关于奇迹架设的一些技术问题 这里是OD修改
修复PK掉装备
004D6A05 |. /75 07 jnz short 004D6A0E
004D6DE4 |. /75 07 jnz short 004D6DED
004D6E72 |. /75 04 jnz short 004D6E78
0050FF37 |. /0F85 1C020000 jnz 00510159 -》JMP
修复药瓶 255
0042F64B 90 nop
0042F64C 90 nop
0042F64D 90 nop
0042F64E 90 nop
0042F64F 90 nop
0042F650 90 nop
0042F651 90 nop
0042F652 90 nop
0042F653 90 nop
0042F654 90 nop
0042F655 90 nop
0042F656 90 nop
0042F657 90 nop
0042F658 90 nop
0042F659 90 nop
00502334 90 nop
00502335 90 nop
00502336 90 nop
00502337 90 nop
00502338 90 nop
00502339 90 nop
0050233A 90 nop
0050233B 90 nop
0050233C 90 nop
0050233D 90 nop
0050233E 90 nop
0050233F 90 nop
00502340 90 nop
00502341 90 nop
00502342 90 nop
0050223E 90 nop
0050223F 90 nop
00502240 90 nop
00502241 90 nop
00502242 90 nop
00502243 90 nop
00502244 90 nop
00502245 90 nop
00502246 90 nop
00502247 90 nop
00502248 90 nop
00502249 90 nop
0050224A 90 nop
0050224B 90 nop
0050224C 90 nop
005023D6 90 nop
005023D7 90 nop
005023D8 90 nop
005023D9 90 nop
005023DA 90 nop
005023DB 90 nop
005023DC 90 nop
005023DD 90 nop
005023DE 90 nop
005023DF 90 nop
005023E0 90 nop
005023E1 90 nop
005023E2 90 nop
005023E3 90 nop
005023E4 90 nop
修复物品等级+15 默认:+13
0042F290 |. 83FA 0D |cmp edx, 0D -》0F
0042F293 |. 7E 09 |jle short 0042F29E
0042F295 |. 66:C785 20FFF>|mov word ptr [ebp-E0], 0
00501EE2 |. 83F9 0D |cmp ecx, 0D -》0F
00501EE5 |. 7E 09 |jle short 00501EF0
00501EE7 |. 66:C785 40FFF>|mov word ptr [ebp-C0], 0
修复物品属性追28 默认:追16
0042F2F4 90 nop
0042F2F5 90 nop
00501F6E |> 8B45 FC |MOV EAX,DWORD PTR SS:[EBP-4]
00501F71 |. 0FAF45 10 |IMUL EAX,DWORD PTR SS:[EBP+10]
00501F75 |. 8B4D 0C |MOV ECX,DWORD PTR SS:[EBP+C]
00501F78 |. 33D2 |XOR EDX,EDX
00501F7A |. 8A5401 47 |MOV DL,BYTE PTR DS:[ECX+EAX+47]
00501F7E |. C0EA 04 |SHR DL,4
00501F81 |. 80E2 04 |AND DL,4
00501F84 |. 0855 B6 |OR BYTE PTR SS:[EBP-4A],DL
00501F87 |. 90 nop
00501F88 |. 90 nop
00501F89 |. 90 nop
005573C4 90 nop
005573C5 90 nop
005378CE |. 83FA 04 cmp edx, 4 -》7
修复组队掉钱
0051717D /E9 65030000 jmp 005174E7
00517182 |90 nop
00517183 |90 nop
00517184 |90 nop
00517185 |90 nop
00517186 |90 nop
00517187 |90 nop
00517188 |90 nop
005174E7 |> \8B4D E4 mov ecx, dword ptr [ebp-1C]
005174EA |. 8B55 0C mov edx, dword ptr [ebp+C]
005174ED |. 03C9 add ecx, ecx
005174EF |. 03C9 add ecx, ecx
005174F1 |. 03C9 add ecx, ecx
005174F3 |. 81C1 00240000 add ecx, 2400
005174F9 |. 898A D8000000 mov dword ptr [edx+D8], ecx
005174FF \.^ E9 83FCFFFF jmp 00517187
0047F49B |. 83F8 4E |cmp eax, 4E -》 黄金哥布林
0047F49E |. 0F85 32020000 |jnz 0047F6D6
0047F4B8 |. C745 F4 03000>|mov dword ptr [ebp-C], 3 -》地图 仙踪林
