未經本站文章所有人之同意者,隨意轉載、改作、散布者,已觸犯著作權法;
若要分享需先經過文章所有人同意後並標註資料來源。

2015-08-29

TwMS_v182.4_ICS_SS端人物定位不斷

//TwMS_v182.4_ICS_SS端人物定位不斷
//ICS:Boby

[Enable]
alloc(People,64)
label(BobyHook)

People:
Cmp [Esp+3C],0104D4A1
jne 00A8309D
mov [esp+3C],BobyHook
jmp 00A8309D

BobyHook:
mov eax,[esi]
push edi
mov ecx,esi
call dword ptr [eax+3C]
test eax,eax
jmp 0104D4B6

018EE274:
DD People
[disable]
018EE274:
DD 00A8309D
DeAlloc(People)

2015-08-19

TwMS_v182.4_ICS_人物趴趴

//TwMS_v182.4_ICS_人物趴趴
//更新:Boby

[Enable]
RegisterSymbol(AutoLRMain)
RegisterSymbol(AutoLRRange)
Alloc(AutoLRICSEntry, 64)
Alloc(AutoLRRange, 4)
Alloc(AutoLRValue, 4)
Alloc(AutoLRMain, 128)
Label(GoLeft)
Label(GoRight)
Label(ICSReturn)


AutoLRRange:
DD 01  

AutoLRICSEntry:
Cmp [Esp],01063B4D
Jne ICSReturn
Mov [Esp],AutoLRMain
ICSReturn:
Jmp GetFocus

AutoLRMain:
Cmp [AutoLRRange], 0
Je 01063B4D
Push Eax
Inc [AutoLRValue]
Mov Eax, [AutoLRRange]
Cmp Eax, [AutoLRValue]
Jge GoLeft
Add Eax, [AutoLRRange]
Cmp Eax, [AutoLRValue]
Jge GoRight
Mov [AutoLRValue], 1
Jmp GoLeft

GoLeft:
Mov [Ebp-14],FFFFFFFF
Pop Eax
jmp 0106409C

GoRight:
Mov [Ebp-14],00000001
Pop Eax
Jmp 0106409C

0193FBF0:
DD AutoLRICSEntry

[Disable]
0193FBF0:
DD GetFocus

Dealloc(AutoLRICSEntry)
Dealloc(AutoLRMain)
Dealloc(AutoLRRange)
Dealloc(AutoLRValue)
UnregisterSymbol(AutoLRRange)
UnregisterSymbol(AutoLRMain)

TwMS v182.4_ICS_完全無敵

//TwMS v182.4_ICS_完全無敵
//Update:Boby

[Enable]
Alloc(Hook_Main,128)
Label(HookFun)

Hook_Main:
Cmp [Esp+3C],00FA04EC
Jne InterlockedIncrement
Mov [Esp+3C],HookFun
Jmp InterlockedIncrement

HookFun: //Cmp
push eax
mov eax,[ebx]
mov ecx,ebx
call dword ptr [eax+70]
push eax
call 009EE613
push [ebx+00000524]
mov [ebp-34],eax
mov [ebp-2C],esi
mov [ebp-10],esi
mov [ebp-70],esi
mov [ebp-00000088],esi
mov [ebp-58],esi
mov [ebp-80],esi
mov [ebp-30],esi
mov [ebp-000000A4],esi
mov [ebp-0000008C],esi
mov [ebp-00000090],esi
mov [ebp-14],esi
call 00519F3D
push [ebx+00000528]
mov [ebp-78],eax
call 00519F3D
add esp,14
mov [ebp-74],eax
cmp [ebp+68],esi
Jmp 00FA2C16 


013D20C4: 
DD Hook_Main

[Disable]
013D20C4:
DD InterlockedIncrement
DeAlloc(Hook_Main)

TwMS_v182.4_ICS_物理無敵

//TwMS_v182.4_ICS_物理無敵
//更新:Boby

[enable]
Alloc(Invincible, 128)
Label(main)

Invincible:
cmp [esp+4C], 008D7E94
jne OffsetRect
mov [esp+4C], main
jmp OffsetRect

main: //Cmp
lea eax,[ebp-30]
push eax
call 004A56EA
pop ecx
test eax,eax
jmp 008D7F13

0193FB64: 
DD Invincible

[Disable]
0193FB64:
DD OffsetRect

DeAlloc(Invincible)

