请问有哪位大大能指点一下，如何实现使用技能的时候不消耗MP？
0047dde8 399E08020000 cmp [esi+0x208],ebx
0047ddee 7514 jnz short 0x0047DE04
0047ddf0 8B45F4 mov eax,[ebp-0xC]
0047ddf3 39860C020000 cmp [esi+0x20C],eax
0047ddf9 7509 jnz short 0x0047DE04
0047ddfb 83BE1002000000 cmp dword ptr [esi+0x210],0x0
0047de02 7453 je short 0x0047DE57
0047de04 8D8E841C0000 lea ecx,[esi+0x1C84]
0047de0a E81197FFFF call 0x00477520
0047de0f 833D3808560000 cmp dword ptr [0x560838],0x0
0047de16 7420 je short 0x0047DE38
0047de18 8B0DB8CE5A00 mov ecx,[0x5ACEB8]
0047de1e 83C108 add ecx,0x8
0047de21 E8EA070100 call 0x0048E610
0047de26 8B0D10EF5500 mov ecx,[0x55EF10]
0047de2c 8B91B8010000 mov edx,[ecx+0x1B8]
0047de32 52 push edx
0047de33 E838CCFCFF call 0x0044AA70
0047de38 8B45F4 mov eax,[ebp-0xC]
0047de3b 89BE04020000 mov [esi+0x204],edi
0047de41 899E08020000 mov [esi+0x208],ebx
0047de47 89860C020000 mov [esi+0x20C],eax
0047de4d C7861002000000000000 mov dword ptr [esi+0x210],0x0
0047de57 8D8E841C0000 lea ecx,[esi+0x1C84]
0047de5d E84E8EFFFF call 0x00476CB0
0047de62 8B55F8 mov edx,[ebp-0x8]
0047de65 8B827F070000 mov eax,[edx+0x77F]
0047de6b 33DB xor ebx,ebx
0047de6d 3BC3 cmp eax,ebx
0047de6f 7519 jnz short 0x0047DE8A
0047de71 8B8AB8030000 mov ecx,[edx+0x3B8]
0047de77 83F911 cmp ecx,0x11
0047de7a 7405 je short 0x0047DE81
0047de7c 83F912 cmp ecx,0x12
0047de7f 7509 jnz short 0x0047DE8A
0047de81 BF01000000 mov edi,0x1
0047de86 8BCF mov ecx,edi
0047de88 EB07 jmp short 0x0047DE91
0047de8a 8BC8 mov ecx,eax
0047de8c BF01000000 mov edi,0x1
0047de91 3B8EE0010000 cmp ecx,[esi+0x1E0]
0047de97 0F84CA010000 je 0x0047E067
0047de9d 3BC3 cmp eax,ebx
0047de9f 7512 jnz short 0x0047DEB3
0047dea1 8B8AB8030000 mov ecx,[edx+0x3B8]
0047dea7 83F911 cmp ecx,0x11
0047deaa 7405 je short 0x0047DEB1
004732da 3B9E40020000 cmp ebx,[esi+0x240]
004732e0 8945E4 mov [ebp-0x1C],eax
004732e3 D96DE4 fldcw [ebp-0x1C]
004732e6 DB5DEC fistp dword ptr [ebp-0x14]
004732e9 D96DF2 fldcw [ebp-0xE]
004732ec 750B jnz short 0x004732F9
004732ee 8B55EC mov edx,[ebp-0x14]
004732f1 3B9644020000 cmp edx,[esi+0x244]
004732f7 7462 je short 0x0047335B
004732f9 8B45EC mov eax,[ebp-0x14]
004732fc 8B8E88010000 mov ecx,[esi+0x188]
00473302 50 push eax
00473303 6A00 push 0x0
00473305 FF1524065000 call [0x500624]
0047330b 8B8E88010000 mov ecx,[esi+0x188]
00473311 53 push ebx
00473312 FF1520065000 call [0x500620]
00473318 8B45EC mov eax,[ebp-0x14]
0047331b 50 push eax
0047331c 53 push ebx
0047331d 68B4125100 push 0x5112B4
00473322 8D8E04030000 lea ecx,[esi+0x304]
00473328 6A40 push 0x40
0047332a 51 push ecx
0047332b 898644020000 mov [esi+0x244],eax
00473331 899E40020000 mov [esi+0x240],ebx
00473337 FF1588105000 call [0x501088]
00473331 899E40020000 mov [esi+0x240],ebx
00473337 FF1588105000 call [0x501088]
