論壇 › 舊代碼存放區(TWMS) › 特定技能倍數攻擊

elloco22 發表於 2024-10-10 21:34:26

特定技能倍數攻擊

本帖最後由 elloco22 於 2024-10-20 23:02 編輯

特定技能倍數攻擊(shootobj)

yxes 發表於 2024-10-10 21:34:27

add ObjRepeatFlag as address
add OBJRepeatTime as address
change OBJRepeatTime for multiplier
//yxes TWMS265.4
//Shootobj Multiplier
//ObjRepeatFlag = 1 = ON
//ObjRepeatFlag = 0 = OFF
//OBJRepeatTime = # Multiple Cast
alloc(yxes,47,0x140000000)
alloc(ObjRepeatHook,2048,0x140000000)
alloc(OBJRepeatTime,24,0x140000000)
alloc(OBJRepeatFlag,24,0x140000000)
alloc(OBJRepeatCounter,24,0x140000000)
alloc(ShootobjX_og,10,0x140000000)
define(ShootobjX_Addr,0x144C02344)
registersymbol(ShootobjX_Addr)
registersymbol(yxes)
registersymbol(OBJRepeatFlag)
registersymbol(OBJRepeatTime)
registersymbol(ShootobjX_og)
label(yxes_exit)

ObjRepeatFlag:
db 1

ObjRepeatTime:
db 0

ShootobjX_og:
readmem(ShootobjX_Addr,10)

yxes:
db 49 8B D5 48 8D 8D 10 01 00 00
db 48 8D 4D 10 48 89 4C 24 28 48 89 44 24 20 44 8B CB 8B 7D 84 44 8B C7 8B D6 48 8B 4D D0
db 48 8B 5D 18 79 78 65 73

ObjRepeatHook:
cmp ,0
je yxes_exit
readmem(yxes,10)
call 144C7C0F0
readmem(yxes+A,29)
call 14467E300
readmem(yxes+27,4)
push rax
inc
cmp eax,
pop rax
jb ObjRepeatHook
mov ,0
jmp ShootobjX_Addr+35
yxes_exit:
readmem(ShootobjX_Addr,10)
jmp ShootobjX_Addr+A
ShootobjX_Addr:
jmp ObjRepeatHook


ShootobjX_Addr:
readmem(ShootobjX_og,10)

dealloc(*)
unregistersymbol(*)

yxes 發表於 2024-10-14 12:38:50

what skills?

elloco22 發表於 2024-10-14 13:05:10

yxes 發表於 2024-10-14 12:38 static/image/common/back.gif
what skills?

特定技能 shootobj

yxes 發表於 2024-10-14 17:33:19

i'll do this tomorrow

yxes 發表於 7 天前

i did not test it. i am GMS player, I don't have access to TWMS game.

btb 發表於 7 天前

registersymbol(SbjRepeatCounter)
registersymbol(SbjRepeatTime)
alloc(SbjRepeatHook,2048,MapleStory.exe)
alloc(SbjRepeatTime,24,MapleStory.exe)
alloc(SbjRepeatCounter,24,MapleStory.exe)
label(exit)

SbjRepeatTime:
db 0

SbjRepeatHook:
mov rdx,r13
lea rcx,
call 144C7C0F0
lea rcx,
mov ,rcx
mov ,rax
mov r9d,ebx
mov edi,
mov r8d,edi
mov edx,esi
mov rcx,
call 144D49CA0
push rax
inc
cmp eax,
pop rax
jb SbjRepeatHook
mov ,0
jmp 144C02375

exit:
mov rdx,r13
lea rcx,
jmp 144C0234E



144C02344:
jmp SbjRepeatHook
db 90 90 90 90 90



144C02344:
mov rdx,r13
lea rcx,


補充內容 (2024-10-26 12:05):
錯誤數據

btb 發表於 7 天前

yxes 發表於 2024-10-26 05:36 static/image/common/back.gif
i did not test it. i am GMS player, I don't have access to TWMS game.