0047F4BF |. 8B45 F8 |mov eax, dword ptr [ebp-8]
0047F4C2 |. 69C0 28220000 |imul eax, eax, 2228
0047F505 |. 52 ||push edx
0047F506 |. 68 C8000000 ||push 0C8 -》坐标范围
0047F50B |. 68 C8000000 ||push 0C8 -》坐标范围
0047F510 |. 6A 32 ||push 32 -》坐标范围
0047F512 |. 6A 32 ||push 32 -》坐标范围
---------------------------------------------------------------------------------------------
0047F7DB |. 83F8 35 |cmp eax, 35 -》泰坦
0047F7DE |. 0F85 8E020000 |jnz 0047FA72
0047F7F8 |. C745 F4 02000>|mov dword ptr [ebp-C], 2 -》地图 冰风谷
0047F7FF |. 8B45 F8 |mov eax, dword ptr [ebp-8]
0047F802 |. 69C0 28220000 |imul eax, eax, 2228
0047F845 |. 52 ||push edx
0047F846 |. 68 C8000000 ||push 0C8 -》坐标范围
0047F84B |. 68 C8000000 ||push 0C8 -》坐标范围
0047F850 |. 6A 32 ||push 32 -》坐标范围
0047F852 |. 6A 32 ||push 32 -》坐标范围
---------------------------------------------------------------------------------------------
0047FE6C |. 83F9 4F |cmp ecx, 4F -》黄金火龙王
0047FE6F |. 0F85 4D030000 |jnz 004801C2
0047FE83 |. C64410 6A 01 |mov byte ptr [eax+edx+6A], 1
0047FE88 |. 837D E8 FF |cmp dword ptr [ebp-18], -1 -》-1,即是随机地图(勇者大陆、冰风谷、仙踪林)
0047FE8C |. 75 1A |jnz short 0047FEA8
0047FEF4 |. 52 ||push edx
0047FEF5 |. 68 AA000000 ||push 0AA -》坐标范围
0047FEFA |. 68 AA000000 ||push 0AA -》坐标范围
0047FEFF |. 6A 50 ||push 50 -》坐标范围
0047FF01 |. 6A 50 ||push 50 -》坐标范围
---------------------------------------------------------------------------------------------
00480332 |. 83F8 50 |cmp eax, 50 -》黄金巫师王
00480335 |. 0F85 87020000 |jnz 004805C2
0048033B |. 8B4D F8 |mov ecx, dword ptr [ebp-8]
0048033E |. 69C9 28220000 |imul ecx, ecx, 2228
00480344 |. 8B15 2C50A507 |mov edx, dword ptr [7A5502C]
0048034A |. C6440A 6A 01 |mov byte ptr [edx+ecx+6A], 1
0048034F |. 8B45 F8 |mov eax, dword ptr [ebp-8]
00480352 |. 69C0 28220000 |imul eax, eax, 2228
00480358 |. 8B0D 2C50A507 |mov ecx, dword ptr [7A5502C]
0048035E |. 8A55 F4 |mov dl, byte ptr [ebp-C]
00480361 |. 889401 310100>|mov byte ptr [ecx+eax+131], dl
00480368 |> 8B45 F8 |/mov eax, dword ptr [ebp-8]
0048036B |. 69C0 28220000 ||imul eax, eax, 2228
00480371 |. 8B0D 2C50A507 ||mov ecx, dword ptr [7A5502C]
00480377 |. 8D9401 2E0100>||lea edx, dword ptr [ecx+eax+12E]
0048037E |. 52 ||push edx
0048037F |. 8B45 F8 ||mov eax, dword ptr [ebp-8]
00480382 |. 69C0 28220000 ||imul eax, eax, 2228
00480388 |. 8B0D 2C50A507 ||mov ecx, dword ptr [7A5502C]
0048038E |. 8D9401 2C0100>||lea edx, dword ptr [ecx+eax+12C]
00480395 |. 52 ||push edx
00480396 |. 68 C8000000 ||push 0C8 -》坐标范围
0048039B |. 68 FA000000 ||push 0FA -》坐标范围
004803A0 |. 6A 0A ||push 0A -》坐标范围
