小千千的筆記: RO

ラベル RO の投稿を表示しています。すべての投稿を表示

2011年9月8日木曜日

RagAddress.ini 搜尋更新(2011-08-23aRagexe)

//2011-08-23aRagexe
//CharName=
//Search:esi, [ecx+12E8h]

sub_703680 proc near
push esi
lea esi, [ecx+12E8h]
push edi
mov ecx, 10h
mov edi, offset byte_87BEE0 //CharName=
rep movsd
mov ecx, off_7D64DC
mov esi, ecx
xor eax, eax
sub esi, offset byte_87BEE0 //CharName=
jmp short loc_7036B0
align 10h

loc_7036B0:
movzx edx, byte_87BEE0[esi+eax] //CharName=
xor byte_87BEE0[eax], dl
movzx edx, byte ptr [ecx+eax+1]
xor byte_87BEE1[eax], dl
movzx edx, byte ptr [ecx+eax+2]
xor byte_87BEE2[eax], dl
movzx edx, byte ptr [ecx+eax+3]
xor byte_87BEE3[eax], dl
add eax, 4
cmp eax, 40h
jb short loc_7036B0
pop edi
mov eax, offset byte_87BEE0
pop esi
retn
sub_703680 endp

align 10h

//Zeny=
//BaseExp=
//BaseExpNext=
//JobExp=
//JobExpNext=
//Search:mov ecx, [esp+58h+var_10]

loc_689B95:
mov [esp+6Ch+var_4], 0FFFFFFFFh
lea ecx, [esp+6Ch+var_2C]
call //此行有點問題 貼不上來
mov ecx, [esp+6Ch+var_C]
mov large fs:0, ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, [esp+58h+var_10]
xor ecx, esp
call sub_722AB8
add esp, 58h
retn 4
sub_6891C0 endp

off_689BC8 dd offset loc_68922F
dd offset loc_689253
dd offset loc_68926B
dd offset loc_689344
dd offset loc_68941D
dd offset loc_689459
dd offset loc_68946C
dd offset loc_68947F
dd offset loc_6894BA
dd offset loc_6896A2
dd offset loc_6896C3
dd offset loc_6896DB
dd offset loc_6896F3
dd offset loc_68970A
dd offset loc_689722
dd offset loc_68973A
dd offset loc_689751
dd offset loc_6898CE
dd offset loc_6899D0
dd offset loc_6899E8
dd offset loc_689A00
dd offset loc_689A17
dd offset loc_689A2F
dd offset loc_689A47
dd offset loc_689A5E
dd offset loc_689A76
dd offset loc_689A8E
dd offset loc_689AA5
dd offset loc_689ABD
dd offset loc_689AD5
dd offset loc_689AEC
dd offset loc_689B04
dd offset loc_689B19
dd offset loc_689327
dd offset loc_689B95
byte_689C54 db 0
db 2 dup(22h), 1
dd 5040302h, 8220706h, 0C0B0A09h, 220F0E0Dh
dd 22222222h, 22221110h, 3 dup(22222222h)
dd 14131222h, 18171615h, 1C1B1A19h, 201F1E1Dh
dd 22222222h, 498D21h
off_689C94 dd offset loc_689570
dd offset loc_6895AB
byte_689C9C db 0
align 10h
dword_689CA0 dd 0CC010101h, 3 dup(0CCCCCCCCh), 104EC81h
dd 0C0A10000h, 33007DCCh, 248489C4h, 100h
dd 24BC8B57h, 10Ch, 247B70Fh, 16F88348h
dd 0D5870Fh, 0B60F0000h, 689DE080h, 8524FF00h
dd 689DC8h, 18B9026Ah, 0E80087DDh, 55FFCh
dd 5D74C085h, 5304478Bh, 0FCAC1D8Bh, 8B560087h
dd 85F32BF0h, 854874C0h, 554474F6h, 0FCB82D8Bh
dd 0C88B0087h, 0C32BC58Bh, 50FEF799h, 0CB2B5155h
dd 244C8D51h, 6C886820h, 0FF510078h, 75637815h
dd 18C48300h, 6A006Ah, 0F51EF568h, 24548D00h
dd 16A521Ch, 819078B9h, 5EDEE800h, 5E5DFFE9h
dd 4478B5Bh, 87FCACA3h, 8B46EB00h, 0D89044Fh //BaseExp=87F***
dd 87FD68h, 0B9833BEBh, 11Ch, 0C7147400h //JobExp=87F***
dd 11C81h, 0
add byte ptr dword_87DD18[ecx], bh
call sub_6F1A70
mov edx, [edi+4]
mov dword_87FD54, edx //Zeny=
jmp short loc_689DA5

loc_689D92:
mov eax, [edi+4]
mov dword_87FCB8, eax //BaseExpNext=
jmp short loc_689DA5

loc_689D9C:
mov ecx, [edi+4]
mov dword_87FD64, ecx //JobExpNext=


//Weight=
//WeightMax=
//Search:; "Weight : %3d / %3d"

loc_494BB4:  ; "Weight : %3d / %3d"
push offset aWeight3d3d

loc_494BB9:  ; char *
push edx
call ebx ; sprintf
mov eax, dword_8797C0 //WeightMax=
add esp, 10h
xor edi, edi
cmp eax, 1
mov ecx, eax
jg short loc_494BD2
mov ecx, 1

loc_494BD2:
mov eax, dword_8797CC //Weight=
imul eax, 64h
cdq
idiv ecx
cmp eax, 32h
jl short loc_494BE7
mov edi, 0FFh

//BaseLv=
//JobLv=
//Search:; "Base Lv. %d"
//Search:; "Job Lv. %d"

loc_494A8B:
mov eax, dword_879710 //BaseLv=
push eax
push offset aBaseLv_D ; "Base Lv. %d"
lea ecx, [esp+2Ch]
push ecx  ; char *

loc_494ADB:
mov eax, dword_87971C //JobLv=
push eax
push offset aJobLv_D ; "Job Lv. %d"
lea ecx, [esp+2Ch]
push ecx  ; char *

//HPIndex=
//MaxHPTable=
//Search:

