[免過CRC檢測] TwMs v238.3 怪物跟随，魔法无敌，技能注入，物理无敌，笨怪五合一ICS

15 主題	2 好友	35 積分

新手上路

Rank: 1

UID: 302855
帖子: 343
主題: 15
精華: 0
積分: 35
楓幣: 1473
威望: 24
存款: 0
贊助金額: 0
推廣: 0
ＧＰ: 7
閱讀權限: 10
性別: 保密
在線時間: 224 小時
註冊時間: 2021-5-1
最後登入: 2024-12-30

發消息

電梯直達

1樓

發表於 2021-10-29 20:22:46 |只看該作者 |倒序瀏覽

本帖最後由 lgf328 於 2021-10-29 20:32 編輯

感谢btb、prt二位大大指导更新
[Enable]
Alloc(checkesp,4096)
alloc(checkesp2,2048)
Label(PhysicalGod)
Label(MobFollow)
Label(MobFollowHook)
Label(skillhook)
Label(skill)
Alloc(args,04)
Registersymbol(args)
Alloc(skillid,04)
Registersymbol(skillid)
Label(MagicGod)
Label(StupidMob)
Label(SkillInjectionICS)
Label(SkillInjection)
Label(hook)
Label(hook1)
Alloc(StupidMobSW,04)
Registersymbol(StupidMobSW)
Alloc(MobFollowSW,04)
Registersymbol(MobFollowSW)
MobFollowSW://跟隨開關,請勿與笨怪一起使用
DD 0
StupidMobSW://笨怪開關,請勿與跟隨一起使用
DD 1
skillid:
DD #400021084
args:
DD #45
checkesp:
cmp [esp+34],02D6D464
je PhysicalGod
cmp [esp+10],01CD0B6E
je MobFollow
cmp [esp+18],02CCC3A2
je skillhook
jmp timeGetTime

PhysicalGod:
mov [esp+34],02D6D48F
jmp timeGetTime
MobFollow:
cmp [MobFollowSW], 00
je timeGetTime
mov [esp+10],MobFollowHook
jmp timeGetTime

skillhook:
mov [esp+18],skill
jmp timeGetTime

MobFollowHook:
mov ecx,ebx
call 01D31E00
mov eax,[ebx+000002BC]
jmp 01CD0BB3

skill:
push eax
mov eax,[skillid]
mov dword ptr [edi+000130E4],eax
mov eax,[args]
mov dword ptr [edi+000130E8],eax
pop eax
mov dword ptr [edi+000130Ec],0
jmp 02CCC3A2

checkesp2:
cmp [esp+30],01CD9364
je MagicGod
cmp [esp+10],02FA04A6
je StupidMob
cmp [esp+58],02E4BB68
je SkillInjectionICS
jmp GetLastError

MagicGod:
mov [esp+30],01CD93A7
jmp GetLastError
StupidMob:
cmp [StupidMobSW], 00
je GetLastError
mov [esp+10],02FA05D7
SkillInjectionICS:
mov [esp+58],SkillInjection
jmp GetLastError

SkillInjection:
push eax
mov eax,[0524E300]
mov eax,[eax+14]
mov eax,[eax+00019218]
cmp eax,1
pop eax
jl 02E4BB68

push eax
mov eax,[0524EFD8]
mov eax,[eax+4]
cmp eax,2
pop eax
jg 02E4BB68

test eax,eax
jne 02E4BDD0
mov eax,[edi+000000B8]
push ebx
lea ebx,[edi+000000B8]
mov ecx,ebx
call dword ptr [eax+38]
push eax
mov byte ptr [ebp-01],00
call 006A8030
add esp,04
mov [args],eax
cmp eax,[edi+000130E8]
jmp hook

hook:
cmp [edi+000130E4],0042721E
jne hook1
mov eax,[edi]
mov ecx,edi
call dword ptr [eax+74]
lea edx,[eax-00000960]
cmp edx,64
jb hook1
cmp eax,000007D3
je hook1
mov eax,[ebx]
mov ecx,ebx
call dword ptr [eax+3C]
push eax
call 006A8030
add esp,04
cmp eax,22
jne 02E4BDcf

hook1:
mov ecx,[04386E60]
lea eax,[ebp-08]
push 01
push 00
push 00
push 00
push eax
push [edi+000130E4]
mov [ebp-08],00000000
push [ebp-10]
call 00A11AF0
mov esi,eax
test esi,esi
jng 02E4BDCF
mov ecx,[edi+000130E8]
add ecx,-17
cmp ecx,23
jmp 02E4BCDE

03AF15A8:
DD checkesp
03AF1158:
DD checkesp2

[DISABLE]
03AF1158:
DD GetLastError
03AF15A8:
DD timeGetTime