| | |
|
 组别 | 百姓 |
| 级别 | 在野武将 |
| 功绩 | 0 |
| 帖子 | 2 |
| 编号 | 543552 |
| 注册 | 2020-11-5 |
| |
| | |
|
|
|
|
原版穿透范围加横扫 环击 三格穿透
如题，抄毅大的代码修改（原帖地址http://www.xycq.online/forum/vie ... horuid=0&page=2）
穿透攻击：
00无穿透 01四向，02九宫，03无羽箭，06大无羽箭 04直线二格，05直线六格，07直线三格 08横扫攻击 09环击
00435D06 /$ 55 push ebp
00435D07 |. 8BEC mov ebp,esp
00435D09 |. 83EC 24 sub esp,0x24
00435D0C |. 56 push esi
00435D0D |. 894D E4 mov [local.7],ecx
00435D10 |. 8D4D FC lea ecx,[local.1]
00435D13 |. E8 F8990200 call Ekd5.0045F710
00435D18 |. 33C0 xor eax,eax
00435D1A |. 8945 F0 mov [local.4],eax
00435D1D |. 8945 EC mov [local.5],eax
00435D20 |. 8945 E8 mov [local.6],eax
00435D23 |. 8B45 10 mov eax,[arg.3]
00435D26 |. 8945 F4 mov [local.3],eax
00435D29 |. 0FB64D 0C movzx ecx,byte ptr ss:[ebp+0xC]
00435D2D |. 894D E0 mov [local.8],ecx
00435D30 |. 83F9 09 cmp ecx,0x9 ; Switch (cases 1..9)
00435D33 |. 77 07 ja XEkd5.00435D3C
00435D35 |. FF248D D75F43>jmp dword ptr ds:[ecx*4+0x435FD7]
00435D3C |> 8B45 F4 mov eax,[local.3] ; Default case of switch 00435D47
00435D3F |. C600 FF mov byte ptr ds:[eax],0xFF
00435D42 |. E9 86020000 jmp Ekd5.00435FCD
00435D47 |> 33C0 xor eax,eax ; Switch (cases 1..6)
00435D49 |. 83F9 01 cmp ecx,0x1
00435D4C |. 75 04 jnz XEkd5.00435D52
00435D4E |. B0 04 mov al,0x4 ; Case 1 of switch 00435D47
00435D50 |. EB 19 jmp XEkd5.00435D6B
00435D52 |> 83F9 02 cmp ecx,0x2
00435D55 |. 75 04 jnz XEkd5.00435D5B
00435D57 |. B0 08 mov al,0x8 ; Case 2 of switch 00435D47
00435D59 |. EB 10 jmp XEkd5.00435D6B
00435D5B |> 83F9 03 cmp ecx,0x3
00435D5E |. 75 04 jnz XEkd5.00435D64
00435D60 |. B0 0C mov al,0xC ; Case 3 of switch 00435D47
00435D62 |. EB 07 jmp XEkd5.00435D6B
00435D64 |> 83F9 06 cmp ecx,0x6
00435D67 |.^ 75 D3 jnz XEkd5.00435D3C
00435D69 |. B0 18 mov al,0x18 ; Case 6 of switch 00435D47
00435D6B |> 8945 DC mov [local.9],eax
00435D6E |. EB 03 jmp XEkd5.00435D73
00435D70 |> FF45 F0 /inc [local.4]
00435D73 |> 8B45 DC mov eax,[local.9]
00435D76 |. 3945 F0 |cmp [local.4],eax
00435D79 |. 73 72 |jnb XEkd5.00435DED
00435D7B |. FF75 F0 |push [local.4]
00435D7E |. 8D45 08 |lea eax,[arg.1]
00435D81 |. 50 |push eax
00435D82 |. E8 6EFCFFFF |call Ekd5.004359F5
00435D87 |. 83C4 08 |add esp,0x8
00435D8A |. 50 |push eax
00435D8B |. 8D4D FC |lea ecx,[local.1]
