早些年用纯汇编写的一个自用的《征途》外挂（二）

;>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
; 获取目标信息
;        Result:        eax(TRUE, 成功；FALSE, 失败)
;>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
GetObjectInfo        proc        uses ebx edi esi
                
                invoke        RtlZeroMemory, addr g_ObjectName, 32
                mov        ebx, g_ObjectAddr
                add        ebx, 04H
                invoke        ReadProcessMemory, g_ZTProcess, ebx, addr g_ObjectName, 32, NULL
                test        eax, eax
                jz        _get_object_info_err
                
                mov        ebx, g_ObjectAddr
                add        ebx, 40H
                invoke        ReadProcessMemory, g_ZTProcess, ebx, addr g_ObjectCurLife, 4, NULL
                test        eax, eax
                jz        _get_object_info_err
                
                mov        ebx, g_ObjectAddr
                add        ebx, 44H
                invoke        ReadProcessMemory, g_ZTProcess, ebx, addr g_ObjectMaxLife, 4, NULL
                test        eax, eax
                jz        _get_object_info_err
                
                mov        ebx, g_ObjectAddr
                add        ebx, 48H
                invoke        ReadProcessMemory, g_ZTProcess, ebx, addr g_ObjectCurMagic, 4, NULL
                test        eax, eax
                jz        _get_object_info_err
                
                mov        ebx, g_ObjectAddr
                add        ebx, 4CH
                invoke        ReadProcessMemory, g_ZTProcess, ebx, addr g_ObjectMaxMagic, 4, NULL
                test        eax, eax
                jz        _get_object_info_err
                
                mov        ebx, g_ObjectAddr
                add        ebx, 2CH
                invoke        ReadProcessMemory, g_ZTProcess, ebx, addr g_ObjectPosX, 4, NULL
                test        eax, eax
                jz        _get_object_info_err
                
                mov        ebx, g_ObjectAddr
                add        ebx, 30H
                invoke        ReadProcessMemory, g_ZTProcess, ebx, addr g_ObjectPosY, 4, NULL
                test        eax, eax
                jz        _get_object_info_err
                
                mov        eax, TRUE
                ret
                
        _get_object_info_err:
                invoke        RtlZeroMemory, addr g_ObjectName, 32
                mov        g_ObjectCurLife, 0
                mov        g_ObjectMaxLife, 0
                mov        g_ObjectCurMagic, 0
                mov        g_ObjectMaxMagic, 0
                mov        g_ObjectPosX, 0
                mov        g_ObjectPosY, 0
                xor        eax, eax
                ret
                
                
GetObjectInfo        endp
;>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
; 获取角色是否打坐
;        参数:        fairyOffsetAddr        角色的偏移地址
;>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
GetSitState        proc        uses ebx edi esi lpBaseAddr:DWORD
                ;g_FairySitState_DOWN
                local        _sitstateVal:DWORD
                
                cmp        lpBaseAddr, NULL
                jne        _get_sit_state_start
                
                push        g_FairyAddr
                pop        lpBaseAddr
                
        _get_sit_state_start:
;                
;                invoke        ReadProcessMemory, g_ZTProcess, fairyOffsetAddr, \
;                        addr _sitstateAddr, 4, NULL
;                test        eax, eax
;                jz        _not_get_sitstate
                mov        ebx, lpBaseAddr
                add        ebx, 0464H
                invoke        ReadProcessMemory, g_ZTProcess, ebx, \
                        addr _sitstateVal, 4, NULL
                test        eax, eax
                jz        _not_get_sitstate
                
                mov        eax, _sitstateVal
                .if        al == 02H        ;打坐
                        ;invoke        SetWindowText, g_MainWnd, addr  g_FairySitState_DOWN
                        mov        eax, g_SitState
                        cmp        eax, SIT_STATE_DOWN
                        je        _set_sit_state_down
                        invoke        LoadBitmap, g_InstanceHandle, BMP_SIT_DOWN
                        invoke        SendDlgItemMessage, g_MainWnd, IDC_STATIC_SIT_STATE, STM_SETIMAGE, IMAGE_BITMAP, eax
                        mov        g_SitState, SIT_STATE_DOWN
                _set_sit_state_down:
                        mov        eax, TRUE
                .elseif        al == 00H        ;站立
                        ;invoke        SetWindowText, g_MainWnd, addr  g_FairySitState_UP
                        mov        eax, g_SitState
                        cmp        eax, SIT_STATE_UP
                        je        _set_sit_state_up
                        invoke        LoadBitmap, g_InstanceHandle, BMP_SIT_UP
                        invoke        SendDlgItemMessage, g_MainWnd, IDC_STATIC_SIT_STATE, STM_SETIMAGE, IMAGE_BITMAP, eax
                        mov        g_SitState, SIT_STATE_UP
                _set_sit_state_up:
                        mov        eax, FALSE
                .endif
        _not_get_sitstate:
        
