TwMs v252.4 SkillInjection(技能注入)

prt

1. //TwMs v252.4 SkillInjection(技能注入)
   
2. [ENABLE]
   
3. //code from here to '[DISABLE]' will be used to enable the cheat
   
4. alloc(newmem,2048,143FA9C80)
   
5. label(returnhere)
   
6. label(originalcode)
   
7. label(exit)
   
8. alloc(SkillID,4)
   
9. alloc(Timer,4)
   
10. alloc(Delay,4)
    
11. registersymbol(SkillID)
    
12. registersymbol(Delay)
    
13. registersymbol(Timer)
    
14. 
    
15. SkillID:
    
16. dd #1221011
    
17. 
    
18. Delay:
    
19. dd #50
    
20. 
    
21. Timer:
    
22. dd 00
    
23. 
    
24. newmem: //this is allocated memory, you have read,write,execute access
    
25. //place your code here
    
26. mov r8,[1469E3190]
    
27. cmp qword ptr [r8+08],2
    
28. jg originalcode
    
29. 
    
30. mov r8,[1469DFEA8]
    
31. mov r8,[r8+28]
    
32. cmp dword ptr [r8+00019300],0
    
33. je originalcode
    
34. 
    
35. call 14407C270
    
36. mov r8d,eax
    
37. sub r8d,dword ptr [Timer]
    
38. cmp r8d,dword ptr [Delay]
    
39. jl originalcode
    
40. mov dword ptr [Timer],eax
    
41. 
    
42. mov r8d,[SkillID]
    
43. mov dword ptr [rbx+00020BB4],r8d
    
44. mov eax,0x00000001
    
45. xor r8,r8
    
46. jmp 143FA9C99
    
47. 
    
48. originalcode:
    
49. mov eax,0x00000001
    
50. xor r8,r8
    
51. cmp [rbx+00020BB4],r12d
    
52. 
    
53. exit:
    
54. jmp returnhere
    
55. 
    
56. 143FA9C80:
    
57. jmp newmem
    
58. nop
    
59. nop
    
60. returnhere:
    
61. 
    
62. 143FA9CD9:
    
63. jmp 143FA9E7E
    
64. nop
    
65. 
    
66. 143FA9F1C:
    
67. jmp 143FA9F70
    
68. nop
    
69. 
    
70. [DISABLE]
    
71. 143FA9C80:
    
72. cmp [rbx+00020BB4],r12d
    
73. 
    
74. 143FA9CD9:
    
75. db 3B 83 B8 0B 02 00 0F 84
    
76. 
    
77. 143FA9F1C:
    
78. db 0F 87 D0 01 00 00
    
79. 
    
80. dealloc(newmem)
    
81. dealloc(SkillID)
    
82. dealloc(Timer)
    
83. dealloc(Delay)

複製代碼