TwMS_v182.4_ICS_人物左右走

//TwMS_v182.4_ICS_人物左右走
//更新:Boby

[Enable]
RegisterSymbol(AutoLRMain)
RegisterSymbol(AutoLRRange)
Alloc(AutoLRICSEntry, 64)
Alloc(AutoLRRange, 4)
Alloc(AutoLRValue, 4)
Alloc(AutoLRMain, 128)
Label(GoLeft)
Label(GoRight)
Label(ICSReturn)


AutoLRRange:
DD Scope     

AutoLRICSEntry:
Cmp [Esp],01063B4D
Jne ICSReturn
Mov [Esp],AutoLRMain
ICSReturn:
Jmp GetFocus

AutoLRMain:
Cmp [AutoLRRange], 0
Je 01063B4D
Push Eax
Inc [AutoLRValue]
Mov Eax, [AutoLRRange]
Cmp Eax, [AutoLRValue]
Jge GoLeft
Add Eax, [AutoLRRange]
Cmp Eax, [AutoLRValue]
Jge GoRight
Mov [AutoLRValue], 1
Jmp GoLeft

GoLeft:
Mov [Ebp-10],FFFFFFFF
Pop Eax
jmp 0106409C

GoRight:
Mov [Ebp-10],00000001
Pop Eax
Jmp 0106409C

0193FBF0: 
DD AutoLRICSEntry

[Disable]
0193FBF0:
DD GetFocus

Dealloc(AutoLRICSEntry)
Dealloc(AutoLRMain)
Dealloc(AutoLRRange)
Dealloc(AutoLRValue)
UnregisterSymbol(AutoLRRange)
UnregisterSymbol(AutoLRMain)

2015-08-09

TwMS_v182.3_ICS_人物趴趴

//TwMS_v182.3_ICS_人物趴趴
//更新:Boby

[Enable]
RegisterSymbol(AutoLRMain)
RegisterSymbol(AutoLRRange)
Alloc(AutoLRICSEntry, 64)
Alloc(AutoLRRange, 4)
Alloc(AutoLRValue, 4)
Alloc(AutoLRMain, 128)
Label(GoLeft)
Label(GoRight)
Label(ICSReturn)


AutoLRRange:
DD #10   

AutoLRICSEntry:
Cmp [Esp],01063BD6
Jne ICSReturn
Mov [Esp],AutoLRMain
ICSReturn:
Jmp GetFocus

AutoLRMain:
Cmp [AutoLRRange], 0
Je 01063BD6
Push Eax
Inc [AutoLRValue]
Mov Eax, [AutoLRRange]
Cmp Eax, [AutoLRValue]
Jge GoLeft
Add Eax, [AutoLRRange]
Cmp Eax, [AutoLRValue]
Jge GoRight
Mov [AutoLRValue], 1
Jmp GoLeft

GoLeft:
Mov [Ebp-14],FFFFFFFF
Pop Eax
jmp 01064125

GoRight:
Mov [Ebp-14],00000001
Pop Eax
Jmp 01064125

0193FBF0:
DD AutoLRICSEntry

[Disable]
0193FBF0:
DD GetFocus

Dealloc(AutoLRICSEntry)
Dealloc(AutoLRMain)
Dealloc(AutoLRRange)
Dealloc(AutoLRValue)
UnregisterSymbol(AutoLRRange)
UnregisterSymbol(AutoLRMain)

2015-08-05

★教學★將AVA擾人的開啟畫面刪除







每次開啟AVA時都會等一段時間
打算利用一下時又會看到中間那基巴的視窗




步驟1.
到以下地址
\GarenaAVA\GameData\Apps\AVATW\avaGame\Splash\TPE\
將Splash00 & Splash01 & Splash02 刪除

[VB.net] Metro Form UI

成品:


















--------------------------------------------------------------------------------------------------

步驟1.加入參考












步驟2.瀏覽














步驟3.選擇以下三個檔案







步驟4.修改Form












Inherits System.Windows.Forms.Form
修改為
Inherits MetroFramework.Forms.MetroForm

步驟5.工具列新增索引標籤













步驟6.選擇項目












步驟7.瀏覽

步驟8.選擇MetroFramework.dll
完成



Metro Form UI Dll載點:

已修改好的專案:



TwMS_v182.3_ICS_發言不限3次

//TwMS v182.3_ICS_發言不限3次
//ICS:Doem
//Update: Boby

[Enable]
Alloc(Hook,64)
Label(Hook1)