004803A2 |. 6A 32 ||push 32 -》坐标范围
---------------------------------------------------------------------------------------------
0048097B |. 83F8 52 |cmp eax, 52 -》黄金破坏
0048097E |. 0F85 D7020000 |jnz 00480C5B
00480998 |. C745 F4 08000>|mov dword ptr [ebp-C], 8 ->死亡沙漠
0048099F |. 8B45 F8 |mov eax, dword ptr [ebp-8]
004809A2 |. 69C0 28220000 |imul eax, eax, 2228
004809A8 |. 8B0D 2C50A507 |mov ecx, dword ptr [7A5502C]
004809AE |. 8A55 F4 |mov dl, byte ptr [ebp-C]
004809B1 |. 889401 310100>|mov byte ptr [ecx+eax+131], dl
004809B8 |> 8B45 F8 |/mov eax, dword ptr [ebp-8]
004809BB |. 69C0 28220000 ||imul eax, eax, 2228
004809C1 |. 8B0D 2C50A507 ||mov ecx, dword ptr [7A5502C]
004809C7 |. 8D9401 2E0100>||lea edx, dword ptr [ecx+eax+12E]
004809CE |. 52 ||push edx
004809CF |. 8B45 F8 ||mov eax, dword ptr [ebp-8]
004809D2 |. 69C0 28220000 ||imul eax, eax, 2228
004809D8 |. 8B0D 2C50A507 ||mov ecx, dword ptr [7A5502C]
004809DE |. 8D9401 2C0100>||lea edx, dword ptr [ecx+eax+12C]
004809E5 |. 52 ||push edx
004809E6 |. 68 C8000000 ||push 0C8 -》坐标范围
004809EB |. 68 C8000000 ||push 0C8 -》坐标范围
004809F0 |. 6A 32 ||push 32 -》坐标范围
004809F2 |. 6A 32 ||push 32 -》坐标范围
---------------------------------------------------------------------------------------------
0048130B |. 3D EC010000 |cmp eax, 1EC -》莫斯?? 黄金兔子=1F6
00481310 |. 0F85 32020000 |jnz 00481548
00481316 |. 8B4D F8 |mov ecx, dword ptr [ebp-8]
00481319 |. 69C9 28220000 |imul ecx, ecx, 2228
0048131F |. 8B15 2C50A507 |mov edx, dword ptr [7A5502C]
00481325 |. C6440A 6A 01 |mov byte ptr [edx+ecx+6A], 1
0048132A |. C745 F4 33000>|mov dword ptr [ebp-C], 33 -》幻术园
00481331 |. 8B45 F8 |mov eax, dword ptr [ebp-8]
00481334 |. 69C0 28220000 |imul eax, eax, 2228
0048133A |. 8B0D 2C50A507 |mov ecx, dword ptr [7A5502C]
00481340 |. 8A55 F4 |mov dl, byte ptr [ebp-C]
00481343 |. 889401 310100>|mov byte ptr [ecx+eax+131], dl
0048134A |> 8B45 F8 |/mov eax, dword ptr [ebp-8]
0048134D |. 69C0 28220000 ||imul eax, eax, 2228
00481353 |. 8B0D 2C50A507 ||mov ecx, dword ptr [7A5502C]
00481359 |. 8D9401 2E0100>||lea edx, dword ptr [ecx+eax+12E]
00481360 |. 52 ||push edx
00481361 |. 8B45 F8 ||mov eax, dword ptr [ebp-8]
00481364 |. 69C0 28220000 ||imul eax, eax, 2228
0048136A |. 8B0D 2C50A507 ||mov ecx, dword ptr [7A5502C]
00481370 |. 8D9401 2C0100>||lea edx, dword ptr [ecx+eax+12C]
00481377 |. 52 ||push edx
00481378 |. 68 FF000000 ||push 0FF -》坐标范围
0048137D |. 68 FF000000 ||push 0FF -》坐标范围
00481382 |. 6A 01 ||push 1 -》坐标范围
00481384 |. 6A 01 ||push 1 -》坐标范围
---------------------------------------------------------------------------------------------