                ret
        
GetSitState        endp
;>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
; 显示鼠标所在位置
;>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
GetMousePos        proc
        local        _stPT:POINT
        local        _buf[32]:BYTE
        
        invoke        RtlZeroMemory, addr _buf, 32
        invoke        GetCursorPos, addr _stPT
        invoke        WindowFromPoint, _stPT.x, _stPT.y
        .if        eax == g_ZTCurWnd
                invoke        ScreenToClient, g_ZTCurWnd, addr _stPT
        .endif
        invoke        wsprintf, addr _buf, _T("X=%ld, Y=%ld"), _stPT.x, _stPT.y
        invoke        SendDlgItemMessage, g_MainWnd, IDC_STATUSBAR, SB_SETTEXT, \
                0, addr _buf
        xor        eax, eax
        ret
GetMousePos        endp
;>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
; 显示角色信息
;>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
ShowSelfInfo        proc        uses edx edi esi lpBaseAddr:DWORD
                local        _buf[255]:BYTE
                local        _curExp:DWORD, _maxExp:DWORD
                local        _exp:DWORD
                
                mov        lpBaseAddr, NULL

                call        GetSelfMapInfo
                invoke        RtlZeroMemory, addr _buf, 255
                invoke        wsprintf, addr _buf, _T('(%ld, %ld)'), g_SelfPosX, g_SelfPosY
                invoke        lstrcmp, addr g_OldSelfPosXY, addr _buf
                test        eax, eax
                jz        _show_self_map_name
                
                invoke        SendDlgItemMessage, g_MainWnd, IDC_STATIC_5, WM_SETTEXT, 0, addr _buf
                invoke        lstrcpy, addr g_OldSelfPosXY, addr _buf
        _show_self_map_name:
                invoke        lstrcmp, addr g_OldSelfMapName, addr g_SelfMapName
                test        eax, eax
                jz        _show_self_name
                
                invoke        SendDlgItemMessage, g_MainWnd, IDC_STATIC_6, WM_SETTEXT, 0, addr g_SelfMapName
                invoke        lstrcpy, addr g_OldSelfMapName, addr g_SelfMapName
        _show_self_name:
                invoke        GetSelfName, lpBaseAddr
                invoke        RtlZeroMemory, addr _buf, 255
                invoke        wsprintf, addr _buf, _T('%s◆%s'), addr g_SelfName, addr g_SelfCountryName
                invoke        lstrcmp, addr g_OldSelfName, addr _buf
                test        eax, eax
                jz        _show_self_life_info
                invoke        SendDlgItemMessage, g_MainWnd, IDC_STATIC_FAIRY_INFO, WM_SETTEXT, 0, addr _buf
                invoke        lstrcpy, addr g_OldSelfName, addr _buf
                
        _show_self_life_info:
                invoke        GetSelfLifeInfo, lpBaseAddr
;                mov        eax, g_OldSelfMaxLife
;                cmp        eax, g_SelfMaxLife
;                je        _show_self_magic_info
                
                mov        eax, g_OldSelfCurLife
                cmp        eax, g_SelfCurLife
                je        _show_self_magic_info
                
                invoke        CreateBarGround, IDC_STATIC_LIFE_BAR
                invoke        DrawBar, g_SelfCurLife, g_SelfMaxLife, IDC_STATIC_LIFE_BAR, BMP_LIFE
                push        g_SelfCurLife
;                push        g_SelfMaxLife
;                pop        g_OldSelfMaxLife
                pop        g_OldSelfCurLife
                
        _show_self_magic_info:
                invoke        GetSelfMagicInfo, lpBaseAddr
;                mov        eax, g_OldSelfMaxMagic
;                cmp        eax, g_SelfMaxMagic
;                je        _show_self_exp_info
                
                mov        eax, g_OldSelfCurMagic
                cmp        eax, g_SelfCurMagic
                je        _show_self_exp_info
                
                invoke        CreateBarGround, IDC_STATIC_MAGIC_BAR
                invoke        DrawBar, g_SelfCurMagic, g_SelfMaxMagic, IDC_STATIC_MAGIC_BAR, BMP_MAGIC
                push        g_SelfCurMagic
;                push        g_SelfMaxMagic
;                pop        g_OldSelfMaxMagic
                pop        g_OldSelfCurMagic

