|
脚本用法在暗黑目录建立一个文本文件
然后把文件名改为d2hack.script
然后用记事本编辑,保存以后用d2loader.exe启动游戏就可以生效了
- #我收集的dll修改
- #http://tieba.baidu.com/p/6842844899
- #下面的是改暗金装备也可以做符文之语 默认04表示白装 05蓝 06绿 07亮 08暗 09橙 0A是全部
- D2Common.dll 0X26BC1 04 0A 1
- #这个好像是改战网建立游戏的间隔时间 默认25秒 改为1秒
- #D2Client.dll 0X5E7CE FA 00 1 //这个是1.11b的
- D2Client.dll 0X14D6E FA 00 1
- #下面这个是把存储箱的金币上限改为3000W 十六进制是01C9C380,在DLL里面存储如下 前面默认的是002625A0即250W 05F5E100是1亿 0BEBC200是1亿 77359400是20亿
- D2common.dll 0X2E9C1 A0252600 00943577 1
- #下面这个是把人物身上携带的金币上限改为30W 000493E0 估计应该是一个倍数 前面默认的数据是00002710是1W,即新人出生可携带的金币数量,然后根据角色的等级递增 改这个相当于是把人物携带的金币上限增加了30倍
- D2common.dll 0X3198E 10270000 E0930400 1
- #修复魔影斗篷bug
- #6FCBD247 |. 74 1F JE SHORT D2Game.6FCBD268
- D2Game.dll 0X9D247 741F EB1F 1
- #佣兵全装备
- #6FB0BDAF |. 85C0 TEST EAX,EAX
- #6FB0BDB1 |. 75 0C JNZ SHORT D2Client.6FB0BDBF
- D2Client.dll 0X5BDB1 750C EB0C 1
- #6FB0BE39 |. 85C0 TEST EAX,EAX
- #6FB0BE3B |. 75 2F JNZ SHORT D2Client.6FB0BE6C
- D2Client.dll 0X5BE3B 752F EB2F 1
- #6FB3C7BB |. 85C0 TEST EAX,EAX
- #6FB3C7BD |. 75 0C JNZ SHORT D2Client.6FB3C7CB
- D2Client.dll 0X8C7BD 750C EB0C 1
- #6FB3C7FB |. E8 CCF9F7FF CALL <JMP.&D2Common.#10744>
- #6FB3C800 |. 85C0 TEST EAX,EAX
- #6FB3C802 |. 0F85 98000000 JNZ D2Client.6FB3C8A0 ##主要是这一句
- #6FB3C808 |. 6A 22 PUSH 22
- #6FB3C80A |. E9 87000000 JMP D2Client.6FB3C896
- #6FB3C80F |> 6A 1B PUSH 1B ; Case 10F of switch 6FB3C7E3
- #6FB3C811 |. E9 80000000 JMP D2Client.6FB3C896
- D2Client.dll 0X8C802 0F8598000000 E99900000090 1
- #6FCF0649 75 0C JNZ SHORT D2Game.6FCF0657
- #6FCF06A1 |. 75 61 JNZ SHORT D2Game.6FCF0704
- D2Game.dll 0XD0649 750C EB0C 1
- D2Game.dll 0XD06A1 7561 EB61 1
- #上面的修改就是佣兵只能单戒指的修改,也是网上之前一直流传的
- #下面就是贴吧这个帖子里面新增的部分,我这样写总是不成功 http://tieba.baidu.com/p/7242718606
- #按照这种双字节的写法就没问题了 估计所有的都可以这样写
- #game.dll需要添加一些东西
- #6FCEFC33 0FB64C24 13 MOVZX ECX,BYTE PTR SS:[ESP+13] #这个是原来的
- #6FCEFC33 E9 887D0200 JMP D2Game.6FD179C0 #这个是改了以后的
- D2Game.dll 0XCFC33 0F E9 1
- D2Game.dll 0XCFC34 B6 88 1
- D2Game.dll 0XCFC35 4C 7D 1
- D2Game.dll 0XCFC36 24 02 1
- D2Game.dll 0XCFC37 13 00 1
- #然后在新地址增加内容
- #6FD179B4 6A 00 PUSH 0
- #6FD179B6 01DB ADD EBX,EBX
- #6FD179B8 53 PUSH EBX
- #6FD179B9 6A 05 PUSH 5
- #6FD179BB ^E9 2338FFFF JMP D2Game.6FD0B1E3
- #6FD179C0 0FB64C24 13 MOVZX ECX,BYTE PTR SS:[ESP+13]