HPIndex & MaxHPTable 似乎是無解
使用 WinHex 和之前版本比較似乎整個被拿掉了
不過這 2 個並不影響 Exp 效率的計算
只是不能自動喝水了

2011年8月31日水曜日

RagAddress.ini 位址相關說明

http://ragnarok.reharmonize.net/ragnarok/RoAddr/#n09

2011年6月8日水曜日

RO 配點整理(官服調整版)

[2012/07/27 Update]
Arc Bishop
STR 1 ; AGI 82 ; VIT 95 ; INT 82 ; DEX 84 ; LUK 100
(JOB50加成值：STR+5、AGI+4、VIT+5、INT+8、DEX+6、LUK+0)
http://uniuni.dfz.jp/skill4/acb.html?20gXdNsXdAhFbqroqnqEHnjScAkBabkbdsrEoscHcY
http://uniuni.dfz.jp/skill4/acb.html?20gXdNsXdAhEbdlbqnkeHnjN1kBabkbdsrEoscHcY (Baby)

Sorcerer
STR 1 ; AGI 84 ; VIT 95 ; INT 120 ; DEX 83 ; LUK 1
(JOB50加成值：STR+3、AGI+3、VIT+5、INT+10、DEX+7、LUK+3)
http://uniuni.dfz.jp/skill4/soe.html?10qoAnfkeKcoebaFrEkElarAjNabdnafrAbslfhqaAdn1cHcY

Warlock
STR 1 ; AGI 82 ; VIT 96 ; INT 120 ; DEX 84 ; LUK 1
(JOB50加成值：STR+1、AGI+5、VIT+4、INT+11、DEX+6、LUK+1)
http://uniuni.dfz.jp/skill4/wlk.html?10qneAoXfkdDcBHneKgKcAapdAeAbsbsaOefqocHcY

Wanderer
STR 1 ; AGI 82 ; VIT 95 ; INT 82 ; DEX 84 ; LUK 100
(JOB50加成值：STR+2、AGI+8、VIT+5、INT+8、DEX+6、LUK+0)
http://uniuni.dfz.jp/skill4/wan.html?10FXJkrAJkGO2b2nbxrA2orA6kwY

Soul Linker
STR 90 ; AGI 83 ; VIT 44 ; INT 1 ; DEX 38 ; LUK 1
(JOB50加成值：STR+0、AGI+0、VIT+6、INT+12、DEX+12、LUK+0)
http://uniuni.dfz.jp/skill4/slk.html?10GA3fhyhqndndnasdA1bQ4k

Genetic
STR 99 ; AGI 1 ; VIT 1 ; INT 99 ; DEX 1 ; LUK 1
(JOB50加成值：STR+1、AGI+5、VIT+4、INT+11、DEX+6、LUK+1)
http://uniuni.dfz.jp/skill4/gnt.html?10JbGKAfuSrArFqBdsGA91In

Glt. Cross
STR 110 ; AGI 110 ; VIT 95 ; INT 1 ; DEX 73 ; LUK 1
(JOB50加成值：STR+6、AGI+7、VIT+5、INT+4、DEX+7、LUK+0)
http://uniuni.dfz.jp/skill4/glx.html?10GXjkIbHNsNboGS1cBqA2fakwY

2011年5月17日火曜日

AHK(RO 自動 Encore & Frost Misty & Jack Frost ; 可背景執行目前只適合單視窗)

[2011/05/18 Update]
Encore:

Pause //暫停
IfWinExist,Ragnarok //檢查 RO 視窗是否存在
{
Loop //迴圈
{
 Loop,4 //迴圈 4 次
 {
 IfWinActive,Ragnarok //如果選擇的視窗是 RO
 {
  Send {F4} //送出按鍵(可以變更)
 }
 IfWinNotActive,Ragnarok //如果選擇的視窗不是 RO(背景執行用)
 {
  ControlSend,,{F4},Ragnarok //背景送出按鍵給 RO(可以變更)
 }
 Sleep, 250 //停止 0.25 秒
 }
 Sleep, 180000 //停止 180 秒
 Sleep, 5000 //停止 5秒
}
}
^Home::Pause //設定 Ctrl+Home 暫停 or 關閉暫停
^End::Reload //設定 Ctrl+End 重置(重置後 預設是暫停 要按 Ctrl+Home 開始)
             //使用暫停並不會使 Sleep 的計時重置 故加入此鍵
             //沒有先使用詩舞技能就使用 Encore 的話 會沒反應 此時也必需重置

Frost Misty & Jack Frost:

Pause
IfWinExist,Ragnarok
{
Loop
{
 Loop,2 //送 2 次是怕 LAG(約 1~3 次 JF 會 1次 FM)
 {
 IfWinActive,Ragnarok
 {
  Send {F7} //Frost Misty
 }
 IfWinNotActive,Ragnarok
 {
  ControlSend,,{F7},Ragnarok //建議使用 F1~F9(背景執行時 比較不會有問題)
 }
 Sleep, 250
 }
 Loop,2 //送 2 次是怕 LAG(約 1~3 次 JF 會 1次 FM)
 {
 IfWinActive,Ragnarok
 {
  Send {F9} //Jack Frost
 }
 IfWinNotActive,Ragnarok
 {
  ControlSend,,{F9},Ragnarok //建議使用 F1~F9(背景執行時 比較不會有問題)
 }
 Sleep, 250
 }
}
}
^Home::Pause
^End::Reload

官網:http://www.autohotkey.com/
複制上面的程式碼
然後用 AutoHotKey 編譯即可使用

2011年5月7日土曜日

RagAddress.ini 教學(使用 IDA PRO)

[2011/10/30 Update]

