☆0.68台灣楓之谷★代碼、數據集中區☆

※感謝~滄海~提供※

奉勸大家，別爬太高，要低調唷!
(此代碼億斷線低機率被鎖!)
//空中爬樓梯
// Address：007AFA90   55 8B EC 51 8B 55 08 8B 45 10
// EIP：rope
[ENABLE]
alloc(BYORope,32)
alloc(crope,32)
alloc(rope,64)
Registersymbol(rope)
rope:
jmp BYORope

BYORope:
mov [crope+c],eax
mov eax,crope
push [ecx+10]
pop [eax+10]
push [ecx+18]
pop [eax+14]
ret 10
jmp 007AFA97   //8B 45 10 3B D0 89 4D FC 7D 08
crope:
dd 1 0 1 0 0 0 1
[DISABLE]
Unregistersymbol(rope)
dealloc(BYORope)
dealloc(rope)
dealloc(crope)

1. 
   
2. 
   
3. //原作者；maxjojo
   
4. //修改者；SWEI0939
   
5. //Address：007539BC
   
6. //maxRush v1.3
   
7. //EIP：maxRush
   
8. //定點順移
   
9. [ENABLE]
   
10. registersymbol(maxRush)
    
11. registersymbol(maxRushCounter)
    
12. registersymbol(maxRushOnOff)
    
13. registersymbol(EDIValue)
    
14. registersymbol(isLoopMaxRush)
    
15. alloc(maxRush, 512)
    
16. alloc(maxRushCounter,4)
    
17. alloc(maxRushOnOff,4)
    
18. alloc(EDIValue,4)
    
19. alloc(PlatformIDList,1024)
    
20. alloc(isLoopMaxRush,4)
    
21. label(doRushNormal)
    
22. label(getEDIValue)
    
23. label(doRushTele)
    
24. label(doRushTeleStart)
    
25. label(doRushTeleEnd)
    
26. label(doRushTeleReturn)
    
27. label(doRushResetCounterEnd)
    
28. 
    
29. maxRushCounter:
    
30.     dd 0
    
31. maxRushOnOff:
    
32.     dd 0
    
33.     // {1: On, (char teleport, 定點瞬移) |
    
34.     //  0: Off (platform id detect,平台ID檢測) }
    
35. EDIValue:
    
36.     dd 0                    // platform id (平台ID)
    
37. isLoopMaxRush:
    
38.     dd 1                    // {1: loop (循環) | 0: just one time(只需跑1次)}
    
39. maxRush:                    // 0075344B
    
40.     Push Eax
    
41.     Mov Eax,[008A5820]      // char pointer
    
42.     Add Eax, 590
    
43.     Mov Eax, [Eax]
    
44.     Sub Eax, C              // char pid
    
45.     Cmp Esi,Eax
    
46.     Pop Eax
    
47.     Je doRushNormal
    
48.     jmp 007539c4
    
49. doRushNormal:
    
50.     call doRushTele
    
51.     JA 007539c4
    
52.     jmp 007539be
    
53. doRushTele:
    
54.     pushfd
    
55.     Cmp [maxRushOnOff],0
    
56.     je getEDIValue
    
57.     call doRushTeleStart
    
58. 
    
59. doRushTeleReturn:
    
60.     popfd
    
61.     ret
    
62. 
    
63. // platform id detect.
    
64. getEDIValue:
    
65.     push eax
    
66.     mov eax,[esi+114]
    
67.     mov [EDIValue],eax
    
68.     pop eax
    
69.     add [maxRushCounter],1
    
70.     jmp doRushTeleReturn
    
71. // start charactor teleport
    
72. doRushTeleStart:
    
73.     push ebx
    
74.     push eax
    
75.     mov ebx,[maxRushCounter]
    
76.     add [maxRushCounter],1
    
77.     mov eax,[PlatformIDList+ebx*4]
    
78.     cmp eax, 0                  // is end of platform id list (比對結束了嗎)?
    
79.     je doRushTeleEnd            // end of rush teleport.
    
80.     mov [esi+110],eax
    
81.     jmp doRushResetCounterEnd
    
82. doRushTeleEnd:
    
83.     cmp [isLoopMaxRush],0
    
84.     je doRushResetCounterEnd
    
85.     mov [maxRushCounter],0      // reset counter (歸零重來)
    
86.     pop eax
    
87.     pop ebx
    
88.     jmp doRushTeleStart
    
89. doRushResetCounterEnd:
    
90.     pop eax
    
91.     pop ebx
    
92.     ret
    
93. 
    
94. PlatformIDList:
    
95.     dd 0            // spot #1 (平台1號)
    
96.     dd 0            // spot #2 (平台2號)
    
97.     dd 0            // spot #3 (平台3號)
    
98.     dd 0            // spot #4 (平台4號)
    
99.     dd 0            // spot #5 (平台5號)
    
100.     dd 0            // spot #End (最後一筆要填入0)
     
101. 
     
102. [DISABLE]
     
103. dealloc(maxRush)
     
104. dealloc(maxRushCounter)
     
105. dealloc(maxRushOnOff)
     
106. dealloc(EDIValue)
     
107. dealloc(PlatformIDList)
     
108. dealloc(isLoopMaxRush)
     
109. unregistersymbol(maxRush)
     
110. unregistersymbol(maxRushCounter)
     
111. unregistersymbol(maxRushOnOff)
     
112. unregistersymbol(EDIValue)
     
113. unregistersymbol(isLoopMaxRush)
     
114. 
     
115. 
     

複製代碼

[ 本帖最後由 SWEI0939 於 2008-3-3 22:03 編輯 ]

龍之魂強化

[enable]
8AA690:
db 47 33 79 AE 0A FB 76 C5 24 A1 1D 16
[disable]
8AA690:
db C0 BE 80 54 F6 05 A4 02 6C 70 15 72

測試OK
yociexp113.gif