v107版代碼總整理(CRC)

//==================================================
//  TWMS_V107 快速恢復MP
//
//  代碼原創：qqazedctgb
//
//  說明：每次恢復8倍MP
//==================================================

[Enable]
  alloc(HookFR,1024)
  registersymbol(HookFR)
  label(HookRet)
  label(MPHandler)
  alloc(RecoverTime,4)
  label(FastRecoverMP)
  label(DoNormalMP)
  label(MPCheck)
  alloc(MPCounter,4)
  alloc(SetMPCounter,4)
  registersymbol(SetMPCounter)

HookFR:
  cmp [esp],00987FF0
  je MPHandler
HookRet:
  push ebp
  mov ebp,esp
  sub esp,0c
  jmp 00428561
MPHandler:
  mov [esp],FastRecoverMP
  jmp HookRet

FastRecoverMP:
  cmp [MPCounter],0
  je MPCheck
  dec [MPCounter]
  cmp ebx,1
  jmp 00987FF6

MPCheck:
  cmp ebx,00002708
  jna DoNormalMP
  push eax
  mov eax,[SetMPCounter]
  dec eax
  mov [MPCounter],eax
  pop eax

DoNormalMP:
  cmp ebx,00002710
  jmp 00987FF6


SetMPCounter:
  dd 8          // 8倍MP，易斷線的請調低倍數

0042855B:
jmp HookFR
[Disable]
0042855B:
db 55 8b ec 83 ec 0c
  unregistersymbol(HookFR)
  dealloc(HookFR)
  dealloc(RecoverTime)
  dealloc(MPCounter)
  dealloc(SetMPCounter)
  unregistersymbol(SetMPCounter)

//=================================================
//版本：TWMS 107 攻擊不停、放不停 (不會失效 CRC版)
//=================================================

[Enable]
registersymbol(CSX)
alloc(CSX,128)
label(CSXReturn)
label(CSXXX)

CSX: //CSEAX X  
push eax
mov eax,[00B386F4]
mov eax,[eax+2730]
cmp eax,15         
pop eax            
jg CSXReturn

push eax
mov eax,[00B386F4]
mov eax,[eax+2730]
cmp eax,14         
pop eax            
jg CSXXX

push eax
mov eax,[00B386F4]
mov eax,[eax+2740]
cmp eax,5  
pop eax
jg CSXXX

CSXReturn:
mov [ebx], eax
mov edi,[ebp+10]
jmp 009424DC

CSXXX:
push eax
mov eax,[00B386F4]
mov eax,[eax+0E90]
cmp esi,eax
pop eax
jne CSXReturn
add eax,0a
jmp CSXReturn



009424D7:
jmp CSX

[Disable]
009424D7:
DB 89 03 8B 7D 10

unregistersymbol(CSX)
dealloc(CSX)

[ENABLE]
b3f9c1://無線日標
db 6F 25 72 BA 0B B8 98 5D C0 C5 EC 3A 70 D6 A5 45 05 A4 92 27 D7 94 5C D1 26 D5 9D
[DISABLE]
b3f9c1://無線日標
db 6F 25 72 42 7F 5A 96 FA D3 B2 14 74 90 1A 8E 59 CE 5F B3 72 FE 9A CD 64 90 EA 6D

//版本：TWMS0107 (CRC版)
//功能：丟道具不能丟錢
//更新：田蜜
//日期：2009/12/16
//=================================================
[enable]
0098D5D6:
jmp 0098d618
//db eb 40
[disable]
0098D5D6:
jna 0098d618
//db 76 40