//2011-10-19aRagexe
//CharName=
//Search:esi, [ecx+12E8h]

sub_703680 proc near
push esi
lea esi, [ecx+12E8h]
push edi
mov ecx, 10h
mov edi, offset byte_87BEE0 //CharName=
rep movsd
mov ecx, off_7D64DC
mov esi, ecx
xor eax, eax
sub esi, offset byte_87BEE0 //CharName=
jmp short loc_7036B0
align 10h

loc_7036B0:
movzx edx, byte_87BEE0[esi+eax] //CharName=
xor byte_87BEE0[eax], dl
movzx edx, byte ptr [ecx+eax+1]
xor byte_87BEE1[eax], dl
movzx edx, byte ptr [ecx+eax+2]
xor byte_87BEE2[eax], dl
movzx edx, byte ptr [ecx+eax+3]
xor byte_87BEE3[eax], dl
add eax, 4
cmp eax, 40h
jb short loc_7036B0
pop edi
mov eax, offset byte_87BEE0
pop esi
retn
sub_703680 endp

align 10h

//Zeny=
//BaseExp=
//BaseExpNext=
//JobExp=
//JobExpNext=
//Search:mov ecx, [esp+58h+var_10]

loc_691EB9:
mov [esp+6Ch+var_4], 0FFFFFFFFh
lea ecx, [esp+6Ch+var_2C]
call ds: //此行過長省略
mov ecx, [esp+6Ch+var_C]
mov large fs:0, ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, [esp+58h+var_10]
xor ecx, esp
call sub_72D078
add esp, 58h
retn 4
sub_6914E0 endp

off_691EEC dd offset loc_69154F
dd offset loc_691573
dd offset loc_69158B
dd offset loc_691668
dd offset loc_691741
dd offset loc_69177D
dd offset loc_691790
dd offset loc_6917A3
dd offset loc_6917DE
dd offset loc_6919C6
dd offset loc_6919E7
dd offset loc_6919FF
dd offset loc_691A17
dd offset loc_691A2E
dd offset loc_691A46
dd offset loc_691A5E
dd offset loc_691A75
dd offset loc_691BF2
dd offset loc_691CF4
dd offset loc_691D0C
dd offset loc_691D24
dd offset loc_691D3B
dd offset loc_691D53
dd offset loc_691D6B
dd offset loc_691D82
dd offset loc_691D9A
dd offset loc_691DB2
dd offset loc_691DC9
dd offset loc_691DE1
dd offset loc_691DF9
dd offset loc_691E10
dd offset loc_691E28
dd offset loc_691E3D
dd offset loc_69164B
dd offset loc_691EB9
byte_691F78 db 0
db 2 dup(22h), 1
dd 5040302h, 8220706h, 0C0B0A09h, 220F0E0Dh
dd 22222222h, 22221110h, 3 dup(22222222h)
dd 14131222h, 18171615h, 1C1B1A19h, 201F1E1Dh
dd 22222222h, 498D21h
off_691FB8 dd offset loc_691894
dd offset loc_6918CF
byte_691FC0 db 0
align 4
dd 0CC010101h, 2 dup(0CCCCCCCCh)



sub_691FD0 proc near

var_104= byte ptr -104h
var_4= dword ptr -4
arg_0= dword ptr  4

sub esp, 104h
mov eax, dword_7EA140
xor eax, esp
mov [esp+104h+var_4], eax
push edi
mov edi, [esp+108h+arg_0]
movzx eax, word ptr [edi+2]
dec eax
cmp eax, 16h
ja loc_6920CF
movzx eax, ds:byte_692100[eax]
jmp ds:off_6920E8[eax*4]

loc_692008:
push 2
mov ecx, offset dword_88B1C0
call sub_6EA150
test eax, eax
jz short loc_692075
mov eax, [edi+4]
push ebx
mov ebx, dword_88D0F4
push esi
mov esi, eax
sub esi, ebx
test eax, eax
jz short loc_692073
test esi, esi
jz short loc_692073
push ebp
mov ebp, dword_88D100
mov ecx, eax
mov eax, ebp
sub eax, ebx
cdq
idiv esi
push eax
push ebp
push ecx
sub ecx, ebx
push ecx
lea ecx, [esp+124h+var_104]
push offset aDDDMoreD ; "%d : %d/%d More : %d"
push ecx  ; char *
call ds:sprintf
add esp, 18h
push 0
push 0
push 0F51EF5h
lea edx, [esp+120h+var_104]
push edx
push 1
mov ecx, offset unk_8264F8
call sub_5213D0
pop ebp

loc_692073:
pop esi
pop ebx

loc_692075:
mov eax, [edi+4]
mov dword_88D0F4, eax //BaseExp=
jmp short loc_6920C5

loc_69207F:
mov ecx, [edi+4]
mov dword_88D1B0, ecx //JobExp=
jmp short loc_6920C5

loc_69208A:
cmp dword ptr [ecx+11Ch], 0
jz short loc_6920A7
mov dword ptr [ecx+11Ch], 0
mov ecx, offset dword_88B1C0
call sub_6FC280

loc_6920A7:
mov edx, [edi+4]
mov dword_88D19C, edx //Zeny=
jmp short loc_6920C5

loc_6920B2:
mov eax, [edi+4]
mov dword_88D100, eax //BaseExpNext=
jmp short loc_6920C5

loc_6920BC:
mov ecx, [edi+4]
mov dword_88D1AC, ecx //JobExpNext=

//Weight=
//WeightMax=
//Search:; "Weight : %3d / %3d"

loc_494BB4:  ; "Weight : %3d / %3d"
push offset aWeight3d3d

loc_494BB9:  ; char *
push edx
call ebx ; sprintf
mov eax, dword_8797C0 //WeightMax=
add esp, 10h
xor edi, edi
cmp eax, 1
mov ecx, eax
jg short loc_494BD2
mov ecx, 1

loc_494BD2:
mov eax, dword_8797CC //Weight=
imul eax, 64h
cdq
idiv ecx
cmp eax, 32h
jl short loc_494BE7
mov edi, 0FFh

//BaseLv=
//JobLv=
//Search:; "Base Lv. %d"
//Search:; "Job Lv. %d"

loc_494A8B:
mov eax, dword_879710 //BaseLv=
push eax
push offset aBaseLv_D ; "Base Lv. %d"
lea ecx, [esp+2Ch]
push ecx  ; char *

loc_494ADB:
mov eax, dword_87971C //JobLv=
push eax
push offset aJobLv_D ; "Job Lv. %d"
lea ecx, [esp+2Ch]
push ecx  ; char *

//HPIndex=
//MaxHPTable=
//Search:

2010年11月24日水曜日

2010年10月21日木曜日

RagAddress(ini&教學)

[2011/01/28 Update]
RagAddress.ini(3017 2011-01-25bRagexe.rgz)
AutoImo 作者網頁 : (網頁似乎移除了)http://hide.magical.gr.jp/autoimo/index16.html

