2009-7-31 20:37
ducksuper
普通曹操传倒比较好改 我在论坛收集到的一些特效代码位置如下
00405915 |> \6A 23 |PUSH 23 ; /Arg1 = 00000023
00405917 |. 8B55 F4 |MOV EDX,DWORD PTR SS:[EBP-C] ; |
0040591A |. 8B4A 08 |MOV ECX,DWORD PTR DS:[EDX+8] ; |
0040591D |. E8 E7200000 |CALL 雪芸.00407A09 ; \是否混乱攻击
00405979 |> \6A 24 |PUSH 24 ; /Arg1 = 00000024
0040597B |. 8B55 F4 |MOV EDX,DWORD PTR SS:[EBP-C] ; |
0040597E |. 8B4A 08 |MOV ECX,DWORD PTR DS:[EDX+8] ; |
00405981 |. E8 83200000 |CALL 雪芸.00407A09 ; \是否中毒攻击
004059DD |> \6A 25 |PUSH 25 ; /Arg1 = 00000025
004059DF |. 8B55 F4 |MOV EDX,DWORD PTR SS:[EBP-C] ; |
004059E2 |. 8B4A 08 |MOV ECX,DWORD PTR DS:[EDX+8] ; |
004059E5 |. E8 1F200000 |CALL 雪芸.00407A09 ; \是否麻痹攻击
00405A41 |> \6A 26 |PUSH 26 ; /Arg1 = 00000026
00405A43 |. 8B55 F4 |MOV EDX,DWORD PTR SS:[EBP-C] ; |
00405A46 |. 8B4A 08 |MOV ECX,DWORD PTR DS:[EDX+8] ; |
00405A49 |. E8 BB1F0000 |CALL 雪芸.00407A09 ; \禁止咒攻击
00405BBA |. 6A 3E |PUSH 3E
00405BBC |. 8B55 F4 |MOV EDX,DWORD PTR SS:[EBP-C]
00405BBF |. 33C0 |XOR EAX,EAX
00405BC1 |. 8A42 01 |MOV AL,BYTE PTR DS:[EDX+1]
00405BC4 |. 8BC8 |MOV ECX,EAX
00405BC6 |. 6BC9 24 |IMUL ECX,ECX,24
00405BC9 |. 81C1 502C4B00 |ADD ECX,雪芸.004B2C50
00405BCF |. E8 9C9A0500 |CALL 雪芸.0045F670
00405BD4 |. 8BC8 |MOV ECX,EAX ; |
00405BD6 |. 6BC9 48 |IMUL ECX,ECX,48 ; |
00405BD9 |. 81C1 681B4A00 |ADD ECX,雪芸.004A1B68 ; |
00405BDF |. E8 251E0000 |CALL 雪芸.00407A09 ; \自动使用豆
00405D9B |. 6A 29 PUSH 29 ; /Arg1 = 00000029
00405D9D |. 8B45 F4 MOV EAX,DWORD PTR SS:[EBP-C] ; |
00405DA0 |. 8B48 08 MOV ECX,DWORD PTR DS:[EAX+8] ; |
00405DA3 |. E8 611C0000 CALL 雪芸.00407A09 ; \致命一击
00405F12 |. 6A 39 |PUSH 39 ; /Arg1 = 00000039
00405F14 |. 8B4D F8 |MOV ECX,DWORD PTR SS:[EBP-8] ; |
00405F17 |. E8 ED1A0000 |CALL 雪芸.00407A09 ; \防致命一击
00405F82 |. 6A 3A |PUSH 3A ; /Arg1 = 0000003A
00405F84 |. 8B4D F8 |MOV ECX,DWORD PTR SS:[EBP-8] ; |
00405F87 |. E8 7D1A0000 |CALL 雪芸.00407A09 ; \防两次攻击
00405FA6 |> \6A 3C |PUSH 3C ; /Arg1 = 0000003C
00405FA8 |. 8B4D F8 |MOV ECX,DWORD PTR SS:[EBP-8] ; |
00405FAB |. E8 591A0000 |CALL 雪芸.00407A09 ; \防御MP
004063D6 |. 6A 28 PUSH 28
