[ENABLE]
alloc(newmem,1024)
label(returnhere)
label(originalcode)
label(exit)
0053DB4A:
jmp newmem
nop
nop
returnhere:
newmem:
originalcode:
movzx eax,word ptr [esi+00000154]
//mov eax,01
//mov word ptr [esi+00000156],ax
mov [esi+00000070], 41999999 // speed mob
//40c00000 = 6 lv 1 (to replace the above blue color)
//40400000 = 12 lv 2 (to replace the above blue color)
//41c00000 = 24 lv 3 (to replace the above blue color)
mov byte ptr [esi+00000174],00 // malee attack range = 0
mov byte ptr [esi+00000244],00 // magic attack range = 0
mov [esi+00000240],0000000 //other attack range = 0
mov [esi+0000023c],0000000 //other attack range = 0
mov [esi+00000238],0000000 //other attack range = 0
mov eax,03
mov word ptr [esi+00000154],ax
exit:
jmp returnhere
[DISABLE]
dealloc(newmem)
0053DB4A:
movzx eax,word ptr [esi+00000154]
[ENABLE]
alloc(newmem,1024)
label(returnhere)
label(originalcode)
label(exit)
label(check_mana)
label(finished_check)
0052D83F:
jmp newmem
nop
nop
nop
nop
nop
returnhere:
newmem:
originalcode:
cmp dword ptr [eax+08],01 // checking for HP pot?
jne check_mana
mov dword ptr[eax+08],11 // change to auto pot
mov dword ptr[eax+10],11
check_mana:
cmp dword ptr [eax+08],02 // checking for MP pot?
jne finished_check
mov dword ptr[eax+08],12 // change to auto pot
mov dword ptr[eax+10],12
finished_check:
cmp dword ptr [eax+08],13
je 0052dd2a
exit:
jmp returnhere
[DISABLE]
dealloc(newmem)
0052D83F:
cmp dword ptr [eax+08],13
je 0052dd2a
[ENABLE]
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)
00459D8D:
jmp newmem
nop
returnhere:
newmem:
//DwExploreRange eax
mov [eax+08],00000020//DwSight eax+08
mov [eax+04],00000020//DwPersuitRange eax+04
//DwAvoidRange eax+0C
mov [eax+10],00000064//DwExploreStandDelay eax+10
mov [eax+14],00000064//DwExploreMoveDelay eax+14
mov [eax+18],00000064//DwStandDelay eax+18
mov [eax+1C],00000064//DwMoveDelay eax+1C
//DwFollowMyMasterRange eax+20
//DwStopMasterNear eax+24
//DwWarpMyMasterRange eax+28
mov [eax+2C],00000064//DwCallTeamPossibelHP eax+2C
mov [eax+30],00000020//DwCallTeamCount eax+30
mov [eax+34],00000000//DwBlockNFirstAttack eax+34//mov [eax+38],00000020//dwCallTeamCell byte[eax+38]
//dwFollowTarget eax+3C
//dwSpecialAttackStartHP
//dwSpecialMeleeAttackRate
//dwSpecialRangeAttackRate
//DwPowerAttacjStartHP
//dwPowerMeleeAttackProbable
//dwPowerRangeAttackProbable
//mov [eax+40],00000000//DwUnderAttackAggro eax+40
//mov [eax+44],00000000//DwMeleeAttackRangeInAggro eax+44
//mov [eax+48],00000000//DwRangeAttackRangeInAggro eax+48
//DwSightInAggro eax+4C
//DwDefeatAggro eax+50
mov [eax+54],00000000//DwBlockedAggro eax+54
mov [eax+58],00000000//DwSlideAggro eax+58
mov [eax+5C],00000000//DwHealAggro eax+5C
//DwMasterUnderAttackAggro eax+50
//DwMasterDefeatAggro eax+54
//DwMasterBlockingAggro eax+58
//DwMasterSlideAggro eax+5C
//DwCOmplusionUnderAttackAggro eax+60
//dwMaxSummonsMonsterCount eax+64
//dwReSummonsMonsterTick eax+68
//dwMaxSummonsMonsterRange eax+6C
//dwSummonsStartPcCountPatternType eax+70
originalcode:
mov edx,[eax+1c]
mov [ecx+20],edx
mov edx,10 // number spawn
mov [eax+8c],edx
mov edx,64 // time delay spawn
mov [eax+90],edx
mov edx,99 // # follow monster
mov [eax+3C],edx
//mov [ecx+20],edx // # follow my master
exit:
jmp returnhere
[DISABLE]
dealloc(newmem)
00459D8D:
mov edx,[eax+1c]
mov [ecx+20],edx
[ENABLE]
alloc(newmem,1024)