00435D8E |. E8 0D08FDFF |call Ekd5.004065A0
00435D93 |. 8D4D FC |lea ecx,[local.1]
00435D96 |. 51 |push ecx
00435D97 |. E8 E8FAFFFF |call Ekd5.00435884
00435D9C |. 83C4 04 |add esp,0x4
00435D9F |. 8845 F8 |mov byte ptr ss:[ebp-0x8],al
00435DA2 |. 3C FF |cmp al,0xFF
00435DA4 |.^ 74 CA |je XEkd5.00435D70
00435DA6 |. 8AC8 |mov cl,al
00435DA8 |. 81E1 FF000000 |and ecx,0xFF
00435DAE |. 6BC9 24 |imul ecx,ecx,0x24
00435DB1 |. 81C1 502C4B00 |add ecx,Ekd5.004B2C50
00435DB7 |. E8 5409FDFF |call Ekd5.00406710
00435DBC |. 8BF0 |mov esi,eax
00435DBE |. 8B4D E4 |mov ecx,[local.7]
00435DC1 |. E8 4A09FDFF |call Ekd5.00406710
00435DC6 |. 8A55 14 |mov dl,byte ptr ss:[ebp+0x14]
00435DC9 |. 80FA 00 |cmp dl,0x0
00435DCC |. 75 04 |jnz XEkd5.00435DD2
00435DCE |. 3BF0 |cmp esi,eax
00435DD0 |. 75 0E |jnz XEkd5.00435DE0
00435DD2 |> 80FA 01 |cmp dl,0x1
00435DD5 |. 75 04 |jnz XEkd5.00435DDB
00435DD7 |. 3BF0 |cmp esi,eax
00435DD9 |. 74 05 |je XEkd5.00435DE0
00435DDB |> 80FA 02 |cmp dl,0x2
00435DDE |.^ 75 90 |jnz XEkd5.00435D70
00435DE0 |> 8B45 F4 |mov eax,[local.3]
00435DE3 |. 8A4D F8 |mov cl,byte ptr ss:[ebp-0x8]
00435DE6 |. 8808 |mov byte ptr ds:[eax],cl
00435DE8 |. FF45 F4 |inc [local.3]
00435DEB |.^ EB 83 \jmp XEkd5.00435D70
00435DED |> 8B45 F4 mov eax,[local.3]
00435DF0 |. C600 FF mov byte ptr ds:[eax],0xFF
00435DF3 |. E9 D5010000 jmp Ekd5.00435FCD
00435DF8 |> 807D 18 FF cmp byte ptr ss:[ebp+0x18],0xFF ; Cases 4,5,7 of switch 00435D30
00435DFC |. 75 09 jnz XEkd5.00435E07
00435DFE |. 8B45 E4 mov eax,[local.7]
00435E01 |. 8A48 06 mov cl,byte ptr ds:[eax+0x6]
00435E04 |. 884D 18 mov byte ptr ss:[ebp+0x18],cl
00435E07 |> 807D 1C FF cmp byte ptr ss:[ebp+0x1C],0xFF
00435E0B |. 75 09 jnz XEkd5.00435E16
00435E0D |. 8B45 E4 mov eax,[local.7]
00435E10 |. 8A48 07 mov cl,byte ptr ds:[eax+0x7]
00435E13 |. 884D 1C mov byte ptr ss:[ebp+0x1C],cl
00435E16 |> 8A55 08 mov dl,byte ptr ss:[ebp+0x8]
00435E19 |. 8A45 18 mov al,byte ptr ss:[ebp+0x18]
00435E1C |. 3AD0 cmp dl,al
00435E1E |. 74 0A je XEkd5.00435E2A
00435E20 |. 7E 05 jle XEkd5.00435E27
00435E22 |. FF45 EC inc [local.5]
00435E25 |. EB 03 jmp XEkd5.00435E2A
00435E27 |> FF4D EC dec [local.5]
00435E2A |> 8A45 09 mov al,byte ptr ss:[ebp+0x9]
00435E2D |. 8A4D 1C mov cl,byte ptr ss:[ebp+0x1C]