004063D8 |. 8B4D FC MOV ECX,DWORD PTR SS:[EBP-4]
004063DB |. E8 90920500 CALL 雪芸.0045F670
004063E0 |. 8BC8 MOV ECX,EAX ; |
004063E2 |. 6BC9 48 IMUL ECX,ECX,48 ; |
004063E5 |. 81C1 681B4A00 ADD ECX,雪芸.004A1B68 ; |
004063EB |. E8 19160000 CALL 雪芸.00407A09 ; \反击后反击
00406462 |> \6A 2C PUSH 2C ; /Arg1 = 0000002C
00406464 |. 8B4D F0 MOV ECX,DWORD PTR SS:[EBP-10] ; |
00406467 |. 8B49 08 MOV ECX,DWORD PTR DS:[ECX+8] ; |
0040646A |. E8 9A150000 CALL 雪芸.00407A09 ; \无反击攻击
00407850 |> \6A 2B PUSH 2B ; /Arg1 = 0000002B
00407852 |. 8B4D F8 MOV ECX,DWORD PTR SS:[EBP-8] ; |
00407855 |. E8 AF010000 CALL 雪芸.00407A09 ; \传透攻击
0041FF87 |> \6A 32 PUSH 32 ; /Arg1 = 00000032
0041FF89 |. 8B4D F8 MOV ECX,DWORD PTR SS:[EBP-8] ; |
0041FF8C |. E8 787AFEFF CALL 雪芸.00407A09 ; \可以禁咒
004200A2 |> \6A 32 PUSH 32 ; /Arg1 = 00000032
004200A4 |. 8B4D F8 MOV ECX,DWORD PTR SS:[EBP-8] ; |
004200A7 |. E8 5D79FEFF CALL 雪芸.00407A09 ; \可以禁咒
004201BC |> \6A 32 PUSH 32 ; /Arg1 = 00000032
004201BE |. 8B4D F8 MOV ECX,DWORD PTR SS:[EBP-8] ; |
004201C1 |. E8 4378FEFF CALL 雪芸.00407A09 ; \可以禁咒
004202D7 |> \6A 32 PUSH 32 ; /Arg1 = 00000032
004202D9 |. 8B4D F8 MOV ECX,DWORD PTR SS:[EBP-8] ; |
004202DC |. E8 2877FEFF CALL 雪芸.00407A09 ; \可以禁咒
00422C8B |. 6A 3E |PUSH 3E
00422C8D |. 8B4D D4 |MOV ECX,DWORD PTR SS:[EBP-2C]
00422C90 |. 33D2 |XOR EDX,EDX
00422C92 |. 8A51 0C |MOV DL,BYTE PTR DS:[ECX+C]
00422C95 |. 8BCA |MOV ECX,EDX
00422C97 |. 6BC9 24 |IMUL ECX,ECX,24
00422C9A |. 81C1 502C4B00 |ADD ECX,雪芸.004B2C50
00422CA0 |. E8 CBC90300 |CALL 雪芸.0045F670
00422CA5 |. 8BC8 |MOV ECX,EAX ; |
00422CA7 |. 6BC9 48 |IMUL ECX,ECX,48 ; |
00422CAA |. 81C1 681B4A00 |ADD ECX,雪芸.004A1B68 ; |
00422CB0 |. E8 544DFEFF |CALL 雪芸.00407A09 ; \豆袋
00422F46 |. 6A 31 PUSH 31 ; /Arg1 = 00000031
00422F48 |. 8B45 EC MOV EAX,DWORD PTR SS:[EBP-14] ; |
00422F4B |. 8B48 04 MOV ECX,DWORD PTR DS:[EAX+4] ; |
00422F4E |. E8 B64AFEFF CALL 雪芸.00407A09 ; \节约MP
00437D6B |. 6A 21 PUSH 21
00437D6D |. 8B4D F0 MOV ECX,DWORD PTR SS:[EBP-10]
00437D70 |. E8 FB780200 CALL 雪芸.0045F670
00437D75 |. 8BC8 MOV ECX,EAX ; |
00437D77 |. 6BC9 48 IMUL ECX,ECX,48 ; |