[Patch]
Number=3017

[RoName]
WindowCaption=Ragnarok
WindowClass=Ragnarok

[Ragexe]
Size=3825786

[Address]
CharName=00848AE4
Zeny=008469D8
BaseExp=00846930
BaseExpNext=0084693C
JobExp=008469EC
JobExpNext=008469E8
Weight=008469F0
WeightMax=008469E4
BaseLv=00846934
JobLv=00846940
HPIndex=008483CC
MaxHPTable=00848410

RagAddress.ini 搜尋教學
使用 W32DASM "嗶"
就可以得到下列的組合語言程式碼
然後利用關鍵字找相關位址
Change Log:
[2011/01/05 Update]2011/01/05 更新後 HP部份的關鍵字會有2組由上往下找第2組才是我們要的
[2011/01/28 Update]2011/01/28 更新後 HPIndex MaxHPTable 關鍵字變更

//使用2010-10-15aRagexe
//CharName=
//關鍵字:mov dl, byte ptr [ecx+eax+00

* Referenced by a CALL at Addresses:
|:004622DE   , :00462701   , :00463BE3   , :0046C66D   , :0046C927   ,  
|:0046CA1F   , :0048BE46   , :0048C911   , :0048CAA1   , :00494527   ,  
|:00494566   , :0049597F   , :0049F5CE   , :004A45A5   , :004AD0BA      
|:004ADA4F   , :004C5EAB   , :004D344B   , :004D3484   , :004F0539   ,  
|:004F0DEC   , :004F127D   , :004F13C3   , :0050DE0D   , :005ACF09   ,  
|:005CB333   , :005CB602   , :005CBABF   , :005CBB18   , :005CBD36      
|:005CBF1A   , :005CC0F6   , :005CC2FB   , :005CFD7E   , :005D685E   ,  
|:005D6CF3   , :005DCA3D   , :005DD01A   , :005DD1BD   , :005DF5D2   ,  
|:005DF5FC   , :005DF626   , :005DF66F   , :005DF699   , :005DF6C3      
|:005DF796   , :005DF7BD   , :005DF7E4   , :005DF851   , :005DF878   ,  
|:005DF89F   , :005E050A   , :005E4785   , :005E4F5B   , :005E51A6   ,  
|:005E7D33   , :005E7D78   , :005E8E05   , :005EECC2   , :00639E48      
| 00
:006F0FC0 53                      push ebx :
:006F0FC1 56                      push esi :
:006F0FC2 57                      push edi :
:006F0FC3 8DB15C0F0000            lea esi, dword ptr [ecx+00000F5C] 
:006F0FC9 B910000000              mov ecx, 00000010 
:006F0FCE BFB4B68400              mov edi, 0084B6B4 
:006F0FD3 F3                      repz d
:006F0FD4 A5                      movsd 
:006F0FD5 8B0DDCF47900            mov ecx, dword ptr [0079F4DC] 
:006F0FDB 33C0                    xor eax, eax d
:006F0FDD 81E9B4B68400            sub ecx, 0084B6B4 

* Referenced by a (U)nconditional or (C)onditional Jump at Address: 
|:006F0FFC(C) y 
| 00
:006F0FE3 8A9401B4B68400          mov dl, byte ptr [ecx+eax+0084B6B4]   //CharName=
:006F0FEA 8A98B4B68400            mov bl, byte ptr [eax+0084B6B4] B4
:006F0FF0 32DA                    xor bl, dl
:006F0FF2 8898B4B68400            mov byte ptr [eax+0084B6B4], bl B4
:006F0FF8 40                      inc eax  p
:006F0FF9 83F840                  cmp eax, 00000040 
:006F0FFC 72E5                    jb 006F0FE3 00
:006F0FFE 5F                      pop edi FE
:006F0FFF 5E                      pop esi FE
:006F1000 B8B4B68400              mov eax, 0084B6B4 
:006F1005 5B                      pop ebx  0
:006F1006 C3                      ret eb


//Zeny=
//BaseExp=
//BaseExpNext=
//JobExp=
//JobExpNext=
//關鍵字:* Possible StringData Ref from Data Obj ->"%d : %d/%d More : %d"

* Possible StringData Ref from Data Obj ->"%d : %d/%d More : %d"
                                  | 
:005DA47A 68483E7900              push 00793E48 
:005DA47F 50                      push eax 3
:005DA480 E8B3101400              call 0071B538 
:005DA485 83C418                  add esp, 00000018 
:005DA488 8D8D00FFFFFF            lea ecx, dword ptr [ebp+FFFFFF00] 
:005DA48E 6A00                    push 00000000 
:005DA490 6A00                    push 00000000 
:005DA492 68F51EF500              push 00F51EF5 
:005DA497 51                      push ecx 1
:005DA498 6A01                    push 00000001 
:005DA49A B938337E00              mov ecx, 007E3338 
:005DA49F E8FC2CF3FF              call 0050D1A0 
:005DA4A4 5F                      pop edi 0D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:   
|:005DA44B(C), :005DA45C(C), :005DA460(C) di
| 00
:005DA4A5 8B5304                  mov edx, dword ptr [ebx+04] re
:005DA4A8 B988828400              mov ecx, 00848288 
:005DA4AD 89153C9D8400            mov dword ptr [00849D3C], edx //BaseExp=
:005DA4B3 E878E60F00              call 006D8B30 
:005DA4B8 5E                      pop esi D8
:005DA4B9 5B                      pop ebx D8
:005DA4BA 8BE5                    mov esp, ebp  
:005DA4BC 5D                      pop ebp  e
:005DA4BD C20400                  ret 0004 e


:005DA4C0 8B4304                  mov eax, dword ptr [ebx+04] x 
:005DA4C3 B988828400              mov ecx, 00848288 
:005DA4C8 A3F89D8400              mov dword ptr [00849DF8], eax //JobExp=
:005DA4CD E85EE60F00              call 006D8B30 
:005DA4D2 5B                      pop ebx D8
:005DA4D3 8BE5                    mov esp, ebp  
:005DA4D5 5D                      pop ebp  e
:005DA4D6 C20400                  ret 0004 e


