
mov edi, [ebp-14] 
jmp ifexit 

iftable:                              

//Snowboards 
dd 1600DC //Sky Snowboard 
dd 1600DD //Aqua Snowboard 
dd 1600DE //Silver Snowboard 
dd 1600DF //Golden Snowboard 
dd 1600E0 //Dark Snowboard 
dd 1600E1 //Blood Snowboard 
dd 1600EE //Maple Snowboard 

//Usable Items 
dd 1F6EE0 //Arrow for Bow 
dd 1F72C8 //Arrow for Crossbow 
dd 1F6EE1 //Bronze Arrow for Bow 
dd 1F72C9 //Bronze Arrow for Crossbow 

//Potions 
dd 1E8480 //Red Potion 
dd 1E8481 //Orange Potion 
dd 1E8482 //White Potion 
dd 1E8483 //Blue Potion 
dd 1E8486 //Mana Elixer 

dd 1E8487 //Red Pill 
dd 1E8488 //Orange Pill 
dd 1E8489 //White Pill 
dd 1E848A //Blue Pill 
dd 1E848B //Mana Elixer Pill 

dd 1E8484 //Elixer 
dd 1E8485 //Power Elixer 

dd 1F47D4 //All Cure Potion 
dd 1F47D0 //Antidote 
dd 1F47D1 //Eye Drop 
dd 1F47D3 //Holy Water 
dd 1F47D2 //Tonic 

dd 1E8C50 //Dexterity Potion 
dd 1E8C52 //Magic Potion 
dd 1E8C55 //Sniper Potion 
dd 1E8C51 //Speed Potion 
dd 1E8C54 //Warrior Potion 
dd 1E8C53 //Wizard Potion 

dd 1E8C59 //Dexterity Pill 
dd 1E8C57 //Magic Pill 
dd 1E8C58 //Sniper Pill 
dd 1E8C5A //Speed Pill 
dd 1E8C56 //Warrior Pill 

dd 1EAB93 //Orange 
dd 1EAB94 //Lemon 
dd 1ED2AF //Sunset Dew 
dd 1E8868 //Watermelon 
dd 1EDA73 //Unagi 

//Rocks 
dd 3D2071 //The Summoning Rock 
dd 3D2070 //The Magic Rock 

//Monster Leftovers 
dd 3D09B3 //A bundle of goby 
dd 3D09D7 //Axe 
dd 3D0950 //Bain's Spiky Collar 
dd 3D0994 //Binding Bridle 
dd 3D0963 //Bloctopus Key Chain 
dd 3D0909 //Blue Mushroom Cap 
dd 3D0900 //Blue                                        snail                                        Shell 
dd 3D0966 //Blue Toy Block 
dd 3D09A4 //Bubble Fish's Thoughts 
dd 3D0925 //Bubbling's Huge Bubble 
dd 3D0982 //Buffoon's Grandpa Clock 
dd 3D0980 //Buffy's Hat 
dd 3D09B8 //Butter-Toasted Squid 
dd 3D0946 //Cellion Tail 
dd 3D094F //Cerebes' Tooth 
dd 3D0908 //Charm of the Undead 
dd 3D096F //Cheap Battery 
dd 3D097D //Chief Gray's Sign 
dd 3D092C //Clang Claw 
dd 3D0971 //Clock Spring 
dd 3D0973 //Cog 
dd 3D0917 //Cold Eye's Tail 
dd 3D0921 //Croco Skin 
dd 3D090D //Curse Eye's Tail 
dd 3D091F //Cursed Doll 
dd 3D09BA //Dark Drake's Horn 
dd 3D0957 //Dark Leatty Furball 
dd 3D0937 //Dark Jr. Yeti's Skin 
dd 3D093E //Dark Nependeath's Seed 
dd 3D0939 //Dark Pepe's Beak 
dd 3D0919 //Dark Stone Golem Rubble 
dd 3D0938 //Dark Yeti's Horn 
dd 3D0983 //Deep Buffoon's Rock Piece 
dd 3D09CD //Dirty Bandage 
dd 3D091E //Dragon Skin 
dd 3D090E //Drake's Skull 
dd 3D0985 //Dual Pirate's Propeller 
dd 3D0907 //Evil Eye's Tail 
dd 3D0992 //Evil Spirit 
dd 3D0944 //Fierry's Tentacles 
dd 3D0918 //Fire Boar's Tooth 
dd 3D0951 //Firebomb Flame 
dd 3D0955 //Fire Sentinel Shellpiece 
dd 3D0912 //Firewood 
dd 3D09A5 //Flamboyant Petal 
dd 3D09A2 //Flamboyant Scale Skin 
dd 3D094C //Flyeye Wing 
dd 3D0990 //Free Spirit 
dd 3D0984 //Ghost Pirate's Key 
dd 3D0987 //Gigantic Viking Hat 
dd 3D090C //Green Mushroom Cap 
dd 3D0948 //Grupin Tail 
dd 3D09A7 //Hard Needle 
dd 3D0960 //Hard Walnut 
dd 3D0933 //Hector's Tail 
dd 3D090F //Horny Mushroom Cap 
dd 3D09D0 //Horse Skull 
dd 3D09B9 //Ice Backbone 
dd 3D0996 //Ice Piece 
dd 3D0954 //Ice Sentinel Shellpiece 
dd 3D09B5 //Iced Shark's Fin 
dd 3D09B7 //Ink Bottle 
dd 3D09B2 //Iron Boar Armor 
dd 3D0927 //Iron Hog's Metal Hoof 
dd 3D0943 //Jr. Boogie's Horns 
dd 3D094E //Jr. Cerebes' Tooth 
dd 3D0922 //Jr. Necki's Skin 
dd 3D0958 //Jr. Pepe's Fish 
dd 3D0953 //Jr. Sentinel Shellpiece 
dd 3D0930 //Jr. Yeti's Skin 
dd 3D0981 //Lazy Buffy's Marble 
dd 3D0905 //Leaf 
dd 3D0915 //Leather 
dd 3D0956 //Leatty Furball 
dd 3D0920 //Ligator Skin 
dd 3D09B6 //Lime Powder Bottle 
dd 3D0947 //Lioner Tail 
dd 3D092B //Lorang Claw 
dd 3D094A //Lucida Tail 
dd 3D093C //Lunar Pixie's Moonpiece 
dd 3D091A //Lupin Doll 
dd 3D091D //Lupin's Banana 
dd 3D093D //Luster Pixie's Sunpiece 
dd 3D0936 //Lycanthrope's Toenail 
dd 3D0929 //Malady's Experimental Frog 
dd 3D0978 //Mateon's Tentacle 
dd 3D097A //Mecateon's Laser Gun 
dd 3D0970 //Mechanical Heart 
dd 3D0924 //Medicine With Weird Vibes 
dd 3D09B1 //Mixed Block 
dd 3D0968 //Motor 
dd 3D090B //Mushroom Spore 
dd 3D09A0 //Needle 
dd 3D093A //Nependeath's Seed 
dd 3D0906 //Octopus's Leg 
dd 3D0901 //Orange Mushroom Cap 
dd 3D096C //Panda Doll 
dd 3D09CF //Pelvic Bone 
dd 3D0932 //Pepe's Beak 
dd 3D0911 //Pig's Head 
dd 3D0902 //Pig's Ribbon 
dd 3D0969 //Plane Controller 
dd 3D0964 //Plastic Crown 
dd 3D0979 //Plateon's Helmet 
dd 3D099F //Poison Poopa's Poisonous Spikes 
dd 3D099E //Poopa Egg 
dd 3D0967 //Propeller 
dd 3D095F //Rat Trap 
dd 3D0977 //Receiving Apparatus 
dd 3D0910 //Red                                        snail                                        Shell 
dd 3D09CE //Rib 
dd 3D09A3 //Seahorse Horn 
dd 3D09A1 //Seahorse Tail 
dd 3D099D //Seal Meat 
dd 3D099B //Seal Skin 
dd 3D099C //Seal Tooth 
dd 3D0995 //Sealed Bottle 
dd 3D0993 //Sealed Teddy Bear 
dd 3D0991 //Sealed-up Grandpa Clock 
dd 3D09C3 //Seedling 
dd 3D093F //Sentinel Shellpiece 
dd 3D09B4 //Shark Denture 
dd 3D09A6 //Shrimp Meat 
dd 3D09CC //Skeledog's Bone 
dd 3D09C5 //Slate 
dd 3D090A //Slime's Bubble 
dd 3D0974 //Small Egg 
dd 3D0976 //Small Spaceship 
dd 3D0913 //                                        snail                                        Shell 
dd 3D0999 //Snorkle 
dd 3D14BD //Soft Feather 
dd 3D0949 //Solid Horn 
dd 3D0975 //Space Food 
dd 3D0961 //Spiderweb 
dd 3D0904 //Squishy Liquid 
dd 3D093B //Star Pixie's Piece of Star 
dd 3D0962 //Sticky Spiderweb 
dd 3D14BC //Stiff Feather 
dd 3D092A //Stirge's Wing 
dd 3D0916 //Stone Golem?s Rubble 
dd 3D09A8 //Sunflower Seed 
dd 3D0972 //Table Clock 
dd 3D0923 //Tablecloth 
dd 3D091C //Tauromacis's Horn 
dd 3D092E //Taurospear's Horn 
dd 3D096A //Teddy's Cotton 
dd 3D096B //Teddy's Yellow Ribbon 
dd 3D099A //Toy Baby Seal 
dd 3D097F //Toy Drum 
dd 3D096D //Toy Duckling 
dd 3D096E //ToyTroyan Sword 
dd 3D0903 //Tree Branch 
dd 3D092D //Tortie Shell 
dd 3D0986 //Viking Sail 
dd 3D0935 //Werewolf's Toenail 
dd 3D0934 //White Pang's Tail 
dd 3D0914 //Wild Boar's Tooth 
dd 3D091B //Wild Cargo's Eye 
dd 3D82BA //Wooden Board 
dd 3D097B //Worn-Out Goggle 
dd 3D0965 //Yellow Toy Block 
dd 3D0931 //Yeti's Horn 
dd 3D0952 //Zombie's Lost Gold Tooth 
dd 3D0945 //Zombie's Lost Tooth 
dd 3D098F //Zombie Teddy Bear 