        _show_self_exp_info:
                invoke        GetSelfExpInfo, lpBaseAddr
                
                
                mov        eax, DWORD ptr g_SelfCurExp
                mov        _curExp, eax
                mov        eax, DWORD ptr g_SelfMaxExp
                mov        _maxExp, eax
                
;                mov        eax, g_OldSelfMaxExp
;                cmp        eax, _maxExp
;                je        _show_notifyicon
                
                mov        eax, g_OldSelfCurExp
                cmp        eax, _curExp
                je        _show_notifyicon
                
                invoke        CreateBarGround, IDC_STATIC_EXP_BAR
                invoke        DrawBar, _curExp, _maxExp, IDC_STATIC_EXP_BAR, BMP_EXP

                push        _curExp
;                push        _maxExp
;                pop        g_OldSelfMaxExp
                pop        g_OldSelfCurExp
                
        _show_notifyicon:
                invoke        IsDlgButtonChecked, g_MainWnd, IDC_CHECK_CLOSE_TRAYINFO
                cmp        eax, BST_CHECKED
                je        _calc_exp_speed
                invoke        RtlZeroMemory, addr _buf, 255
                invoke        GetWindowLong, g_MainWnd, GWL_STYLE
                and        eax, WS_MINIMIZE
                JZ        _calc_exp_speed
                and        eax, WS_VISIBLE
                JNZ        _calc_exp_speed
                
                invoke        GetTickCount
                mov        ecx, 1000
                xor        edx, edx
                div        ecx
                .if        g_ShowTrayInfoLastTime == 0
                        mov        g_ShowTrayInfoLastTime, eax
                .endif
                cmp        eax, g_ShowTrayInfoLastTime
                jbe        _calc_exp_speed
                
                mov        g_ShowTrayInfoLastTime, 0
                        
        
                mov        g_stNIF.dwInfoFlags, NIIF_INFO
                mov        g_stNIF.uTimeout, 3000
                invoke        lstrcpy, addr g_stNIF.szTip, addr g_SelfName
                ;'%s', 0DH, 0AH, '经验:%ld/%ld', 0DH, 0AH, '生命:%ld/%ld', 0DH, 0AH, '法力:%ld/%ld', 0DH, 0AH,'位置:%s', 0DH,0AH '坐标:(%ld,%ld)',0
                invoke        wsprintf, addr _buf, addr g_ShowTrayInfo, \
                        addr g_SelfName, DWORD ptr g_SelfCurExp, DWORD ptr g_SelfMaxExp, \
                        g_SelfCurLife, g_SelfMaxLife, g_SelfCurMagic, g_SelfMaxMagic, \
                        addr g_SelfMapName, g_SelfPosX, g_SelfPosY, g_ExpSpeed, g_ExpUpdateTimeI, \
                        g_ExpUpdateTimeF, addr g_ObjectName
                
                invoke        lstrcpy, addr g_stNIF.szInfo, addr _buf
                ;invoke        ShowWindow, g_MainWnd, SW_HIDE
                .if        lpShell_NotifyIcon != NULL
                        invoke        lpShell_NotifyIcon, NIM_MODIFY, addr g_stNIF
                .endif        
        ;计算经验速率
        ;**************************************************************
        ;经验速率计算方法，(当前经验-开始经验) * (60 / 流逝时间)
        ;开始经验计算方法：如果当前的获取的经验连续10次都处在递增状态，并且每次间隔小于5秒
        ;流逝时间：当前时刻 - 开始经验的起始时刻
        _calc_exp_speed:
                cmp        g_ExpIncCount, 10
                jb        _calc_exp_start
                mov        eax, _curExp
                sub        eax, g_StartExp
                mov        _exp, eax
                invoke        GetTickCount
                sub        eax, g_LastPointTime
                xor        edx, edx
                mov        ebx, 1000                        ;转换成秒
                div        ebx
                cmp        eax, 10                                ;10秒
                jb        _calc_exp_inc_time
        