Hook:
CMP  [ESP+10],005999FA
JNE  InterlockedIncrement+6
MOV  [ESP+10],Hook1
JMP  InterlockedIncrement+6

Hook1:
mov eax,[edi]
cmp eax,ebx
jmp 00599A59

013D20C4:
DD Hook
[Disable]
013D20C4:
DD InterlockedIncrement+6

TwMS_v182.3_ICS_怪物跟隨(會斷)

//TwMS_v182.3_ICS_怪物跟隨(生氣型)
//ICS: Doem
//Update: Boby

[ENABLE]
Alloc(Hook,64)
Label(Bitch1)
Label(Bitch2)
Label(Bitch3)

Hook:
PUSH 000000CC 
MOV  EAX,01255E75
CALL 01180FFE
MOV  EBX,ECX
XOR  ESI,ESI
MOV  [EBP-74],ESI
CALL 008A51CB 
TEST EAX,EAX
JNE  Bitch1
CMP  [EBX+00000288],ESI 
JE   Bitch1
LEA  ECX,[EBX+00000280]
CALL 004C2D50 

Bitch1:
MOV  ECX,EBX
CALL 008A638E
TEST EAX,EAX
JE   Bitch2
CMP  [EBX+00000288],ESI
JE   Bitch2
LEA  ECX,[EBX+00000280]
CALL 004C2D50

Bitch2:
MOV  EAX,[EBX+00000A2C]
CMP  EAX,ESI
JE   Bitch3
MOV  ECX,[0192C624]
PUSH EAX
CALL 004A7FBB 
TEST EAX,EAX
JNE  008D5AAA 
PUSH ESI
PUSH ESI
PUSH ESI
PUSH ESI
MOV  ECX,EBX
CALL 008AD5A6 
MOV  [EBX+00000A2C],ESI

Bitch3:
MOV  EAX,[EBX+00000298]
CMP  [EAX+00000370],ESI
JNE  008D5AEC 
JMP  008D5AB8 

0150BB80:
DD Hook
[DISABLE]
0150BB80:
DD 008D5A2F 
DeAlloc(Hook)

TwMS_v182.3_ICS_Miss無敵

//TwMS v182.3_ICS_Miss無敵
//Update:Boby
[Enable]
Alloc(Hook_Main,128)
Label(HookFun)

Hook_Main:
Cmp [Esp+3C],00FA04EC
Jne InterlockedIncrement
Mov [Esp+3C],HookFun
Jmp InterlockedIncrement

HookFun: //Cmp
push eax
mov eax,[ebx]
mov ecx,ebx
call dword ptr [eax+70]
push eax
call 009EE613
push [ebx+00000524]
mov [ebp-34],eax
mov [ebp-2C],esi
mov [ebp-10],esi
mov [ebp-70],esi
mov [ebp-00000088],esi
mov [ebp-58],esi
mov [ebp-80],esi
mov [ebp-30],esi
mov [ebp-000000A4],esi
mov [ebp-0000008C],esi
mov [ebp-00000090],esi
mov [ebp-14],esi
call 00519F3D
push [ebx+00000528]
mov [ebp-78],eax
call 00519F3D
add esp,14
mov [ebp-74],eax
cmp [ebp+68],esi
jmp 00FA1826


013D20C4:
DD Hook_Main

[Disable]
013D20C4:
DD InterlockedIncrement
DeAlloc(Hook_Main)

TwMS_v182.3_ICS_全職業全圖打怪+物品掉落腳下

//TwMS_v182.3_ICS_全職業全圖打怪+物品掉落腳下
//更新:Boby

[Enable]
RegisterSymbol(FullMapSW)
Alloc(FullMapAtt_ICS,512)
Alloc(FullMapSW,04)
Label(FullMapAttByPass)
Label(FullMapAttack)
Label(FullMapAttackHook)
Label(FullMapAttackCall)
Label(FullMapAttByPassHook)

