冰楓論壇
標題:
TwMs v260.3 輪YX坐標 方向
[打印本頁]
作者:
wangjiaxin857
時間:
2024-4-19 15:04
標題:
TwMs v260.3 輪YX坐標 方向
TwMs v260.3
輪類型
[[1477D1330]+20]+0
輪座標
N就是輪類型後面再加個0,比如天雷之輪的ID是2那麽N=20 重生之輪ID是0 N=0 净化之輪的ID是7 N=70
X = [[[[[[[[[1477D1330]+08]+N+8]+98]+D8]+58]+28]+58]+28]+50
Y = [[[[[[[[[1477D1330]+08]+N+8]+98]+D8]+58]+28]+58]+28]+54
以下是人造指針
//TwMs v260.3 取得輪ID,Y坐標,X坐標
[ENABLE]
alloc(Hook,512,142F6331D)
alloc(Rune_ID,4)
registersymbol(Rune_ID)
alloc(Rune_Y,4)
registersymbol(Rune_Y)
alloc(Rune_X,4)
registersymbol(Rune_X)
Hook:
mov [Rune_ID],rax
mov r14,rax
shl r14,04
mov [rbp+0F],r14
mov rbx,[rsi+08]
mov rcx,1477D1330
mov rcx,[rcx]
mov rcx,[rcx+08]
mov rcx,[rcx+r14+08]
cmp dword ptr [rcx+98],0
je 142F6331D+F
mov rcx,[rcx+98]
mov rcx,[rcx+d8]
mov rcx,[rcx+58]
mov rcx,[rcx+28]
mov rcx,[rcx+58]
mov rcx,[rcx+28]
mov r9d,[rcx+54]
mov r8d,[rcx+50]
mov [Rune_Y],r9d
mov [Rune_X],r8d
jmp 142F6331D+F
142F6331D:
jmp Hook
[DISABLE]
142F6331D:
mov r14,rax
shl r14,04
mov [rbp+0F],r14
mov rbx,[rsi+08]
dealloc(Hook)
dealloc(Rune_ID)
dealloc(Rune_Y)
dealloc(Rune_X)
unregistersymbol(Rune_ID)
unregistersymbol(Rune_Y)
unregistersymbol(Rune_X)
複製代碼
//TwMs v260.3 讀取解輪介面方向鍵
[ENABLE]
alloc(RUNE_newmem,1024,142F55D58)
alloc(RUNE_num,4)
alloc(rune_arrow,16)
label(code)
alloc(RUNEARROW1,4)
registersymbol(RUNEARROW1)
alloc(RUNEARROW2,4)
registersymbol(RUNEARROW2)
alloc(RUNEARROW3,4)
registersymbol(RUNEARROW3)
alloc(RUNEARROW4,4)
registersymbol(RUNEARROW4)
RUNE_num:
db 0
rune_arrow:
dd 00 00 00 00
RUNE_newmem:
code:
cmp [RUNE_num],4
jne here
mov [RUNE_num],0
here:
cmp [RUNE_num],0
jne RUNE_newmem+27
mov [RUNEARROW1],r9
cmp [RUNE_num],1
jne RUNE_newmem+37
mov [RUNEARROW2],r9
cmp [RUNE_num],2
jne RUNE_newmem+47
mov [RUNEARROW3],r9
cmp [RUNE_num],3
jne RUNE_newmem+57
mov [RUNEARROW4],r9
mov r8d,[rbp+30]
lea rdx,[1465E67D0]
push rax
push rbx
mov rax,rune_arrow
mov bx,[RUNE_num]
add ax,bx
mov [rax],r9
pop rbx
pop rax
inc [RUNE_num]
jmp 142F55D58+B
142F55D58:
jmp RUNE_newmem
DB 90 90 90 90 90 90
[DISABLE]
142F55D58:
mov r8d,[rbp+30]
lea rdx,[1465E67D0]
dealloc(RUNE_newmem)
dealloc(RUNE_num)
dealloc(rune_arrow)
dealloc(RUNEARROW1)
unregistersymbol(RUNEARROW1)
dealloc(RUNEARROW2)
unregistersymbol(RUNEARROW2)
dealloc(RUNEARROW3)
unregistersymbol(RUNEARROW3)
dealloc(RUNEARROW4)
unregistersymbol(RUNEARROW4)
複製代碼
0 = 方向鍵下、1 = 方向鍵上、2 = 方向鍵左、3 = 方向鍵右
作者:
u11334342
時間:
2024-4-19 15:50
雖然很感謝有人公布,但大神您太狠,直接給標準答案XD 希望看到的人低調使用,讓數據活久一點啊
歡迎光臨 冰楓論壇 (https://bingfong.com/)
Powered by 冰楓