0047333d 83C414 add esp,0x14
00473340 BA01000000 mov edx,0x1
00473345 EB17 jmp short 0x0047335E
00473347 D945EC fld dword ptr [ebp-0x14]
0047334a D88614040000 fadd dword ptr [esi+0x414]
00473350 D99E14040000 fstp dword ptr [esi+0x414]
00473356 E90AFEFFFF jmp 0x00473165
0047335b 8B55E8 mov edx,[ebp-0x18]
0047335e A1C0F84F00 mov eax,[0x4FF8C0]
00473363 D97DF2 fstcw [ebp-0xE]
00473366 8B08 mov ecx,[eax]
00473368 D94174 fld dword ptr [ecx+0x74]
0047336b 0FB745F2 movzx eax,word ptr [ebp-0xE]
0047336f 80CC0C or ah,0xC
00473372 8945E0 mov [ebp-0x20],eax
00473375 D96DE0 fldcw [ebp-0x20]
00473378 DB5DE4 fistp dword ptr [ebp-0x1C]
0047337b 8B5DE4 mov ebx,[ebp-0x1C]
0047337e D96DF2 fldcw [ebp-0xE]
00473381 D9417C fld dword ptr [ecx+0x7C]
00473384 D84178 fadd dword ptr [ecx+0x78]
00473387 D97DF2 fstcw [ebp-0xE]
0047338a 0FB745F2 movzx eax,word ptr [ebp-0xE]
0047338e 80CC0C or ah,0xC
00473391 3B9E48020000 cmp ebx,[esi+0x248]
2203d402 89B118010000 mov [ecx+0x118],esi
2203d408 8BB120010000 mov esi,[ecx+0x120]
2203d40e 3BF0 cmp esi,eax
2203d410 7E21 jle short 0x2203D433
2203d412 2BF0 sub esi,eax
2203d414 8B8118010000 mov eax,[ecx+0x118]
2203d41a 0FAF8124010000 imul eax,[ecx+0x124]
2203d421 99 cdq
2203d422 F7FE idiv esi
2203d424 3D00080000 cmp eax,0x800
2203d429 7308 jnb short 0x2203D433
2203d42b 898100010000 mov [ecx+0x100],eax
2203d431 EB0A jmp short 0x2203D43D
2203d433 C7810001000000000000 mov dword ptr [ecx+0x100],0x0
2203d43d 83B9F800000000 cmp dword ptr [ecx+0xF8],0x0
2203d444 5E pop esi
2203d445 741E je short 0x2203D465
2203d447 8B812C010000 mov eax,[ecx+0x12C]
2203d44d 2B8100010000 sub eax,[ecx+0x100]
2203d453 8B9128010000 mov edx,[ecx+0x128]
2203d459 038124010000 add eax,[ecx+0x124]
2203d45f 89510C mov [ecx+0xC],edx
2203d462 894110 mov [ecx+0x10],eax
2203d465 5D pop ebp
2203d466 C20400 retn 0x4
2203d469 CC int3
2203d46a CC int3
2203d414 8B8118010000 mov eax,[ecx+0x118]
2203d41a 0FAF8124010000 imul eax,[ecx+0x124]
2203d421 99 cdq
2203d422 F7FE idiv esi
2203d424 3D00080000 cmp eax,0x800
2203d429 7308 jnb short 0x2203D433
2203d42b 898100010000 mov [ecx+0x100],eax
2203d431 EB0A jmp short 0x2203D43D
2203d433 C7810001000000000000 mov dword ptr [ecx+0x100],0x0
2203d43d 83B9F800000000 cmp dword ptr [ecx+0xF8],0x0
2203d444 5E pop esi
2203d445 741E je short 0x2203D465
2203d447 8B812C010000 mov eax,[ecx+0x12C]
2203d44d 2B8100010000 sub eax,[ecx+0x100]
2203d453 8B9128010000 mov edx,[ecx+0x128]
2203d459 038124010000 add eax,[ecx+0x124]
2203d45f 89510C mov [ecx+0xC],edx
2203d462 894110 mov [ecx+0x10],eax
2203d465 5D pop ebp
2203d466 C20400 retn 0x4
2203d469 CC int3
2203d46a CC int3
2203d46b CC int3
2203d46c CC int3
2203d46d CC int3
2203d46e CC int3
2203d46f CC int3
[课程]Linux pwn 探索篇！
