需要的请测试一下,我没有条件测试
掉落的概率大约是(1属性为100的话)
2属性:33
其他属性:11
全属性应该可以掉出,但是概率不大
修改方法:从gs文件偏移地址009193开始,
原数据为:
8845FC8A45FC5F5E5B8BE55DC3CCCCCC。。。
替换为:
EB0B908A45FC5F5E5B8BE55DC3
8845FCE815430900240375EA8A
45FC08E08845FC75E0
下面是修改后的反汇编代码(红色部分为修改添加内容):
00409100<>55pushebp
004091018BECmovebpesp
0040910383EC44subesp44
0040910653pushebx
0040910756pushesi
00409108|.57pushedi
00409109|.C645FC00movbyteptrss:[ebp-4]0
0040910D|.E8AB430900call<GAMESERV.getPosRadom>
00409112|.99cdq
00409113|.B906000000movecx6
00409118|.F7F9idivecx
0040911A|.8BCAmovecxedx
0040911C|.BA01000000movedx1
00409121|.D3E2shledxcl
00409123|.8855FCmovbyteptrss:[ebp-4]dl
00409126|.8B45FCmoveaxdwordptrss:[ebp-4]
00409129|.25FF000000andeax0FF
0040912E|.83E002andeax2
00409131|.85C0testeaxeax
00409133|.742EjeshortGAMESERV.00409163
00409135|.E883430900call<GAMESERV.getPosRadom>
0040913A|.2501000080andeax80000001
0040913F|.7905jnsshortGAMESERV.00409146
00409141|.48deceax
00409142|.83C8FEoreaxFFFFFFFE
00409145|.40inceax
00409146|>85C0testeaxeax
00409148|.7419jeshortGAMESERV.00409163
0040914A|.E86E430900call<GAMESERV.getPosRadom>
0040914F|.99cdq
00409150|.B906000000movecx6
00409155|.F7F9idivecx
00409157|.8BCAmovecxedx
00409159|.BA01000000movedx1
0040915E|.D3E2shledxcl
00409160|.8855FCmovbyteptrss:[ebp-4]dl
00409163|>E855430900call<GAMESERV.getPosRadom>
00409168|.2503000080andeax80000003
0040916D|.7905jnsshortGAMESERV.00409174
0040916F|.48deceax
00409170|.83C8FCoreaxFFFFFFFC
00409173|.40inceax
00409174|>85C0testeaxeax
00409176|.751EjnzshortGAMESERV.00409196
00409178|.E840430900call<GAMESERV.getPosRadom>
0040917D|.99cdq
0040917E|.B906000000movecx6
00409183|.F7F9idivecx
00409185|.8BCAmovecxedx
00409187|.BA01000000movedx1
0040918C|.D3E2shledxcl
0040918E|.8A45FCmovalbyteptrss:[ebp-4]
00409191|.0AC2oraldl
00409193EB0BjmpshortGAMESERV.004091A0
0040919590nop
00409196|>8A45FCmovalbyteptrss:[ebp-4]
00409199|.5Fpopedi
0040919A|.5Epopesi
0040919B|.5Bpopebx
0040919C|.8BE5movespebp
0040919E|.5Dpopebp
0040919F.C3retn
004091A08845FCmovbyteptrss:[ebp-4]al
004091A3E815430900call<GAMESERV.getPosRadom>
004091A82403andal3
004091AA^75EAjnzshortGAMESERV.00409196
004091AC8A45FCmovalbyteptrss:[ebp-4]
004091AF08E0oralah
004091B18845FCmovbyteptrss:[ebp-4]al
004091B4^75E0jnzshortGAMESERV.00409196
掉落的概率大约是(1属性为100的话)
2属性:33
其他属性:11
全属性应该可以掉出,但是概率不大
修改方法:从gs文件偏移地址009193开始,
原数据为:
8845FC8A45FC5F5E5B8BE55DC3CCCCCC。。。
替换为:
EB0B908A45FC5F5E5B8BE55DC3
8845FCE815430900240375EA8A
45FC08E08845FC75E0
下面是修改后的反汇编代码(红色部分为修改添加内容):
00409100<>55pushebp
004091018BECmovebpesp
0040910383EC44subesp44
0040910653pushebx
0040910756pushesi
00409108|.57pushedi
00409109|.C645FC00movbyteptrss:[ebp-4]0
0040910D|.E8AB430900call<GAMESERV.getPosRadom>
00409112|.99cdq
00409113|.B906000000movecx6
00409118|.F7F9idivecx
0040911A|.8BCAmovecxedx
0040911C|.BA01000000movedx1
00409121|.D3E2shledxcl
00409123|.8855FCmovbyteptrss:[ebp-4]dl
00409126|.8B45FCmoveaxdwordptrss:[ebp-4]
00409129|.25FF000000andeax0FF
0040912E|.83E002andeax2
00409131|.85C0testeaxeax
00409133|.742EjeshortGAMESERV.00409163
00409135|.E883430900call<GAMESERV.getPosRadom>
0040913A|.2501000080andeax80000001
0040913F|.7905jnsshortGAMESERV.00409146
00409141|.48deceax
00409142|.83C8FEoreaxFFFFFFFE
00409145|.40inceax
00409146|>85C0testeaxeax
00409148|.7419jeshortGAMESERV.00409163
0040914A|.E86E430900call<GAMESERV.getPosRadom>
0040914F|.99cdq
00409150|.B906000000movecx6
00409155|.F7F9idivecx
00409157|.8BCAmovecxedx
00409159|.BA01000000movedx1
0040915E|.D3E2shledxcl
00409160|.8855FCmovbyteptrss:[ebp-4]dl
00409163|>E855430900call<GAMESERV.getPosRadom>
00409168|.2503000080andeax80000003
0040916D|.7905jnsshortGAMESERV.00409174
0040916F|.48deceax
00409170|.83C8FCoreaxFFFFFFFC
00409173|.40inceax
00409174|>85C0testeaxeax
00409176|.751EjnzshortGAMESERV.00409196
00409178|.E840430900call<GAMESERV.getPosRadom>
0040917D|.99cdq
0040917E|.B906000000movecx6
00409183|.F7F9idivecx
00409185|.8BCAmovecxedx
00409187|.BA01000000movedx1
0040918C|.D3E2shledxcl
0040918E|.8A45FCmovalbyteptrss:[ebp-4]
00409191|.0AC2oraldl
00409193EB0BjmpshortGAMESERV.004091A0
0040919590nop
00409196|>8A45FCmovalbyteptrss:[ebp-4]
00409199|.5Fpopedi
0040919A|.5Epopesi
0040919B|.5Bpopebx
0040919C|.8BE5movespebp
0040919E|.5Dpopebp
0040919F.C3retn
004091A08845FCmovbyteptrss:[ebp-4]al
004091A3E815430900call<GAMESERV.getPosRadom>
004091A82403andal3
004091AA^75EAjnzshortGAMESERV.00409196
004091AC8A45FCmovalbyteptrss:[ebp-4]
004091AF08E0oralah
004091B18845FCmovbyteptrss:[ebp-4]al
004091B4^75E0jnzshortGAMESERV.00409196