- #6FD179C5 83F9 06 CMP ECX,6
- #6FD179C8 ^0F85 6A82FDFF JNZ D2Game.6FCEFC38
- #6FD179CE 6A 07 PUSH 7
- #6FD179D0 56 PUSH ESI
- #6FD179D1 E8 D82DF1FF CALL <JMP.&D2Common.#11139>
- #6FD179D6 85C0 TEST EAX,EAX
- #6FD179D8 75 0E JNZ SHORT D2Game.6FD179E8
- #6FD179DA B9 07000000 MOV ECX,7
- #6FD179DF 884C24 13 MOV BYTE PTR SS:[ESP+13],CL
- #6FD179E3 ^E9 5082FDFF JMP D2Game.6FCEFC38
- #6FD179E8 B9 06000000 MOV ECX,6
- #6FD179ED ^E9 4682FDFF JMP D2Game.6FCEFC38
- #6FD179F2 0000 ADD BYTE PTR DS:[EAX],AL
- D2Game.dll 0XF79B4 00 6A 1
- D2Game.dll 0XF79B6 00 01 1
- D2Game.dll 0XF79B7 00 DB 1
- D2Game.dll 0XF79B8 00 53 1
- D2Game.dll 0XF79B9 00 6A 1
- D2Game.dll 0XF79BA 00 05 1
- D2Game.dll 0XF79BB 00 E9 1
- D2Game.dll 0XF79BC 00 23 1
- D2Game.dll 0XF79BD 00 38 1
- D2Game.dll 0XF79BE 00 FF 1
- D2Game.dll 0XF79BF 00 FF 1
- D2Game.dll 0XF79C0 00 0F 1
- D2Game.dll 0XF79C1 00 B6 1
- D2Game.dll 0XF79C2 00 4C 1
- D2Game.dll 0XF79C3 00 24 1
- D2Game.dll 0XF79C4 00 13 1
- D2Game.dll 0XF79C5 00 83 1
- D2Game.dll 0XF79C6 00 F9 1
- D2Game.dll 0XF79C7 00 06 1
- D2Game.dll 0XF79C8 00 0F 1
- D2Game.dll 0XF79C9 00 85 1
- D2Game.dll 0XF79CA 00 6A 1
- D2Game.dll 0XF79CB 00 82 1
- D2Game.dll 0XF79CC 00 FD 1
- D2Game.dll 0XF79CD 00 FF 1
- D2Game.dll 0XF79CE 00 6A 1
- D2Game.dll 0XF79CF 00 07 1
- D2Game.dll 0XF79D0 00 56 1
- D2Game.dll 0XF79D1 00 E8 1
- D2Game.dll 0XF79D2 00 D8 1
- D2Game.dll 0XF79D3 00 2D 1
- D2Game.dll 0XF79D4 00 F1 1
- D2Game.dll 0XF79D5 00 FF 1
- D2Game.dll 0XF79D6 00 85 1
- D2Game.dll 0XF79D7 00 C0 1
- D2Game.dll 0XF79D8 00 75 1
- D2Game.dll 0XF79D9 00 0E 1
- D2Game.dll 0XF79DA 00 B9 1
- D2Game.dll 0XF79DB 00 07 1
- D2Game.dll 0XF79DF 00 88 1
- D2Game.dll 0XF79E0 00 4C 1
- D2Game.dll 0XF79E1 00 24 1
- D2Game.dll 0XF79E2 00 13 1
- D2Game.dll 0XF79E3 00 E9 1
- D2Game.dll 0XF79E4 00 50 1
- D2Game.dll 0XF79E5 00 82 1
- D2Game.dll 0XF79E6 00 FD 1
- D2Game.dll 0XF79E7 00 FF 1
- D2Game.dll 0XF79E8 00 B9 1
- D2Game.dll 0XF79E9 00 06 1
- D2Game.dll 0XF79ED 00 E9 1
- D2Game.dll 0XF79EE 00 46 1
- D2Game.dll 0XF79EF 00 82 1
- D2Game.dll 0XF79F0 00 FD 1
- D2Game.dll 0XF79F1 00 FF 1
-
- #强制亮金武器防具戒指项链必定6词缀
- #6FC352E8 |. BA C590C66A MOV EDX,6AC690C5
- #6FC352ED |. F7E2 MUL EDX
- D2Game.dll 0X152E8 BAC590C66AF7E2 BA06000000EB13 1
