v100版代碼總整理(CRC版)

[enable]
//================================================
// 名稱: 疾風N合1 (可調人數)
// 功能: 1.走, 跳怪左右走 2.笨怪 3.58秒PG無敵 4.跳怪不跳
// 5.致命的吸引力 6.紅點取消
// 說明: 左趴往左，右趴往右，坐下停止控制
// LR: 掉怪方向 1停 3左 2右
// VarMaxBloom: 最高損血量: 初始值: 2滴, 採用16進次
// VarMinBloom: 最低損血量: 初始值: 1滴, 採用16進次 (設0=miss)
//================================================
registersymbol(MyLR)
registersymbol(LR)
registersymbol(RunSW)
registersymbol(VarMaxBloom)
registersymbol(VarMinBloom)
alloc(VarMaxBloom, 4)
alloc(VarMinBloom, 4)
alloc(RunSW, 4)
alloc(Runtemp, 4)
alloc(MyLR,1024)
alloc(MyDir,4)
alloc(MyCt,4)
alloc(MyPt1,4)
alloc(LR,4)
label(MyLR1)
label(GoLR)
label(GoLR1)
label(GoLR2)
label(GoLR3)
label(GoLR4)
label(GoLR5)
label(GoLRback)
label(JmpLR)
label(JmpLR1)
label(JmpLR2)
label(JmpLRback)
label(MyStupid)
label(MyNoBack)
label(MyState)
label(MyCharX)
label(MyNoJmp)
label(LRDir1)
label(LRDir2)
label(LRDir3)
label(LRDir4)
label(LRDir5)
label(LRDir6)
label(LRDir7)
label(CBR100)

//--------↓PG無敵↓--------------
VarMaxBloom:
DD 2 // 最高損血量: 初始值: 2滴, 採用16進次

VarMinBloom:
DD 1 // 最低損血量: 初始值: 1滴, 採用16進次 (設0=miss)
//--------↑PG無敵↑--------------

LR:
DD 1 // 掉怪方向 1停 3左 2右

MyDir:
DD 1

RunSW:
DD 0

Runtemp:
DD 1

MyLR:
pop edi
pop esi
pop ebp
pop ebx
push eax
cmp [00ADC0E8],0
je MyLR1
//----------↓熱鍵紅點模組化↓-------------
push eax
mov eax,[RunSW]
xor [Runtemp],eax
mov [RunSW],0
cmp [Runtemp],1
pop eax
jne MyLR1
push eax
mov eax,[00ADC0E8] // 紅點
mov eax,[eax+18]
add [Runtemp],eax
cmp [Runtemp],9 // 這裡是修改人數 (預設2人)
mov [Runtemp],1
pop eax
ja MyLR1
//---------↑熱鍵紅點模組化↑------------------
pop eax
cmp dword ptr [esp], 008FC6C5
je GoLR
cmp dword ptr [esp], 008FCADF
je JmpLR
cmp dword ptr [esp], 008FB65C
je MyStupid
cmp dword ptr [esp], 008A2E97
jz MyNoBack
cmp dword ptr [esp], 008FCA97
jz MyNoJmp
ret

MyLR1:
pop eax
ret
//================================
GoLR:
add esp,4
call MyState
push 03
pop ecx
mov [edi+20],eax
xor edx,edx
div ecx
cmp [MyDir], 1
je GoLRback
cmp [MyDir], 3
je GoLR1
cmp [MyDir], 4
je GoLR3
cmp edx, [MyDir]
je GoLRback
mov [esi+000004D0],0
jmp GoLRback

GoLR1:
push eax
call MyCharX
jmp GoLR4

GoLR3:
push eax
mov eax,[MyPt1]

GoLR4:
cmp edx, 1
je GoLR5
jg GoLR2
cmp eax,[esi+1c4]
pop eax
mov [esi+000004D0],5
jl GoLRback
mov [esi+000004D0],0
jmp GoLRback

GoLR2:
cmp eax,[esi+1c4]
pop eax
mov [esi+000004D0],5
jg GoLRback
mov [esi+000004D0],0
jmp GoLRback

GoLR5:
pop eax
mov [esi+000004D0],0

GoLRback:
jmp 008FC6CF
//================================
JmpLR:
add esp,4
call MyState
cmp [MyDir], 1
je JmpLRback
cmp [MyDir], 2
mov eax,2
je JmpLRback
cmp [MyDir], 0
mov eax,3
je JmpLRback
cmp [MyDir], 4
je JmpLR1
call MyCharX
jmp JmpLR2

