TwMS v251.1 SkillInjection(技能注入)

prt

1. //TwMs v251.1 SkillInjection(技能注入)
   
2. [ENABLE]
   
3. //code from here to '[DISABLE]' will be used to enable the cheat
   
4. alloc(newmem,2048,1441C3B59)
   
5. label(returnhere)
   
6. label(originalcode)
   
7. label(exit)
   
8. alloc(SkillID,4)
   
9. alloc(Timer,4)
   
10. alloc(Delay,4)
    
11. registersymbol(SkillID)
    
12. registersymbol(Delay)
    
13. registersymbol(Timer)
    
14. 
    
15. SkillID:
    
16. dd #1221011
    
17. 
    
18. Delay:
    
19. dd #50
    
20. 
    
21. Timer:
    
22. dd 00
    
23. 
    
24. newmem: //this is allocated memory, you have read,write,execute access
    
25. //place your code here
    
26. mov r8,[14823DE60]
    
27. cmp qword ptr [r8+08],2
    
28. jg originalcode
    
29. 
    
30. mov r8,[14823B0B8]
    
31. mov r8,[r8+28]
    
32. cmp dword ptr [r8+00019300],0
    
33. je originalcode
    
34. 
    
35. call 14428A300 //
    
36. mov r8d,eax
    
37. sub r8d,dword ptr [Timer]
    
38. cmp r8d,dword ptr [Delay]
    
39. jl originalcode
    
40. mov dword ptr [Timer],eax
    
41. 
    
42. mov r8d,[SkillID]
    
43. mov dword ptr [rbx+00020B5C],r8d    //
    
44. mov eax,0x00000001
    
45. xor r8,r8
    
46. jmp 1441C3B72     //
    
47. 
    
48. originalcode:
    
49. mov eax,0x00000001
    
50. xor r8,r8
    
51. cmp [rbx+00020B5C],r12d             //
    
52. 
    
53. exit:
    
54. jmp returnhere
    
55. 
    
56. 1441C3B59:
    
57. jmp newmem
    
58. nop
    
59. nop
    
60. returnhere:
    
61. 
    
62. 1441C3BB2:
    
63. jmp 1441C3D49 //
    
64. nop
    
65. 
    
66. 1441C3DE7:
    
67. jmp 1441C3E40 //
    
68. nop
    
69. 
    
70. [DISABLE]
    
71. 1441C3B59:
    
72. cmp [rbx+00020B5C],r12d
    
73. 
    
74. 1441C3BB2:
    
75. db 3B 83 60 0B 02 00 0F 84
    
76. 
    
77. 1441C3DE7:
    
78. db 0F 87 D5 01 00 00
    
79. 
    
80. dealloc(newmem)
    
81. dealloc(SkillID)
    
82. dealloc(Timer)
    
83. dealloc(Delay)

複製代碼