Useful code

[Raiden]

Oops, my fault. I didn`t cancel out the HSCRC lablels......

Well, IDK why Cam`s MSCRC is so long and complicated with rubbish inside....actually the "getoutahere" and "llop" is NOT needed. zzzz

Now, the MSCRC have NO problems at all, we don`t need to study it.

HSCRC, Ah! this is the problem. Now can anyone boom it down? Hope soon.

Well, the main thing of the topic is, the HS(Hack Shield)`s CALLBACK function. What is it???
Okay, when you open CE (Cheat Engine lar) when you`re mapling, what happen? You know lo.....
(WHY? HOW? SO? )

WHY? HS detected CE as a hacking tool!!! And it crashes MS(Maple Story) down!!!
HOW? HS informs MS to let it close down and shows the HAD(Error code 0x10501,Hack Attempt Detected) message.
SO? We have to BLOCK down the communication between HS and MS so a bypass can be formed.

(YAY! No need MSCRC liao! HAHAHA!!!~~~~~)

WAIT!!!! Don`t be so happy....MSCRC is still needed.... (WHOOOAA??!!)
The reason is, the CRC check of MS itself will straight crash the program without any notice. So, MSCRC is still needed. Means, MSCRC check is seperated from HackShield. (Oh...I See.....)

So what we can do now, is to TRACE, DETOUR, SEARCH AND DESTROY the communication between HS and MS. The first clue is,

Code: Select all

mov ecx,00010501

Oh well, you guys never explore HS`s memory right? I show you how. You cannot play maple unless you restart.....
1) Open Maple until in-game(Gateway Selection)
2) Open Cheat Engine (you know what happens next)
3) Ignore the HAD message, attach MS into CE
4) Browse memory region (If u dunno, GO AWAY!!! DIDN`T I MENTIONED AT THE THREAD, THE BIG RED FONT?!)
5) CTRL+G
6) Type EhSvc.dll (no capital also can)
7) Tadaa!!! You entered EhSvc.dll, the core of HS`s memory region.

It`ll appear "Ordinal11" if you have "show symbol" option on. I recommend you all to switch on "Show Module Address" and "Show Kernel Mode Symbols" before working on.

Good luck, these are all info I can give you all.

[evilkie]

3) Ignore the HAD message, attach MS into CE

i tot is attach CE to MS

[PIEzLOVERS]

So we just change the "1" in HSCRC to "0" ... right ?

[Raiden]

So we just change the "1" in HSCRC to "0" ... right ?

NO Of course. The HSCRC can be thrown into rubbish bin liao. Modify also no use. It must be fully re-coded. (NOT OPENPROCESS ANYMORE DUDE!!!!!)

[ninabusiao]

okay. So NoNameBot has the SuperTubi function and the NoBreath function. I just need to tick it for it to work. So for those both to work in game, a bypass is needed? And if actually bypasses the game, maybe you can look at the scripts of the NoNameBot?

[Raiden]

okay. So NoNameBot has the SuperTubi function and the NoBreath function. I just need to tick it for it to work. So for those both to work in game, a bypass is needed? And if actually bypasses the game, maybe you can look at the scripts of the NoNameBot?

FYI Unlimited Attack, Super Tubi and No Breath can be made using C++ pointer function. No bypass is needed.

[guyz92]

Debug register still work well with Alpha Version of Cheat Engine.
Works very well with x64 windows 7 hardware debugging.

I just wonder anyone here using Core 2 process would like to try out DBVM.
DBVM allow you to hack somehow which out really changing the memory.

[Raiden]

BUMPZZ

Nobody wanna take a try on the code?

Code: Select all

mov ecx, 00010501

@guyz92: You mean, you can bypass HS?!