☆0.68台灣楓之谷★代碼、數據集中區☆

滑鼠移動人物
//熱鍵控制
//右趴下＝開
//左趴下＝關
// Address：007571EE  EIP=>CSX
[Enable]
alloc(MouserX,512)
alloc(MouserY,512)
alloc(CSX,128)
registersymbol(CSX)
alloc(OnOff,128)
registersymbol(OnOff)
label(normal)
label(normalx)
label(normaly)
label(back)
label(return)
label(On)
label(Off)
OnOff:
dd 0
CSX:
push eax
mov eax,[008A5820]
cmp [eax+2C0],a
je On
cmp [eax+2C0],b
je Off
pop eax
jmp MouserX
normal:
pop eax
mov [ebx], eax
mov edi,[ebp+10]
jmp back
back:
jmp 007571f3
return:
jmp 00757258
On:
pop eax
mov [OnOff],1
jmp MouserX
Off:
pop eax
mov [OnOff],0
jmp MouserX
MouserX:
cmp [OnOff],0
je normalx
push eax
mov eax,[008A5820]
mov eax,[eax+590]
cmp esi,eax
pop eax
jne normalx
mov eax, [008A5968]
mov eax, [eax+978]
mov eax, [eax+84]
mov [ebx], eax
mov edi,[ebp+10]
test    edi, edi
jne     MouserY
jmp    00757255
normalx:
mov [ebx], eax
mov edi,[ebp+10]
jmp back
MouserY:
push eax
mov eax,[008A5820]
mov eax,[eax+590]
cmp esi,eax
pop eax
jne normaly
mov eax, [008A5968]
mov eax, [eax+978]
mov eax, [eax+88]
mov [edi], eax
mov ebx,[ebp+14]
jmp return
normaly:
mov [edi], eax
mov ebx,[ebp+14]
jmp return
[Disable]
dealloc(MouserX)
dealloc(MouserY)
dealloc(CSX)
unregistersymbol(CSX)
dealloc(OnOff)
unregistersymbol(OnOff)


白目無敵
[enable]
//原作者：白目國中生
//Address：0071B2E7
//EIP：MyGod
registersymbol(MyGod)
registersymbol(Red)
registersymbol(Back)
alloc(MyGod,128)
alloc(Red,4)
alloc(Back,4)
label(God)
label(Next)
label(Start)
Red:
DD    1  //<==不需要遇人取消無敵的功能 ,請將 0 改為 1 即可.
DD    0  //<==需要人物被撞到時,倒退彈開,請將 0 改為 1 即可
MyGod:
push eax
cmp [Red],0
jnz   Start
mov eax,[008A5814]
mov eax,[eax+18]
jz     Start
  
God:
pop   eax
cmp  [ebp+c],ebx
jmp   0071B2EA
Start:
cmp  [ebp+8],0
jz      God
xor    eax,eax
mov  al,[008a65a0]
and   al,3
cmp  al,0
jnz    Next
inc    eax
Next:
mov  [ebp+8],eax
cmp  [Back],0
jnz     God
mov  [ebp+c],ebx
mov  [ebp+10],ebx
mov   esi,5dc
pop   eax
jmp    0071B322
[disable]
dealloc(MyGod)
dealloc(Red)
dealloc(Back)
unregistersymbol(MyGod)
unregistersymbol(Red)
unregistersymbol(Back)

[enable]
//原作者：maggie98
//Address：0071B2E7
//EIP：RunMyGodZ
registersymbol(VarMaxBloodZ)
registersymbol(VarMinBloodZ)
registersymbol(FgLoss123Z)
registersymbol(FgRedChkZ)
registersymbol(RunMyGodZ)
registersymbol(FgBackZ)
alloc(RunMyGodZ, 1024)
alloc(VarMaxBloodZ, 4)
alloc(VarMinBloodZ, 4)
alloc(FgLoss123Z, 4)
alloc(FgRedChkZ, 4)
alloc(FgBackZ, 4)
label(ControlBloodRangeZ)
label(RMGZ1)
label(RMGZ2)
label(CBRZ100)
label(CBRZ050)
label(CBRZ060)

VarMaxBloodZ:
        dd      E74  // 最高損血量：16進位
VarMinBloodZ:
        dd      E74   // 最低損血量：16進位
FgRedChkZ:
        dd      0   //<==需要遇人取消無敵的功能 ,請將 0 改為 1 即可.
FgBackZ:
        dd      0   //<==需要人物被撞到時,倒退彈開,請將 0 改為 1 即可.
FgLoss123Z:
        dd      0   //<==需要沒人時損血1,2或3滴, 有人時損血為VarMinBloodZ<損血<VarMaxBloodZ , 將0改1即可.
               