0048164B |. 3D ED010000 |cmp eax, 1ED -》黄金暗黑骑士
00481650 |. 0F85 32020000 |jnz 00481888
0048166A |. C745 F4 01000>|mov dword ptr [ebp-C], 1 -》地下城
004816B7 |. 52 ||push edx
004816B8 |. 68 FF000000 ||push 0FF -》坐标范围
004816BD |. 68 FF000000 ||push 0FF -》坐标范围
004816C2 |. 6A 01 ||push 1 -》坐标范围
004816C4 |. 6A 01 ||push 1 -》坐标范围
---------------------------------------------------------------------------------------------
0048198B |. 3D EE010000 |cmp eax, 1EE -》黄金恶魔
00481990 |. 0F85 32020000 |jnz 00481BC8
00481996 |. 8B4D F8 |mov ecx, dword ptr [ebp-8]
00481999 |. 69C9 28220000 |imul ecx, ecx, 2228
0048199F |. 8B15 2C50A507 |mov edx, dword ptr [7A5502C]
004819A5 |. C6440A 6A 01 |mov byte ptr [edx+ecx+6A], 1
004819AA |. C745 F4 04000>|mov dword ptr [ebp-C], 4 -》失落之塔
004819B1 |. 8B45 F8 |mov eax, dword ptr [ebp-8]
004819B4 |. 69C0 28220000 |imul eax, eax, 2228
004819BA |. 8B0D 2C50A507 |mov ecx, dword ptr [7A5502C]
004819C0 |. 8A55 F4 |mov dl, byte ptr [ebp-C]
004819C3 |. 889401 310100>|mov byte ptr [ecx+eax+131], dl
004819CA |> 8B45 F8 |/mov eax, dword ptr [ebp-8]
004819CD |. 69C0 28220000 ||imul eax, eax, 2228
004819D3 |. 8B0D 2C50A507 ||mov ecx, dword ptr [7A5502C]
004819D9 |. 8D9401 2E0100>||lea edx, dword ptr [ecx+eax+12E]
004819E0 |. 52 ||push edx
004819E1 |. 8B45 F8 ||mov eax, dword ptr [ebp-8]
004819E4 |. 69C0 28220000 ||imul eax, eax, 2228
004819EA |. 8B0D 2C50A507 ||mov ecx, dword ptr [7A5502C]
004819F0 |. 8D9401 2C0100>||lea edx, dword ptr [ecx+eax+12C]
004819F7 |. 52 ||push edx
004819F8 |. 68 FF000000 ||push 0FF -》坐标范围
004819FD |. 68 FF000000 ||push 0FF -》坐标范围
00481A02 |. 6A 01 ||push 1 -》坐标范围
00481A04 |. 6A 01 ||push 1 -》坐标范围
---------------------------------------------------------------------------------------------
00481CCB |. 3D EF010000 |cmp eax, 1EF -》黄金石巨人
00481CD0 |. 0F85 32020000 |jnz 00481F08
00481CEA |. C745 F4 21000>|mov dword ptr [ebp-C], 21 -》幽暗森林
00481CF1 |. 8B45 F8 |mov eax, dword ptr [ebp-8]
00481CF4 |. 69C0 28220000 |imul eax, eax, 2228
00481D37 |. 52 ||push edx
00481D38 |. 68 FF000000 ||push 0FF -》坐标范围
00481D3D |. 68 FF000000 ||push 0FF -》坐标范围
00481D42 |. 6A 01 ||push 1 -》坐标范围
00481D44 |. 6A 01 ||push 1 -》坐标范围
---------------------------------------------------------------------------------------------
0048200B |. 3D F0010000 |cmp eax, 1F0 -》黄金恶灵
00482010 |. 0F85 32020000 |jnz 00482248
00482016 |. 8B4D F8 |mov ecx, dword ptr [ebp-8]
00482019 |. 69C9 28220000 |imul ecx, ecx, 2228
0048201F |. 8B15 2C50A507 |mov edx, dword ptr [7A5502C]
00482025 |. C6440A 6A 01 |mov byte ptr [edx+ecx+6A], 1