//Mini-Game Items 
dd 3D7E3C //Monster Card 
dd 3D7E3D //Bloctopus Omok Piece 
dd 3D7E31 //Mushroom Omok Piece 
dd 3D7E3A //Octopus Omok Piece 
dd 3D7E39 //Omok Table 
dd 3D7E3F //Panda Teddy Omok Piece 
dd 3D7E3B //Pig Omok Piece 
dd 3D7E3E //Pink Teddy Omok Piece 
dd 3D7E30 //Slime Omok Piece 
dd 3D7E40 //Trixter Omok Piece 

//Ores 
dd 3D3013 //Adamantium Ore 
dd 3D3010 //Bronze Ore 
dd 3D3016 //Gold Ore 
dd 3D3012 //Mithril Ore 
dd 3D3015 //Orihalcon Ore 
dd 3D3014 //Silver Ore 
dd 3D3011 //Steel Ore 

//Jewel Ores 
dd 3D5721 //Amethyst Ore 
dd 3D5722 //Aquamarine Ore 
dd 3D5728 //Black Crystal Ore 
dd 3D5727 //Diamond Ore 
dd 3D5723 //Emerald Ore 
dd 3D5720 //Garnet Ore 
dd 3D5724 //Opal Ore 
dd 3D5725 //Sapphire Ore 
dd 3D5726 //Topaz Ore 

//Crystal Ores 
dd 3D18A4 //Dark Crystal Ore 
dd 3D18A2 //DEX Crystal Ore 
dd 3D18A3 //LUK Crystal Ore 
dd 3D18A0 //Power Crystal Ore 
dd 3D18A1 //Wisdom Crystal Ore

dd 00 

4A197D: 
jmp filter 
nop 
ifexit: 

[DISABLE] 
dealloc(filter)  
dealloc(IFTable)  

4A197D:  
MOV [EDI+34], EAX  
MOV EDI, [EBP-14]

Lag hack

Code:

[enable]
006B89DF: 
jne 006B89EC 
[disable]
006B89DF:
je 006B89EC

Lag hack V2 Thanks to Heroic Mage for updating

Code:

[enable] 
//Updated by Herioc Mage of CEF 
005380DB: 
DB 75 5F 
[disable] 
005380DB: 
DB 74 5F

MElvin Credit's go to michael5451 for updating it ^_^

Code:

[Enable] 
alloc(Melvin,64) 
alloc(Melever,4) 
alloc(Metemp,4) 
alloc(Metemp2,4) 
alloc(Metemp3,4) 
registerSymbol(Melever) 
label(MelvinOFF) 
label(EndMelvin) 

Melever: 
dd 0 

Melvin: 
cmp [Melever],00 
je MelvinOFF 
pop [Metemp] 
pop [Metemp2] 
pop [Metemp3] 
push [Melever] 
push [Metemp2] 
push [Metemp] 

MelvinOFF: 
call 0077970E 
jmp EndMelvin 

68649B: //E8 0C FE 08 00 81 EC 8C 0A 00 00 53 56 8B 35 20 
jmp Melvin 
EndMelvin: 

[Disable] 
68649B: //E8 0C FE 08 00 81 EC 8C 0A 00 00 53 56 8B 35 20 
call 0077970E 

dealloc(Melvin) 
dealloc(Melever) 
dealloc(Metemp) 
dealloc(Metemp2) 
dealloc(Metemp3) 
unregisterSymbol(Melever) 


or this correct me if they r both wrong 

[Enable] 
alloc(Melvin,64) 
alloc(Melever,4) 
alloc(Metemp,4) 
alloc(Metemp2,4) 
alloc(Metemp3,4) 
registerSymbol(Melever) 
label(MelvinOFF) 
label(EndMelvin) 

Melever: 
dd 0 

Melvin: 
cmp [Melever],00 
je MelvinOFF 
pop [Metemp] 
pop [Metemp2] 
pop [Metemp3] 
push [Melever] 
push [Metemp2] 
push [Metemp] 

MelvinOFF: 
call 00779716 
jmp EndMelvin 

68649B: //E8 0C FE 08 00 81 EC 8C 0A 00 00 53 56 8B 35 20 
jmp Melvin 
EndMelvin: 

[Disable] 
68649B: //E8 0C FE 08 00 81 EC 8C 0A 00 00 53 56 8B 35 20 
call 00779716 

dealloc(Melvin) 
dealloc(Melever) 
dealloc(Metemp) 
dealloc(Metemp2) 
dealloc(Metemp3) 
unregisterSymbol(Melever)

MzBot bypasser

Code:

[ENABLE] 
77DD7883: 
ret 0018 

[DISABLE] 
77DD7883: 
mov edi,edi

Pin typer Thanks to *Candy Shop* ^_^

Code:

[enable] 
4804CB: // 0F 86 6C FF FF FF 
jae 0048043D 


[disable] 
4804CB: 
jbe 0048043D

Crash Maple

Code:

[Enable] 
0071DBC8: 
jmp, 0 

[Disable] 
0071DBC8: 
and eax, 00007fff

Speed Attack Thanks to b6ooy

Code:

[enable] 
alloc(speedattack,256) 
label(speed) 
label(normal) 
label(returnhere) 


pushad 
mov eax,[007DBDBC] // Pointer 
mov edx,[eax+13D4] // Offset 
mov ecx,04 // increase this if you DC 
mov eax,edx 
shr edx,0f 
idiv ecx 
dec ecx 
cmp edx,ecx 
popad 
jne normal 

speed: 
jmp 00435B1A //6A 03 6A FE 8D 4D B8 E8 5B D6 FC FF 33 FF 39 BB 

normal: 
add eax,0a 
mov [ebp+0c],eax 
jmp returnhere 

00435A7E: //AOB Changed I found it with assembly search 
jmp speedattack 
nop 
returnhere: 

[disable] 
00435A7E: 
add eax,0a 
mov [ebp+0c],eax 

dealloc(speedattack)

~~~~~~~~~~~~~~~~~~~~~OFF MAPING~~~~~~~~~~~~~~~~~~~~~

Tele up

Code:

 [enable]
006BB427:
db 76
// 73 6C DD 45 EC 8D 4E 18 51 51
[disable]

Tele left

Code:

[enable] 
006BB327: 
db 72 
// 73 53 DD 45 EC 8B CE 51 51 DD

Fall through

Code:

[enable] 
006BA6B9: 
db 0f 83 

[disable] 
006BA6B9: 
db 0f 86 
[disable] 
006BB327: 
db 73

Tele right

Code:

[enable]
006BB396:
db 77
//76 72 DD 45 EC 8B CE 51 51 DD
[disable]
006BB396:
db 73

Levitate

Code:

[Enable]
006B9DA2:
// 0F 84 ED 01 00 00 8B 8E 78 01
jne 002b9f95
[Disable]
006B9DA2:
je 002b9f95

Swim

Code:

[Enable]  
00574C47: 
db 74 04 

[Disable] 

00574C47: 
db 75 04

~~~~~~~~~~~~~~~~~~~~~VACS~~~~~~~~~~~~~~~~~~~~~

Lemmings

Code:

[Enable] 
006BED1F: 
db 8b 83 10 01 

[Disable] 
006BED1F: 
db 8b 83 20 02

Selective Wallvac

Code:

[ENABLE]
alloc(begin,2048)
alloc(olddata,32)
alloc(pointer,4)
alloc(bool,4)
registersymbol(bool)
registersymbol(olddata)
label(set)
label(ret)
label(end)

begin:
cmp [bool],1
je set
ret:
mov esi,olddata
movsd
movsd
movsd
movsd
pop edi
jmp end
set:
mov esi,[007D8224] 
mov esi,[esi+0C]
mov [pointer], esi
mov esi,[pointer]
mov [olddata],esi
mov esi,[007D8224] 
mov esi,[esi+10]
mov [pointer], esi
mov esi,[pointer]
mov [olddata+04],esi
mov esi,[007D8224] 
mov esi,[esi+14]
mov [pointer], esi
mov esi,[pointer]
mov [olddata+08],esi
mov esi,[007D8224] 
mov esi,[esi+18]
mov [pointer], esi
mov esi,[pointer]
mov [olddata+0C],esi

mov [bool],0
jmp ret

006B4E23: 
jmp begin
end:

olddata:
DB 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
pointer:
DB 00 00 00 00
bool:
DB 01 00 00 00

[DISABLE]
dealloc(begin)
dealloc(olddata)
dealloc(pointer)
dealloc(bool)

006B4E23: 
movsd
movsd
movsd
movsd
pop edi[color=#FFBF80]

Normal dICE

Code:

[enable]
alloc(dICE,64)
alloc(right,4)
alloc(left,4)
registersymbol(right)
registersymbol(left)
label(return)

dICE:
pushad

mov edx, [007d8DA0]
mov ebx, [edx+57c]
mov ecx,[edx+580]
add ebx, [right]
sub ebx, [left]

mov eax,[007D8224]
mov [eax+C],ebx
mov [eax+14],ebx
mov [eax+10],ecx
mov [eax+18],ecx
popad

mov [ebx], eax
mov edi,[ebp+10]
jmp return

right: //Set right to 0.
db 00 00

left: //Set left to 0.
db 00 00

006BC849:
jmp dICE
return:

006BF1AB:
db 0f 84

006B8C98:
db 75

006B8F34:
db 0f 85

[disable]
006BC849:
mov [ebx], eax
mov edi,[ebp+10]

006BF1AB:
db 0f 85

006B8C98:
db 74

006B8F34:
db 0f 84

dealloc(dICE)
dealloc(left)
dealloc(right)
unregistersymbol(left)
unregistersymbol(right)

pid00 V6 (Best public vac to date.Apart from modified dupe of course but it's private)

Code:

piD00 vac v6 
Updated by b6ooy from CEF

[Enable] 
alloc(DeletePlatform, 64) 
label(DeleteId) 
label(Normal) 
label(ret) 
alloc(pID00drag, 512) 
alloc(Counter, 4) 
label(SetWalls) 
label(Default) 
label(ret1) 

006BF1AB: //0F 85 62 01 00 00 FF 77 30 83 65 10 00 83 65 0C
db 0f 84 

00537F9A: //updated by dragonfngs , I can't get it
db 90 90 90 90 90 

0068D45E: // AOB Changed
db dc 05 

006BB687: //89 BE 10 01 00 00 E8 84 01 00 00 FF B6 54 01 00
jmp DeletePlatform 
nop 
ret: 

DeletePlatform: 
pushad 
mov edx,[007DBDBC] // Pointer
mov edx,[edx+618] // pID Offset
sub edx, C 
cmp esi, edx 
popad 
jne DeleteId 
jmp Normal 

DeleteId: 
mov [esi+110], 00 
jmp ret 

Normal: 
mov [esi+110], edi 
jmp ret 

00604483: //89 83 7C 05 00 00 8D 45 E8 50 8D 45 EC 89 8B 80
jmp pID00drag 
nop 
ret1: 

pID00drag: 
cmp [Counter], 1 
je SetWalls 
jmp Default 

SetWalls: 
pushad 
mov ebx, [007db430] // got from dragonfngs
mov ebx, [ebx+978] 
mov eax, [ebx+80] 
mov ebx, [ebx+84] 

mov ecx, [7DB2E4] 
mov [ecx+C], eax 
mov [ecx+14], eax 
mov [ecx+10], ebx 
mov [ecx+18], ebx 
popad 
jmp Default 

Default: 
mov [ebx+0000057C], eax 
jmp ret1 

Counter: 
DB 01 00 00 00 

[Disable] 
006BF1AB: 
db 0f 85 
00537F9A: //updated by dragonfngs , I can't get it
call 0049513d
0068D45E: 
db dc 1d 
006BB687: 
mov [esi+00000110], edi 
00604483: 
mov [ebx+0000057C], eax 
dealloc(DeletePlatform) 
dealloc(pID00drag) 
dealloc(Counter)

Ubr vac Credits to B6ooy ^_^

Code:

[ENABLE] 
////////////////// 
//--------------// 
// UbR\Vac 3.0  // 
//--------------// 
// Made by UbR\ // 
//--------------// 
// Or dBuGG3D   // 
//--------------// 
// For GMS v.39 // 
//--------------// 
// Updated by B6ooy  // 
//--------------// 
////////////////// 


/////////// 
//The Vac// 
/////////// 
ALLOC(UbR,256) 
ALLOC(Ub3R,4) 
ALLOC(Stay,17) 
LABEL(Normal2) 

