TwMS v263.3 SkillInjection(技能注入)

晴曦

1. //TwMs v263.3 SkillInjection(技能注入)
   
2. [ENABLE]
   
3. Alloc(newmem,2048,144B34EA0)
   
4. Label(returnhere)
   
5. Label(originalcode)
   
6. Label(exit)
   
7. Alloc(SkillID,4)
   
8. Alloc(Timer,4)
   
9. Alloc(Delay,4)
   
10. RegisterSymbol(SkillID)
    
11. RegisterSymbol(Delay)
    
12. RegisterSymbol(Timer)
    
13. 
    
14. SkillID:
    
15. DD #1000
    
16. 
    
17. Delay:
    
18. DD #100
    
19. 
    
20. Timer:
    
21. DD 00
    
22. 
    
23. newmem:
    
24. mov r8,[147B6F308]
    
25. cmp qword ptr [r8+08],2
    
26. jg originalcode
    
27. 
    
28. mov r8,[147B5EE38]
    
29. mov r8,[r8+28]
    
30. cmp dword ptr [r8+00019300],0
    
31. je originalcode
    
32. 
    
33. call 144C29850
    
34. mov r8d,eax
    
35. sub r8d,dword ptr [Timer]
    
36. cmp r8d,dword ptr [Delay]
    
37. jl originalcode
    
38. mov dword ptr [Timer],eax
    
39. 
    
40. mov r8d,[SkillID]
    
41. mov dword ptr [rbx+00008A14],r8d
    
42. mov eax,0x00000001
    
43. xor r8,r8
    
44. jmp 144B34EB9
    
45. 
    
46. originalcode:
    
47. mov eax,0x00000001
    
48. xor r8,r8
    
49. cmp [rbx+00008A14],r12d
    
50. 
    
51. exit:
    
52. jmp returnhere
    
53. 
    
54. 144B34EA0:
    
55. jmp newmem
    
56. nop
    
57. nop
    
58. 
    
59. returnhere:
    
60. 144B34EF9:
    
61. jmp 144B35041
    
62. nop
    
63. 
    
64. 144B350E4:
    
65. jmp 144B3513E
    
66. nop
    
67. 
    
68. [DISABLE]
    
69. 144B34EA0:
    
70. cmp [rbx+00008A14],r12d
    
71. 
    
72. 144B34EF9:
    
73. DB 3B 83 18 8A 00 00 0F 84
    
74. 
    
75. 144B350E4:
    
76. DB 0F 87 16 02 00 00
    
77. 
    
78. DeAlloc(newmem)
    
79. DeAlloc(SkillID)
    
80. DeAlloc(Timer)
    
81. DeAlloc(Delay)
    
82. 
    
83. UnRegisterSymbol(SkillID)
    
84. UnRegisterSymbol(Delay)
    
85. UnRegisterSymbol(Timer)

複製代碼