0048202A |. C745 F4 0A000>|mov dword ptr [ebp-C], 0A -》天空之城
00482031 |. 8B45 F8 |mov eax, dword ptr [ebp-8]
00482034 |. 69C0 28220000 |imul eax, eax, 2228
0048203A |. 8B0D 2C50A507 |mov ecx, dword ptr [7A5502C]
00482040 |. 8A55 F4 |mov dl, byte ptr [ebp-C]
00482043 |. 889401 310100>|mov byte ptr [ecx+eax+131], dl
0048204A |> 8B45 F8 |/mov eax, dword ptr [ebp-8]
0048204D |. 69C0 28220000 ||imul eax, eax, 2228
00482053 |. 8B0D 2C50A507 ||mov ecx, dword ptr [7A5502C]
00482059 |. 8D9401 2E0100>||lea edx, dword ptr [ecx+eax+12E]
00482060 |. 52 ||push edx
00482061 |. 8B45 F8 ||mov eax, dword ptr [ebp-8]
00482064 |. 69C0 28220000 ||imul eax, eax, 2228
0048206A |. 8B0D 2C50A507 ||mov ecx, dword ptr [7A5502C]
00482070 |. 8D9401 2C0100>||lea edx, dword ptr [ecx+eax+12C]
00482077 |. 52 ||push edx
00482078 |. 68 FF000000 ||push 0FF -》坐标范围
0048207D |. 68 FF000000 ||push 0FF -》坐标范围
00482082 |. 6A 01 ||push 1 -》坐标范围
00482084 |. 6A 01 ||push 1 -》坐标范围
---------------------------------------------------------------------------------------------
0048234B |. 3D F1010000 |cmp eax, 1F1 -》黄金半兽人
00482350 |. 0F85 32020000 |jnz 00482588
00482356 |. 8B4D F8 |mov ecx, dword ptr [ebp-8]
00482359 |. 69C9 28220000 |imul ecx, ecx, 2228
0048235F |. 8B15 2C50A507 |mov edx, dword ptr [7A5502C]
00482365 |. C6440A 6A 01 |mov byte ptr [edx+ecx+6A], 1
0048236A |. C745 F4 25000>|mov dword ptr [ebp-C], 25 -》坎特鲁废墟
00482371 |. 8B45 F8 |mov eax, dword ptr [ebp-8]
00482374 |. 69C0 28220000 |imul eax, eax, 2228
004823B7 |. 52 ||push edx
004823B8 |. 68 FF000000 ||push 0FF -》坐标范围
004823BD |. 68 FF000000 ||push 0FF -》坐标范围
004823C2 |. 6A 01 ||push 1 -》坐标范围
004823C4 |. 6A 01 ||push 1 -》坐标范围
---------------------------------------------------------------------------------------------
0048268B |. 3D F2010000 |cmp eax, 1F2 -》黄金独步妖
00482690 |. 0F85 32020000 |jnz 004828C8
00482696 |. 8B4D F8 |mov ecx, dword ptr [ebp-8]
00482699 |. 69C9 28220000 |imul ecx, ecx, 2228
0048269F |. 8B15 2C50A507 |mov edx, dword ptr [7A5502C]
004826A5 |. C6440A 6A 01 |mov byte ptr [edx+ecx+6A], 1
004826AA |. C745 F4 26000>|mov dword ptr [ebp-C], 26 -》坎特鲁废墟
004826B1 |. 8B45 F8 |mov eax, dword ptr [ebp-8]
004826B4 |. 69C0 28220000 |imul eax, eax, 2228
004826F7 |. 52 ||push edx
004826F8 |. 68 FF000000 ||push 0FF -》坐标范围
004826FD |. 68 FF000000 ||push 0FF -》坐标范围
00482702 |. 6A 01 ||push 1 -》坐标范围
00482704 |. 6A 01 ||push 1 -》坐标范围
---------------------------------------------------------------------------------------------
004829CB |. 3D F3010000 |cmp eax, 1F3 -》黄金铁轮战士
004829D0 |. 0F85 32020000 |jnz 00482C08
