[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(buff,4096)//"ACE-CSI64.dll"+12DF70
alloc(kb3,512)
define(kb1,14000500)//自己找稳定空白地址
define(kb2,14000570)//需要多buff就增加结束地址
label(gaiyao)
registersymbol(buff)
buff:
call gaiyao
mov rdx,kb3
mov rdx,[rdx]
mov rdx,rdx
mov [rdx+ef8],kb1//NOff 开始
mov [rdx+f00],kb2//NOff 结束
mov [rdx+f18],#600000//时间
mov [rdx+f48],#1
mov rdx,kb1
mov [rdx],#0//力量
mov [rdx+4],#300//值
mov [rdx+8],#1//百分比
mov [rdx+10],#1//智力
mov [rdx+14],#300
mov [rdx+18],#1
mov [rdx+20],#70//独立
mov [rdx+24],#300
mov [rdx+28],#1
mov [rdx+30],#10//攻速
mov [rdx+34],#150
mov [rdx+38],#1
mov [rdx+40],#11//移速
mov [rdx+44],#250
mov [rdx+48],#1
mov [rdx+50],#12//施放
mov [rdx+54],#150
mov [rdx+58],#1
mov [rdx+60],#63//四属强
mov [rdx+64],#300
mov [rdx+68],#1
mov [rdx+70],#66//菜刀
mov [rdx+74],#-90
mov [rdx+78],#1
ret
gaiyao:
push rbx
xor rbx,rbx
push rdi
sub rsp,20
mov rax,[14B70CB30]//人物基址
mov rax,[rax+9EB0]//物品栏
mov rax,[rax+80]//物品栏偏移
mov rdi,[rax+18]//物品栏1
mov rax,[rdi]
mov rcx,rdi
call qword ptr [rax+20]//物品内存
mov [kb3],rax
add rsp,20
pop rdi
pop rbx
ret
"DNFBase.dll"+24BF90:
db EB 3F
createthread(buff)
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(kb3)
dealloc(buff)
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(buff,4096)//"ACE-CSI64.dll"+12DF70
alloc(kb3,512)
define(kb1,14000500)//自己找稳定空白地址
define(kb2,14000570)//需要多buff就增加结束地址
label(gaiyao)
registersymbol(buff)
buff:
call gaiyao
mov rdx,kb3
mov rdx,[rdx]
mov rdx,rdx
mov [rdx+ef8],kb1//NOff 开始
mov [rdx+f00],kb2//NOff 结束
mov [rdx+f18],#600000//时间
mov [rdx+f48],#1
mov rdx,kb1
mov [rdx],#0//力量
mov [rdx+4],#300//值
mov [rdx+8],#1//百分比
mov [rdx+10],#1//智力
mov [rdx+14],#300
mov [rdx+18],#1
mov [rdx+20],#70//独立
mov [rdx+24],#300
mov [rdx+28],#1
mov [rdx+30],#10//攻速
mov [rdx+34],#150
mov [rdx+38],#1
mov [rdx+40],#11//移速
mov [rdx+44],#250
mov [rdx+48],#1
mov [rdx+50],#12//施放
mov [rdx+54],#150
mov [rdx+58],#1
mov [rdx+60],#63//四属强
mov [rdx+64],#300
mov [rdx+68],#1
mov [rdx+70],#66//菜刀
mov [rdx+74],#-90
mov [rdx+78],#1
ret
gaiyao:
push rbx
xor rbx,rbx
push rdi
sub rsp,20
mov rax,[14B70CB30]//人物基址
mov rax,[rax+9EB0]//物品栏
mov rax,[rax+80]//物品栏偏移
mov rdi,[rax+18]//物品栏1
mov rax,[rdi]
mov rcx,rdi
call qword ptr [rax+20]//物品内存
mov [kb3],rax
add rsp,20
pop rdi
pop rbx
ret
"DNFBase.dll"+24BF90:
db EB 3F
createthread(buff)
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(kb3)
dealloc(buff)