[enable]
//疾風N合一 for TWMS0107
//原作：jajaja, 感謝99,A,D,L,N,W,W(縮寫)
//原出處：疾風之莊
//功能：走,跳怪方向【左趴往左,右趴往右,坐下停止控制】、笨怪、10秒損血一次、
//紅點不停、跳怪不跳、致命的吸引力【定點及跟隨角色二種模式，啟動方式提示：5秒】
//=================================================
alloc(MyLR,1024)
registersymbol(MyLR)
alloc(MyDir,4)
alloc(MyCt,4)
alloc(MyPt1,4)
label(MyLR1)
label(GoLR)
label(GoLR1)
label(GoLR2)
label(GoLR3)
label(GoLR4)
label(GoLR5)
label(GoLRback)
label(JmpLR)
label(JmpLR1)
label(JmpLR2)
label(JmpLRback)
label(MyStupid)
label(MyNoBack)
label(MyState)
label(MyCharX)
label(MyNoJmp)
label(LRDir1)
label(LRDir2)
label(LRDir3)
label(LRDir4)
label(LRDir5)
label(LRDir6)
MyDir:
DD 1
MyLR:
pop edi
pop esi
pop ebp
pop ebx
push eax
cmp [00B38708],00000000                  
je MyLR1
pop eax
cmp dword ptr [esp], 00945C72
je GoLR
cmp dword ptr [esp], 0094608C
je JmpLR
cmp dword ptr [esp], 00944C09
je MyStupid
cmp dword ptr [esp], 008E7D36
jz MyNoBack
cmp dword ptr [esp], 00946044
jz MyNoJmp
ret
MyLR1:
pop eax
ret
//================================
GoLR:
add esp,4
call MyState
push 03
pop ecx
mov [edi+20],eax
xor edx,edx
div ecx
cmp [MyDir], 1
je GoLRback
cmp [MyDir], 3
je GoLR1
cmp [MyDir], 4
je GoLR3
cmp edx, [MyDir]
je GoLRback
mov [esi+000004D8],0
jmp GoLRback
GoLR1:
push eax
call MyCharX
jmp GoLR4
GoLR3:
push eax
mov eax,[MyPt1]
GoLR4:
cmp edx, 1
je GoLR5         
jg GoLR2
cmp eax,[esi+1c4]
pop eax
mov [esi+000004D8],5
jl GoLRback
mov [esi+000004D8],0
jmp GoLRback
GoLR2:
cmp eax,[esi+1c4]
pop eax
mov [esi+000004D8],5
jg GoLRback
mov [esi+000004D8],0
jmp GoLRback
GoLR5:
pop eax
mov [esi+000004D8],0
GoLRback:
jmp 00945C7C
//================================
JmpLR:
add esp,4
call MyState
cmp [MyDir], 1
je JmpLRback
cmp [MyDir], 2
mov eax,2
je JmpLRback
cmp [MyDir], 0
mov eax,3
je JmpLRback
cmp [MyDir], 4
je JmpLR1
call MyCharX
jmp JmpLR2
JmpLR1:
mov eax,[MyPt1]
JmpLR2:
cmp eax,[esi+1c4]
mov eax,2
mov [esi+000004D8],5
jg JmpLRback
mov eax,3
JmpLRback:
push 03
jmp  0094608E
//================================
MyCharX:
mov eax [00B386F4]
mov eax, [eax+0E50]
ret
//================================
MyState:
push eax
mov eax, [00B386F4]
mov eax, [eax+0398]
cmp eax, a
je LRDir1
cmp eax, b
je LRDir2
cmp eax, 14
je LRDir3
cmp eax, 15
je LRDir3
mov [MyCt], 0
jmp LRDir4
LRDir1:
mov [MyDir],2
cmp [MyCt], 32
ja LRDir5
inc [MyCt]
jmp LRDir4
LRDir2:
mov [MyDir],0
cmp [MyCt], 32
ja LRDir6
inc [MyCt]
jmp LRDir4
LRDir3:
mov [MyDir],1
jmp LRDir4
LRDir5:
mov [MyDir],3
jmp LRDir4
LRDir6:
mov [MyDir],4
call MyCharX
mov [MyPt1],eax
LRDir4:
pop eax
ret
//============================
MyStupid:
add esp, 4
xor edx,edx
mov ecx,0000ea60
div ecx
lea eax,[esi+00000238]
add edx,0002bf20
mov [esi+00000240],edx
mov edx,[esp+10]
cmp [eax],edx
je 00944C54
cmp [esi+0000023c],edi   
lea ecx,[esi+0000023c]
je 00944C54
jmp 00944C3A
//============================
MyNoBack:
add esp,4
mov eax,[ebp-10]
lea    ecx, [eax+00001A20]
push FFFFD8F0 //原始值=FFFFFA24，修改此處可更改無敵秒數
jmp 008E845F
//============================
MyNoJmp:
add esp,4
jmp 00946058