FullMapSW:
DD 01

FullMapAtt_ICS:
Cmp [FullMapSW],01
Jne Variantinit
Cmp [Esp+C],008D6EAC
Je FullMapAttByPass
Cmp [Esp+C],008D6CF4
Je FullMapAttack
Jmp Variantinit
//-------------------------------
FullMapAttByPass:
Mov [Esp+C],FullMapAttByPassHook
Jmp Variantinit
//-------------------------------
FullMapAttack:
Mov [Esp+C],FullMapAttackHook
Jmp Variantinit
//-------------------------------
FullMapAttByPassHook:
mov ecx,[ebx+00000214]
mov [ebp-04],0000000E
cmp ecx,esi
je 008D6AA0
lea eax,[ebp-58]
push eax
push esi
push esi
push esi
push esi
push esi
push esi
lea eax,[ebp-5C]
push eax
lea eax,[ebp-60]
push eax
call 004B3ECC
or dword ptr [ebp-04],-1
lea eax,[ebp-58]
push eax
call 0046CE49
pop ecx
lea eax,[ebp-60]
push eax
lea ecx,[ebx+00000988]
call 008960DD
test eax,eax
jmp 008D6EFC


//--------------------------
FullMapAttackHook:
mov ecx,[ebx+00000214]
mov [ebp-04],0000000D
cmp ecx,esi
je 008D6AA0
lea eax,[ebp-58]
push eax
push esi
push esi
push esi
push esi
push esi
push esi
lea eax,[ebp-5C]
push eax
lea eax,[ebp-60]
push eax
call 004B3ECC
or dword ptr [ebp-04],-1
lea eax,[ebp-58]
push eax
call 0046CE49
pop ecx
lea eax,[ebp-60]
push eax
mov ecx,edi
//--------------------------
call FullMapAttackCall
//-------------------------------------
jmp 008D6D39
//-------------------------------------
FullMapAttackCall:
push esi
push edi
mov edi,[esp+0C]
pushad
mov ecx,[01928074]
add ecx, 04
push edi
call 005CAEE4
popad
jmp 004B55F4
//--------------------------------------

013D22EC:
DD FullMapAtt_ICS

[Disable]
013D22EC:
DD Variantinit


DeAlloc(FullMapAtt_ICS)
UnRegisterSymbol(FullMapSW)

TwMS_v182.3_ICS_人物左右走

//TwMS_v182.3_ICS_人物左右走
//更新:Boby

[Enable]
RegisterSymbol(AutoLRMain)
RegisterSymbol(AutoLRRange)
Alloc(AutoLRICSEntry, 64)
Alloc(AutoLRRange, 4)
Alloc(AutoLRValue, 4)
Alloc(AutoLRMain, 128)
Label(GoLeft)
Label(GoRight)
Label(ICSReturn)


AutoLRRange:
DD #10  

AutoLRICSEntry:
Cmp [Esp],01063BD6
Jne ICSReturn
Mov [Esp],AutoLRMain
ICSReturn:
Jmp GetFocus

AutoLRMain:
Cmp [AutoLRRange], 0
Je 01063BD6
Push Eax
Inc [AutoLRValue]
Mov Eax, [AutoLRRange]
Cmp Eax, [AutoLRValue]
Jge GoLeft
Add Eax, [AutoLRRange]
Cmp Eax, [AutoLRValue]
Jge GoRight
Mov [AutoLRValue], 1
Jmp GoLeft

GoLeft:
Mov [Ebp-10],FFFFFFFF
Pop Eax
jmp 01064125

GoRight:
Mov [Ebp-10],00000001
Pop Eax
Jmp 01064125

0193FBF0:
DD AutoLRICSEntry

[Disable]
0193FBF0:
DD GetFocus

Dealloc(AutoLRICSEntry)
Dealloc(AutoLRMain)
Dealloc(AutoLRRange)
Dealloc(AutoLRValue)
UnregisterSymbol(AutoLRRange)
UnregisterSymbol(AutoLRMain)

TwMS_v182.3_ICS_完全無敵

//TwMS v182.3_ICS_完全無敵
//Update:Boby

[Enable]
Alloc(Hook_Main,128)
Label(HookFun)

Hook_Main:
Cmp [Esp+3C],00FA04EC
Jne InterlockedIncrement
Mov [Esp+3C],HookFun
Jmp InterlockedIncrement

HookFun: //Cmp
push eax
mov eax,[ebx]
mov ecx,ebx
call dword ptr [eax+70]
push eax
call 009EE613
push [ebx+00000524]
mov [ebp-34],eax
mov [ebp-2C],esi
mov [ebp-10],esi
mov [ebp-70],esi
mov [ebp-00000088],esi
mov [ebp-58],esi
mov [ebp-80],esi
mov [ebp-30],esi
mov [ebp-000000A4],esi
mov [ebp-0000008C],esi
mov [ebp-00000090],esi
mov [ebp-14],esi
call 00519F3D
push [ebx+00000528]
mov [ebp-78],eax
call 00519F3D
add esp,14
mov [ebp-74],eax
cmp [ebp+68],esi
Jmp 00FA2C9F


