麗麗 發表於 2020-9-21 15:54:23

TwMS v228.1 ICS Set Spawn-Point

// TwMS v228.1 ICS Set Spawn-Point


Alloc(SetSpawnPointICS,1024)
RegisterSymbol(CharX)
Alloc(CharX,04)
RegisterSymbol(CharY)
Alloc(CharY,04)
RegisterSymbol(MapID)
Alloc(MapID,04)
Label(SetSpawnPoint)
Label(L1)
Label(L2)
Label(hook)

CharX:
ReadMem([[+CC4C]+34]+58,04)

CharY:
ReadMem([[+CC4C]+34]+5C,04)

MapID:
ReadMem(+187C,04)

SetSpawnPointICS:
cmp ,0298856D
jne GetProcessHeap
mov ,SetSpawnPoint
jmp GetProcessHeap

SetSpawnPoint:
mov ,eax
test eax,eax
je 029885E0
mov edx,
lea ecx,
lea eax,
mov ,00000000
push eax
push 03A034D4
push ecx
call dword ptr
xor ecx,ecx
mov ,eax
test eax,eax
cmovns ecx,
mov ,ecx
mov ecx,
test ecx,ecx
je L1
mov eax,
push ecx
call dword ptr
mov eax,

L1:
mov ecx,
mov ,ecx
test eax,eax
jns L2
cmp eax,80004002
je L2
push eax
call 0344E430
mov ecx,
test ecx,ecx
je L2
mov ,00000000
mov eax,
push ecx
call dword ptr

L2:
mov ecx,ebx
lea eax,
neg ecx
sbb ecx,ecx
and ecx,eax
push ecx
mov ecx,
call 00AE2B30
mov ecx,
mov eax,
push 00
push
mov edx,
add eax,-0A
push 00
push 00
push eax
push esi
push 01
push 02988638
cmp ,00B43500
je hook
jmp 00B43500

hook:
mov eax,
mov eax,
cmp ,eax
jne 00B43500
mov eax,
mov ,eax
mov eax,
mov ,eax
jmp 00B43500

044FDA04:
DD SetSpawnPointICS


044FDA04:
DD GetProcessHeap

DeAlloc(SetSpawnPointICS)
UnRegisterSymbol(CharX)
DeAlloc(CharX)
UnRegisterSymbol(CharY)
DeAlloc(CharY)
UnRegisterSymbol(MapID)
DeAlloc(MapID)

WhiteWhiteDer 發表於 2020-9-21 20:39:17

有完整教學嗎？完全不會改的新人

WhiteWhiteDer 發表於 2020-9-29 00:22:49

我試試，感謝您

蹦蹦 發表於 2020-10-2 16:16:38

這是神ㄇ功能?

ke90927 發表於 2020-10-4 07:49:31

00B43500瞬移CALL

麗麗 發表於 2020-10-4 09:49:08

ke90927 發表於 2020-10-4 07:49 static/image/common/back.gif
00B43500瞬移CALL
嗯。我去試試這個瞬移call多次調用會不會斷綫。

02CA08FE - FF 75 20              - push
02CA0901 - 8B 7D 10              - mov edi,
02CA0904 - FF 75 1C              - push
02CA0907 - FF 75 18              - push
02CA090A - FF 75 14              - push
02CA090D - 57                    - push edi        //y
02CA090E - 56                    - push esi        //x
02CA090F - FF 75 08              - push
02CA0912 - E8 E92BEAFD           - call 00B43500

ke90927 發表於 2020-10-5 12:59:40

麗麗 發表於 2020-10-4 09:49 static/image/common/back.gif
嗯。我去試試這個瞬移call多次調用會不會斷綫。

02CA08FE - FF 75 20              - push


GMS有文本可以参考，这个和GMS那个貌似是一样的
頁: [1]
查看完整版本: TwMS v228.1 ICS Set Spawn-Point