004829D6 |. 8B4D F8 |mov ecx, dword ptr [ebp-8]
004829D9 |. 69C9 28220000 |imul ecx, ecx, 2228
004829DF |. 8B15 2C50A507 |mov edx, dword ptr [7A5502C]
004829E5 |. C6440A 6A 01 |mov byte ptr [edx+ecx+6A], 1
004829EA |. C745 F4 39000>|mov dword ptr [ebp-C], 39 -》冰霜之城
004829F1 |. 8B45 F8 |mov eax, dword ptr [ebp-8]
004829F4 |. 69C0 28220000 |imul eax, eax, 2228
00482A37 |. 52 ||push edx
00482A38 |. 68 FF000000 ||push 0FF -》坐标范围
00482A3D |. 68 FF000000 ||push 0FF -》坐标范围
00482A42 |. 6A 01 ||push 1 -》坐标范围
00482A44 |. 6A 01 ||push 1 -》坐标范围
---------------------------------------------------------------------------------------------
00482D0B |. 3D F4010000 |cmp eax, 1F4 -》 黄金巨人
00482D10 |. 0F85 32020000 |jnz 00482F48
00482D16 |. 8B4D F8 |mov ecx, dword ptr [ebp-8]
00482D19 |. 69C9 28220000 |imul ecx, ecx, 2228
00482D1F |. 8B15 2C50A507 |mov edx, dword ptr [7A5502C]
00482D25 |. C6440A 6A 01 |mov byte ptr [edx+ecx+6A], 1
00482D2A |. C745 F4 38000>|mov dword ptr [ebp-C], 38 -》安宁池
00482D31 |. 8B45 F8 |mov eax, dword ptr [ebp-8]
00482D34 |. 69C0 28220000 |imul eax, eax, 2228
00482D3A |. 8B0D 2C50A507 |mov ecx, dword ptr [7A5502C]
00482D40 |. 8A55 F4 |mov dl, byte ptr [ebp-C]
00482D43 |. 889401 310100>|mov byte ptr [ecx+eax+131], dl
00482D4A |> 8B45 F8 |/mov eax, dword ptr [ebp-8]
00482D4D |. 69C0 28220000 ||imul eax, eax, 2228
00482D53 |. 8B0D 2C50A507 ||mov ecx, dword ptr [7A5502C]
00482D59 |. 8D9401 2E0100>||lea edx, dword ptr [ecx+eax+12E]
00482D60 |. 52 ||push edx
00482D61 |. 8B45 F8 ||mov eax, dword ptr [ebp-8]
00482D64 |. 69C0 28220000 ||imul eax, eax, 2228
00482D6A |. 8B0D 2C50A507 ||mov ecx, dword ptr [7A5502C]
00482D70 |. 8D9401 2C0100>||lea edx, dword ptr [ecx+eax+12C]
00482D77 |. 52 ||push edx
00482D78 |. 68 FF000000 ||push 0FF -》坐标范围
00482D7D |. 68 FF000000 ||push 0FF -》坐标范围
00482D82 |. 6A 01 ||push 1 -》坐标范围
00482D84 |. 6A 01 ||push 1 -》坐标范围
---------------------------------------------------------------------------------------------
00483059 |. 3D F5010000 |cmp eax, 1F5 -》黄金巨龙
0048305E |. 0F85 44020000 |jnz 004832A8
00483064 |. 8B4D F8 |mov ecx, dword ptr [ebp-8]
00483067 |. 69C9 28220000 |imul ecx, ecx, 2228
0048306D |. 8B15 2C50A507 |mov edx, dword ptr [7A5502C]
00483073 |. C6440A 6A 01 |mov byte ptr [edx+ecx+6A], 1
00483078 |. E8 67381900 |call 006168E4
0048307D |. 25 01000080 |and eax, 80000001
00483082 |. 79 05 |jns short 00483089
00483084 |. 48 |dec eax
00483085 |. 83C8 FE |or eax, FFFFFFFE
00483088 |. 40 |inc eax
004830D7 |. 68 FF000000 ||push 0FF -》坐标范围
004830DC |. 68 FF000000 ||push 0FF -》坐标范围
