TwMS v262.3 SkillInjection(技能注入)

晴曦

1. //TwMs v262.3 SkillInjection(技能注入)
   
2. [ENABLE]
   
3. //code from here to '[DISABLE]' will be used to enable the cheat
   
4. alloc(newmem,2048,144B17010)
   
5. label(returnhere)
   
6. label(originalcode)
   
7. label(exit)
   
8. alloc(SkillID,4)
   
9. alloc(Timer,4)
   
10. alloc(Delay,4)
    
11. registersymbol(SkillID)
    
12. registersymbol(Delay)
    
13. registersymbol(Timer)
    
14. 
    
15. SkillID:
    
16. dd #1221011
    
17. 
    
18. Delay:
    
19. dd #50
    
20. 
    
21. Timer:
    
22. dd 00
    
23. 
    
24. newmem: //this is allocated memory, you have read,write,execute access
    
25. //place your code here
    
26. mov r8,[147B58C30]
    
27. cmp qword ptr [r8+08],2
    
28. jg originalcode
    
29. 
    
30. mov r8,[147B48928]
    
31. mov r8,[r8+28]
    
32. cmp dword ptr [r8+00019300],0
    
33. je originalcode
    
34. 
    
35. call 144C0C2F0
    
36. mov r8d,eax
    
37. sub r8d,dword ptr [Timer]
    
38. cmp r8d,dword ptr [Delay]
    
39. jl originalcode
    
40. mov dword ptr [Timer],eax
    
41. 
    
42. mov r8d,[SkillID]
    
43. mov dword ptr [rbx+00008A0C],r8d
    
44. mov eax,0x00000001
    
45. xor r8,r8
    
46. jmp 144B17029
    
47. 
    
48. originalcode:
    
49. mov eax,0x00000001
    
50. xor r8,r8
    
51. cmp [rbx+00008A0C],r12d
    
52. 
    
53. exit:
    
54. jmp returnhere
    
55. 
    
56. 144B17010:
    
57. jmp newmem
    
58. nop
    
59. nop
    
60. returnhere:
    
61. 
    
62. 144B17069:
    
63. jmp 144B171B1
    
64. nop
    
65. 
    
66. 144B17254:
    
67. jmp 144B172AE
    
68. nop
    
69. 
    
70. [DISABLE]
    
71. 144B17010:
    
72. cmp [rbx+00008A0C],r12d
    
73. 
    
74. 144B17069:
    
75. db 3B 83 10 8A 00 00 0F 84
    
76. 
    
77. 144B17254:
    
78. db 0F 87 16 02 00 00
    
79. 
    
80. dealloc(newmem)
    
81. dealloc(SkillID)
    
82. dealloc(Timer)
    
83. dealloc(Delay)

複製代碼