00437D7A |. 81C1 681B4A00 ADD ECX,雪芸.004A1B68 ; |
00437D80 |. E8 84FCFCFF CALL 雪芸.00407A09 ; \突击移动
00439F72 |. 6A 3C PUSH 3C ; /Arg1 = 0000003C
00439F74 |. 8B8D 74FFFFFF MOV ECX,DWORD PTR SS:[EBP-8C] ; |
00439F7A |. E8 8ADAFCFF CALL 雪芸.00407A09 ; \防御MP
0043AC63 |. 6A 2E PUSH 2E ; /Arg1 = 0000002E
0043AC65 |. 8B45 F0 MOV EAX,DWORD PTR SS:[EBP-10] ; |
0043AC68 |. 8B08 MOV ECX,DWORD PTR DS:[EAX] ; |
0043AC6A |. 6BC9 48 IMUL ECX,ECX,48 ; |
0043AC6D |. 81C1 681B4A00 ADD ECX,雪芸.004A1B68 ; |
0043AC73 |. E8 91CDFCFF CALL 雪芸.00407A09 ; \引导攻击
0043B5C3 |. 6A 38 PUSH 38 ; /Arg1 = 00000038
0043B5C5 |. 8B4D E8 MOV ECX,DWORD PTR SS:[EBP-18] ; |
0043B5C8 |. E8 3CC4FCFF CALL 雪芸.00407A09 ; \防远程攻击
0043B6AC |> \6A 27 PUSH 27 ; /Arg1 = 00000027
0043B6AE |. 8B4D E0 MOV ECX,DWORD PTR SS:[EBP-20] ; |
0043B6B1 |. E8 53C3FCFF CALL 雪芸.00407A09 ; \辅助攻击命中
0043B6DB |> \6A 35 PUSH 35 ; /Arg1 = 00000035
0043B6DD |. 8B4D E8 MOV ECX,DWORD PTR SS:[EBP-18] ; |
0043B6E0 |. E8 24C3FCFF CALL 雪芸.00407A09 ; \辅助攻击防御
0043B708 |> \6A 37 PUSH 37 ; /Arg1 = 00000037
0043B70A |. 8B4D E8 MOV ECX,DWORD PTR SS:[EBP-18] ; |
0043B70D |. E8 F7C2FCFF CALL 雪芸.00407A09 ; \辅助全防御
0043B92B |> \6A 34 PUSH 34 ; /Arg1 = 00000034
0043B92D |. 8B4D DC MOV ECX,DWORD PTR SS:[EBP-24] ; |
0043B930 |. E8 D4C0FCFF CALL 雪芸.00407A09 ; \辅助策略命中
0043B95A |> \6A 36 PUSH 36 ; /Arg1 = 00000036
0043B95C |. 8B4D E4 MOV ECX,DWORD PTR SS:[EBP-1C] ; |
0043B95F |. E8 A5C0FCFF CALL 雪芸.00407A09 ; \辅助策略防御
0043B987 |> \6A 37 PUSH 37 ; /Arg1 = 00000037
0043B989 |. 8B4D E4 MOV ECX,DWORD PTR SS:[EBP-1C] ; |
0043B98C |. E8 78C0FCFF CALL 雪芸.00407A09 ; \辅助全防御
0043BDDF |> \6A 3D PUSH 3D
0043BDE1 |. 8B4D DC MOV ECX,DWORD PTR SS:[EBP-24]
0043BDE4 |. E8 87380200 CALL 雪芸.0045F670
0043BDE9 |. 8BC8 MOV ECX,EAX ; |
0043BDEB |. 6BC9 48 IMUL ECX,ECX,48 ; |
0043BDEE |. 81C1 681B4A00 ADD ECX,雪芸.004A1B68 ; |
0043BDF4 |. E8 10BCFCFF CALL 雪芸.00407A09 ; \减轻远距伤害
0043BEA6 |. 6A 2D PUSH 2D ; /Arg1 = 0000002D
0043BEA8 |. 8B55 D4 MOV EDX,DWORD PTR SS:[EBP-2C] ; |
0043BEAB |. 8B0A MOV ECX,DWORD PTR DS:[EDX] ; |
0043BEAD |. 6BC9 48 IMUL ECX,ECX,48 ; |