//////////////// 
//Filtered pID// 
//////////////// 
ALLOC(pID,1024) 
ALLOC(Run,4) 
ALLOC(ESI,4) 
ALLOC(EDI,4) 
LABEL(SETpID) 
LABEL(Normal1) 
LABEL(Back1) 

////////// 
//Bypass// 
////////// 
ALLOC(Begin,128) 
ALLOC(Check,4) 
ALLOC(Walls,32) 
LABEL(RET) 
LABEL(Back2) 
LABEL(SET) 
LABEL(END) 


////////////////// 
///Begin;Script/// 
////////////////// 

Run: 
DD 0 

ESI: 
DD 0 

EDI: 
DD 0 

Check: 
DD 1 


//////////////////////// 
///Begin;Filtered pID/// 
//////////////////////// 

pID: 
push eax 
cmp [Run], 3 
je SETpID 
mov eax, [007DBDBC]  // Pointer
add eax, 618 // pID Offset
mov eax, [eax] 
sub eax, C 
mov [ESI],eax 
mov eax,[eax+114] // this changed?
mov [EDI],eax 
inc [Run] 
inc [Run] 

SETpID: 
cmp esi,[ESI] 
je Normal1 
mov edi, 0 

Normal1: 
mov [esi+00000110],edi 
pop eax 
jmp Back1 

006BB687: //89 BE 10 01 00 00 E8 84 01 00 00 FF B6 54 01 00
jmp pID 
nop 
Back1: 


////////////////// 
///Begin;Bypass/// 
////////////////// 

Begin: 
mov ecx,4 
cmp [Check], 1 
je SET 

RET: 
mov esi, Walls 
rep movsd 
pop edi 
jmp END 

SET: 
push edi 
mov esi, [7DB2E4] //Pointer
add esi, C 
mov edi, Walls 
rep movsd 
pop edi 
mov [Check], 0 
jmp Begin 

006B85BF: //A5 A5 A5 A5 5F 5E C2 04 00 B8 98 62 76 00 E8 96
jmp Begin 
END: 

Stay: 
push [ebx+000005c0] // Changed
push [ebx+000005bc] // Changed
jmp Back2 


/////////////////// 
///Begin;UbR\Vac/// 
/////////////////// 

UbR: 
cmp [Check],1 
je Normal2 
cmp [Ub3R],1337 // leet Lol
je Stay 
mov word ptr[006BF1AB],840F //0F 85 62 01 00 00 FF 77 30 83 65 10 00 83 65 0C
*mov word ptr[0068D45E],05DC // Omg Fainally got it , AOB Changed
push [ebx+000005c0] // Changed
push [ebx+000005bc] // Changed
push edx 
push ecx                  
push [ebx+000005c0] // Changed
push [ebx+000005bc] // Changed
mov eax,[7DB2E4] // Pointer
pop ecx 
mov [eax+C],ecx 
mov [eax+14],ecx 
pop edx 
mov [eax+10],edx 
mov [eax+18],edx 
mov [Ub3R],1337 
jmp Back2 

Normal2: 
push [ebx+000005c0] // Changed
push [ebx+000005bc] // Changed
jmp Back2 

00433A14: // AOB fully Changed , WTF this was the hardest part
jmp UbR 
DB 90 90 90 90 90 90 90 
Back2: 

00537F9A: //updated by dragonfngs , I can't get it
DB 90 90 90 90 90 

///////////// 
///End;Vac/// 
///////////// 

[DISABLE] 
DEALLOC(UbR) 
DEALLOC(Ub3R) 
DEALLOC(Begin) 
DEALLOC(Stay) 
DEALLOC(pID) 
DEALLOC(Run) 
DEALLOC(ESI) 
DEALLOC(EDI) 
DEALLOC(Check) 
DEALLOC(Walls) 

00433A14: // AOB fully Changed , WTF this was the hardest part
push [ebx+000005c0] // Changed
push [ebx+000005bc] // Changed

00537F9A: //updated by dragonfngs
DB E8 8C F2 F5 FF 

0068D45E: // So Hard AOB Changed
DB DC 1D 08 

006BF1AB: //0F 85 62 01 00 00 FF 77 30 83 65 10 00 83 65 0C
jne 006BBB77 

006B85BF: //A5 A5 A5 A5 5F 5E C2 04 00 B8 98 62 76 00 E8 96
DB A5 A5 A5 A5 5F 

006BB687: //89 BE 10 01 00 00 E8 84 01 00 00 FF B6 54 01 00
mov [esi+00000110],edi

Slow dupex

Code:

[ENABLE] 
alloc(CodeCave,32) 
alloc(Pointer,32) 
registersymbol(CodeCave) 
registersymbol(Pointer) 
label(ReturnHere) 

CodeCave: 
push ecx 
mov ecx,Pointer 
mov [ecx],esi 
pop ecx 
mov [esi+00000114],edi 
jmp ReturnHere 

006BB64B: //89 BE 14 01 00 00 EB 0E 83 7D 0C 00 74 08 8B 45
jmp CodeCave 
nop 
ReturnHere: 

[DISABLE] 
006BB64B: 
mov [esi+00000114],edi 

dealloc(CodeCave) 
dealloc(Pointer) 
unregistersymbol(CodeCave) 
unregistersymbol(Pointer)

Dupex Pointer

Code:

Address of pointer: Pointer 
Offset: 110

Dupex On/Off

Code:

[ENABLE] 
alloc(YoYoDupe, 1024) 
alloc(RunFlag, 4) 
alloc(ESIValue, 4) 
alloc(EDIValue, 4) 
alloc(ESIAddy,4) 
alloc(hookit,128) 
alloc(onoff,4) 
registersymbol(onoff) 
registersymbol(ESIAddy) 
label(returnhere) 
label(NoVac) 
label(DupeXVac) 
label(DoNormal) 
label(back) 


onoff: 
dd 0 

YoYoDupe: 
push eax 
push ecx 
mov ecx,[onoff] 
cmp [onoff], 0 
je DoNormal 
cmp [RunFlag], ecx 
je DupeXVac 
mov eax, [007DBDBC] // Pointer
add eax, 618 // pID
mov eax, [eax] 
sub eax, c 
mov [ESIValue],eax 
mov eax,[eax+114] // Changed?
mov [EDIValue],eax 
inc [RunFlag] 
inc [RunFlag] 

DupeXVac: 
cmp esi,[ESIValue] 
je DoNormal 
push ecx 
mov ecx,ESIAddy 
mov [ecx],esi 
pop ecx 

DoNormal: 
mov [esi+00000110],edi 
pop ecx 
pop eax 
jmp back 

ESIAddy: 
db 00 
db 00 
db 00 
db 00 

RunFlag: 
db 00 
db 00 
db 00 
db 00 

ESIValue: 
db 00 
db 00 
db 00 
db 00 

EDIValue: 
db 00 
db 00 
db 00 
db 00 

006BB687: //89 BE 10 01 00 00 E8 84 01 00 00 FF B6 54 01 00
jmp YoYoDupe 
nop 
back: 

00538224: //89 83 00 04 00 00 8D 85 64 FF FF FF 50 FF 15 CC
jmp hookit 
nop 
returnhere: 

hookit: 
cmp [onoff], 0 
je NoVac 
cmp [ESIAddy], 0 
je NoVac 
push eax 
push ebx 
mov eax,[ESIAddy] 
mov ebx,[EDIValue] 
mov [eax+110],ebx  // Changed?
mov eax,[eax+110] //Changed?
mov [eax+4c],ebx // Changed?
mov [eax+50],ebx //Changed?
pop ebx 
pop eax 

NoVac: 
mov [ebx+00000400],eax
jmp returnhere 

[DISABLE] 
unregistersymbol(ESIAddy) 
dealloc(YoYoDupe) 
dealloc(RunFlag) 
dealloc(ESIValue) 
dealloc(EDIValue) 
dealloc(ESIAddy) 
dealloc(hookit) 
dealloc(onoff) 

00538224: 
mov [ebx+00000400],eax 

006BB687: 
mov [esi+00000110],edi

Bottom platform suck

Code:

[enable] 
alloc(SuckDown, 64) 
label(lawl) 

006BB38D: //DD 5D EC DC 5D EC DF E0 9E 76 72 DD 45 EC 8B CE
jmp SuckDown 
lawl: 

SuckDown: 
fstp [ebp-1c] 
jmp lawl 

[disable] 
006BB38D: 
fstp [ebp-14] 
dealloc(SuckDown)

One level map

Code:

[enable] 
0054C7DF:    
fstp st(1) 
[disable] 
0054C7DF: 
fstp st(0)

Super dICE (dice is one of the most leachiest vac ever. whenever I see somone use it I KNOW that they leach. and compared to pid vaccuming it sucks.)