label(returnhere)
label(originalcode)
label(exit)
007C42AA:
jmp newmem
returnhere:
newmem:
mov [eax+08],40BEDD2E // change float point to desire speed
mov [eax+0c],44C48C75 // change float point to desire speed
originalcode:
fld dword ptr [eax+08]
pop edi
pop esi
exit:
jmp returnhere
a2E4C0:
dd 44600000
[DISABLE]
dealloc(newmem)
007C42AA: // D9 40 08 5F 5E C3 8B 0D 0C 8E BF 00 8B 01 56 57 FF 50 08 8B 0D 0C 8B BF
fld dword ptr [eax+08]
pop edi
pop esi
a2E4C0: // 64 79 00 00 54 5F 50 6F 72 74 00 00 52 5F 57 65 61 70 6F 6E 00 00 00 00
dd 44700000
[ENABLE]
alloc(newmem,1024)
label(returnhere)
label(originalcode)
label(exit)
label(change_teleport)
005540F3:
jmp newmem
nop
nop
returnhere:
newmem:
originalcode:
movzx ebx,word ptr [eax]
cmp bx,0483 // python castle -> tomb of the black dragon
je change_teleport
cmp bx,4E20 // Braiken Castle -> Draco Desert
je change_teleport
jmp exit
change_teleport:
mov word ptr [eax+00000106],0005
mov word ptr [eax+0000010C],0005
exit:
movzx ebx,word ptr [eax+00000104]
jmp returnhere
[DISABLE]
dealloc(newmem)
005540F3:
movzx ebx,word ptr [eax+00000104]
[ENABLE]
alloc(newmem,1024)
label(returnhere)
label(originalcode)
label(exit)
0068834A:
jmp newmem
nop
nop
returnhere:
newmem:
mov [eax+ebx*4+00000898],00000000 // change cast delay time ???? 0
originalcode:
mov ebx,[eax+ebx*4+00000898]
exit:
jmp returnhere
[DISABLE]
dealloc(newmem)
0068834A: // 8B 9C 98 98 08 00 00 03 5F 10 8B 4C 24 24 03 CB 83 7F 14 00 89 54 24 18
mov ebx,[eax+ebx*4+00000898]
[ENABLE]
alloc(newmem,1024)
label(returnhere)
label(originalcode)
label(exit)
006FEBC5:
jmp newmem
nop
returnhere:
newmem:
originalcode:
xor ecx,ecx
mov [edx+64],ecx
mov ecx,[edx+64]
mov [eax+64],ecx
exit:
jmp returnhere
[DISABLE]
dealloc(newmem)
006FEBC5: // 8B 4A 64 89 48 64 8D 4A 68 8B 39 8D 70 68 89 3E
mov ecx ,[edx+64]
mov [eax+64],ecx
[ENABLE]
alloc(newmem2,1024)
label(returnhere1)
label(originalcode1)
label(exit1)
005C15B6:
jmp newmem2
returnhere1:
newmem2:
mov [edi+04],427f0000 // change value to maximum zoom
originalcode1:
movss xmm0,[edi+04]
exit1:
jmp returnhere1
[DISABLE]
005C15B6:
movss xmm0,[edi+04]
dealloc(newmem2)
[ENABLE]
alloc(newmem,1024)
label(returnhere)
label(originalcode)
label(exit)
0066A0D4:
jmp newmem
nop
returnhere:
newmem:
mov al,90 // AL ?????????????? ?????
originalcode:
mov [ecx+000000a8],al
exit:
jmp returnhere
[DISABLE]
dealloc(newmem)
0066A0D4: // 88 81 A8 00 00 00 C2 04 00 CC CC CC 8D 81 AC 00 00 00 C3 CC CC CC CC CC
mov [ecx+000000a8],al
[ENABLE]
alloc(newmem,1024)
label(returnhere)
label(originalcode)
label(exit)
0053DB4A:
jmp newmem
nop
nop
returnhere:
newmem:
originalcode:
movzx eax,word ptr [esi+00000154]
//mov eax,01
//mov word ptr [esi+00000156],ax
mov [esi+00000070], 41400000 // speed mob
//40c00000 = 6 lv 1 (to replace the above blue color)
//40400000 = 12 lv 2 (to replace the above blue color)
//41c00000 = 24 lv 3 (to replace the above blue color)
mov byte ptr [esi+00000174],00 // malee attack range = 0
mov byte ptr [esi+00000244],00 // magic attack range = 0
mov [esi+00000240],0000000 //other attack range = 0
mov [esi+0000023c],0000000 //other attack range = 0
mov [esi+00000238],0000000 //other attack range = 0
mov eax,03
mov word ptr [esi+00000154],ax
exit:
jmp returnhere
[DISABLE]
dealloc(newmem)
0053DB4A:
movzx eax,word ptr [esi+00000154] No description Ý· ð






