TwMS v1.44_ICS_人物掉落(穿越地板)

因為有人說要這個所以就改了...雖然不知道到底可以幹嘛~
小弟我功力不足，只抓到那個很遠的點
如果有大大願意教我比較近的Call怎麼改，小弟樂意學習:)
//TwMS v1.44_ICS_人物掉落(穿越地板)
//ICS:Onion

[Enable]
Alloc(HookOnion, 512)
Label(FallFun)

HookOnion:
Cmp   [Esp], 008D5BE8
Jne   00947111
Mov   [Esp], FallFun
Jmp   00947111

FallFun:
mov edx,[ebp+18]
mov ebx,[ebp+48]
mov ecx,[ebp+20]
mov [ebp+38],eax
mov eax,[ebp+00]
sub eax,[ebp+18]
neg edx
mov [ebp+54],eax
mov [ebp+10],eax
mov eax,[ebp+38]
sub eax,[ebp+20]
mov [ebp+64],edx
add edx,ebx
mov ebx,[ebp+2c]
imul edx,eax
mov [ebp+28],eax
mov [ebp+40],eax
mov eax,[ebp+4c]
neg ecx
add eax,ecx
imul eax,[ebp+54]
sub eax,edx
mov edx,[ebp+64]
add edx,ebx
mov ebx,[ebp+0c]
imul edx,[ebp+28]
add ecx,ebx
imul ecx,[ebp+54]
sub ecx,edx

mov eax,[ebp+18]
sub eax,[ebp+48]
mov ecx,[ebp+20]
sub ecx,[ebp+4c]
imul eax,[ebp-2c]
imul ecx,[ebp-1c]
mov edx,[ebp+38]
sub edx,[ebp+4c]
sub ecx,eax
mov eax,[ebp+00]
imul edx,[ebp-1c]
sub eax,[ebp+48]
imul eax,[ebp-2c]
sub edx,eax

mov ebx,[ebp+60]

fldz
fcomp qword ptr [edi+40]
fnstsw ax

and dword ptr [ebp+04],00
mov [ebp+54],ebx
mov [ebp+60],ebx
mov eax,[ebp+40]
imul eax,[ebp+1c]
mov esi,[ebp+10]
imul esi,[ebp+08]
mov [ebp+34],eax
sub eax,esi
push eax
call 00963fa9
mov edx,[ebp+10]
imul edx,[ebp+4c]
mov ecx,[ebp+40]
imul ecx,[ebp+48]
mov ebx,[ebp+00]
imul ebx,[ebp+20]
mov [ebp+64],eax
mov eax,[ebp+38]
imul eax,[ebp+18]
sub edx,ecx
sub edx,ebx
add edx,eax
push edx
mov [ebp+28],eax
call 00963fa9
mov [ebp+38],eax
mov eax,[ebp+64]
imul [ebp-18]
pop ecx
pop ecx
mov ecx,eax
mov eax,[ebp+38]
imul eax,[ebp+3c]
mov [ebp+5c],edx
cdq
sub ecx,eax
mov eax,[ebp+5c]
sbb eax,edx

test ecx,ecx
jne 008D5E4D
jmp 008D5D39

00B91534:
DD HookOnion

[Disable]
00B91534:
DD 00947111
Dealloc(Hook)