游戏狂人
 
- 贡献度
- 58
- 金元
- 11098
- 积分
- 1342
- 精华
- 0
- 注册时间
- 2011-6-22
|
游戏版本变化了，搜索的时候得找不变的部分试着来。小弟顺着大神的足迹试了一下，可以量产史诗卡了。因为需要搜索所以工具使用CE的AOB scan，一楼大神自制的工具在这里有：http://bbs.3dmgame.com/thread-5517277-1-1.html
附上对大神代码的注释，还有我搜索到的新地址，供后人接着猜
PathList\0000\Descrip = GOLD
PathList\0000\NewHex = F30F5E058C7BC900
PathList\0000\Offset = 0032F601;
PathList\0000\OldHex = F30F59058C7BC900F30F5FC1E82ECC300089842480000000
PathList\0000\Path = 1
old:
F30F59 05 8C7BC900 mulss xmm0,[]
F30F5F C1 maxss xmm0,xmm1
E8 2ECC3000 call 2ECC3000
89842480000000 mov .......
new:
F30F5E 05 8C7BC900 divss xmm0,[]
actual 1:
0033C3BB - F3 0F59 05 4C7ECB00 - mulss xmm0,[00FF420F] { 16728591 }
0033C3C3 - F3 0F5F C1 - maxss xmm0,xmm1
0033C3C7 - E8 A4373100 - call 0064FB70
0033C3CC - 8B 0D 8CDED400 - mov ecx,[0108A25E] { 17343070 }
actual 2:
00340275 - F3 0F59 05 4C7ECB00 - mulss xmm0,[00FF80C9] { 16744649 }
0034027D - F3 0F5F C1 - maxss xmm0,xmm1
00340281 - E8 EAF83000 - call 0064FB70
00340286 - 8B 0D 8CDED400 - mov ecx,[0108E118] { 17359128 }
result:
好像似乎掉的钱多了一点...
----------------------------------------------------------
PathList\0001\Descrip = g_max_cards_per_mod
PathList\0001\NewHex = F30F59C0E833CB30003BF8909090
PathList\0001\Offset = 0032F704;
PathList\0001\OldHex = F30F5900E833CB30003BF80F46C7
PathList\0001\Path = 1
old:
F30F59 00 mulss xmm0,[rax]
E8 33CB3000 call 33CB3000
3B F8 cmp edi,eax
0F46 C7 cmovbe eax,edi
new:
F30F59 C0 mulss xmm0,xmm0
E8 33CB3000 call 33CB3000
3B F8 cmp edi,eax
909090 nop nop nop
actual:
0033C4C8 - F3 0F59 00 - mulss xmm0,[rax]
0033C4CC - E8 9F363100 - call 0064FB70
0033C4D1 - 3B F8 - cmp edi,eax
0033C4D3 - 0F46 C7 - cmovbe eax,edi
result:
改了，选副本长度的时候奖励多了
----------------------------------------------------------
PathList\0002\Descrip = g_max_upgrades_per_mod
PathList\0002\NewHex = F30F1000F30F594648E85CCA30008B4C247C3BC80F42C8894C247C
PathList\0002\Offset = 0032F7D6;
PathList\0002\OldHex = F30F1000F30F594648E85CCA30008B4C247C3BC80F47C8894C247C
PathList\0002\Path = 1
old:
F30F10 00 movss xmm0,[rax]
F30F59 4648 mulss xmmo,[rsi+48]
E8 5CCA3000 call 5CCA3000
8B 4C247C mov ecx,[rsp+7C]
3B C8 cmp ecx,eax
0F47 C8 cmova ecx,eax
89 4C247C mov [rsp+7C],ecx
new:
F30F10 00
F30F594648
E85CCA3000
8B4C247C
3BC8
0F42 C8 cmovb ecx,eax
894C247C
actual:
0033C5A3 - F3 0F10 00 - movss xmm0,[rax]
0033C5A7 - F3 0F59 46 48 - mulss xmm0,[rsi+48]
0033C5AC - E8 BF353100 - call 0064FB70
0033C5B1 - 8B 8C 24 80000000 - mov ecx,[rsp+00000080]
0033C5B8 - 3B C8 - cmp ecx,eax
0033C5BA - 0F47 C8 - cmova ecx,eax
0033C5BD - 89 8C 24 80000000 - mov [rsp+00000080],ecx
result:
改了，选副本长度的时候奖励多了
----------------------------------------------------------
PathList\0003\Descrip = crd_legend
PathList\0003\NewHex = 4390909090909090
PathList\0003\Offset = 0032F928;
PathList\0003\OldHex = 0F1F8400000000008B8424240600003D5F010000
PathList\0003\Path = 1
old:
0F1F 84 00 00000000 nop [rax+rax+00000000]
8B 84 24 24060000 mov eax,[rsp+00000624]
3D 5F010000 cmp eax,0000015F
new:
43 90 nop
909090909090 nop
actual:
0033B9FA - 66 0F1F 44 00 00 - nop [rax+rax+00]
0033BA00 - 8B 84 24 E4050000 - mov eax,[rsp+000005E4]
0033BA07 - 3D 5F010000 - cmp eax,0000015F { ["FRich?&F"] }
result:
没看懂改了什么，就没改。第一句本来不是nop吗？
----------------------------------------------------------
PathList\0004\Descrip = crd_legend_
PathList\0004\NewHex = F30F5905F47AC900
PathList\0004\Offset = 0032F9AA;
PathList\0004\OldHex = F30F5805387AC9000F2FC8760143
PathList\0004\Path = 1
old:
F3 0F58 05 387AC900 addss xmm0,dword ptr []
0F2F C8 comiss xmm1,xmm0
76 01 jna 'after next xorps'
43... xorps....
new:
F3 0F59 05 F47AC900 mulss xmm0,[]
actual:
0033C78A - F3 0F58 05 F07CCB00 - addss xmm0,dword ptr [00FF4482] { 16729218 }
0033C792 - 0F2F C8 - comiss xmm1,xmm0
0033C795 - 76 01 - jna 0033C798
0033C797 - 43 83 EE 01 - sub r14d,01 { [90] }
result:
修改以后在选择副本长度的时候，可以看到掉落变多了。随便打了一层，掉了3史诗，普通技能一堆，牛逼！
----------------------------------------------------------
PathList\0005\Descrip = MAGIC_CARDS
PathList\0005\NewHex = 8B4CE47C90898C2484000000
PathList\0005\Offset = 0032FA2F;
PathList\0005\OldHex = 0F454C2450898C2484000000B932000000
PathList\0005\Path = 1
old:
0F45 4C 24 50 cmovne ecx,[rsp+50]
89 8C 24 84000000 mov [rsp+00000084],ecx
B9 32000000 mov ecx,00000032
new:
8B 4C E4 7C mov ecx,[？+？+7C]
90 nop
89 8C 24 84000000
actual:
result:
没改，而且没看懂第一个数是啥含义。。 |
|
发表于 2018-5-23 10:41
QQ好友和群
QQ空间
腾讯微博
腾讯朋友
收藏
下载了，谢谢大神~