RunMyGodZ:
        push    eax
        cmp     [FgRedChkZ], 0
        je      RMGZ2
        mov     eax,[00892824]
        mov     eax,[eax+18]
        test    eax,eax
        jz      RMGZ2         
    RMGZ1:
        pop     eax
        cmp     [ebp+c],ebx
        jmp     0071B2EA
    RMGZ2:
    //    cmp     [ebp+8],0
    //    jz      RMGZ1
        call    ControlBloodRangeZ
        mov     [ebp+8], eax
        cmp     [FgBackZ], 0
        jnz     RMGZ1
        mov     [ebp+c],ebx
        mov     [ebp+10],ebx
        pop     eax
        mov     esi,000005dc
        jmp     0071B356
               
ControlBloodRangeZ:
        push    ebx
        push    ecx
        push    edx
        cmp     [FgLoss123Z], 0
        je      CBRZ050
        mov     edx, [00892824]
        cmp     [edx+18], 0
        jne     CBRZ050
        xor     edx, edx
        mov     dl, [008935b0]
        and     dl, 3
        test    dl, dl
        jnz     CBRZ100
        inc     edx
        jmp     CBRZ100
    CBRZ050:
        xor     edx, edx               
        mov     eax, [008935b0]
        mov     ecx, [VarMaxBloodZ]
        mov     ebx, [VarMinBloodZ]
        cmp     ecx, ebx
        jg      CBRZ060
        xchg    ecx, ebx
    CBRZ060:
        inc     ecx
        sub     ecx, ebx
        div     ecx
        add     edx, ebx
        cmp     edx, [ebp+8]
        jb      CBRZ100
        mov     edx, [ebp+8]
    CBRZ100:
        mov     eax, edx
        pop     edx
        pop     ecx
        pop     ebx
        ret      
               
[DISABLE]
unregistersymbol(VarMinBloodZ)
unregistersymbol(VarMaxBloodZ)
unregistersymbol(FgLoss123Z)
unregistersymbol(FgRedChkZ)
unregistersymbol(RunMyGodZ)
unregistersymbol(FgBackZ)
dealloc(RunMyGodZ, 1024)
dealloc(VarMaxBloodZ, 4)
dealloc(VarMinBloodZ, 4)
dealloc(FgLoss123Z, 4)
dealloc(FgRedChkZ, 4)
dealloc(FgBackZ, 4)

※感謝jf741235896提供※

// 名稱: maxInstantDrop EIP 版 Ver 1.0  For TwMS 0.68
// 修改: maxYoYo
// 功能: 物品彈起高度, (cs端)
// 004B6DE6: EIP= Drop
// 請新增 address , {address: DropHeight, Type: double},
// Value 值:
// 1000 為正常值,
// 9999 為很高,
//    0 為建議值.
//-----------------------------------------------

[ENABLE]
alloc(Drop, 11)
alloc(DropHeight, 8)
registersymbol(Drop)
registersymbol(DropHeight)
Drop:
fmul qword ptr [DropHeight]
jmp 004B6DF1
[DISABLE]
dealloc(Drop)
dealloc(DropHeight)
unregistersymbol(DropHeight)

怪物移動方向 00758D3D EAX:2(右) 3(左)
怪物變笨  00757F1D ZF[V][  ]
全砍全刺 0061AFD3 EAX：2(砍)、3(刺)
絕對KB 0058DD1B ZF[V][  ]
近戰打怪不空揮 00715AC4  ZF[V][V]

= 3 =
定點順移
雖然不知道有沒fans愛用
還是轉來分享
請大家笑納

1. //定點順移
   
2. //修改者；SWEI0939
   
3. //Address：00757253
   
4. //EIP：maxRush2
   
5. //原作：maxjojo
   
6. //啟動判斷 EIP：maxRush2OnOff【0=關閉 1=啟動】
   
7. //PID編號偵測 EIP：maxRush2Counter
   
8. //角色座標偵測 EIP：maxLastCharStatus
   
9. //循環判斷 EIP：isLoopMaxRush2 【1=循環 0=執行一次】
   
10. [ENABLE]
    
11. registersymbol(maxRush2)
    
12. registersymbol(maxRush2Counter)
    
13. registersymbol(maxRush2OnOff)
    
14. registersymbol(maxLastCharStatus)
    
15. registersymbol(isLoopMaxRush2)
    
16. alloc(maxRush2, 512)
    
17. alloc(maxRush2Counter,4)
    
18. alloc(maxRush2OnOff,4)
    
19. alloc(maxLastCharStatus,4)
    
20. alloc(isLoopMaxRush2,4)
    
21. alloc(spotsList,1024)
    
22. label(doRushNormal)
    
23. label(doRushTele)
    
24. label(doRushTeleEnd)
    
25. 
    