00435E30 |. 3AC1 cmp al,cl
00435E32 |. 74 0A je XEkd5.00435E3E
00435E34 |. 7E 05 jle XEkd5.00435E3B
00435E36 |. FF45 E8 inc [local.6]
00435E39 |. EB 03 jmp XEkd5.00435E3E
00435E3B |> FF4D E8 dec [local.6]
00435E3E |> 33C0 xor eax,eax
00435E40 |. 837D E0 04 cmp [local.8],0x4
00435E44 |. 75 03 jnz XEkd5.00435E49
00435E46 |. 40 inc eax
00435E47 |. EB 12 jmp XEkd5.00435E5B
00435E49 |> 837D E0 05 cmp [local.8],0x5
00435E4D |. 75 04 jnz XEkd5.00435E53
00435E4F |. B0 05 mov al,0x5
00435E51 |. EB 08 jmp XEkd5.00435E5B
00435E53 |> 837D E0 07 cmp [local.8],0x7
00435E57 |. 75 41 jnz XEkd5.00435E9A
00435E59 |. B0 02 mov al,0x2
00435E5B |> 8945 DC mov [local.9],eax
00435E5E |. EB 03 jmp XEkd5.00435E63
00435E60 |> FF45 F0 /inc [local.4]
00435E63 |> 8B45 DC mov eax,[local.9]
00435E66 |. 3945 F0 |cmp [local.4],eax
00435E69 |. 73 2F |jnb XEkd5.00435E9A
00435E6B |. FF75 14 |push [arg.4]
00435E6E |. FF75 F4 |push [local.3]
00435E71 |. 0FB64D 09 |movzx ecx,byte ptr ss:[ebp+0x9]
00435E75 |. 034D E8 |add ecx,[local.6]
00435E78 |. 51 |push ecx
00435E79 |. 0FB645 08 |movzx eax,byte ptr ss:[ebp+0x8]
00435E7D |. 0345 EC |add eax,[local.5]
00435E80 |. 50 |push eax
00435E81 |. 8B4D E4 |mov ecx,[local.7]
00435E84 |. E8 69FDFFFF |call Ekd5.00435BF2
00435E89 |. 8945 F4 |mov [local.3],eax
00435E8C |. 8A55 EC |mov dl,byte ptr ss:[ebp-0x14]
00435E8F |. 0055 08 |add byte ptr ss:[ebp+0x8],dl
00435E92 |. 8A45 E8 |mov al,byte ptr ss:[ebp-0x18]
00435E95 |. 0045 09 |add byte ptr ss:[ebp+0x9],al
00435E98 |.^ EB C6 \jmp XEkd5.00435E60
00435E9A |> 8B4D F4 mov ecx,[local.3]
00435E9D |. C601 FF mov byte ptr ds:[ecx],0xFF
00435EA0 |. E9 28010000 jmp Ekd5.00435FCD
00435EA5 |> 8B45 E4 mov eax,[local.7] ; Case 8 of switch 00435D30
00435EA8 |. 66:8B48 06 mov cx,word ptr ds:[eax+0x6]
00435EAC |. 66:894D E8 mov word ptr ss:[ebp-0x18],cx
00435EB0 |. EB 03 jmp XEkd5.00435EB5
00435EB2 |> FF45 F0 /inc [local.4]
00435EB5 |> 837D F0 08 cmp [local.4],0x8
00435EB9 |. 73 1B |jnb XEkd5.00435ED6
00435EBB |. FF75 F0 |push [local.4]
00435EBE |. 8D45 E8 |lea eax,[local.6]
00435EC1 |. 50 |push eax
00435EC2 |. E8 2EFBFFFF |call Ekd5.004359F5
00435EC7 |. 83C4 08 |add esp,0x8
00435ECA |. 66:8B10 |mov dx,word ptr ds:[eax]
00435ECD |. 66:8B4D 08 |mov cx,word ptr ss:[ebp+0x8]
