緣份遊戲網 - 備份站

TWMS V1.48.1_ICS_定點吸飛天怪物
//原創:C227545123
//更新:zxc19930518
//ICS:Onion
[Enable]
Alloc(VacFly, 128)
Label(Vacum)
Label(FakeCall)

VacFly:
Cmp [Esp],00974824
Jne 009739D5
Mov [Esp],Vacum
Jmp 009739D5

Vacum:
fld qword ptr [ebp-24]
sub esp,20
fstp qword ptr [esp+18]
lea eax,[ebp-34]
fld qword ptr [ebp-3c]
fstp qword ptr [esp+10]
fld qword ptr [ebp-2c]
fstp qword ptr [esp+08]
fld qword ptr [ebp-44]
fstp qword ptr [esp]
push eax
call 00971FF3
fld qword ptr [ebp-24]
mov eax,[esi+000000fc]
add esp,24
sub esp,20
mov [ebp+08],eax
fstp qword ptr [esp+18]

lea eax,[ebp-34]

fld qword ptr [ebp-3c]
fstp qword ptr [esp+10]
fld qword ptr [ebp-2c]
fstp qword ptr [esp+08]
fild dword ptr [ebp+08]
fmul qword ptr [00C7A748]
fmul qword ptr [ebp-4c]
fmul qword ptr [ebp-14]
fstp qword ptr [esp]
push eax
call FakeCall
jmp 009748A9
FakeCall:
push ebp
mov ebp,esp
fldz
fld qword ptr [ebp+1c]
DB D8 D1 //st(0),st(1)
fnstsw ax

mov ecx,[ebp+08]
fxch st(1)
fcomp qword ptr [ebp+0c]
fnstsw ax

fcom qword ptr [ecx]
fnstsw ax

Jmp 00971FB3

00C7AEA0:
DD VacFly
[Disable]
00C7AEA0:
DD 009739D5
DeAlloc(VacFly)



TwMS v148.1 ICS 人物全圖吸物
// 原創: Cam1596
// ICS : 冷羽楓痕
// 更新: Onion

[Enable]
Alloc(ItemVac,64)
Label(SetItemXY)

ItemVac:
Cmp [Esp], 004EA986
Je  SetItemXY
Cmp [Esp],004E9C2E
Jne PtInRect
Mov [esp],004E9C32    // "Add2+04" - 不斷線
Jmp PtInRect

SetItemXY:
Push Eax
Mov Eax,[Esp+0C]     // [esp+0C]: 地上物品X
Mov [Ebx],Eax            // [edi+00]: 封包物品X (人物X)
Mov Eax,[Esp+10]      // [esp+10]: 地上物品Y
Mov [Ebx+04],Eax      // [edi+04]: 封包物品Y (人物Y)
Pop Eax
Mov [Esp], 004EA9A2
Jmp PtInRect

00E0EF94:
DD ItemVac

[Disable]
00E0EF94:
DD PtInRect
DeAlloc(ItemVac)



TWMS v148 ICS部分技能最大值
//更新:米血

[Enable]
Alloc(ICSHook, 512)
Label(SkillMax)
Label(wtf)

ICSHook:
Cmp [Esp], 008E5537
Jne OffsetRect
Mov [Esp], SkillMax
Jmp OffsetRect

SkillMax:
push ebx
push ebx
mov [ebp+64],ebx
lea eax,[ebp+64]
push ebx
cmp [ebp+73],bl
jne 008E5545
pop ebx
pop ebx
pop ebx
mov ecx,[00e05d1c]
pushad
push 00
push 00
push 00
push 00
push 00
push 00
push 00
push 01
push eax
lea eax,[ebp+20]
push eax
call 0061099a
inc [wtf]
popad
cmp dword ptr [wtf],20
jnge SkillMax
mov [wtf],00000000
mov eax,[ebp+64]
mov [ebp+68],eax
cmp [ebp+68],ebx
je 008E55BE
mov eax,[ebp+68]
mov ecx,[eax+0000019C]
cmp [eax+00000334],ebx
jne 008E55AC
mov ecx,eax
call 00603113
mov eax,[ebp+68]
cmp [eax+00000420],ebx
je 008E55C0
mov [ebp+68],ebx
mov eax,[ebp+68]
cmp eax,ebx
je 008E55BE
mov eax,[eax+00000198]
jmp 008E55C0
wtf:
DD 00
Ret