- #强制亮金珠宝必定4词缀
- #6FC352D6 |. 83E0 01 AND EAX,1
- #6FC352D9 |. 83C0 03 ADD EAX,3
- D2Game.dll 0X152D6 83E00183C003 B80400000090 1
- #强制所有蓝色装备必定2词缀
- #6FC303E8 7E 05 JLE SHORT D2Game.6FC303EF
- #6FC30435 |. 75 0A JNZ SHORT D2Game.6FC30441
- D2Game.dll 0X103E8 7E05 9090 1
- D2Game.dll 0X10435 750A 9090 1
- #强制职业装备必出3条,必定3级
- #6FC33368 |. 83FA 5A CMP EDX,5A #好像改这一条指令就行了啊
- #6FC3336B |. 7E 0A JLE SHORT D2Game.6FC33377
- #6FC3336D |. C74424 10 03000000 MOV DWORD PTR SS:[ESP+10],3
- #6FC3355B |. D1F8 |SAR EAX,1
- #6FC3355D |. 03C8 |ADD ECX,EAX
- #6FC3355F |. 83F9 5A |CMP ECX,5A #好像也是只需要改这里就行了
- #6FC33562 |. 7C 07 |JL SHORT D2Game.6FC3356B
- #6FC33564 |. BD 03000000 |MOV EBP,3
- D2Game.dll 0X13368 83FA5A 83FA00 1
- D2Game.dll 0X1355F 83F95A 83F900 1
- #提高单机fps http://tieba.baidu.com/p/5771012224?red_tag=0113948998
- D2Client.dll 0X44E51 391D9034BD6F7535 9090909090909090 1
- #1.13c
- #无限注入任务 client这里会导致瓦瑞夫上来就可以点向东走 只不过没效果
- D2Client.dll 0X45CFF 7418 9090 1
- #6FCE0351 6A 01 PUSH 1
- D2Game.dll 0XC0351 6A01 6A03 1
- #无限打孔任务
- D2Game.dll 0X585DA 01 03 1
- #1.13c 死亡不掉装备的修改
- #http://tieba.baidu.com/p/7315987976
- #6FC99210 83EC 18 SUB ESP,18 ; D2Game.6FC99210(guessed Arg1,Arg2,Arg3,Arg4,Arg5)
- #6FC99213 53 PUSH EBX
- #6FC99214 55 PUSH EBP
- #Change To:
- #6FC99210 31C0 XOR EAX,EAX ; D2Game.6FC99210(guessed Arg1,Arg2,Arg3,Arg4,Arg5)
- #6FC99212 C2 1400 RETN 14
- #修改方式:用od打开d2目录下的D2Game.dll
- #然后定位到6FC99210 代码是83EC 18
- #然后下面两行就是
- #6FC99213 53 PUSH EBX
- #6FC99214 55 PUSH EBP
- #然后选中修改的这2行 右键-copy to executable-selection 就会弹出一个窗口,单独的展示game.dll的窗口 然后右键-savefile 就行了
- #用HXD修改的方法是
- #打开HxD软件,修改DLL,查找CCCC83EC1853558B6C2428568B742428 找od里面显示的上下文多填点 找到唯一地址0x79210
- #修改为 3100C21400 就行了
- #如果用本脚本,则修改为如下就行了
- D2Game.dll 0X79210 83EC 31C0 1
- D2Game.dll 0X79212 185355 C21400 1
- #1.13修改不跑尸体的方法 实测这个修改可以 这个方法有缺点 会留下尸体 别用这个了
- #http://tieba.baidu.com/p/7291950996
- #[1.13c] - D2Game.0x793FC
- #000793CF 8BC3 MOV EAX,EBX
- #000793D1 E8 4A06FDFF CALL 00049A20
- #000793D6 50 PUSH EAX
- #000793D7 55 PUSH EBP
- #000793D8 E8 2F10F9FF CALL 0000A40C
- #000793DD 8DB7 D0000000 LEA ESI,DWORD PTR DS:[EDI+D0]
- #000793E3 8BFD MOV EDI,EBP
- #000793E5 E8 266D0600 CALL 000E0110
- #000793EA 6A 11 PUSH 11
- #000793EC 55 PUSH EBP