00415DB2:  
jmp MyLR
[disable]
00415DB2:
db 5f 5e 5d 5b c3
dealloc(MyLR)
unregistersymbol(MyLR)
dealloc(MyDir)
dealloc(MyCt)
dealloc(MyPt1)

[enable]
//:遇人登出版For Twms.TWMS0107
//:低調必備
//代碼：00681291
//ADD：AutoDC (取得EIP位址）

registersymbol(AutoDC)
registersymbol(DCx)

alloc(AutoDC,32)
alloc(DCx,4)

DCx:
dd 1  //人數

AutoDC:
pushad

mov  eax,[00B38708]
mov  eax,[eax+18]
cmp  [DCx],eax
popad
ja  00681299
jmp 006813C4

[disable]
dealloc(AutoDC)
dealloc(DCx)
unregistersymbol(DCx)
unregistersymbol(AutoDC)

//物品定位v1.7
[ENABLE]
04F7A2E:
nop
nop
[DISABLE]
04F7A2E:
DB 75 d5

//=========================
//V107 無線鏢.子彈.箭 CRC版
//=========================
[enable]
008E33D5:
jmp 008E33DA
[disable]
008E33D5:
db e8 8c 25 b5 ff

//==================================================
// 人物自動左右-CRC For TWMS107
// 原作: zgenden
// 更新: DrakeDog
// 更新時間: 2009/12/16
//==================================================

[ENABLE]
registersymbol(MYAUTOLR)
alloc(MYAUTOLR,1024)
registersymbol(MYAUTOLRKEY)
alloc(MYAUTOLRKEY,4)
registersymbol(MYAUTOLRKEYLR)
alloc(MYAUTOLRKEYLR,4)
label(MYAUTOLR00)
label(MYAUTOLR01)
label(MYAUTOLR02)
//-----------------------------------------------
MYAUTOLRKEY:
DD 1
MYAUTOLRKEYLR:
DD 0
//-----------------------------------------------
MYAUTOLR:
cmp [MYAUTOLRKEY],0
je MYAUTOLR00

add [MYAUTOLRKEYLR],1
cmp [MYAUTOLRKEYLR],a //左右移動距離
jle MYAUTOLR01
cmp [MYAUTOLRKEYLR],14 //左右移動距離*2
jle MYAUTOLR02
mov [MYAUTOLRKEYLR],1
jmp MYAUTOLR01

MYAUTOLR01:
mov [ebp-8],ffffffff
xor ecx,ecx
xor eax,eax
cmp [ebp-04],eax
jmp 00954491

MYAUTOLR02:
mov [ebp-8],1
xor ecx,ecx
xor eax,eax
cmp [ebp-04],eax
jmp 00954491

MYAUTOLR00:
xor ecx,ecx
xor eax,eax
cmp [ebp-04],eax
jmp 00954491
//-----------------------------------------------
0095448A:
jmp MYAUTOLR
[DISABLE]
0095448A:
xor ecx,ecx
xor eax,eax
cmp [ebp-04],eax
dealloc(MYAUTOLR)
unregistersymbol(MYAUTOLR)

//==================================================
// 怪物不擊退-CRC For TWMS107
// 更新: DrakeDog
// 更新時間: 2009/12/16
//==================================================
[enable]
00663FC1:
jmp 00663FC6
[disable]
00663FC1:
db e8 e0 1c db ff