Code:

[enable]
//Credits to ICE and dBuGG3d for Original script
// and nog_lorp for selective wallvac!
// Super Dice 2
// By Gthuggin of CEF
alloc(SuperDICE,333)
alloc(Right,4)
alloc(Left,4)
alloc(Options,4)
alloc(GetWallValues,88)
alloc(NoVac,20)
alloc(MesoDrop,24)
alloc(MoveLeft,64)
alloc(MoveRight,64)
alloc(VacStart,4)
alloc(LeftWall,4)
alloc(RightWall,4)
alloc(TopWall,4)
alloc(BottomWall,4)
alloc(ResetWalls,222)
alloc(Mouse,222)
alloc(KeepOn,4)
alloc(KeepSettingMouse,32)
alloc(JustSetOnce,32)
alloc(JustTurnOffDice,100)
alloc(FlyingMonsterVac,100)
label(backToIt)
label(Mreturn)
// SWvac
alloc(olddata,32)
alloc(bool,4)
label(set)
label(ret)
label(end)

6CE35000:
cmp [bool],1
je set
ret:
mov esi,olddata
movsd
movsd
movsd
movsd
pop edi
jmp end
set:
push eax
mov eax,[007D8224]
push [eax+0C]
pop [olddata]
push [eax+10]
pop [olddata+04]
push [eax+14]
pop [olddata+08]
push [;eax+18]
pop [olddata+0C]
pop eax
mov [bool],0
jmp ret

006B4E23:
jmp 6CE35000
end:

olddata:
DB 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
bool:
DB 01 00 00 00

NoVac:
push [ebx+00000548]
push [ebx+00000544]
jmp backToIt

// Grabs the wall values before enabling
// So it knows what to set them back to
// When you disable dICE+SWvac by dropping 40 mesos
GetWallValues:
push eax
mov eax,[007d8224]
push [eax+C]
pop [LeftWall]
push [eax+14]
pop [RightWall]
push [eax+10]
pop [TopWall]
push [eax+18]
pop [BottomWall]
mov [Options],A
mov [right],0
mov [left],0
mov [VacStart],0
pop eax
jmp SuperDICE

ResetWalls:
push eax
mov eax,[007d8224]
push [LeftWall]
pop [eax+C]
push [RightWall]
pop [eax+14]
push [TopWall]
pop [eax+10]
push [BottomWall]
pop [eax+18]
mov [Options],A
mov [right],0
mov [left],0
mov [bool],1
mov byte ptr [6BBA10], 85
mov byte ptr [6B5799], 84
mov byte ptr [6B54FC], 74
mov dword ptr [6B4E23], A5A5A5A5
mov byte ptr [6B4E27], 5F
pop eax
jmp SuperDICE

Mouse:
mov dword ptr [6B4E23],7801D8E9
mov byte ptr [6B4E27],6C
cmp [bool],00
jne NoVac
pushad
mov byte ptr [6BBA10], 84
mov byte ptr [6B5799], 85
mov byte ptr [6B54FC], 75
mov edx, [007d8370]
mov edx, [edx+978]
mov ebx, [edx+80]
mov ecx, [edx+84]
mov eax,[007d8224]
mov [eax+C],ebx
mov [eax+14],ebx
mov [eax+10],ecx
mov [eax+18],ecx
popad
cmp [KeepOn],01
je NoVac
mov [Options],A
jmp SuperDICE

MesoDrop:
mov [Options],eax
cmp eax,[esi+000000b4]
jmp Mreturn

MoveRight:
mov [left],0
add [right],25
mov [Options],1337
jmp SuperDICE

MoveLeft:
mov [right],0
add [left],25
mov [Options],1337
jmp SuperDICE

KeepSettingMouse:
mov [KeepOn],01
jmp Mouse

JustSetOnce:
mov [KeepOn],0
jmp Mouse

JustTurnOffDice:
push eax
mov eax,[007d8224]
push [LeftWall]
pop [eax+C]
push [RightWall]
pop [eax+14]
push [TopWall]
pop [eax+10]
push [BottomWall];
pop [eax+18]
pop eax
mov byte ptr [6BBA10], 85
mov byte ptr [;6B5799], 84
mov byte ptr [6B54FC], 74
mov [Options],A
jmp SuperDICE

FlyingMonsterVac:
mov dword ptr [6B4E23],7801D8E9
mov byte ptr [6B4E27],6C
cmp [bool],00
jne NoVac
pushad
mov edx,[ebx+00000548] //item Y
mov ecx,[ebx+00000544] // item X
mov eax,[007d8224]
mov [eax+C],ecx
mov [eax+14],ecx
mov [eax+10],edx
mov [eax+18],edx
popad
mov [Options],A
jmp SuperDICE

SuperDICE:
cmp [VacStart],00
jne GetWallValues
cmp [Options],A // 10 to stay in one spot
je NoVac
cmp [Options],14 // 20 to move left
je MoveLeft
cmp [Options],1E // 30 to move right
je MoveRight
cmp [Options],28 // 40 to reset walls to original values AND
je ResetWalls // completely disable dice+selectivewallvac allowing you to jump
cmp [Options],32 // 50 to just turn off dice and not selective wall vac
je JustTurnOffDice
cmp [Options],3C // 60 to set vac to mouse pointer
je JustSetOnce
cmp [Options],46 // 70 to constantly set vac to mouse pointer
je KeepSettingMouse
cmp [Options],50 // 80 If you want to vac flying monsters!
je FlyingMonsterVac //NOTE: ONLY FOR FLYING MONSTERS
cmp [Options],63 // 99 to get new wall values if you change map
je GetWallValues
mov dword ptr [6B4E23],7801D8E9
mov byte ptr [6B4E27],6C
cmp [bool],00
jne NoVac
pushad
mov byte ptr [6BBA10], 84
mov byte ptr [6B5799], 85
mov byte ptr [6B54FC], 75
mov edx,[ebx+00000548] //item Y
mov ecx,[ebx+00000544] // item X
//Walls
mov eax,[007d8224]
sub ecx,[left]
add ecx,[right]
mov [eax+C],ecx
mov [eax+14],ecx
mov [eax+10],edx
mov [eax+18],edx
popad
push [ebx+00000548]
push [ebx+00000544]
jmp backToIt


006B1EBC:
jmp MesoDrop
nop
Mreturn:

004339EA:
jmp SuperDICE
nop
nop
nop
nop
nop
nop
nop
backToIt:

VacStart:
db 13 33 33 37

Options:
db 00 00 00 00

Right:
db 00 00 00 00

Left:
db 00 00 00 00

KeepOn:
db 00 00 00 00

[disable]

004339EA:
push [ebx+00000548];
push [ebx+00000544]

