TwMs v267.4 多重技能注入

wangjiaxin857

1. //TwMs v267.4 多重技能注入
   
2. [ENABLE]
   
3. alloc(newmem,2048,1451B82C0)
   
4. alloc(SkillIDs,128)
   
5. alloc(Delays,128)
   
6. alloc(Timers,128)
   
7. alloc(CurrentIndex,4)
   
8. alloc(StartIndex,4)
   
9. label(returnhere)
   
10. label(originalcode)
    
11. label(exit)
    
12. label(check_next)
    
13. 
    
14. //技能ID(請自行添加或刪除)
    
15. SkillIDs:
    
16. dd #4341004
    
17. dd #4341009
    
18. dd #4341011
    
19. 
    
20. dd 0//這行務必要保留
    
21. 
    
22. //技能延遲(有多少個技能就添加多少個延時)
    
23. Delays:
    
24. dd #1000  //第一個技能延遲
    
25. dd #200
    
26. dd #100
    
27. 
    
28. dd 0//這行務必要保留
    
29. 
    
30. Timers:
    
31. dd 0
    
32. 
    
33. CurrentIndex:
    
34. dd 0
    
35. 
    
36. StartIndex:
    
37. dd 0
    
38. 
    
39. newmem:
    
40. mov r8,1484B3698
    
41. mov r8,[r8]
    
42. cmp qword ptr [r8+08],2
    
43. jg originalcode
    
44. mov r8,1484A12E8
    
45. mov r8,[r8]
    
46. mov r8,[r8+28]
    
47. cmp dword ptr [r8+00019300],0
    
48. je originalcode
    
49. call 1452B60C0
    
50. mov r8d,eax
    
51. mov ecx,[CurrentIndex]
    
52. mov [StartIndex],ecx
    
53. 
    
54. check_next:
    
55. mov ecx,[CurrentIndex]
    
56. lea rdx,[SkillIDs]
    
57. mov r8d,[rdx+ecx*4]
    
58. test r8d,r8d
    
59. jz reset_index
    
60. push rax
    
61. lea rdx,[Timers]
    
62. mov r8d,eax
    
63. sub r8d,[rdx+ecx*4]
    
64. lea rdx,[Delays]
    
65. cmp r8d,[rdx+ecx*4]
    
66. pop rax
    
67. jl try_next_skill
    
68. lea rdx,[Timers]
    
69. mov [rdx+ecx*4],eax
    
70. lea rdx,[SkillIDs]
    
71. mov r8d,[rdx+ecx*4]
    
72. mov [rbx+00008B84],r8d
    
73. inc ecx
    
74. mov [CurrentIndex],ecx
    
75. mov eax,1
    
76. xor r8,r8
    
77. jmp 1451B82C0+19
    
78. 
    
79. try_next_skill:
    
80. inc ecx
    
81. mov [CurrentIndex],ecx
    
82. cmp ecx,[StartIndex]
    
83. je originalcode
    
84. jmp check_next
    
85. 
    
86. reset_index:
    
87. xor ecx,ecx
    
88. mov [CurrentIndex],ecx
    
89. cmp [StartIndex],0
    
90. je originalcode
    
91. jmp check_next
    
92. 
    
93. originalcode:
    
94. mov eax,1
    
95. xor r8,r8
    
96. cmp [rbx+00008B84],r12d
    
97. 
    
98. exit:
    
99. jmp returnhere
    
100. 
     
101. 1451B82C0:
     
102. jmp newmem
     
103. nop
     
104. nop
     
105. returnhere:
     
106. 
     
107. 1451B82C0+5C:
     
108. jmp 1451B82C0+1A4
     
109. nop
     
110. 
     
111. 1451B82C0+24A:
     
112. jmp 1451B82C0+2A1
     
113. nop
     
114. nop
     
115. nop
     
116. nop
     
117. 
     
118. [DISABLE]
     
119. 1451B82C0:
     
120. cmp [rbx+00008B84],r12d
     
121. 
     
122. 1451B82C0+5C:
     
123. cmp eax,[rbx+00008B88]
     
124. 
     
125. 1451B82C0+24A:
     
126. ja 1451B86EB
     
127. 
     
128. dealloc(newmem)
     
129. dealloc(SkillIDs)
     
130. dealloc(Delays)
     
131. dealloc(Timers)
     
132. dealloc(CurrentIndex)
     
133. dealloc(StartIndex)

複製代碼

所有技能都有獨立延遲,互不干擾

ocean6436

您好請問數據無法勾選，可以怎麼修改

lgf328

能搞ICS版麼

douwho2

有人成功的嗎? 我測試沒有效果
確定一下技能ID是10進位嗎?