0043BEB0 |. 81C1 681B4A00 ADD ECX,雪芸.004A1B68 ; |
0043BEB6 |. E8 4EBBFCFF CALL 雪芸.00407A09 ; \骑马攻击
0043C1E2 |. 6A 2F PUSH 2F ; /Arg1 = 0000002F
0043C1E4 |. 8B4D E8 MOV ECX,DWORD PTR SS:[EBP-18] ; |
0043C1E7 |. 8B09 MOV ECX,DWORD PTR DS:[ECX] ; |
0043C1E9 |. 6BC9 48 IMUL ECX,ECX,48 ; |
0043C1EC |. 81C1 681B4A00 ADD ECX,雪芸.004A1B68 ; |
0043C1F2 |. E8 12B8FCFF CALL 雪芸.00407A09 ; \辅助火系策略
0043C24D |. 6A 30 PUSH 30 ; /Arg1 = 00000030
0043C24F |. 8B45 E8 MOV EAX,DWORD PTR SS:[EBP-18] ; |
0043C252 |. 8B08 MOV ECX,DWORD PTR DS:[EAX] ; |
0043C254 |. 6BC9 48 IMUL ECX,ECX,48 ; |
0043C257 |. 81C1 681B4A00 ADD ECX,雪芸.004A1B68 ; |
0043C25D |. E8 A7B7FCFF CALL 雪芸.00407A09 ; \辅助风类策略
0043C297 |> \6A 3B PUSH 3B ; /Arg1 = 0000003B
0043C299 |. 8B4D 0C MOV ECX,DWORD PTR SS:[EBP+C] ; |
0043C29C |. E8 68B7FCFF CALL 雪芸.00407A09 ; \防御策略损伤
0043C745 |. 6A 14 PUSH 14
0043C747 |. 8B4D FC MOV ECX,DWORD PTR SS:[EBP-4]
0043C74A |. E8 212F0200 CALL 雪芸.0045F670
0043C74F |. 8BC8 MOV ECX,EAX ; |
0043C751 |. 6BC9 48 IMUL ECX,ECX,48 ; |
0043C754 |. 81C1 681B4A00 ADD ECX,雪芸.004A1B68 ; |
0043C75A |. E8 AAB2FCFF CALL 雪芸.00407A09 ; \辅助防御力
0043CE7C |> \6A 12 PUSH 12 ; /Arg1 = 00000012
0043CE7E |. 8B4D E4 MOV ECX,DWORD PTR SS:[EBP-1C] ; |
0043CE81 |. E8 83ABFCFF CALL 雪芸.00407A09 ; \每回合回复HP
0043CEE0 |> \6A 13 PUSH 13 ; /Arg1 = 00000013
0043CEE2 |. 8B4D E4 MOV ECX,DWORD PTR SS:[EBP-1C] ; |
0043CEE5 |. E8 1FABFCFF CALL 雪芸.00407A09 ; \每回合回复MP
0043CF36 |. 6A 15 PUSH 15 ; /Arg1 = 00000015
0043CF38 |. 8B4D E4 MOV ECX,DWORD PTR SS:[EBP-1C] ; |
0043CF3B |. E8 C9AAFCFF CALL 雪芸.00407A09 ; \每回合获得经验
0043CF75 |> \6A 16 PUSH 16 ; /Arg1 = 00000016
0043CF77 |. 8B4D E4 MOV ECX,DWORD PTR SS:[EBP-1C] ; |
0043CF7A |. E8 8AAAFCFF CALL 雪芸.00407A09 ; \每回合获的武器经验值
0043CFB4 |> \6A 17 PUSH 17 ; /Arg1 = 00000017
0043CFB6 |. 8B4D E4 MOV ECX,DWORD PTR SS:[EBP-1C] ; |
0043CFB9 |. E8 4BAAFCFF CALL 雪芸.00407A09 ; \每回合获的防具经验值
0043DB72 . 6A 2E PUSH 2E ; /Arg1 = 0000002E
0043DB74 . 8B45 F4 MOV EAX,DWORD PTR SS:[EBP-C] ; |
0043DB77 . 8B08 MOV ECX,DWORD PTR DS:[EAX] ; |
0043DB79 . 6BC9 48 IMUL ECX,ECX,48 ; |
0043DB7C . 81C1 681B4A00 ADD ECX,雪芸.004A1B68 ; |