00E0EF64:
DD ICSHook

[Disable]
00E0EF64:
DD OffsetRect
DeAlloc(ICSHook)



TwMS v148.1_ICS_物品定位
//ICS:Onion
[Enable]
Alloc(ICSHook, 64)
Label(ItemHack)
Label(FakeJmp1)
Label(FakeJmp2)
Label(FakeJmp3)
Label(FakeJmp4)
00C111C8:
DD ICSHook
ICSHook:
Cmp [Esp+10], 004EA8A2
Jne 006F1463
Mov [Esp+10], ItemHack
Jmp 006F1463
ItemHack:
test eax,eax
je FakeJmp1
sub dword ptr [ebp-34],14
add dword ptr [ebp-2c],14
FakeJmp1:
call 0094CEF2
mov [ebp+08],eax
mov eax,[esi+2c]
mov [ebp-10],eax
test eax,eax
je 004EA9D5
lea eax,[ebp-10]
push eax
call 004E96BB
pop ecx
push eax
lea ecx,[ebp-1c]
call 004E9C8B
mov esi,[ebp-18]
and dword ptr [ebp-04],00
cmp dword ptr [esi+30],00
jne FakeJmp2 //004EA8FA
push [esi+34]
mov ecx,[00E01444]
call 00587D1F
test eax,eax
jne 004EA98A
FakeJmp2:
mov eax,[ebp+08]
sub eax,[esi+40]
cmp eax,00003A98
jnl FakeJmp3 //004EA92F
cmp dword ptr [esi+28],00
je FakeJmp3 //004E92F
mov ecx,[esi+2c]
test ecx,ecx
jne FakeJmp4 //004EA91F
mov eax,[edi+000020D0]
cmp [esi+24],eax
jne 004EA98A
FakeJmp4:
cmp ecx,01
jne FakeJmp3 //004EA92F
mov eax,[edi+0000415c]
cmp [esi+24],eax
jne 004EA98A
FakeJmp3:
cmp byte ptr [esi+1D],00
je 004EA98A
cmp dword ptr [esi+48],03
Jmp 004EA96B
[Disable]
00C111C8:
DD 006F1463
DeAlloc(ICSHook)



TWMS V148.1_ICS_人物隱藏
//更新: (RW)FOREVER
[Enable]
Alloc(NoManICS, 64)
Label(NoMan)

NoManICS:
Cmp [Esp], 008E657F
Jne 00927EC5
Mov [Esp], NoMan
Jmp 00927EC5

NoMan:
mov ecx,eax
call 004547CB
mov [ebp+68],ebx
Jmp 008E658E

00C7775C:
DD NoManICS
[Disable]
00C7775C:
DD  00927EC5
DeAlloc(NoManICS)



TWMS 148.1 全圖攻擊 (紅點版)
[ENABLE]

registersymbol(AwesomeMan)
alloc(AwesomeMan,1024)
registersymbol(AttackVac)
alloc(AttackVac,1024)
registersymbol(RedStopMYKB)
alloc(RedStopMYKB,4)

RedStopMYKB:
DD  0 

00E0EFB8:
DD AwesomeMan
AwesomeMan:
push eax
mov eax,[00E05D18]
mov eax,[eax+2c]
cmp eax,[RedStopMYKB]
pop eax
jg IntersectRect
cmp [esp],00610B2D
jne IntersectRect
mov [esp],AttackVac
jmp IntersectRect
AttackVac:
jmp 00610B39

[DISABLE]
00E0EFB8:
DD IntersectRect
dealloc(AwesomeMan)
unregistersymbol(AwesomeMan)
dealloc(AttackVac)
unregistersymbol(AttackVac)
unregistersymbol(RedStopMYKB)
dealloc(RedStopMYKB)