26. maxRush2Counter:
    
27.     dd 0
    
28. maxRush2OnOff:
    
29.     dd 1                    // {1: On | 0: Off)
    
30. maxLastCharStatus:
    
31.     dd 0                    // last char status.
    
32. isLoopMaxRush2:
    
33.     dd 1                    // {1: loop (循環) | 0: just one time(只需跑1次)}
    
34. maxRush2:                   // 00756CE2
    
35.     push edx
    
36.     push ecx
    
37.     mov edx,[008A5820]      //Char PID Pointet
    
38.     mov ecx,[edx+590]       //Char PID Offset
    
39.     cmp esi,ecx
    
40.     je doRushNormal
    
41.     cmp [maxRush2OnOff],0
    
42.     je doRushNormal
    
43.     push eax
    
44.     mov eax,[maxLastCharStatus]
    
45.     cmp [edx+2c0], eax      // stop teleport when status the same, 相同狀態,即停止.
    
46.     pop eax
    
47.     je doRushNormal         // end of rush teleport.
    
48. 
    
49.     cmp [edx+2c0],14        // sitting in chair facing left, 14=向右坐下
    
50.     je doRushTele
    
51.     cmp [edx+2c0],15        //sitting in chair facing right, 15=向左坐下
    
52.     je doRushTele
    
53.     mov [maxLastCharStatus],0
    
54.     jmp doRushNormal
    
55. doRushTele:
    
56.     push eax
    
57.     mov eax,[edx+2c0]
    
58.     mov [maxLastCharStatus],eax
    
59.     pop eax
    
60.     mov ecx,[maxRush2Counter]
    
61.     add [maxRush2Counter],1
    
62.     mov ecx,[spotsList+ecx*8]
    
63.     test ecx, ecx               // is end of spots list (比對結束了嗎)?
    
64.     je doRushTeleEnd            // end of rush teleport.
    
65.     mov [edx+e3c],ecx           // AOB (89 88     8b 4d  89 88)
    
66.     mov ecx,[maxRush2Counter]
    
67.     sub ecx,1
    
68.     mov ecx,[spotsList+ecx*8+4]
    
69.     mov [edx+e40],ecx           // AOBs (89 88     8b 4d  89 88)
    
70.     mov [edx+2c0],13            // 13=死亡
    
71.     jmp doRushNormal
    
72. doRushTeleEnd:
    
73.     cmp [isLoopMaxRush2],0
    
74.     je doRushNormal
    
75.     mov [maxRush2Counter],0      // reset counter (歸零重來)
    
76.     jmp doRushTele
    
77. doRushNormal:
    
78.     pop ecx
    
79.     pop edx
    
80.     mov [edi],eax
    
81.     jmp 00757255
    
82. spotsList: //請透過角色 X -Y尋找
    
83.     dd FFFFFFEC     // spot X #1
    
84.     dd 000000B9     // spot Y #1
    
85. 
    
86. [DISABLE]
    
87. dealloc(maxRush2)
    
88. dealloc(maxRush2Counter)
    
89. dealloc(maxRush2OnOff)
    
90. dealloc(maxLastCharStatus)
    
91. dealloc(isLoopMaxRush2)
    
92. dealloc(spotsList)
    
93. unregistersymbol(maxRush2)
    
94. unregistersymbol(maxRush2Counter)
    
95. unregistersymbol(maxRush2OnOff)
    
96. unregistersymbol(maxLastCharStatus)
    
97. unregistersymbol(isLoopMaxRush2)

複製代碼

[ 本帖最後由 SWEI0939 於 2008-3-3 22:23 編輯 ]

CSEAX 三互一

1. [Enable]
   
2. //原作者：原作者是 獨孤戀人 OR 喝水會嗆到 //修改者:億萬富翁//修改日期:3月2日
   
3. //Address：007571EE
   
4. //EIP：cseax
   
5. //熱鍵控制：mode【0=關閉、1=滑鼠趕路，2=攻不停、其他數值=遠攻不揮拳套/弓】
   
6. registersymbol(cseax)
   