00435ED1 |. 66:3BD1 |cmp dx,cx
00435ED4 |.^ 75 DC \jnz XEkd5.00435EB2
00435ED6 |> 8B4D F0 mov ecx,[local.4]
00435ED9 |. 83F9 08 cmp ecx,0x8
00435EDC |. 73 49 jnb XEkd5.00435F27
00435EDE |. 3E:8B048D FF5>mov eax,dword ptr ds:[ecx*4+0x435FFF]
00435EE6 |. 8945 EC mov [local.5],eax
00435EE9 |. 33C0 xor eax,eax
00435EEB |. 8945 F0 mov [local.4],eax
00435EEE |. EB 03 jmp XEkd5.00435EF3
00435EF0 |> FF45 F0 /inc [local.4]
00435EF3 |> 837D F0 02 cmp [local.4],0x2
00435EF7 |. 73 2E |jnb XEkd5.00435F27
00435EF9 |. FF75 14 |push [arg.4]
00435EFC |. FF75 F4 |push [local.3]
00435EFF |. 8B55 F0 |mov edx,[local.4]
00435F02 |. 0FB645 09 |movzx eax,byte ptr ss:[ebp+0x9]
00435F06 |. 0FBE4C55 ED |movsx ecx,byte ptr ss:[ebp+edx*2-0x13]
00435F0B |. 03C1 |add eax,ecx
00435F0D |. 50 |push eax
00435F0E |. 0FB645 08 |movzx eax,byte ptr ss:[ebp+0x8]
00435F12 |. 0FBE4C55 EC |movsx ecx,byte ptr ss:[ebp+edx*2-0x14]
00435F17 |. 03C1 |add eax,ecx
00435F19 |. 50 |push eax
00435F1A |. 8B4D E4 |mov ecx,[local.7]
00435F1D |. E8 D0FCFFFF |call Ekd5.00435BF2
00435F22 |. 8945 F4 |mov [local.3],eax
00435F25 |.^ EB C9 \jmp XEkd5.00435EF0
00435F27 |> 8B4D F4 mov ecx,[local.3]
00435F2A |. C601 FF mov byte ptr ds:[ecx],0xFF
00435F2D |. E9 9B000000 jmp Ekd5.00435FCD
00435F32 |> 8B4D F4 mov ecx,[local.3] ; Case 9 of switch 00435D30
00435F35 |. 8A41 FF mov al,byte ptr ds:[ecx-0x1]
00435F38 |. 8845 E8 mov byte ptr ss:[ebp-0x18],al
00435F3B |. 8B45 E4 mov eax,[local.7]
00435F3E |. 66:8B50 06 mov dx,word ptr ds:[eax+0x6]
00435F42 |. 8955 EC mov [local.5],edx
00435F45 |. EB 03 jmp XEkd5.00435F4A
00435F47 |> FF45 F0 /inc [local.4]
00435F4A |> 837D F0 08 cmp [local.4],0x8
00435F4E |. 73 77 |jnb XEkd5.00435FC7
00435F50 |. FF75 F0 |push [local.4]
00435F53 |. 8D45 EC |lea eax,[local.5]
00435F56 |. 50 |push eax
00435F57 |. E8 99FAFFFF |call Ekd5.004359F5
00435F5C |. 83C4 08 |add esp,0x8
00435F5F |. 50 |push eax
00435F60 |. 8D4D FC |lea ecx,[local.1]
00435F63 |. E8 3806FDFF |call Ekd5.004065A0
00435F68 |. 8D4D FC |lea ecx,[local.1]
00435F6B |. 51 |push ecx
00435F6C |. E8 13F9FFFF |call Ekd5.00435884
00435F71 |. 83C4 04 |add esp,0x4
00435F74 |. 8845 F8 |mov byte ptr ss:[ebp-0x8],al
00435F77 |. 3C FF |cmp al,0xFF
00435F79 |.^ 74 CC |je XEkd5.00435F47