JmpLR1:
mov eax,[MyPt1]

JmpLR2:
cmp eax,[esi+1c4]
mov eax,2
mov [esi+000004D0],5
jg JmpLRback
mov eax,3

JmpLRback:
//------↓跳怪掉落↓------------
cmp [esi+00000230],1
je LRDir7
cmp eax,[LR]
jne LRDir7
sub [esi+00000230],2

LRDir7:
//------↑跳怪掉落↑------------
push 03
jmp 008FCAE1
//================================
MyCharX:
mov eax [00ADC0D4]
mov eax, [eax+000D2C]
ret
//================================
MyState:
push eax
mov eax, [00ADC0D4]
mov eax, [eax+00000384]
cmp eax, a
je LRDir1
cmp eax, b
je LRDir2
cmp eax, 14
je LRDir3
cmp eax, 15
je LRDir3
mov [MyCt], 0
jmp LRDir4

LRDir1:
mov [MyDir],2
cmp [MyCt], 32
ja LRDir5
inc [MyCt]
jmp LRDir4

LRDir2:
mov [MyDir],0
cmp [MyCt], 32
ja LRDir6
inc [MyCt]
jmp LRDir4

LRDir3:
mov [MyDir],1
jmp LRDir4

LRDir5:
mov [MyDir],3
jmp LRDir4

LRDir6:
mov [MyDir],4
call MyCharX
mov [MyPt1],eax

LRDir4:
pop eax
ret
//============================
MyStupid:
add esp, 4
xor edx,edx
mov ecx,0000ea60
div ecx
lea eax,[esi+00000238]
add edx,0002bf20
mov [esi+00000240],edx
mov edx,[esp+10]
cmp [eax],edx
je 008FB6A7
cmp [esi+0000023C],edi
lea ecx,[esi+0000023C]
je 008FB6A7
jmp 008FB68D
//============================
MyNoBack:
add esp,4
//--------↓PG無敵↓--------------
push eax
push ebx
push ecx
push edx
xor edx, edx
mov eax,[00ADC0D4]
mov eax,[eax+18]
mov ecx, [VarMaxBloom]
mov ebx, [VarMinBloom]
sub ecx, ebx
jz CBR100
div ecx
CBR100:
add edx, ebx
mov [ebp+8], edx
pop edx
pop ecx
pop ebx
pop eax
//--------↑PG無敵↑--------------
mov eax,[ebp-10]
lea ecx,[eax+0000187c]
push FFFF1D70
jmp 008a35bb

// 原始值=FFFFFA24=1.5秒
// 預設值是10秒，想要增加無敵時間只要將前面的 // 對調就可以了 (預設58秒)
// push FFFFD8F0 //=10秒
// push FFFFB1E0 //=20秒
// push FFFF8AD0 //=30秒
// push FFFF63C0 //=40秒
// push FFFF1D70 //=58秒
// 10000(dec) = 2710(hex)
// (0-2710) 用小算盤 16進制
// 毫秒先轉16進位，再用0去減16進制的毫秒

//============================
MyNoJmp:
add esp,4
jmp 008FCAAB

00414753:
jmp MyLR

[disable]
00414753:
db 5f 5e 5d 5b c3
unregistersymbol(MyLR)
unregistersymbol(LR)
unregistersymbol(RunSW)
dealloc(MyDir)
dealloc(MyCt)
dealloc(MyPt1)
dealloc(MyLR)
dealloc(LR)
dealloc(RunSW)
dealloc(Runtemp)
//==================================================

開CRC掛專用

[ENABLE]
loadlibrary(CrippleHS.dll)
[DISABLE]

[enable]
registersymbol(PetGetItem)
alloc(PetGetItem,256)
registersymbol(PetGetItemSwitch)
alloc(PetGetItemSwitch,4)
label(NormalPet)

PetGetItemSwitch:
dd 1   // 開關   0 是關   1 是開

PetGetItem:
cmp [PetGetItemSwitch],0
je NormalPet
push ebx
mov ebx,[ebp+0c]
mov [ebx],edi
mov [ebx+04],eax
pop ebx
jmp 004F134C
NormalPet:
lea eax,[ebp-38]
push eax
call dword ptr [00ad9a1c]
jmp 004F133F
004F1335:
JMP PetGetItem
[disable]
004F1335:
db 8d 45 c8