:005DA4D9 8B8110010000            mov eax, dword ptr [ecx+00000110] 
:005DA4DF 85C0                    test eax, eax 
:005DA4E1 7414                    je 005DA4F7 x 
:005DA4E3 C7811001000000000000    mov dword ptr [ebx+00000110], 00000000
:005DA4ED B988828400              mov ecx, 00848288 
:005DA4F2 E8B96A0F00              call 006D0FB0 

* Referenced by a (U)nconditional or (C)onditional Jump at Address: 
|:005DA4E1(C) y 
| 00
:005DA4F7 8B4B04                  mov ecx, dword ptr [ebx+04] re
:005DA4FA 890DE49D8400            mov dword ptr [00849DE4], ecx //Zeny=
:005DA500 B988828400              mov ecx, 00848288 
:005DA505 E826E60F00              call 006D8B30 
:005DA50A 5B                      pop ebx D8
:005DA50B 8BE5                    mov esp, ebp  
:005DA50D 5D                      pop ebp  e
:005DA50E C20400                  ret 0004 e


:005DA511 8B5304                  mov edx, dword ptr [ebx+04] x 
:005DA514 B988828400              mov ecx, 00848288 
:005DA519 8915489D8400            mov dword ptr [00849D48], edx //BaseExpNext=
:005DA51F E80CE60F00              call 006D8B30 
:005DA524 5B                      pop ebx D8
:005DA525 8BE5                    mov esp, ebp  
:005DA527 5D                      pop ebp  e
:005DA528 C20400                  ret 0004 e


:005DA52B 8B4304                  mov eax, dword ptr [ebx+04] x 
:005DA52E B988828400              mov ecx, 00848288 
:005DA533 A3F49D8400              mov dword ptr [00849DF4], eax //JobExpNext=
:005DA538 E8F3E50F00              call 006D8B30 


//Weight=
//WeightMax=
//關鍵字:* Possible StringData Ref from Data Obj ->"Weight %d%%" 

* Referenced by a (U)nconditional or (C)onditional Jump at Address: 
|:0046D5D5(C) y 
| 00
:0046D5F7 C3                      ret C)
:0046D5F8 90                      nop C)
:0046D5F9 90                      nop C)
:0046D5FA 90                      nop C)
:0046D5FB 90                      nop C)
:0046D5FC 90                      nop C)
:0046D5FD 90                      nop C)
:0046D5FE 90                      nop C)
:0046D5FF 90                      nop C)
:0046D600 55                      push ebp i
:0046D601 8BEC                    mov ebp, esp n
:0046D603 83EC40                  sub esp, 00000040 
:0046D606 56                      push esi 0
:0046D607 57                      push edi 0
:0046D608 8BF9                    mov edi, ecx 0
:0046D60A 8B4720                  mov eax, dword ptr [edi+20] re
:0046D60D 8B4F64                  mov ecx, dword ptr [edi+64] re
:0046D610 3BC1                    cmp eax, ecx d
:0046D612 0F858F000000            jne 0046D6A7 d
:0046D618 8D70EC                  lea esi, dword ptr [eax-14] re
:0046D61B 8B4508                  mov eax, dword ptr [ebp+08] re
:0046D61E 85C0                    test eax, eax 
:0046D620 0F8C81000000            jl 0046D6A7 x 
:0046D626 83F864                  cmp eax, 00000064 
:0046D629 7D7C                    jge 0046D6A7 0
:0046D62B 8B450C                  mov eax, dword ptr [ebp+0C] re
:0046D62E 3BC6                    cmp eax, esi d
:0046D630 7C75                    jl 0046D6A7  d
:0046D632 8D4E14                  lea ecx, dword ptr [esi+14] re
:0046D635 3BC1                    cmp eax, ecx d
:0046D637 7D6E                    jge 0046D6A7 d
:0046D639 8B0DF09D8400            mov ecx, dword ptr [00849DF0] //WeightMax=
:0046D63F 85C9                    test ecx, ecx 
:0046D641 750C                    jne 0046D64F  
:0046D643 51                      push ecx 6
:0046D644 8D55C0                  lea edx, dword ptr [ebp-40] ] 

* Possible StringData Ref from Data Obj ->"Weight %d%%" 
                                  | 
:0046D647 68781F7700              push 00771F78 
:0046D64C 52                      push edx 1
:0046D64D EB1B                    jmp 0046D66A  

* Referenced by a (U)nconditional or (C)onditional Jump at Address: 
|:0046D641(C) y 
| 00
:0046D64F A1FC9D8400              mov eax, dword ptr [00849DFC] //Weight=
:0046D654 8D0480                  lea eax, dword ptr [eax+4*eax]
:0046D657 8D0480                  lea eax, dword ptr [eax+4*eax]
:0046D65A C1E002                  shl eax, 02 rd
:0046D65D 99                      cdq ea
:0046D65E F7F9                    idiv ecx 0
:0046D660 50                      push eax 0
:0046D661 8D45C0                  lea eax, dword ptr [ebp-40] x]

* Possible StringData Ref from Data Obj ->"Weight %d%%" 
                                  | 
:0046D664 68781F7700              push 00771F78 
:0046D669 50                      push eax 1


//BaseLv=
//JobLv=
//關鍵字:* Possible StringData Ref from Data Obj ->"Base Lv. %d" 
//關鍵字:* Possible StringData Ref from Data Obj ->"Job Lv. %d"  

* Referenced by a (U)nconditional or (C)onditional Jump at Address: 
|:0046D2F8(C) y 
| 00
:0046D30E 8B15409D8400            mov edx, dword ptr [00849D40] //BaseLv=
:0046D314 8D8564FFFFFF            lea eax, dword ptr [ebp+FFFFFF64] 
:0046D31A 52                      push edx d

* Possible StringData Ref from Data Obj ->"Base Lv. %d" 

* Referenced by a (U)nconditional or (C)onditional Jump at Address: 
|:0046D352(C) y 
| 00
:0046D368 8B154C9D8400            mov edx, dword ptr [00849D4C] //JobLv=
:0046D36E 8D8564FFFFFF            lea eax, dword ptr [ebp+FFFFFF64] 
:0046D374 52                      push edx d