- #000793ED E8 B010F9FF CALL 0000A4A2
- #000793F2 6A 01 PUSH 1
- #000793F4 6A 07 PUSH 7
- #000793F6 55 PUSH EBP
- #000793F7 E8 CE0FF9FF CALL 0000A3CA
- #000793FC 8B95 C8000000 MOV EDX,DWORD PTR SS:[EBP+C8]
- #Change
- #000793FC 8B95 C8000000 MOV EDX,DWORD PTR SS:[EBP+C8]
- #to
- #000793FC E9 F6020000 JMP 000796F7
- #D2Game.dll 0X793FC 8B95C8000000 E9F602000090 1 #按理说我这样改应该是对的,但是不知道为什么就是不行 直接改DLL是没问题的
- #修改最高127PP 要同时修改2个文件
- #6FB20A88 |. 83F8 08 CMP EAX,8 //83F808这个08就是最高PP数 7F就是127了 不要改更高,貌似超过127的无效
- #6FB20A8B |. 8BF8 MOV EDI,EAX
- D2Client.dll 0X70A90 08 09 1
- #6FC57434 |. 83F9 08 CMP ECX,8
- #6FC57437 |. 7F 06 JG SHORT D2Game.6FC5743F
- D2Game.dll 0X37436 08 09 1
- #修改最低几PP,这个很邪恶的,最低PP数是强制最低是这个,即使你手动调整/players1也是强制这个
- #6FB20A68 |. 83F8 01 CMP EAX,1 //83F801这个01就是最低PP数,想搞怪的话可以改任意pp数,这样进游戏就不用每次都输入/players8了
- #6FB20A6B |. 74 0A JE SHORT D2Client.6FB20A77
- #D2Client.dll 0X70A68 83F801 83F801 1
- #http://tieba.baidu.com/p/7360268526
- #KP红门 1.13c
- #6FC7AE67 . 0F85 BF000000 JNZ D2Game.6FC7AF2C
- #6FC7AE6D . 5E POP ESI
- D2Game.dll 0x5AE67 0F85BF000000 909090909090 1
- #雇佣兵复活费用修改 1.13c
- #6FD7CCAC |. 3D 50C30000 CMP EAX,0C350
- #6FD7CCB1 |. 76 05 JBE SHORT D2Common.6FD7CCB8
- #6FD7CCB3 |. B8 50C30000 MOV EAX,0C350
- #6FD7CCB8 \> C2 0400 RETN 4
- D2Common.dll 0x2CCAC 3D50C300007605B850C30000C20400 3D010000007605B801000000C20400 1
- #护身符限制区域 83780C 和837810 那4行对应的就是护身符区域 16进制的 这里的写法是 从第0列开始到15列结束 从第0行开始 到第15行结束
- D2common.dll 0X28846 C20800CCCC E955000600 1
- D2common.dll 0X888A0 0000 85C0 1
- D2common.dll 0X888A2 0000 7503 1
- D2common.dll 0X888A4 000000 C20800 1
- D2common.dll 0X888A7 00000000 8B44E404 1
- D2common.dll 0X888AB 000000 8B402C 1
- D2common.dll 0X888AE 00000000 83780C00 1 # Left border pos x
- D2common.dll 0X888B2 0000 721A 1
- D2common.dll 0X888B4 00000000 83780C0F 1 # Right border pos x
- D2common.dll 0X888B8 0000 7714 1
- D2common.dll 0X888BA 00000000 83781000 1 # Top border pos y
- D2common.dll 0X888BE 0000 720E 1
- D2common.dll 0X888C0 00000000 8378100F 1 # Bottom border pos y
- D2common.dll 0X888C4 0000 7708 1
- D2common.dll 0X888C6 0000000000 B801000000 1
- D2common.dll 0X888CB 000000 C20800 1
- D2common.dll 0X888CE 0000 31C0 1
- D2common.dll 0X888D0 000000 C20800 1
- #[1.13c]修改无限箭袋.