006B1EBC:
cmp eax,[esi+000000b4]

6B54FC:
db 74

6BBA10:
db 85

6B5799:
db 84

dealloc(SuperDICE)
dealloc(Right)
dealloc(Left)
dealloc(VacStart)
dealloc(NoVac)
dealloc(MesoDrop)
dealloc(Options)
dealloc(MoveLeft)
dealloc(MoveRight)
dealloc(LeftWall)
dealloc(RightWall)
dealloc(TopWall)
dealloc(BottomWall)
dealloc(ResetWalls)
dealloc(Mouse)
dealloc(KeepOn)
dealloc(KeepSettingMouse)
dealloc(JustSetOnce)
dealloc(JustTurnOffDice)
dealloc(FlyingMonsterVac)
dealloc(olddata)
dealloc(bool)

pid00 V2

Code:

[Enable] 
alloc(DeletePlatform, 64) 
label(DeleteId) 
label(Normal) 
label(ret) 
alloc(pID00drag, 512) 
alloc(Counter, 4) 
label(SetWalls) 
label(Default) 
label(ret1) 

6BBA0F: 
db 0f 84 

00535D5D: 
db 90 90 90 90 90

689D39: 
db dc 05 

6B7EEB: 
jmp DeletePlatform 
nop 
ret: 

DeletePlatform: 
pushad 
mov edx,[7D8CFC] 
mov edx,[edx+5A0] 
sub edx, C 
cmp esi, edx 
popad 
jne DeleteId 
jmp Normal 

DeleteId: 
mov [esi+110], 00 
jmp ret 

Normal: 
mov [esi+110], edi 
jmp ret 

600F3A: 
jmp pID00drag 
nop 
ret1: 

pID00drag: 
cmp [Counter], 1 
je SetWalls 
jmp Default 

SetWalls: 
pushad 
mov eax, [7D8DA0] 
mov eax, [eax+57C] 

mov ebx, [7D8DA0] 
mov ebx, [ebx+580] 

mov ecx, [7D8224] 
mov [ecx+C], eax 
mov [ecx+14], eax 
mov [ecx+10], ebx 
mov [ecx+18], ebx 
popad 
mov [Counter], 0 
jmp Default 

Default: 
mov [ebx+0000057C], eax 
jmp ret1 

Counter: 
DB 01 00 00 00 

[Disable] 
6BBA0F: 
db 0f 85 
00535D5D: 
call 00494FEE
689D39: 
db dc 1d 
6B7EEB: 
mov [esi+00000110], edi 
600F3A: 
mov [ebx+0000057C], eax 
dealloc(DeletePlatform) 
dealloc(pID00drag) 
dealloc(Counter)

Pap/Zak vac

Code:

// Pap/Zak vac 0.39
[Enable]
alloc(sseax, 20)
label(exit)
 
006B896E:
jmp sseax
nop
nop
nop
exit:
 
sseax:
mov eax, faded
mov [ebp+0c],eax
call 0054CC89 // 55 8B EC 83 EC 14 8B 45 08 53 56 57 8D 78 08 89
jmp exit
 
[Disable]
006B896E: //89 45 0C E8 13 43 E9 FF DD 47 38 D8 C9 8D 4E
mov [ebp+0c],eax
call 0054CC89 // 55 8B EC 83 EC 14 8B 45 08 53 56 57 8D 78 08 89
dealloc(sseax)

Mouse vac

Code:

[Filtered Mouse Vac 0.39
Updated by god   , dfo
[Enable] 
Alloc(MouserX,512) 
Alloc(MouserY,512) 
label(normalx) 
label(normaly) 
label(back) 
label(return) 

006BC849: //89 03 8B 7D 10 85 FF 74 5E FF B6 9C 00 00 00 8D
jmp MouserX 
back: 

006BC8AE: //89 07 8B 5D 14 85 DB 74 58 FF B6 84 00 00 00 8D
jmp MouserY 
return: 

MouserX: 
push eax 
mov eax,[007DBDBC] // Pointer
mov eax,[eax+618] //pID Offset
cmp esi,eax 
pop eax 
jne normalx 
mov ebx, [007db430] // got from dragonfngs
mov ebx, [ebx+978] 
mov eax, [ebx+80] 
mov [ebx], eax 
mov edi,[ebp+10] 
jmp back 
normalx: 
mov [ebx], eax 
mov edi,[ebp+10] 
jmp back 

MouserY: 
push eax 
mov eax,[007DBDBC] // Pointer
mov eax,[eax+618] // pID Offset
cmp esi,eax 
pop eax 
jne normaly 
mov ebx, [007db430] // got from dragonfngs
mov eax, [eax+978] 
mov eax, [eax+84] 
mov [edi], eax 
mov ebx,[ebp+14] 
jmp return 
normaly: 
mov [edi], eax 
mov ebx,[ebp+14] 
jmp return 

[Disable] 
006BC849: 
mov [ebx], eax 
mov edi,[ebp+10] 

006BC8AE: 
mov [edi],eax 
mov ebx,[ebp+14] 
dealloc(MouserX) 
dealloc(MouserY)

Pervac

Code:

[enable] 
alloc(DeletePlatform,128) 
alloc(DeleteId,54) 
alloc(Normal,54) 
alloc(perX,200) 
alloc(perY,200) 
label(returnx) 
label(returny) 
label(ret) 

006BB687: 
jmp DeletePlatform 
nop 
ret: 

DeletePlatform: 
pushad 
mov edx,[007D8CFC] 
mov edx,[edx+5A0] 
sub edx, C 
cmp esi, edx 
popad 
jne DeleteId 
jmp Normal 

DeleteId: 
mov [esi+110], 00 
jmp ret 

Normal: 
mov [esi+110], edi 
jmp ret 

perX: 
// original opcodes 
mov eax,[edi+0c] 
push ebx 
mov esi,ecx 

push eax 
mov eax,[7D8DA0] 
mov eax,[eax+57C] 
sub eax,1E 
mov [edi+0c],eax 
pop eax 
jmp returnx 

perY: 
// original opcodes 
push [ebx+10] 
mov eax,[edi+10] 

push eax 
mov eax,[7D8DA0] 
mov eax,[eax+580] 
mov [edi+0c],eax 
pop eax 
jmp returny 

6B51A6: 
jmp perX 
nop 
returnx: 

6B51CB: 
jmp perY 
nop 
returny: 

[disable] 

6B51A6: 
mov eax,[edi+0c] 
push ebx 
mov esi,ecx 

6B51CB: 
push [ebx+10] 
mov eax,[edi+10] 

006BB687: 
mov [esi+00000110],edi 
call 006b807a

Camvac (I wish they kept it private -_-)

Code:

[Enable] 
alloc(GetXY,256) 
alloc(x,4) 
alloc(y,4) 
label(dotele) 
label(returnhere) 
label(normal) 

GetXY: 
push edx 
push ecx 
mov edx,[007d8cfc] 
mov ecx,[edx+5a0] 
cmp esi,ecx 
je normal 
mov [y], eax 
mov ecx,[edi-4] 
mov [x], ecx 
cmp [edx+2d4],6 
je dotele 
cmp [edx+2d4],2 
je dotele 
jmp normal 

dotele: 
mov ecx,[x] 
sub ecx, 50 
mov [edx+db8],ecx 
mov ecx,[y] 
sub ecx, 15 
mov [edx+dbc],ecx 
mov [edx+2d4],13 

normal: 
pop ecx 
pop edx 
mov [edi],eax 
mov ebx,[ebp+14] 
jmp returnhere 

006BC8AE: 
jmp GetXY 
returnhere: 

