TwMS v261.2 SkillInjection(技能注入)

晴曦

1. //TwMs v261.2 SkillInjection(技能注入)
   
2. [ENABLE]
   
3. //code from here to '[DISABLE]' will be used to enable the cheat
   
4. alloc(newmem,2048,1448AA6A0)
   
5. label(returnhere)
   
6. label(originalcode)
   
7. label(exit)
   
8. alloc(SkillID,4)
   
9. alloc(Timer,4)
   
10. alloc(Delay,4)
    
11. registersymbol(SkillID)
    
12. registersymbol(Delay)
    
13. registersymbol(Timer)
    
14. 
    
15. SkillID:
    
16. dd #1221011
    
17. 
    
18. Delay:
    
19. dd #50
    
20. 
    
21. Timer:
    
22. dd 00
    
23. 
    
24. newmem: //this is allocated memory, you have read,write,execute access
    
25. //place your code here
    
26. mov r8,[147867E60]
    
27. cmp qword ptr [r8+08],2
    
28. jg originalcode
    
29. 
    
30. mov r8,[1478582A0]
    
31. mov r8,[r8+28]
    
32. cmp dword ptr [r8+00019300],0
    
33. je originalcode
    
34. 
    
35. call 144998E60
    
36. mov r8d,eax
    
37. sub r8d,dword ptr [Timer]
    
38. cmp r8d,dword ptr [Delay]
    
39. jl originalcode
    
40. mov dword ptr [Timer],eax
    
41. 
    
42. mov r8d,[SkillID]
    
43. mov dword ptr [rbx+00008BA8],r8d
    
44. mov eax,0x00000001
    
45. xor r8,r8
    
46. jmp 1448AA6B9
    
47. 
    
48. originalcode:
    
49. mov eax,0x00000001
    
50. xor r8,r8
    
51. cmp [rbx+00008BA8],r12d
    
52. 
    
53. exit:
    
54. jmp returnhere
    
55. 
    
56. 1448AA6A0:
    
57. jmp newmem
    
58. nop
    
59. nop
    
60. returnhere:
    
61. 
    
62. 1448AA6F9:
    
63. jmp 1448AA841
    
64. nop
    
65. 
    
66. 1448AA8E4:
    
67. jmp 1448AA93E
    
68. nop
    
69. 
    
70. [DISABLE]
    
71. 1448AA6A0:
    
72. cmp [rbx+00008BA8],r12d
    
73. 
    
74. 1448AA6F9:
    
75. db 3B 83 AC 8B 00 00 0F 84
    
76. 
    
77. 1448AA8E4:
    
78. db 0F 87 16 02 00 00
    
79. 
    
80. dealloc(newmem)
    
81. dealloc(SkillID)
    
82. dealloc(Timer)
    
83. dealloc(Delay)

複製代碼