I followed the script you gave me to correct a few errors in the TMS.


registersymbol(SbjRepeatCounter)
registersymbol(SbjRepeatTime)
alloc(SbjRepeatHook,2048,MapleStory.exe)
alloc(SbjRepeatTime,24,MapleStory.exe)
alloc(SbjRepeatCounter,24,MapleStory.exe)
label(exit)

SbjRepeatTime:
db 0

SbjRepeatHook:
mov rdx,r13
lea rcx,
call 144C7C0F0
lea rcx,
mov ,rcx
mov ,rax
mov r9d,ebx
mov edi,
mov r8d,edi
mov edx,esi
mov rcx,
call 144D49CA0
push rax
inc
cmp eax,
pop rax
jb SbjRepeatHook
mov ,0
jmp 144C02375

exit:
mov rdx,r13
lea rcx,
jmp 144C0234E



144C02344:
jmp SbjRepeatHook
db 90 90 90 90 90



144C02344:
mov rdx,r13
lea rcx,

補充內容 (2024-10-26 11:51):
exit:
mov rdx,r13
lea rcx,
jmp 144C0234E
這段可以刪掉

補充內容 (2024-10-26 12:08):
此數據為錯誤數據

yxes 發表於 7 天前

yes i made it complicated on purpose. for fun ;P here is simple:
//yxes TWMS265.4
//Shootobj Multiplier
//ObjRepeatFlag = 1 = ON
//ObjRepeatFlag = 0 = OFF
//OBJRepeatTime = # Multiple Cast

alloc(ObjRepeatHook,2048,0x140000000)
alloc(OBJRepeatTime,24,0x140000000)
alloc(OBJRepeatFlag,24,0x140000000)
alloc(OBJRepeatCounter,24,0x140000000)
alloc(ShootobjX_og,10,0x140000000)
define(ShootobjX_Addr,0x144C02344)
registersymbol(ShootobjX_Addr)
registersymbol(OBJRepeatFlag)
registersymbol(OBJRepeatTime)
registersymbol(ShootobjX_og)

ObjRepeatTime:
db 0

ShootobjX_og:
readmem(ShootobjX_Addr,10)

ObjRepeatHook:
mov rdx,r13
lea rcx,
call 144C7C0F0
lea rcx,
mov ,rcx
mov ,rax
mov r9d,ebx
mov edi,
mov r8d,edi
mov edx,esi
mov rcx,
call 144D49CA0
mov rbx,
push rax
inc
cmp eax,
pop rax
jb ObjRepeatHook
mov ,0
jmp ShootobjX_Addr+35

ShootobjX_Addr:
jmp ObjRepeatHook


ShootobjX_Addr:
readmem(ShootobjX_og,10)

dealloc(*)
unregistersymbol(*)

yxes 發表於 7 天前

yxes 發表於 2024-10-26 15:31 static/image/common/back.gif
yes i made it complicated on purpose. for fun  here is simple:

remove:
alloc(OBJRepeatFlag,24,0x140000000)
registersymbol(OBJRepeatFlag)

gmsplayer01 發表於 7 天前

//gms v254.1
//Shootobj Multiplier
//yxes


alloc(ObjRepeatHook,2048,144535A3E)
alloc(OBJRepeatTime,24,144535A3E)
alloc(OBJRepeatCounter,24,144535A3E)
registersymbol(OBJRepeatTime)
registersymbol(OBJRepeatCounter)

OBJRepeatTime:
db #3

ObjRepeatHook:
mov rdx,r14
lea rcx,
call 1445BB910
lea rcx,
mov ,rcx
mov ,rax
mov r9d,r13d
mov edi,
mov r8d,edi
mov edx,esi
mov rcx,
call 14467E300
mov rbx,
push rax
inc
cmp eax,
pop rax
jb ObjRepeatHook
mov ,0
jmp 144535A3E+35

144535A3E:
jmp ObjRepeatHook
db 90 90 90 90 90


144535A3E:
mov rdx,r14
lea rcx,

dealloc(*)
unregistersymbol(*)appreciate it but doesn't even work on gms
谢谢 但在国际服也用不了

補充內容 (2024-10-26 18:03):
tested on archer arrow blow
尝试了弓箭手1阶断魂箭

OBJRepeatTime = 5 straight ended up laggy and crashed
OBJRepeatTime = 5 直接卡死然后炸了

yxes 發表於 6 天前

i thought only post reader can see it. didn't mean to make the script public
gms works

補充內容 (2024-10-27 10:09):
post maker*

查看完整版本: 特定技能倍數攻擊