                mov        ecx, eax
                mov        eax, 3600                        ;3600秒
                xor        edx, edx
                div        ecx
                mul        _exp
                mov        g_ExpSpeed, eax
                invoke        RtlZeroMemory, addr _buf, 255
                invoke        wsprintf, addr _buf, _T('升级速率:约%ld/小时'), g_ExpSpeed
                invoke        SendDlgItemMessage, g_MainWnd, IDC_STATUSBAR, SB_SETTEXT, \
                        2, addr _buf
                invoke        RtlZeroMemory, addr _buf, 255
                mov        eax, _maxExp
                sub        eax, _curExp
                xor        edx, edx
                .if        g_ExpSpeed > 0
                        div        g_ExpSpeed
                .else
                        xor        eax, eax
                .endif
                
                mov        g_ExpUpdateTimeI, eax
                mov        ebx, 100
                mov        eax, edx
                mul        ebx
                xor        edx, edx
                .if        g_ExpSpeed > 0
                        div        g_ExpSpeed
                .else
                        xor        eax, eax
                .endif
                mov        g_ExpUpdateTimeF, eax
                invoke        wsprintf, addr _buf, _T('升下一级时间预计在 %ld.%ld 小时之后'), \
                        g_ExpUpdateTimeI, g_ExpUpdateTimeF
                invoke        SendDlgItemMessage, g_MainWnd, IDC_STATUSBAR, SB_SETTEXT, \
                        3, addr _buf
                mov        g_ExpIncCount, 0
                
        _calc_exp_start:
                mov        eax, _curExp
                sub        eax, g_StartExp
                cmp        eax, 0
                jbe        _calc_exp_inc_time
                
                push        _curExp
                pop        g_StartExp
                inc        g_ExpIncCount
                invoke        GetTickCount
                mov        g_LastPointTime, eax
                jmp        _show_self_info_exit
        _calc_exp_inc_time:
                invoke        GetTickCount
                sub        eax, g_LastPointTime
                cmp        eax, 15000
                ja        _clear_calc_exp_inc_count
                jmp        _show_self_info_exit
        _clear_calc_exp_inc_count:
                mov        g_ExpIncCount, 0
                mov        g_LastPointTime, 0
                mov        g_ExpUpdateTimeI, 0
                mov        g_ExpUpdateTimeF, 0
                mov        g_ExpSpeed, 0

        _show_self_info_exit:
                
                xor        eax, eax
                ret
                
ShowSelfInfo        endp
;>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
; 显示目标信息
;>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
ShowObjectInfo        proc        uses edx edi esi lpBaseAddr:DWORD
                local        _buf[255]:BYTE

                invoke        GetObjectAddr
                ;invoke        wsprintf, addr _buf, _T('目标基地址：0x%08X'), g_ObjectAddr
                ;invoke        SetWindowText, g_MainWnd, addr _buf
        ; 判断目标地址是否存在
                mov        eax, g_ObjectAddr
                or        eax, eax
                jz        _object_was_died
                
        ; 判断目标是否在角色控制范围
                invoke        GetObjectInfo
                mov        eax, g_SelfPosX
                sub        eax, g_ObjectPosX
                invoke        ABS_32Bit, eax
                cmp        eax, 09H
                ja        _object_is_not_in_rangle
                
                mov        eax, g_SelfPosY
                sub        eax, g_ObjectPosY
                invoke        ABS_32Bit, eax
                cmp        eax, 09H
                ja        _object_is_not_in_rangle
                
        ; 目标处在角色控制范围
                mov        g_ObjectNotInRangle, TRUE
        
        ; 显示目标信息
        _show_object_name_info:
                mov        eax, g_ObjectCurMagic
                .if        eax >= g_ObjectMaxMagic
                        push        g_ObjectCurMagic
                        pop        g_ObjectMaxMagic
                .endif
                
                invoke        lstrcmp, addr g_OldObjectName, addr g_ObjectName
                test        eax, eax
                jz        _show_object_life_info
                ; 判断目标是否改变
                invoke        SendDlgItemMessage, g_MainWnd, IDC_STATIC_7, WM_SETTEXT, 0, addr g_ObjectName
                invoke        lstrcpy, addr g_OldObjectName, addr g_ObjectName

        _show_object_life_info:
                invoke        RtlZeroMemory, addr _buf, 255
                invoke        wsprintf, addr _buf, _T('%ld/%ld'), g_ObjectCurLife, g_ObjectMaxLife
                invoke        lstrcmp, addr g_OldObjectLifeInfo, addr _buf
                test        eax, eax
                jz        _show_object_magic_info
                invoke        SendDlgItemMessage, g_MainWnd, IDC_STATIC_8, WM_SETTEXT, 0, addr _buf
                invoke        lstrcpy, addr g_OldObjectLifeInfo, addr _buf
                
