(特約版外掛) 大家別用了 這掛出問題 好了再發

zack2213330

這是我做的  分享上來給大家  如果有想要研究的話 非常樂意  可以加我即時@@

zack2213330

有PO圖片阿@@

86425john14

圖片應該要用不用購買也看ㄉ到  不然人家不知道有神摸弓能

86425john14

對於新手來說  直接用成一ㄍ壓縮檔比較簡單好懂^^

86425john14

ㄆㄆ  那加油吧

ko985389

那VIP那裏的招喚獸是幹嘛的

zack2213330

回覆 9# ko985389


    功能阿!!

zack2213330

回覆 9# ko985389


    招喚獸無延遲

冰楓

VIP的功能是擺好看的吧...我剛剛大略看了一下..沒看到VIP那部分有寫入啥東西捏～～＠＠
數據部分只有看到：

//TWMS V152_ICS_只撿錢
//Update: (RW)FOREVER
[Enable]
Alloc(MoneyOnly, 64)
MoneyOnly:
Cmp [Esp+120], 00506743
Jne 0077B5B8
Mov [Esp+120], 005067DB
Jmp 0077B5B8
00F4EE24:
DD MoneyOnly
[Disable]
00F4EE24:
DD 0077B5B8
DeAlloc(MoneyOnly)

//TwMS v152_ICS_物理無敵
[ENABLE]
registersymbol(Updatebingfeng)
alloc(Updatebingfeng,1024)
registersymbol(Invincible)
alloc(Invincible,1024)
00F7D234:
DD Updatebingfeng
Updatebingfeng:
cmp [esp],006523C9
jne IsRectEmpty
mov [esp],Invincible
jmp IsRectEmpty
Invincible:
test eax,eax
jmp 006523CD
[DISABLE]
00F7D234:
DD IsRectEmpty
dealloc(Updatebingfeng)
unregistersymbol(Updatebingfeng)
dealloc(Invincible)
unregistersymbol(Invincible)

//TwMS v152_ICS_怪物瞬移4號
[Enable]
Alloc(CheckESP,128)
Label(ShunYi)
CheckESP:
Cmp [Esp+3C],0066472C
Je ShunYi
Jmp 0077B5B8
ShunYi:
Push Edx
Mov Eax,[Esp+3C]
Add Eax,84
Mov Edx,Eax
Mov Eax,[Esp+38]
Movsx Eax,word ptr [Eax+10]
Sub Edx,Eax
Mov [Esp+14],Edx
Mov [Esp+2C],Edx
Pop Edx
Jmp 0077B5B8
00F4EE24:
DD CheckESP
[Disable]
00F4EE24:
DD 0077B5B8
DeAlloc(CheckESP)

//TwMS v152_ICS_怪物瞬移4號
[Enable]
Alloc(CheckESP,128)
Label(ShunYi)
CheckESP:
Cmp [Esp+3C],0066472C
Je ShunYi
Jmp 0077B5B8
ShunYi:
Push Edx
Mov Eax,[Esp+3C]
Add Eax,84
Mov Edx,Eax
Mov Eax,[Esp+38]
Movsx Eax,word ptr [Eax+10]
Sub Edx,Eax
Mov [Esp+14],Edx
Mov [Esp+2C],Edx
Pop Edx
Jmp 0077B5B8
00F4EE24:
DD CheckESP
[Disable]
00F4EE24:
DD 0077B5B8
DeAlloc(CheckESP)

//TwMS v152_ICS_十秒無敵
//使用趴趴熊的參數值與分享的正確物理無敵數據,已check遊戲程式內碼
[ENABLE]
registersymbol(MyMainSub)
alloc(MyMainSub,128)
registersymbol(PowerON)
alloc(PowerON,10)
registersymbol(PowerOFF)
alloc(PowerOFF,10)
registersymbol(MyAllValues)
alloc(MyAllValues,10)
registersymbol(MyValues)
alloc(MyValues,10)
registersymbol(MyReturnSub)
alloc(MyReturnSub,64)
registersymbol(MyLeaveSub)
alloc(MyLeaveSub,64)
registersymbol(MyZeroSub)
alloc(MyZeroSub,64)
MyMainSub:
push Eax
mov [PowerON],20  //開啟無敵的值 調越大開越久
mov [PowerOFF],2  //關閉無敵的值 調越大關越久
mov eax,[PowerOFF]
add eax,[PowerON]
mov [MyAllValues],eax
add [MyValues],1
pop Eax
cmp [esp],006523C9
jne IsRectEmpty
push Eax
mov eax,[MyValues+1]
cmp eax,[PowerOFF]
jl MyLeaveSub
cmp eax,[MyAllValues]
jg MyZeroSub
pop Eax
mov [esp],MyReturnSub
jmp IsRectEmpty
MyReturnSub:
test eax,eax
jmp 006523CD
MyLeaveSub:
pop Eax
jmp IsRectEmpty
MyZeroSub:
pop Eax
mov [MyValues],0
jmp IsRectEmpty
00F7D234:
DD MyMainSub
[DISABLE]
00F7D234:
DD IsRectEmpty
dealloc(MyMainSub)
unregistersymbol(MyMainSub)
dealloc(PowerON)
unregistersymbol(PowerON)
dealloc(PowerOFF)
unregistersymbol(PowerOFF)
dealloc(MyAllValues)
unregistersymbol(MyAllValues)
dealloc(MyValues)
unregistersymbol(MyValues)
dealloc(MyReturnSub)
unregistersymbol(MyReturnSub)
dealloc(MyLeaveSub)
unregistersymbol(MyLeaveSub)
dealloc(MyZeroSub)
unregistersymbol(MyZeroSub)

//TwMS v152.1_ICS_控怪左走+走怪掉落
[Enable]
RegisterSymbol(LRControl)
RegisterSymbol(JmpDown)
Alloc(MobLR, 128)
Alloc(JmpDown, 04)
Alloc(LRControl, 04)
LRControl:
DD FFFFFFFF
JmpDown:
DD 01
MobLR:
PUSH EBP
MOV EBP,ESP
SUB ESP,20
MOV EAX,[EBP+8]
PUSH EBX
PUSH ESI
mov esi,[00F70F00]
MOV EBX,ECX
PUSH [LRControl]
POP [EBX+FC]
PUSH EDI
CMP [JmpDown], 01
Je 00A187F8
JMP 00A180AB
00DC0738:
DD MobLR
[Disable]
00DC0738:
DD 00A18097
DeAlloc(MobLR)
DeAlloc(JmpDown)
DeAlloc(LRControl)
UnRegisterSymbol(JmpDown)
UnRegisterSymbol(LRControl)

ko985389

哇招換壽無言詞
可以用嗎= =

柚子

回覆 12# 冰楓


    這種寫法 不用30秒就可以破解了@@

zack2213330

回覆 12# 冰楓


    = =  竟然這樣....VIP是要完成之後再發的   步過數據問題確實OK的  但要先學會加殼阿orz