7. alloc(cseax,64)
   
8. alloc(MouserX,512)
   
9. alloc(MouserY,512)
   
10. label(normalx)
    
11. label(normaly)
    
12. label(back)
    
13. label(return)
    
14. alloc(CSX,512)
    
15. registersymbol(mode)
    
16. alloc(mode,4)
    
17. label(CSXReturn)
    
18. label(bigger)
    
19. label(kenny100)
    
20. mode:
    
21. dd 0 //0=關閉、1=滑鼠趕路，2=攻不停、其他數值=遠攻不揮拳套/弓
    
22. 
    
23. cseax:
    
24. cmp [mode],0
    
25. je normalx
    
26. cmp [mode],1
    
27. je MouserX
    
28. jmp CSX
    
29. 
    
30. back:
    
31. jmp 007571F3
    
32. 
    
33. return:
    
34. jmp 00757258
    
35. 
    
36. MouserX:
    
37. push eax
    
38. mov eax,[008a5820] ////
    
39. mov eax,[eax+590]
    
40. cmp esi,eax
    
41. pop eax
    
42. jne normalx
    
43. 
    
44. mov eax, [008A5968]//
    
45. mov eax, [eax+978]
    
46. mov eax, [eax+84]
    
47. mov [ebx], eax
    
48. mov edi,[ebp+10]
    
49. test edi, edi
    
50. jne MouserY
    
51. jmp 00757255
    
52. 
    
53. normalx:
    
54. mov [ebx], eax
    
55. mov edi,[ebp+10]
    
56. jmp back
    
57. 
    
58. MouserY:
    
59. push eax
    
60. mov eax,[008a5820]
    
61. mov eax,[eax+590]
    
62. cmp esi,eax
    
63. pop eax
    
64. jne normaly
    
65. 
    
66. mov eax, [008a5968]
    
67. mov eax, [eax+978]
    
68. mov eax, [eax+88]
    
69. mov [edi], eax
    
70. mov ebx,[ebp+14]
    
71. jmp return
    
72. 
    
73. normaly:
    
74. mov [edi], eax
    
75. mov ebx,[ebp+14]
    
76. jmp return
    
77. 
    
78. CSX:
    
79. push eax
    
80. mov eax,[008a5820]
    
81. mov eax,[eax+12dc]
    
82. cmp eax,5A
    
83. pop eax
    
84. jg kenny100
    
85. cmp [mode],2
    
86. je CSXReturn
    
87. push eax
    
88. mov eax,[008a5820] //
    
89. mov eax,[eax+590]
    
90. cmp esi,eax
    
91. pop eax
    
92. je CSXReturn
    
93. push edx
    
94. mov edx,[008a5820] //
    
95. mov edx,[edx+580]
    
96. cmp eax,edx
    
97. pop edx
    
98. jge bigger
    
99. push edx
    
100. mov edx,[008a5820]
     
101. mov edx,[edx+580]
     
102. sub edx,b4 //遠攻距離
     
103. cmp edx,eax
     
104. pop edx
     
105. jg CSXReturn
     
106. mov eax,[008a5820]
     
107. mov eax,[eax+580]
     
108. sub eax,b4 //遠攻距離
     
109. 
     
110. CSXReturn:
     
111. mov [ebx], eax
     
112. jmp 007571F0
     
113. 
     
114. bigger:
     
115. push edx
     
116. mov edx,[008a5820]
     
117. mov edx,[edx+580]
     
118. add edx,b4
     
119. cmp eax,edx
     
120. pop edx
     
121. jg CSXReturn
     
122. mov eax,[008a5820]
     
123. mov eax,[eax+580]
     
124. add eax,b4 //遠攻距離
     
125. jmp CSXReturn
     
126. 
     
127. kenny100:
     
128. push eax
     
129. mov eax,[008a5820] //
     
130. mov eax,[eax+590]
     
131. cmp esi,eax
     
132. pop eax
     
133. jne CSXReturn
     
134. add eax,f //位移
     
135. jmp CSXReturn
     
136. 
     
137. [Disable]
     
138. unregistersymbol(cseax)
     
139. dealloc(cseax)
     
140. dealloc(MouserX)
     
141. dealloc(MouserY)
     
142. dealloc(CSX)
     
143. unregistersymbol(mode)
     
144. dealloc(mode)

複製代碼