TwMs v267.2 SkillInjection(技能注入)

prt

1. //TwMs v267.2 SkillInjection(技能注入)
   
2. [ENABLE]
   
3. //code from here to '[DISABLE]' will be used to enable the cheat
   
4. alloc(newmem,2048,1451B8110)
   
5. label(returnhere)
   
6. label(originalcode)
   
7. label(exit)
   
8. alloc(SkillID,4)
   
9. alloc(Timer,4)
   
10. alloc(Delay,4)
    
11. registersymbol(SkillID)
    
12. registersymbol(Delay)
    
13. registersymbol(Timer)
    
14. 
    
15. SkillID:
    
16. dd #154121000
    
17. 
    
18. Delay:
    
19. dd #50
    
20. 
    
21. Timer:
    
22. dd 00
    
23. 
    
24. newmem: //this is allocated memory, you have read,write,execute access
    
25. //place your code here
    
26. mov r8,[1484B2698]
    
27. cmp qword ptr [r8+08],2
    
28. jg originalcode
    
29. 
    
30. mov r8,[1484A02E8]
    
31. mov r8,[r8+28]
    
32. cmp dword ptr [r8+00019300],0
    
33. je originalcode
    
34. 
    
35. call 1452B5F10
    
36. mov r8d,eax
    
37. sub r8d,dword ptr [Timer]
    
38. cmp r8d,dword ptr [Delay]
    
39. jl originalcode
    
40. mov dword ptr [Timer],eax
    
41. 
    
42. mov r8d,[SkillID]
    
43. mov dword ptr [rbx+00008B84],r8d
    
44. mov eax,0x00000001
    
45. xor r8,r8
    
46. jmp 1451B8129
    
47. 
    
48. originalcode:
    
49. mov eax,0x00000001
    
50. xor r8,r8
    
51. cmp [rbx+00008B84],r12d
    
52. 
    
53. exit:
    
54. jmp returnhere
    
55. 
    
56. 1451B8110:
    
57. jmp newmem
    
58. nop
    
59. nop
    
60. returnhere:
    
61. 
    
62. 1451B816C:
    
63. jmp 1451B82B4
    
64. nop
    
65. 
    
66. 1451B835A:
    
67. jmp 1451B83B1
    
68. nop
    
69. nop
    
70. nop
    
71. nop
    
72. 
    
73. [DISABLE]
    
74. 1451B8110:
    
75. cmp [rbx+00008B84],r12d
    
76. 
    
77. 1451B816C:
    
78. db 3B 83 88 8B 00 00 0F 84
    
79. 
    
80. 1451B835A:
    
81. db 0F 87 DB 01 00 00
    
82. 
    
83. dealloc(newmem)
    
84. dealloc(SkillID)
    
85. dealloc(Timer)
    
86. dealloc(Delay)
    

複製代碼