* Possible StringData Ref from Data Obj ->"Job Lv. %d"  


//HPIndex=
//MaxHPTable=
//2011/01/28 Update
//關鍵字:mov eax, dword ptr [esi+00000E6A] 

* Referenced by a (U)nconditional or (C)onditional Jump at Address: 
|:0061CDB3(C) y 
| 00
:0061CDC8 8D14C500000000          lea edx, dword ptr [8*eax+00000000] ] 
:0061CDCF 2BD0                    sub edx, eax d
:0061CDD1 33C0                    xor eax, eax d
:0061CDD3 C1E204                  shl edx, 04  d
:0061CDD6 8A841AAC0E0000          mov al, byte ptr [edx+ebx+00000EAC] ] 
:0061CDDD 8D341A                  lea esi, dword ptr [edx+ebx] 0
:0061CDE0 A358968400              mov dword ptr [00849658], eax 
:0061CDE5 0FBF8E780E0000          movsx ecx, word ptr [esi+00000E78]
:0061CDEC 890D389D8400            mov dword ptr [00849D38], ecx 
:0061CDF2 B988828400              mov ecx, 00848288 
:0061CDF7 E834BD0B00              call 006D8B30 
:0061CDFC B988828400              mov ecx, 00848288 
:0061CE01 E88ABC0B00              call 006D8A90 
:0061CE06 8B96400E0000            mov edx, dword ptr [esi+00000E40] 
:0061CE0C B988828400              mov ecx, 00848288 
:0061CE11 89152C9D8400            mov dword ptr [00849D2C], edx 
:0061CE17 0FBF86760E0000          movsx eax, word ptr [esi+00000E76]
:0061CE1E A3E89D8400              mov dword ptr [00849DE8], eax 
:0061CE23 E808BD0B00              call 006D8B30 
:0061CE28 0FBF8E7E0E0000          movsx ecx, word ptr [esi+00000E7E]
:0061CE2F 890D409D8400            mov dword ptr [00849D40], ecx 
:0061CE35 B988828400              mov ecx, 00848288 
:0061CE3A E8F1BC0B00              call 006D8B30 
:0061CE3F 0FBF96800E0000          movsx edx, word ptr [esi+00000E80]
:0061CE46 B988828400              mov ecx, 00848288 
:0061CE4B 8915509D8400            mov dword ptr [00849D50], edx 
:0061CE51 E8DABC0B00              call 006D8B30 
:0061CE56 0FBF86680E0000          movsx eax, word ptr [esi+00000E68]
:0061CE5D B988828400              mov ecx, 00848288 
:0061CE62 A3449D8400              mov dword ptr [00849D44], eax 
:0061CE67 E8C4BC0B00              call 006D8B30 
:0061CE6C 33C9                    xor ecx, ecx  
:0061CE6E 8A8EA60E0000            mov cl, byte ptr [esi+00000EA6] 8]
:0061CE74 890D789D8400            mov dword ptr [00849D78], ecx 
:0061CE7A B988828400              mov ecx, 00848288 
:0061CE7F E8ACBC0B00              call 006D8B30 
:0061CE84 33D2                    xor edx, edx  
:0061CE86 B988828400              mov ecx, 00848288 
:0061CE8B 8A96A70E0000            mov dl, byte ptr [esi+00000EA7] 8]
:0061CE91 89157C9D8400            mov dword ptr [00849D7C], edx 
:0061CE97 E894BC0B00              call 006D8B30 
:0061CE9C 33C0                    xor eax, eax  
:0061CE9E B988828400              mov ecx, 00848288 
:0061CEA3 8A86A80E0000            mov al, byte ptr [esi+00000EA8] 8]
:0061CEA9 A3809D8400              mov dword ptr [00849D80], eax 
:0061CEAE E87DBC0B00              call 006D8B30 
:0061CEB3 33C9                    xor ecx, ecx  
:0061CEB5 8A8EA90E0000            mov cl, byte ptr [esi+00000EA9] 8]
:0061CEBB 890D849D8400            mov dword ptr [00849D84], ecx 
:0061CEC1 B988828400              mov ecx, 00848288 
:0061CEC6 E865BC0B00              call 006D8B30 
:0061CECB 33D2                    xor edx, edx  
:0061CECD B988828400              mov ecx, 00848288 
:0061CED2 8A96AA0E0000            mov dl, byte ptr [esi+00000EAA] 8]
:0061CED8 8915889D8400            mov dword ptr [00849D88], edx 
:0061CEDE E84DBC0B00              call 006D8B30 
:0061CEE3 33C0                    xor eax, eax  
:0061CEE5 B988828400              mov ecx, 00848288 
:0061CEEA 8A86AB0E0000            mov al, byte ptr [esi+00000EAB] 8]
:0061CEF0 A38C9D8400              mov dword ptr [00849D8C], eax 
:0061CEF5 E836BC0B00              call 006D8B30 
:0061CEFA 8B8E440E0000            mov ecx, dword ptr [esi+00000E44] 
:0061CF00 890D3C9D8400            mov dword ptr [00849D3C], ecx 
:0061CF06 B988828400              mov ecx, 00848288 
:0061CF0B E820BC0B00              call 006D8B30 
:0061CF10 8B15BCAF8400            mov edx, dword ptr [0084AFBC] 
:0061CF16 8B866A0E0000            mov eax, dword ptr [esi+00000E6A] 
:0061CF1C 8B0C95C8AF8400          mov ecx, dword ptr [4*edx+0084AFC8] ] 
:0061CF23 51                      push ecx d
:0061CF24 50                      push eax d
:0061CF25 B988828400              mov ecx, 00848288 
:0061CF2A E851990C00              call 006E6880 
:0061CF2F 8B0DB4AF8400            mov ecx, dword ptr [0084AFB4] //HPIndex=
:0061CF35 3B048D58B08400          cmp eax, dword ptr [4*ecx+0084B058] ] 
:0061CF3C 7417                    je 0061CF55 rd
:0061CF3E 89048D58B08400          mov dword ptr [4*ecx+0084B058], eax ] 
:0061CF45 B988828400              mov ecx, 00848288 
:0061CF4A E881BB0B00              call 006D8AD0 
:0061CF4F 8B0DB4AF8400            mov ecx, dword ptr [0084AFB4] //HPIndex=