//TWMS 0100 招喚獸攻擊物落腳下 EIP 版
//原作:zgende
//Address: 00723E5B
//EIP:FIX_TTBOX_DOWN
//-----------------------------------------------
[ENABLE]
registersymbol(FIX_TTBOX_DOWN)
alloc(FIX_TTBOX_DOWN,1024)
registersymbol(FIX_TTBOX_DOWN_XX)
alloc(FIX_TTBOX_DOWN_XX,4)
registersymbol(FIX_TTBOX_DOWN_YY)
alloc(FIX_TTBOX_DOWN_YY,4)
label(FIX_TTBOX_DOWN_X)
label(FIX_TTBOX_DOWN_Y)
//-----------------------------------------------
FIX_TTBOX_DOWN_XX:
DD 0
FIX_TTBOX_DOWN_YY:
DD 0
//-----------------------------------------------
FIX_TTBOX_DOWN:
call FIX_TTBOX_DOWN_X
mov ax,[FIX_TTBOX_DOWN_XX]
lea ecx,[ebp-44]
push eax
call 0042524D
mov eax,[esi]
lea ecx,[eax+04]
mov eax,[ecx]
call FIX_TTBOX_DOWN_Y
mov ax,[FIX_TTBOX_DOWN_YY]
jmp 00723E78
//-----------------------------------------------
FIX_TTBOX_DOWN_X:
push eax
mov eax,[00AE62C4]
mov eax,[eax+D2C]
mov [FIX_TTBOX_DOWN_XX],eax
pop eax
ret
//-----------------------------------------------
FIX_TTBOX_DOWN_Y:
push eax
mov eax,[00AE62C4]
mov eax,[eax+D30]
mov [FIX_TTBOX_DOWN_YY],eax
pop eax
ret
//-----------------------------------------------
[DISABLE]
dealloc(FIX_TTBOX_DOWN)
unregistersymbol(FIX_TTBOX_DOWN)

//==================================================
//  TWMS_V100 快速恢復 HP/MP 合併版
//  代碼原創：qqazedctgb
//  Address：00425C20
//  EIP=HookFR
//  說明：每次恢復10倍HP，8倍MP
//==================================================

[Enable]
  alloc(HookFR,256)
  registersymbol(HookFR)
  label(HookRet)
  label(HPHandler)
  label(MPHandler)

  label(FastRecoverHP)
  label(DoNormalHP)
  label(HPCheck)
  alloc(HPCounter,4)
  alloc(SetHPCounter,4)
  alloc(RecoverTime,4)
  registersymbol(SetHPCounter)

  label(FastRecoverMP)
  label(DoNormalMP)
  label(MPCheck)
  alloc(MPCounter,4)
  alloc(SetMPCounter,4)
  registersymbol(SetMPCounter)

HookFR:
  cmp [esp],00944655
  je HPHandler
  cmp [esp],009447C3
  je MPHandler

HookRet:
  push ebp
  jmp 00425C21

HPHandler:
  mov [esp],FastRecoverHP
  jmp HookRet

MPHandler:
  mov [esp],FastRecoverMP
  jmp HookRet

FastRecoverHP:
  push eax
  mov eax,[ebp-1c]
  mov [RecoverTime],eax
  pop eax

  cmp [HPCounter],0
  je HPCheck
  dec [HPCounter]
  cmp ebx,1
  jmp 00944658

HPCheck:
  sub [RecoverTime],0A
  cmp ebx,[RecoverTime]
  jna DoNormalHP

  push eax
  mov eax,[SetHPCounter]
  dec eax
  mov [HPCounter],eax
  pop eax

DoNormalHP:
  cmp ebx,[ebp-1c]
  jmp 00944658


FastRecoverMP:
  cmp [MPCounter],0
  je MPCheck
  dec [MPCounter]
  cmp ebx,1
  jmp 009447C9

MPCheck:
  cmp ebx,00002708
  jna DoNormalMP
  push eax
  mov eax,[SetMPCounter]
  dec eax
  mov [MPCounter],eax
  pop eax

DoNormalMP:
  cmp ebx,00002710
  jmp 009447C9

SetHPCounter:
  dd A          // 10倍HP，易斷線的請調低倍數
SetMPCounter:
  dd 8          // 8倍MP，易斷線的請調低倍數

[Disable]
  unregistersymbol(HookFR)
  dealloc(HookFR)

  dealloc(HPCounter)
  dealloc(SetHPCounter)
  dealloc(RecoverTime)
  unregistersymbol(SetHPCounter)

  dealloc(MPCounter)
  dealloc(SetMPCounter)
  unregistersymbol(SetMPCounter)

12# hgm

12# hgm

19# yi5200429

20# yi5200429