004830E1 |. 6A 01 ||push 1 -》坐标范围
004830E3 |. 6A 01 ||push 1 -》坐标范围
幻影导师:
005A6203 |. 3D B4000000 cmp eax, 0B4 -> 最大级别
005A6208 |. 7F 32 jg short 005A623C
005A620A |. 8B4D 0C mov ecx, dword ptr [ebp+C]
005A620D |. 0FBF81 AA0000>movsx eax, word ptr [ecx+AA]
005A6214 |. 99 cdq
005A6215 |. B9 03000000 mov ecx, 3 -》加攻击力等级除数
005A621A |. F7F9 idiv ecx
005A621C |. 83C0 2D add eax, 2D -》加攻击力附加值
005A621F |. 8945 FC mov dword ptr [ebp-4], eax
005A6222 |. 8B55 0C mov edx, dword ptr [ebp+C]
005A6225 |. 0FBF82 AA0000>movsx eax, word ptr [edx+AA]
005A622C |. 99 cdq
005A622D |. B9 05000000 mov ecx, 5 -》加防御力等级除数
005A6232 |. F7F9 idiv ecx
005A6234 |. 83C0 32 add eax, 32 -》加防御力附加值
镶嵌装备:
005451A2 |. 817D F8 2E0E0>CMP DWORD PTR SS:[EBP-8],0E2E
005451A9 |. 7F 7F JG SHORT 2GameSer.0054522A
005451AB |. 817D F8 2D0E0>CMP DWORD PTR SS:[EBP-8],0E2D 头盔最小
005451B2 |. 0F8D D4000000 JGE Gameserv.0054528C
005451B8 |. 817D F8 17080>CMP DWORD PTR SS:[EBP-8],817 弓 大类
005451BF |. 7F 41 JG SHORT Gameserv.00545202
005451C1 |. 817D F8 17080>CMP DWORD PTR SS:[EBP-8],817 弓 小类
005451C8 |. 0F84 BE000000 JE Gameserv.0054528C
005451CE |. 817D F8 11040>CMP DWORD PTR SS:[EBP-8],411 权杖最大限制
005451D5 |. 7F 26 JG SHORT Gameserv.005451FD
005451D7 |. 817D F8 10040>CMP DWORD PTR SS:[EBP-8],410 权杖
005451DE |. 0F8D A8000000 JGE Gameserv.0054528C
005451E4 |. 837D F8 1A CMP DWORD PTR SS:[EBP-8],1A 剑 大类
005451E8 |. 0F8C A2000000 JL Gameserv.00545290
005451EE |. 837D F8 1C CMP DWORD PTR SS:[EBP-8],1C 剑 小类
005451F2 |. 0F8E 94000000 JLE Gameserv.0054528C
005451F8 |. E9 93000000 JMP Gameserv.00545290
005451FD |> E9 8E000000 JMP Gameserv.00545290
00545202 |> 817D F8 140C0>CMP DWORD PTR SS:[EBP-8],0C14 盾 最大限制
00545209 |. 7F 1D JG SHORT Gameserv.00545228
0054520B |. 817D F8 110C0>CMP DWORD PTR SS:[EBP-8],0C11 盾
00545212 |. 7D 78 JGE SHORT Gameserv.0054528C
00545214 |. 817D F8 1E0A0>CMP DWORD PTR SS:[EBP-8],0A1E 法杖
0054521B |. 7C 73 JL SHORT Gameserv.00545290
0054521D |. 817D F8 200A0>CMP DWORD PTR SS:[EBP-8],0A20 法杖最大限制
00545224 |. 7E 66 JLE SHORT Gameserv.0054528C
00545226 |. EB 68 JMP SHORT Gameserv.00545290
00545228 |> EB 66 JMP SHORT Gameserv.00545290
0054522A |> 817D F8 35120>CMP DWORD PTR SS:[EBP-8],1235 护腿 最大类
00545231 |. 7F 31 JG SHORT Gameserv.00545264
00545233 |. 817D F8 2D120>CMP DWORD PTR SS:[EBP-8],122D 护腿
0054523A |. 7D 50 JGE SHORT Gameserv.0054528C
0054523C |. 817D F8 35100>CMP DWORD PTR SS:[EBP-8],1035 铠甲 最大类
00545243 |. 7F 1D JG SHORT Gameserv.00545262
00545245 |. 817D F8 2D100>CMP DWORD PTR SS:[EBP-8],102D 铠甲
0054524C |. 7D 3E JGE SHORT Gameserv.0054528C
