Code: Select all
[ENABLE]
aobScanModule( scan_GetItem, $process, 48 89 5C 24 08 48 89 6C 24 10 48 89 74 24 18 57 48 81 EC 90 00 00 00 41 8B F? )
aobScanModule( scan_params1_get, $process, 48 8B 0D ?? ?? ?? ?? 33 D2 48 81 C1 68 04 00 00 E8 ?? ?? ?? ?? 48 8B D8 )
aobScanModule( scan_TlsIndex, $process, 8B 05 ?? ?? ?? ?? 65 48 8B 0C 25 58 00 00 00 41 BC AA 0C 00 00 48 8B 34 C1 42 0F B6 04 26 )
globalAlloc( newmem_GetItem,0x8000 )
label(dwQuality)
registerSymbol( bThreadLock,dqIID,pIIDList,dwQuality )
define( pIIDList, newmem_GetItem+3000 )
CreateThread( call_GetItem )y
newmem_GetItem:
call_GetItem:
reassemble(scan_TlsIndex)
mov r8d, eax
mov rax, gs:[58]
mov r8, [rax+r8*8]
mov rax, TLS_static
mov qword ptr [r8+388], rax
mov dword ptr [rax+B40], FFFFFFFF
sleep_loop:
sub rsp, 28
mov rcx, #100
call kernel32.sleep
add rsp, 28
cmp byte ptr [bThreadLock], 0
je short sleep_loop
cmp byte ptr [bThreadLock], 1
je short proceed
cmp byte ptr [bThreadLock], 2
je short exit_A
exit_A:
ret
proceed:
mov [rsp+08], rsi
mov [rsp+10], r15
sub rsp, 38
mov rax, scan_params1_get
mov ebx, [rax+3]
movsxd rbx, ebx
mov rax, [rax+rbx+7]
add rax, 468
mov [pFlag], rax
mov rcx, [rax]
mov [flag], rcx
mov [rax], 02
mov rsi, pIIDList
mov r15, rsi
cmp [rsi], 0
je short get_single
add rsi, 8
jmp short get_loop
get_single:
mov rsi, dqIID
mov r15, rsi
add rsi, 8
get_loop:
mov qword ptr [rsp+30], 02 //Source [01-1E], 02-Loot
mov qword ptr [rsp+28], 01 //Celebrate [0-1]
mov rax, [dwQuality]
mov qword ptr [rsp+20], rax //dwQuality
mov r9, 1 //dwLevel, ignored if autoscale=1
mov r8, 1 //bLevelAutoScale, 0/1
@@:
mov edx, [r15]
mov rcx, [rsi]
mov rax, scan_GetItem
call rax
add rsi, 8
cmp [rsi], 0
je short exit_loop
jmp get_loop
exit_loop:
mov dword ptr [r15], 0
mov byte ptr [bThreadLock], 0
mov rdx, [flag]
mov rcx, [pFlag]
mov [rcx], rdx
add rsp, 38
mov rsi, [rsp+08]
mov r15, [rsp+10]
jmp sleep_loop
align 10 CC
pFlag:
dq 0
align 10 CC
flag:
dq 12345678
align 10 CC
bThreadLock:
db 0
align 10 CC
dwQuality:
dd 00000003
align 10 CC
dqIID:
dq 0000000000000001
dq 000001AF7031F3F9
dq 0000000000000000
align 10 CC
TLS_static:
pIIDList:
dq 0000000000000000
[DISABLE]
bThreadLock:
db 2
unregisterSymbol(*)