prt 發表於 2024-11-7 01:27:30

TwMs v265.5 SkillInjection(技能注入)

//TwMs v265.5 SkillInjection(技能注入)

//code from here to '' will be used to enable the cheat
alloc(newmem,2048,144D164C0)
label(returnhere)
label(originalcode)
label(exit)
alloc(SkillID,4)
alloc(Timer,4)
alloc(Delay,4)
registersymbol(SkillID)
registersymbol(Delay)
registersymbol(Timer)

SkillID:
dd #1221011

Delay:
dd #50

Timer:
dd 00

newmem: //this is allocated memory, you have read,write,execute access
//place your code here
mov r8,
cmp qword ptr ,2
jg originalcode

mov r8,
mov r8,
cmp dword ptr ,0
je originalcode

call 144E0C2B0
mov r8d,eax
sub r8d,dword ptr
cmp r8d,dword ptr
jl originalcode
mov dword ptr ,eax

mov r8d,
mov dword ptr ,r8d
mov eax,0x00000001
xor r8,r8
jmp 144D164D9

originalcode:
mov eax,0x00000001
xor r8,r8
cmp ,r12d

exit:
jmp returnhere

144D164C0:
jmp newmem
nop
nop
returnhere:

144D16519:
jmp 144D16661
nop

144D16707:
jmp 144D16761
nop


144D164C0:
cmp ,r12d

144D16519:
db 3B 83 78 8A 00 00 0F 84

144D16707:
db 0F 87 1B 02 00 00

dealloc(newmem)
dealloc(SkillID)
dealloc(Timer)
dealloc(Delay)

guoxue332 發表於 2024-11-19 10:27:51

sub r8d,dword ptr
mov dword ptr ,eax  這兩行是否可以用其他代碼來代替呢?

yxes 發表於 2024-11-19 13:44:33

guoxue332 發表於 2024-11-19 10:27 static/image/common/back.gif
sub r8d,dword ptr
mov dword ptr ,eax  這兩行是否可以用其他代碼來代替呢? ...

no, it uses TimeGetTime function and subtracts it to get ready for the next execution
then it stores new Timer

It works like this:
Put current time in
Compare current time with by subtracting current time with
If that time exceeds our , execute code (use the skill)

guoxue332 發表於 2024-11-19 15:33:16

yxes 發表於 2024-11-19 13:44 static/image/common/back.gif
no, it uses TimeGetTime function and subtracts it to get ready for the next execution
then it stor ...

是這樣喔,感謝解答
頁: [1]
查看完整版本: TwMs v265.5 SkillInjection(技能注入)