[disable] 
006BC8AE: 
mov [edi],eax 
mov ebx,[ebp+14] 

dealloc(GetXY) 
dealloc(x) 
dealloc(y)

Horse vac

Code:

[ENABLE] 
alloc(DeletePlatform, 64) 
label(DeleteId) 
label(Normal) 
label(ret) 
alloc(HorseVac, 512) 
alloc(Counter, 4) 
label(SetWallCoord) 
label(DogShed) 
label(ret1) 

006BF1AB: //0F 85 62 01 00 00 FF 77 30 83 65 10 00 83 65 0C 
je 006BBB77 

006B9DA2: //0F 84 ED 01 00 00 8B 8E 78 01 00 00 A1 
jne 006b9f95 

006BB687: //89 BE 10 01 00 00 E8 84 01 00 00 FF B6 54 01 00 
jmp DeletePlatform 
nop 
ret: 

DeletePlatform: 
pushad 
mov edx,[007DBDBC]  // Pointer 
mov edx,[edx+618]  // pID offset 
sub edx, C 
cmp esi, edx 
popad 
jne DeleteId 
jmp Normal 

DeleteId: 
mov [esi+110], 00 
jmp ret 

Normal: 
mov [esi+110], edi 
jmp ret 

00604483: //89 83 7C 05 00 00 8D 45 E8 50 8D 45 EC 89 8B 80 
jmp HorseVac 
nop 
ret1: 

HorseVac: 
cmp [Counter], 1 
je SetWallCoord 
jmp DogShed 

SetWallCoord: 
pushad 
mov eax, [007DBDBC]  // Pointer 
mov eax, [eax+608] // Item X 
sub eax, 37 
mov ebx, [007DBDBC] // Pointer 
mov ebx, [ebx+60C] // Item Y 

mov ecx, [7DB2E4] // Pointer 
mov [ecx+C], eax 
mov [ecx+14], eax 
mov [ecx+10], ebx 
mov [ecx+18], ebx 
popad 
mov [Counter], 0 
jmp DogShed 

DogShed: 
mov [ebx+00000608], eax 
jmp ret1 

Counter: 
DB 01 00 00 00 

006B9D8F: //DB 45 08 DC 0D 28 D9 76 00 DD 5D E8 E8 1B 37 FD // Finally updated , was hard 
db 90 90 90 
006B8C98: //74 05 E8 25 02 00 00 39 B3 60 01 00 00 74 07 8B 
db 75 
006B8F34: //0F 84 D0 00 00 00 FF B6 48 01 00 00 8D 86 40 01 
db 0f 85 

[Disable] 
006B9D8F: 
db db 45 08 
006B8C98: 
db 74 
006B8F34: 
db 0f 84 

006BF1AB: 
je 006BBB77 

006B9DA2: 
jne 006b9f95 

006BB687: 
mov [esi+00000110], edi 

00604483: 
mov [ebx+0000057c], eax 

dealloc(DeletePlatform) 
dealloc(HorseVac) 
dealloc(Counter)

Lightning Vac

Code:

[ENABLE] 
//LightningVac 
// Updated to 0.39 by b6ooy of CEF 
alloc(DeletePlatform, 64) 
label(DeleteId) 
label(Normal) 
label(ret) 
alloc(pID00drag, 512) 
alloc(Counter, 4) 
label(SetWalls) 
label(Default) 
label(ret1) 

006BF1AB: //0F 85 62 01 00 00 FF 77 30 83 65 10 00 83 65 0C 
je 006bf313 
006B9DA2: //0F 84 ED 01 00 00 8B 8E 78 01 00 00 A1 24 82 7D 
jne 006b9f95 

006BB687: //89 BE 10 01 00 00 E8 84 01 00 00 FF B6 54 01 00 
jmp DeletePlatform 
nop 
ret: 

DeletePlatform: 
pushad 
mov edx,[007DBDBC] // Pointer 
mov edx,[edx+618] // pID Offset 
sub edx, C 
cmp esi, edx 
popad 
jne DeleteId 
jmp Normal 

DeleteId: 
mov [esi+110], 00 
jmp ret 

Normal: 
mov [esi+110], edi 
jmp ret 

00604483: //89 83 7C 05 00 00 8D 45 E8 50 8D 45 EC 89 8B 80 
jmp pID00drag 
nop 
ret1: 

pID00drag: 
cmp [Counter], 1 
je SetWalls 
jmp Default 

SetWalls: 
pushad 
mov eax, [007DBDBC] // Pointer 
mov eax, [eax+608] // Item X 
add eax,00000064 //sub=left, add=right, 

mov ebx, [007DBDBC] // Pointer 
mov ebx, [ebx+60C] // Item Y 

mov ecx, [7DB2E4] 
mov [ecx+C], eax 
mov [ecx+14], eax 
mov [ecx+10], ebx 
mov [ecx+18], ebx 
popad 
mov [Counter], 0 
jmp Default 

Default: 
mov [ebx+0000057C], eax 
jmp ret1 

Counter: 
DB 01 00 00 00 

[DISABLE] 
006BF1AB: 
jne 006bf313 

006B9DA2: 
je 006b9f95 

006BB687: 
mov [esi+00000110], edi 

00604483: 
mov [ebx+0000057C], eax 

dealloc(DeletePlatform) 
dealloc(pID00drag) 
dealloc(Counter)

Hybrid Vac Thanks to k!

Code:

[ENABLE] 
//Hybridvac by k! 
// GMS 0.39 
005381E1: 
je 005381F3 

006B9D0B: 
jne 006B9D11 

00770938: 
dd 1 

006BB327: 
jb 006BB35F 

[DISABLE] 

005381E1: 
jne 005381F3 

006B9D0B: 
jae 006B9D11 

00770938: 
dd 0 

006BB327: 
jae 006BB35F

dEM

Code:

[enable] 
// dEM 0.39 
// Updated by b6ooy of CEF 
// Working , i didn't test if it d/c after 60 Hit 
// If did PM me , i'll try to make ANOTHER dEM 
// I think i Can =p 
alloc(dv,100) 
alloc(dvtype,4) 
label(normalx) 
label(normaly) 
label(endx) 
label(endy) 
label(backdv) 
label(dvzero) 
label(dvone) 
registersymbol(dvtype) 

dv: 
mov eax, [007DBDBC] // Pointer 
push eax 
mov eax, [eax+60C] // Item Y 
mov [ebx+3FC], eax // < Changed ?? 
cmp [dvtype], 0 
je dvzero 
cmp [dvtype], 1 
je dvone 
sub eax, 100 
jmp dvzero 
dvone: 
add eax, 100 
dvzero: 
mov [ebx+3F4], eax // < Changed ?? 
pop eax 
mov eax, [eax+618]  // pID Offset 
mov [ebx+3F4], eax 
mov [ebx+400], eax 
jmp backdv 

push ecx 
mov ecx, [007DBDBC] 
add ecx,598 
cmp ebx, ecx 
je normalx 
mov ecx, [ecx] 
cmp [dvtype], 0 
cmp [dvtype], 1 
sub ecx, 100 
add ecx, 100 
cmp [ebx],ecx 
je endx 
normalx: 
mov [ebx],eax 
endx: 
pop ecx 
mov edi, [ebp+10] 

push ecx 
mov ecx, [007D8CFC] 
add ecx,59C 
cmp edi, ecx 
je normaly 
mov ecx, [ecx] 
cmp [edi],ecx 
je endy 
normaly: 
mov [edi],eax 
endy: 
pop ecx 
mov ebx, [ebp+14] 

00538224: //89 83 00 04 00 00 8D 85 64 FF FF FF 50 FF 15 CC 
jmp dv 
nop 
backdv: 