        _show_object_magic_info:
                .if        g_ObjectMaxMagic > 10
                        mov        g_ObjectIsPlayer, TRUE
                .else
                        mov        g_ObjectIsPlayer, FALSE
                .endif
                invoke        RtlZeroMemory, addr _buf, 255
                invoke        wsprintf, addr _buf, _T('%ld/%ld'), g_ObjectCurMagic, g_ObjectMaxMagic
                invoke        lstrcmp, addr g_OldObjectMagicInfo, addr _buf
                test        eax, eax
                jz        _show_object_pos_info
;                mov        eax, g_ObjectMaxMagic
;                .if        eax > 10
;                        mov        _magicExist, TRUE
;                .endif
                invoke        SendDlgItemMessage, g_MainWnd, IDC_STATIC_9, WM_SETTEXT, 0, addr _buf
                invoke        lstrcpy, addr g_OldObjectMagicInfo, addr _buf
                
        _show_object_pos_info:
                invoke        RtlZeroMemory, addr _buf, 255
                invoke        wsprintf, addr _buf, _T('(%ld, %ld)'), g_ObjectPosX, g_ObjectPosY
                invoke        lstrcmp, addr g_OldObjectPosInfo, addr _buf
                test        eax, eax
                jz        _show_object_info_over
                invoke        SendDlgItemMessage, g_MainWnd, IDC_STATIC_10, WM_SETTEXT, 0, addr _buf
                invoke        lstrcpy, addr g_OldObjectPosInfo, addr _buf
                jmp        _show_object_info_over
                
        _object_was_died:
                mov        g_ObjectNotInRangle, FALSE
                mov        g_ObjectCurLife, 0
                mov        g_ObjectMaxLife, 0
                mov        g_ObjectCurMagic, 0
                mov        g_ObjectMaxMagic, 0
                invoke        lstrcpy, addr g_ObjectName, _T('目标死亡或者不在九屏内')
                invoke        lstrcmp, addr g_OldObjectName, addr g_ObjectName
                test        eax, eax
                jz        _show_object_info_over
                
                invoke        SendDlgItemMessage, g_MainWnd, IDC_STATIC_7, WM_SETTEXT, 0, addr g_ObjectName
                invoke        lstrcpy, addr g_OldObjectName, addr g_ObjectName
                jmp        _clear_object_info
                
        _object_is_not_in_rangle:
                mov        g_ObjectNotInRangle, FALSE
                invoke        lstrcpy, addr g_ObjectName, _T('目标超出控制范围')
                invoke        lstrcmp, addr g_OldObjectName, addr g_ObjectName
                test        eax, eax
                jz        _show_object_info_over        
                invoke        SendDlgItemMessage, g_MainWnd, IDC_STATIC_7, WM_SETTEXT, 0, addr g_ObjectName
                invoke        lstrcpy, addr g_OldObjectName, addr g_ObjectName
                
        _clear_object_info:
;                invoke        RtlZeroMemory, addr g_OldObjectLifeInfo, 32
;                invoke        RtlZeroMemory, addr g_OldObjectMagicInfo, 32
;                invoke        RtlZeroMemory, addr g_OldObjectPosInfo, 32
                
                
                invoke        RtlZeroMemory, addr _buf, 255
                invoke        wsprintf, addr _buf, _T('%ld/%ld'), 0, 0
                invoke        SendDlgItemMessage, g_MainWnd, IDC_STATIC_8, WM_SETTEXT, 0, addr _buf
                invoke        RtlZeroMemory, addr _buf, 255
                invoke        wsprintf, addr _buf, _T('%ld/%ld'), 0, 0
                invoke        SendDlgItemMessage, g_MainWnd, IDC_STATIC_9, WM_SETTEXT, 0, addr _buf
                invoke        RtlZeroMemory, addr _buf, 255
                invoke        wsprintf, addr _buf, _T('(%ld, %ld)'), 0, 0
                invoke        SendDlgItemMessage, g_MainWnd, IDC_STATIC_10, WM_SETTEXT, 0, addr _buf
        _show_object_info_over:
                xor        eax, eax
                ret
                
                
                
ShowObjectInfo        endp