0054524E |. 817D F8 310E0>CMP DWORD PTR SS:[EBP-8],0E31
00545255 |. 7C 39 JL SHORT Gameserv.00545290
00545257 |. 817D F8 350E0>CMP DWORD PTR SS:[EBP-8],0E35 头盔最大限制
0054525E |. 7E 2C JLE SHORT Gameserv.0054528C
00545260 |. EB 2E JMP SHORT Gameserv.00545290
00545262 |> EB 2C JMP SHORT Gameserv.00545290
00545264 |> 817D F8 35160>CMP DWORD PTR SS:[EBP-8],1635 靴子 最大
0054526B |. 7F 1D JG SHORT Gameserv.0054528A
0054526D |. 817D F8 2D160>CMP DWORD PTR SS:[EBP-8],162D 靴子 最小
00545274 |. 7D 16 JGE SHORT Gameserv.0054528C
00545276 |. 817D F8 2D140>CMP DWORD PTR SS:[EBP-8],142D 护手 最小
0054527D |. 7C 11 JL SHORT Gameserv.00545290
0054527F |. 817D F8 35140>CMP DWORD PTR SS:[EBP-8],1435 护手 最大
昆顿掉套装几率
0041E1B0 |. 81F9 13010000 |cmp ecx, 113
0041E1B6 |. 75 65 |jnz short 0041E21D
0041E1B8 |. E8 27871F00 |call 006168E4
0041E1BD |. 99 |cdq
0041E1BE |. B9 10270000 |mov ecx, 2710 ->10000
0041E1C3 |. F7F9 |idiv ecx
0041E1C5 |. 81FA C4090000 |cmp edx, 9C4 -》 2500/10000
昆顿掉物品数量
0041DFF1 |. 83C4 04 add esp, 4
0041DFF4 |. 8985 60FFFFFF mov dword ptr [ebp-A0], eax
0041DFFA |. C785 5CFFFFFF>mov dword ptr [ebp-A4], 3 -》3
0041E004 |. C785 58FFFFFF>mov dword ptr [ebp-A8], 0
卓越套装:
0054EFA5 |. /74 40 je short 0054EFE7
0054EFA7 |. |837D EC 00 cmp dword ptr [ebp-14], 0
0054EFAB |. |74 3A je short 0054EFE7
0054EFAD |. |8B55 FC mov edx, dword ptr [ebp-4]
0054EFB0 |. |8A45 1C mov al, byte ptr [ebp+1C]
0054EFB3 |. |8882 96000000 mov byte ptr [edx+96], al
0054EFB9 |. |8B4D FC mov ecx, dword ptr [ebp-4]
0054EFBC |. |33D2 xor edx, edx
0054EFBE |. |8A91 96000000 mov dl, byte ptr [ecx+96]
0054EFC4 |. |85D2 test edx, edx
0054EFC6 |. |74 1D je short 0054EFE5 -》JMP
0054EFC8 |. |8B45 FC mov eax, dword ptr [ebp-4]
0054EFCB |. |C640 7F 00 mov byte ptr [eax+7F], 0
0054EFCF |. |C645 18 00 mov byte ptr [ebp+18], 0
0054EFD3 |. |8B4D 1C mov ecx, dword ptr [ebp+1C]
0054EFD6 |. |81E1 FF000000 and ecx, 0FF
0054EFDC |. |C1F9 02 sar ecx, 2
0054EFDF |. |83E1 03 and ecx, 3
0054EFE2 |. |894D E8 mov dword ptr [ebp-18], ecx
0054EFE5 |> |EB 0A jmp short 0054EFF1
0054EFE7 |> \8B55 FC mov edx, dword ptr [ebp-4]
强化套装
005C6008 |. 85C0 test eax, eax
005C600A |. 74 44 je short 005C6050 -》JMP
005C600C |. 6A 01 push 1
005C600E |. 8B4D 08 mov ecx, dword ptr [ebp+8]
卓越镶嵌
0054F062 |. E8 397FEBFF call 00406FA0
0054F067 |. 25 FF000000 and eax, 0FF
0054F06C |. 83F8 01 cmp eax, 1
0054F06F |. 75 35 JNZ SHORT GameServ.0054F09C -》JMP
0054F071 |. 8B4D FC mov ecx, dword ptr [ebp-4]
0054F074 |. C681 B2000000>mov byte ptr [ecx+B2], 0
X商店支持套装
OD修改下GS就可以了
OD载入GS 搜索 005F799F
005F799F C645 A4 63 mov byte ptr [ebp-5c],0 把这里的0改成63就OK了