[disable] 
00538224: 
mov [ebx+400], eax 

dealloc(dv) 
dealloc(uvx) 
dealloc(uvy) 
dealloc(dvtype) 
unregistersymbol(dvtype)

Dragon vac Thanks to Heroic Mage for updating

Code:

[enable] 
//Updated by Heroic Mage of CEF 
005381CC: 
jne 005381E3 

005381E1: 
je 005381F3 

00770938: 
dd 1 

006BB327: 
jb 006BB37C 

[disable] 
005381CC: 
je 005381E3 

005381E1: 
jne 005381F3 

00770938: 
dd 0 

006BB327: 
jae 006BB37C

Dragon vac V2 Thanks to Heroic Mage for updating

Code:

[enable] 
//Updated and edited by Heroic Mage of CEF 
005381CC: 
jne 005381E3 

005381E1: 
je 005381F3 

00770938: 
dd 1 

006BB327: 
jb 006BB35F 

[disable] 
005381CC: 
je 005381E3 

005381E1: 
jne 005381F3 

00770938: 
dd 0 

006BB327: 
jae 006BB35F

Fangor

Code:

[ENABLE] 
006BDFA8: 
fstp st(5) 

[DISABLE] 
006BDFA8: 
fstp st(0)

Teleport Attack

Code:

[enable] 
0067FE23: 
db 75 
[disable] 
0067FE23: 
db 74

ZigZag

Code:

[enable] 
006B8C98: //Fly v1 
jne 006B8C9F 

006B8F34: //Monster Jump 
jne 006B900A 

[disable] 
006B8C98: 
je 006B8C9F 

006B8F34: 
je 006B900A

Stinky Vac Thanks to *Candy Shop* (NEW! This Vac will suck all the monster (and you) to the Top right wall and then
you will fall with the monsters and the monsters will get vacced...^^)

Code:

[enable] 
006BB0B3: 
fstp st(7) 
// By *CandyShop* 
[disable] 
006BB0B3: 
fstp st(0)

~~~~~~~~~~~~~~~~~~~~~FUN~~~~~~~~~~~~~~~~~~~~~

Sit anywhere (might be private still, dont know)

Code:

 [Enable]
0067D673:
db 31 c1

[Disable]
0067D673:
db 33 c0

Gravity

Code:

[Enable] 
006B9E22: //73 1B DD 45 D8 DC 75 E0 DC 4D E8 DC 45 F8 DD 55
db 76 
006B9DE4: //76 5B DC 15 08 D9 76 00 DF E0 9E 72 50 DD 45 F8
db 77 

[Disable] 
006B9E22: 
db 73 
006B9DE4: 
db 76

Airwalk (maybe private still?)

Code:

[enable] 00670196: //74 0F 33 C0 3B DE 0F 9C C0 83 E0 01 83 C8 02 EB
db 90 
[disable] 
00670196: 
je 006701a7

Always duck

Code:

[enable] 
00670163: //7E 0E 8B 45 10 83 E0 01 83 C8 0A E9 89 00 00 00
jnle 00670173 //33 C0 39 B1 CC 02 00 00 8B 4D 10 0F 9E C0 83 E1
[disable] 
00670163: 
jle 00670173

Assulter slide

Code:

[enable] 
0067FEA3: //0F 85 8E 00 00 00 83 7D EC 00 0F 8E 84 00 00 00
db 0f 84 
0067FCFD: //0F 85 04 01 00 00 68 A4 14 06 C0 51 8B CC 89 A5
db 0f 84 
[disable] 
0067FEA3: 
db 0f 85 
0067FCFD: 
db 0f 85

No Spawn

Code:

[Enable] 
005381CC: 
db 75 15 

006BA6B9: 
db 0f 83 

[disable] 
005381CC: 
db 74 15 

006BA6B9: 
db 0f 86

Backward pull

Code:

enable] 
006BAEBB: //73 48 8B 75 08 FF 76 10 C7 45 FC 01 00 00 00 56
jbe 006baf05 //8B 75 08 8B 83 10 01 00 00 FF 76 10 DD 40 40 83
[disable] 
006BAEBB: 
jae 006baf05

Can't write my PIN: Thanks to *Candy shop*

Code:

[enable] 
00628A54: 
jmp 00628add 
// By *CandyShop* 
[disable] 
00628A54: 
je 00628add

Can't write my PIN 2: Thanks to *Candy shop*

Code:

[enable] 
00628A20: 
jmp 00628add 
// By *CandyShop* 
[disable] 
00628A20: 
jne 00628add

Unlimited Letters,Number Writing (In PIN): Thanks to *Candy shop*

Code:

[enable] 
00628AB2: 
jmp 00628ab9 
// By *CandyShop* 
[disable] 
00628AB2: 
je 00628ab9

Unrandomize Letters+Numbers: Thanks to *Candy shop*

Code:

[enable] 
00628AFA: 
jne 00628b10 
// By *CandyShop* 
[disable] 
00628AFA: 
je00628b10

Unrandomize Letters+Numbers 2: Thanks to *Candy shop*

Code:

[enable] 
00628AF7: 
jne 00628b33 
// By *CandyShop* 
[disable] 
00628AF7: 
je 00628b33

Can't find Number's!!! - I like it!! ^^ Thanks to *Candy shop*

Code:

[enable] 
006289DA: 
jmp 006289e3 
// By *CandyShop* 
[disable] 
006289DA: 
jae 006289e3

Can Write just the Letter 'A' (in PIN): that too...^^ Thanks to *Candy shop*

Code:

[enable] 
006289DA: 
jne 006289e3 
// By *CandyShop* 
[disable] 
006289DA: 
jae 006289e3

Cant Write my PIN, Letter+Number: (Useless )

Code:

[enable] 
0062885A: 
jmp 006288a9 
// By *CandyShop* 
[disable] 
0062885A: 
je 006288a9

Six minute Fly

Code:

[Enable] 
006B8CA5 
jne 006b8cae 
006B8F34: 
jne 006b900a 
[Disable] 
006B8CA5: 
je 006b8cae 
006B8F34: 
je 006b900a

Dark Sight

Code:

[enable] 
0066D74D: 
je 0066D75A 
[disable] 
0066D74D: 
jne 0066D75A

CS Damage Hack

Code:

[enable] 
//Updated by Herioc Mage of CEF 
0077355E: 
and al,ch 
[disable] 
0077355E: 
and al,40

CS Damage Hack (99999) thanks to Heroic Mage

Code:

[enable] 
//Updated by Herioc Mage of CEF 
0077355E: 
db 24 79 
[disable] 
0077355E: 
db 24 40

Invisible Character

Code:

[ENABLE] 
0066D76A: 
jne 00661BA4 
[DISABLE] 
0066D76A: 
je 00661BA4

CREDITS: I cant stress enough how thankful I am to the people who contributed to this post and helped me ^_^ I have said credits next to the name's of the scripts people have updated/fix/helped with ^_^ so yeah that's the credits I guess.

~ jonisthin · 22-06-2007, 11:20 AM

haha gj man thats a nice load of scripts u got ill tryem out right now

if they work +rep

~ dICE} porn pl0x · 22-06-2007, 11:22 AM

np, btw to use them bypass gg> just saying (incase you think this crc bypass is all you need.)

p. Thusum · 22-06-2007, 11:28 AM

Originally Posted by dICE} porn pl0x

np, btw to use them bypass gg> just saying (incase you think this crc bypass is all you need.)

What do you mean by this??

~ dICE} porn pl0x · 22-06-2007, 11:37 AM

Im saying unless you bypass gg's crc check then you cant use the scripts that's all.

e. SasukeHacker · 22-06-2007, 11:40 AM

gj +rep for your hard work.