* Referenced by a (U)nconditional or (C)onditional Jump at Address: 
|:0061CF3C(C) y 
| 00
:0061CF55 8B15BCAF8400            mov edx, dword ptr [0084AFBC] 
:0061CF5B 8B0C8D58B08400          mov ecx, dword ptr [4*ecx+0084B058] ] 
:0061CF62 8B0495C8AF8400          mov eax, dword ptr [4*edx+0084AFC8] ] 
:0061CF69 50                      push eax d
:0061CF6A 51                      push ecx d
:0061CF6B B988828400              mov ecx, 00848288 
:0061CF70 E86B9A0C00              call 006E69E0 
:0061CF75 8B15BCAF8400            mov edx, dword ptr [0084AFBC] 
:0061CF7B A308B28400              mov dword ptr [0084B208], eax 
:0061CF80 8B866E0E0000            mov eax, dword ptr [esi+00000E6E] 
:0061CF86 8B0C95C8AF8400          mov ecx, dword ptr [4*edx+0084AFC8] ] 
:0061CF8D 51                      push ecx d
:0061CF8E 50                      push eax d
:0061CF8F B988828400              mov ecx, 00848288 
:0061CF94 E8E7980C00              call 006E6880 
:0061CF99 8B0DC0AF8400            mov ecx, dword ptr [0084AFC0] 
:0061CF9F 3B048DF8AF8400          cmp eax, dword ptr [4*ecx+0084AFF8] ] //MaxHPTable=
:0061CFA6 7417                    je 0061CFBF rd
:0061CFA8 89048DF8AF8400          mov dword ptr [4*ecx+0084AFF8], eax ] //MaxHPTable=
:0061CFAF B988828400              mov ecx, 00848288 
:0061CFB4 E817BB0B00              call 006D8AD0 
:0061CFB9 8B0DC0AF8400            mov ecx, dword ptr [0084AFC0]

2010年10月7日木曜日

UltraEdit Scripts (Ragexe 修改用)

Ragexe.exe 版本:3002 2011-01-11aRagexe.rgz[2011/01/12 Update]
Feature:
1.雙視窗(內建拿掉了)
2.視野放寬
3.視角&不雅文字限制解除
4.特效關閉
5.未鑑定裝備顯示

//UltraEdit設定
UltraEdit.activeDocument.findReplace.replaceAll = true;
UltraEdit.activeDocument.findReplace.searchAscii = true;

//視角&不雅文字限制解除
UltraEdit.activeDocument.findReplace.replace("manner.txt", "manner.fix");
UltraEdit.activeDocument.findReplace.replace("indoorrswtable.txt", "indoorrswtable.fix");
UltraEdit.activeDocument.findReplace.replace("viewpointtable.txt", "viewpointtable.fix");

//UltraEdit設定
UltraEdit.activeDocument.findReplace.searchAscii = false;

//視野放寬
UltraEdit.activeDocument.findReplace.replace("000066430000C843", "0000664300000044");

//特效關閉
UltraEdit.activeDocument.findReplace.replace("4D6574656F7225642E737472", "000000000000000000000000");
UltraEdit.activeDocument.findReplace.replace("4C6F72642E737472", "0000000000000000");
UltraEdit.activeDocument.findReplace.replace("53746F726D477573742E737472", "00000000000000000000000000");
UltraEdit.activeDocument.findReplace.replace("437261736845617274682E737472", "0000000000000000000000000000");

//未鑑定裝備顯示
UltraEdit.activeDocument.findReplace.replace("74787400004E756D326974656D446573635461626C652E747874000000", "747874000049644E756D326974656D446573635461626C652E74787400");
UltraEdit.activeDocument.findReplace.replace("4E756D324974656D446973706C61794E616D655461626C652E74787400000000", "49644E756D324974656D446973706C61794E616D655461626C652E7478740000");

2010年10月5日火曜日

RO 官方(新幹線) Renewal 版實裝設定備份&滑鼠移出設定

基本上一般的設定都放在 RO 目錄下的 DATA 子目錄
ChatWndInfo_U.lua (這個是你對話欄的設定)
OptionInfo.lua (遊戲中一些設定的儲存是用這個)
UserKeys.lua (這個是你快速鍵的設定 UserKeys_s.lua 遊星是用這個)

滑鼠移出的話
經過測試
RO_MF_1.98.zip
RO_MF_2.089.zip
兩者都能使用
不過 2.089 使用上得先執行較為不便
故使用 1.98 比較理想
不過使用 1.98 要有點小技巧
首先打開 1.98 的壓縮檔
然後只解壓出 dinput.dll
然後把它複制成 dinput2.dll
然後把這 2 個檔案放到 RO 目錄下即可
(遊星的話要把內附的 DINPUT.DLL RO_MF.BIN RO_MF.INI刪除 1.98版的較新)

滑鼠移出的官網在這邊 http://www.na.rim.or.jp/~nuts/ragnarok/
可以到這下載

2010年8月19日木曜日

P 點存入程式(AHK)

最近 P 點有點多又只能一個一個換
就寫了這個自動換的 AHK

http://www.autohotkey.com/
從這邊下載編譯器才能轉換成執行檔

編譯出來的似乎不支援 Unicode 需注意一下

Pause
Loop
{
 IfWinActive,遊戲星球
 {
  Send {Click}
  Sleep, 1000
  Send {Enter}
  Sleep, 1000
  Send {Down}
  Sleep, 1000
  Send {Enter}
  Sleep, 1000
  Send {Enter}
  Sleep, 1000
  Send {Enter}
  Sleep, 1000
  Send {Enter}
  Sleep, 1000
 }
}
^Home::Pause

2010年8月11日水曜日

RO Skin (R版用)

最近找了一下 R 版可以用的 Skin
舊版的會有的地方有問題(像第一張圖的素質欄)
雖然這兩個都是寫 R 版可用
第一個素質還是有點問題
所以目前我是用第二個XD

http://www.mukyu-labo.net/ro/skin/mukyu_skin.html (作者網頁)

http://xxxnightmarexxx.client.jp/ (作者網頁)