013D20C4:
DD Hook_Main

[Disable]
013D20C4:
DD InterlockedIncrement
DeAlloc(Hook_Main)

TwMS_v182.3_ICS_物理無敵

//TwMS_v182.3_ICS_物理無敵
//更新:Boby

[enable]
Alloc(Invincible, 128)
Label(main)

Invincible:
cmp [esp+4C], 008D7E6D
jne OffsetRect
mov [esp+4C], main
jmp OffsetRect

main:
lea eax, [ebp-30]
push eax
call 004A56DA
pop ecx
jmp 008D7EEC

0193FB64:
DD Invincible

[Disable]
0193FB64:
DD OffsetRect

DeAlloc(Invincible)

TwMS_v182.3_ICS_部分職業伍拾萬傷害NoDelay

//TwMS_v182.3_ICS_終極攻擊無延遲
//對應武器: [弓,弩,火槍,拳套,雙弩槍]
//Update:Boby

[Enable]
Alloc(SkillID,4)
Alloc(FinalAttack,64)
Label(Return)
Label(DoFinalAttack)

SkillID:
DD #95001001

FinalAttack:
Cmp [Esp+20], 00FD4C8E
Jne Return
Mov [Esp+20], DoFinalAttack
Return:
Jmp kernel32.InterlockedDecrement

DoFinalAttack:
MOV  EAX,[01928074]  
MOV  [EAX+614],FFFFFFFF
Cmp [SkillID], 0
je 00FD4E85
Mov Ebx, [SkillID]
Mov [Esi+BEB8], Ebx 
Xor Ebx, Ebx
Cmp [Esi+BEB8], Ebx
je 00FD4E85
Push [Esi+524]
call 00519F3D 
Lea Esp, [Esp+4]
Mov [Esi+BEBC], Eax
Jmp 00FD4C9A 

013D20C8:
DD FinalAttack
[Disable]
DeAlloc(SkillID)
DeAlloc(FinalAttack)

013D20C8:
DD kernel32.InterlockedDecrement

2015-08-01

TwBNB_v104_CRC_人物穿牆 (穩定版)

//TwBNB_v104_CRC_人物穿牆
//開始遊戲前請先開啟
//盡量不要穿越無法炸開的物品

[ENABLE]
012A71BA:
db 33 3C FF E9 6D 87 3D FF 90
[DISABLE]
012A71BA:
db 33 3C FF FF 75 0C FF 75 08

TwMS_v182.2_ICS_人物左右走

//TwMS_v182.2_ICS_人物左右走
//更新:Boby

[Enable]
RegisterSymbol(AutoLRMain)
RegisterSymbol(AutoLRRange)
Alloc(AutoLRICSEntry, 64)
Alloc(AutoLRRange, 4)
Alloc(AutoLRValue, 4)
Alloc(AutoLRMain, 128)
Label(GoLeft)
Label(GoRight)
Label(ICSReturn)


AutoLRRange:
DD #10        

AutoLRICSEntry:
Cmp [Esp],01063CCD
Jne ICSReturn
Mov [Esp],AutoLRMain
ICSReturn:
Jmp GetFocus

AutoLRMain:
Cmp [AutoLRRange], 0
Je 01063CCD
Push Eax
Inc [AutoLRValue]
Mov Eax, [AutoLRRange]
Cmp Eax, [AutoLRValue]
Jge GoLeft
Add Eax, [AutoLRRange]
Cmp Eax, [AutoLRValue]
Jge GoRight
Mov [AutoLRValue], 1
Jmp GoLeft

GoLeft:
Mov [Ebp-10],FFFFFFFF
Pop Eax
jmp 0106421C

GoRight:
Mov [Ebp-10],00000001
Pop Eax
Jmp 0106421C

0193FBF0:
DD AutoLRICSEntry

[Disable]
0193FBF0:
DD GetFocus

Dealloc(AutoLRICSEntry)
Dealloc(AutoLRMain)
Dealloc(AutoLRRange)
Dealloc(AutoLRValue)
UnregisterSymbol(AutoLRRange)
UnregisterSymbol(AutoLRMain)