00435F7B |. 3A45 E8 |cmp al,byte ptr ss:[ebp-0x18]
00435F7E |.^ 74 C7 |je XEkd5.00435F47
00435F80 |. 8AC8 |mov cl,al
00435F82 |. 81E1 FF000000 |and ecx,0xFF
00435F88 |. 6BC9 24 |imul ecx,ecx,0x24
00435F8B |. 81C1 502C4B00 |add ecx,Ekd5.004B2C50
00435F91 |. E8 7A07FDFF |call Ekd5.00406710
00435F96 |. 8BF0 |mov esi,eax
00435F98 |. 8B4D E4 |mov ecx,[local.7]
00435F9B |. E8 7007FDFF |call Ekd5.00406710
00435FA0 |. 8A55 14 |mov dl,byte ptr ss:[ebp+0x14]
00435FA3 |. 80FA 00 |cmp dl,0x0
00435FA6 |. 75 04 |jnz XEkd5.00435FAC
00435FA8 |. 3BF0 |cmp esi,eax
00435FAA |. 75 0E |jnz XEkd5.00435FBA
00435FAC |> 80FA 01 |cmp dl,0x1
00435FAF |. 75 04 |jnz XEkd5.00435FB5
00435FB1 |. 3BF0 |cmp esi,eax
00435FB3 |. 74 05 |je XEkd5.00435FBA
00435FB5 |> 80FA 02 |cmp dl,0x2
00435FB8 |.^ 75 8D |jnz XEkd5.00435F47
00435FBA |> 8B45 F4 |mov eax,[local.3]
00435FBD |. 8A4D F8 |mov cl,byte ptr ss:[ebp-0x8]
00435FC0 |. 8808 |mov byte ptr ds:[eax],cl
00435FC2 |. FF45 F4 |inc [local.3]
00435FC5 |.^ EB 80 \jmp XEkd5.00435F47
00435FC7 |> 8B45 F4 mov eax,[local.3]
00435FCA |. C600 FF mov byte ptr ds:[eax],0xFF
00435FCD |> 8B45 10 mov eax,[arg.3]
00435FD0 |. 5E pop esi
00435FD1 |. 8BE5 mov esp,ebp
00435FD3 |. 5D pop ebp
00435FD4 \. C2 1800 retn 0x18
00435FD7 . 3C5D4300 dd Ekd5.00435D3C ; 分支表 被用于 00435D35
00435FDB . 475D4300 dd Ekd5.00435D47
00435FDF . 475D4300 dd Ekd5.00435D47
00435FE3 . 475D4300 dd Ekd5.00435D47
00435FE7 . F85D4300 dd Ekd5.00435DF8
00435FEB . F85D4300 dd Ekd5.00435DF8
00435FEF . 475D4300 dd Ekd5.00435D47
00435FF3 . F85D4300 dd Ekd5.00435DF8
00435FF7 . A55E4300 dd Ekd5.00435EA5
00435FFB . 325F4300 dd Ekd5.00435F32
00435FFF . FF000100 dd 000100FF
00436003 00FF0001 dd koeicda.0100FF00
00436007 0100FF00 dd koeicda.00FF0001
0043600B 000100FF dd FF000100
0043600F FF000001 dd koeicda.010000FF
00436013 00FFFF00 dd koeicda.00FFFF00
00436017 010000FF dd FF000001
0043601B 00010100 dd 00010100
从48D700（UE地址为8C100，原教学的文字部分）开始要改成坐标偏移值，具体可以看附件。
-----------------------------------------------------------------------------------------------------------------
上传一张四神宝玉
[ 本帖最后由 cclulongrou 于 2020-11-13 11:18 编辑 ]
 图片附件:
图片1.png (2020-11-11 13:07, 3.48 K)
图片附件:
微信图片_20201113104956.png (2020-11-13 11:18, 52.34 K)
|
|
|
|
|