- #http://tieba.baidu.com/p/7284457545
- D2game.dll 0XA16BE 4D 48 1
- #修改同地图带小号就能获得经验
- #http://tieba.baidu.com/p/7090543308
- D2game.dll 0XDAFCF 7753 9090 1
- #http://forums.pvpgn.pro/viewtopic.php?id=2059 mxcen分享的几个script 感觉没啥用 就那个法力燃烧的可能有用,但是法力燃烧已经属于feature了
- # Blocking overhead messages
- #D2Game.dll 0XD00A08B 31C0C2080090909090901
- # Red Gate Second Forward, Reduce TCP/IP Reader Loading Time
- #D2Client.dll 0X14D6E FA 001
- # Little monster only drops gold.
- #D2Game.dll 0XFD9D 7F0F 909090 1
- # A full-blown script
- #D2Game.dll 0XDE705 7602 7402 1
- # Close Exp for Punishment
- #D2Game.dll 0XDAA7A 740A EB0A 1
- # Equipped with air-accumulating skills for unlimited use
- #D2Game.dll 0X9F593 7C02 90901
- # Box gold coin cap supports 30 million
- #D2common.dll 0X2E9C1 A0252600 80C3C901
- # Individual gold coin cap supports 30 million
- #D2common.dll 0X3198E 10270000 E0930400 1
- #manaburn BUG Fix 这个是法力燃烧bug的修复
- #D2Game.dll 0X222DD C1E608 909090 1
- #D2Game.dll 0X222F2 C1E708 909090 1
- #修改掉落就直接辨识
- #http://www.myth113.com/thread-1111-1-1.html
- #D2Game.dll - F6BD '[unique]'
- #016DF6BD 6A 00 PUSH 0
- #D2Game.dll - 104C0 '[magic]'
- #016E04C0 6A 00 PUSH 0
- #D2Game.dll - 13DA9 '[set]'
- #016E3DA9 6A 00 PUSH 0
- #D2Game.dll - 15442 '[rare]'
- #016E5442 6A 00 PUSH 0
- #这些 push 0的地方 改成push 1就是自动已辨识 每个push对应物品质量 有标注
- #http://tieba.baidu.com/p/6317957924
- #角色死亡不掉金币 这样写不行 看来只能直接修改DLL 已经测试过 直接修改DLL可以成功 新建的小号 出门死亡 不掉金币 配合上面的不用捡尸体使用正好 暂时未确定DY难度死亡是否会掉经验
- #D2Game.dll 0X383A4 578BF153E8D3FDFFFF 909090909090909090 1
- #D2Game.dll 0X383A4 57 90 1
- #D2Game.dll 0X383A5 8BF1 9090 1
- #D2Game.dll 0X383A7 53 90 1
- #D2Game.dll 0X383A8 E8D3FDFFFF 9090909090 1
- #无形几率
- D2Game.dll 0XEC1E 05 64 1
- #小站全开 单机MOD群 ss发的(风暴战记MOD作者1024854127))
- D2Common.dll 0X67C76 668B805A9CDE6F660904518D B8FFFFFFFF9090090451908D 1
- #心灵传动捡装备 在奈非天魔典MOD群共享发现的563226660 已经测试 可用
- D2Game.dll 0X43444 83 E2 1
复制代码
|
|