2010年7月7日水曜日

RO 素質職業計算機(R版+3轉)+職業配點備份

2010年6月28日月曜日

RO (R版素質配點)

[2011/05/25 Update]
Arc Bishop(JOB50加成值：STR+5、AGI+4、VIT+5、INT+8、DEX+6、LUK+0)
STR 1
AGI 81
VIT 95
INT 82
DEX 84
LUK 100

Sorcerer(JOB50加成值：STR+3、AGI+3、VIT+5、INT+10、DEX+7、LUK+3)
STR 1
AGI 84
VIT 95
INT 120
DEX 83
LUK 1

Minstrel(JOB50加成值：STR+5、AGI+4、VIT+5、INT+8、DEX+6、LUK+0)
STR 1
AGI 81
VIT 95
INT 82
DEX 84
LUK 100

Wanderer(JOB50加成值：STR+2、AGI+8、VIT+5、INT+8、DEX+6、LUK+0)
STR 1
AGI 82
VIT 95
INT 82
DEX 84
LUK 100

Warlock(JOB50加成值：STR+1、AGI+5、VIT+4、INT+11、DEX+6、LUK+1)
STR 1
AGI 82
VIT 96
INT 120
DEX 84
LUK 1

Ranger(JOB50加成值：STR+2、AGI+8、VIT+5、INT+8、DEX+6、LUK+0)
STR 1
AGI 115
VIT 50
INT 1
DEX 110
LUK 100

Shadow Chaser(JOB50加成值：STR+6、AGI+3、VIT+7、INT+5、DEX+3、LUK+5)
STR 1
AGI 82
VIT 93
INT 85
DEX 87
LUK 95

Creator(JOB70加成值：STR+4、AGI+6、VIT+3、INT+7、DEX+14、LUK+11)
STR 1
AGI 1
VIT 57
INT 99
DEX 76
LUK 19

Mechanic(JOB50加成值：STR+6、AGI+3、VIT+7、INT+5、DEX+3、LUK+5)
STR 1
AGI 82
VIT 93
INT 85
DEX 87
LUK 95

Sura(JOB50加成值：STR+6、AGI+7、VIT+5、INT+4、DEX+7、LUK+0)
STR 54
AGI 103
VIT 95
INT 1
DEX 83
LUK 100

2010年2月25日木曜日

RO 熱鍵設定備份教學

KRO使用了新的熱鍵設定
熱鍵可以自行設定習慣的鍵盤按鍵
而且它使用檔案記錄不是用Registry
檔案位置
RO\DATA\UserKeys.lua
備份這個檔案就可以

PS:這個熱鍵設定備份是指熱鍵對應到鍵盤的部份
而你熱鍵上設定的技能則是記錄在伺服器端

RO 三轉熱鍵素質職業配點圖(備份)

醜陋之舞 3->5

課程 8->10

地獄之歌 5

殘響 1

支配衝動 1

重金屬音樂 5

羔羊讚頌 2->4

群體讚頌 2->4

清除 2->5

贖罪 1->5

頌謝詞 5->10

聖靈降臨的祈禱 1->5

AGI 50

VIT 85

INT 120

DEX 110

地震術 1->5

崩裂術 1->5

大地墳場 5

雲殺 5

PS:私服Wanderer職業加成似乎和KRO官方的不同

不過暫時以官方的加成配點

KRO Wanderer 介紹

Wanderer 職業加成連結網頁

其實蠻多職業加成都有問題

不知道哪時會修好

2009年10月22日木曜日

RO 修改

雙視窗:
Find:0085C07407C605******(*表示改版或更新會變動,這個蠻多組的,要改最下面的那組)
Replace:0085C0EB07C605******
Find:0085C0740E5F5EB801
Replace:0085C0EB0E5F5EB801

視野放寬:
Find:000066430000C843
Replace:0000664300000044
C843->0044

視角&不雅文字限制解除:(只有這裡不是用HEX編輯模式)
indoorrswtable.txt(把3個txt改別的副檔名,不要和txt完全一樣就可以)
manner.txt
viewpointtable.txt

未鑑定裝備顯示:
Find:74787400004E756D326974656D446573635461626C652E747874000000
Replace:747874000049644E756D326974656D446573635461626C652E74787400
Find:4E756D324974656D446973706C61794E616D655461626C652E74787400000000
Replace:49644E756D324974656D446973706C61794E616D655461626C652E7478740000

特效關閉:
Meteor%d.str(隕石)
Find:4D6574656F7225642E737472
Replace:000000000000000000000000
Lord.str(怒雷)
Find:4C6F72642E737472
Replace:0000000000000000
StormGust.str(暴風雪)
Find:53746F726D477573742E737472
Replace:00000000000000000000000000
CrashEarth.str(大地之擊)
Find:437261736845617274682E737472
Replace:0000000000000000000000000000

2009年10月20日火曜日

RO 職業配點

High Wizard : http://uniuni.dfz.jp/skill3/hwz.html?20rKdKfkeKaqafJ1x1fNax
High Priest : http://uniuni.dfz.jp/skill3/hpr.html?20gXdNsXdAhFbqroqnqEHnjScAJy
Professor : http://uniuni.dfz.jp/skill3/pro.html?20qoGNfkeKcskFaCgEkDrA1qFabdx
Soul Linker : (none)

2009年10月15日木曜日

RO 3-2 設定圖

設定圖比較好看囧

原圖連結:
http://img.ragnarok.co.kr/Guide/img_shadowchaser.jpg
http://img.ragnarok.co.kr/Guide/img_wanderer.jpg
http://img.ragnarok.co.kr/Guide/img_sorcerer.jpg

2009年10月4日日曜日

Windows 7 RO可以用的滑鼠移出程式

本來的1.97(RO_MF)的不能在Win7下使用不定時當機(1.98也一樣)
後來在它的網頁上找到新版的
http://www.na.rim.or.jp/~nuts/ragnarok/ (作者網頁)
http://www.na.rim.or.jp/~nuts/ragnarok/RO_MF_2.079.zip
目前使用上是沒當過
缺點是得先執行
它會常駐在工具列

2009年9月30日水曜日

RO 修改檔下載網頁

http://amgbelldandy.myweb.hinet.net/Ragexe.htm

登録: 投稿 (Atom)