0043DB82 . E8 829EFCFF CALL 雪芸.00407A09 ; \引导攻击
0043DEBD |> \6A 33 PUSH 33 ; /Arg1 = 00000033
0043DEBF |. 8B4D D4 MOV ECX,DWORD PTR SS:[EBP-2C] ; |
0043DEC2 |. 8B09 MOV ECX,DWORD PTR DS:[ECX] ; |
0043DEC4 |. 6BC9 48 IMUL ECX,ECX,48 ; |
0043DEC7 |. 81C1 681B4A00 ADD ECX,雪芸.004A1B68 ; |
0043DECD |. E8 379BFCFF CALL 雪芸.00407A09 ; \策略模仿
0043F818 |. 6A 22 PUSH 22 ; /Arg1 = 00000022
0043F81A |. 8B55 F4 MOV EDX,DWORD PTR SS:[EBP-C] ; |
0043F81D |. 8B0A MOV ECX,DWORD PTR DS:[EDX] ; |
0043F81F |. 6BC9 48 IMUL ECX,ECX,48 ; |
0043F822 |. 81C1 681B4A00 ADD ECX,雪芸.004A1B68 ; |
0043F828 |. E8 DC81FCFF CALL 雪芸.00407A09 ; \恶路移动
0043F8C5 |. 6A 2A PUSH 2A ; /Arg1 = 0000002A
0043F8C7 |. 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4] ; |
0043F8CA |. 8B08 MOV ECX,DWORD PTR DS:[EAX] ; |
0043F8CC |. 6BC9 48 IMUL ECX,ECX,48 ; |
0043F8CF |. 81C1 681B4A00 ADD ECX,雪芸.004A1B68 ; |
0043F8D5 |. E8 2F81FCFF CALL 雪芸.00407A09 ; \远距攻击
00465B26 |> \6A 33 PUSH 33
00465B28 |. 8B8D 98FEFFFF MOV ECX,DWORD PTR SS:[EBP-168]
00465B2E |. 8B49 50 MOV ECX,DWORD PTR DS:[ECX+50]
00465B31 |. E8 3A9BFFFF CALL 雪芸.0045F670
00465B36 |. 8BC8 MOV ECX,EAX ; |
00465B38 |. 6BC9 48 IMUL ECX,ECX,48 ; |
00465B3B |. 81C1 681B4A00 ADD ECX,雪芸.004A1B68 ; |
00465B41 |. E8 C31EFAFF CALL 雪芸.00407A09 ; \策略模仿
00466473 |. 6A 31 PUSH 31
00466475 |. 8B4D F8 MOV ECX,DWORD PTR SS:[EBP-8]
00466478 |. 8B49 50 MOV ECX,DWORD PTR DS:[ECX+50]
0046647B |. E8 F091FFFF CALL 雪芸.0045F670
00466480 |. 8BC8 MOV ECX,EAX ; |
00466482 |. 6BC9 48 IMUL ECX,ECX,48 ; |
00466485 |. 81C1 681B4A00 ADD ECX,雪芸.004A1B68 ; |
0046648B |. E8 7915FAFF CALL 雪芸.00407A09 ; 节约MP
举个例子 楼主你用OllyDBG打开EKD5.EXE
然后跳转到00405979 这一行 在PUSH 24那里双击 将24改为23后按回车 中毒攻击(代码24)就被合并到混乱攻击(代码23)了
再跳转到004059DD 这一行 在PUSH 25那里将25改为23之后按回车 麻痹攻击(代码25)也被合并到混乱攻击了
以此类推...
(注意有的代码有2个地址 比如策略模仿 好象2个都要改成你想合并成的代码)
改好所有之后
点右键会出现下图 依次选择-复制到可执行文件-所有(或者叫全部,反正意思就是把所有你改的都存下来)
[attach]79324[/attach]
然后一路 是 可以 储存EKD5.EXE什么的搞下来 就搞定了
注意改后会自动生成备份文件EKD5.BAK 你如果改到程序出什么错误了 可以把EKD5.EXE这个文件删掉 把EKD5.BAK重命名为EKD5.EXE
你干净的曹操传程序又回来了
上面代码只适合老曹操传和84版吕布传的EXE程序 其他版本 楼主去求代码地址吧:qP+