var address
var skllll
bphwcall
bpmc
//CPU欺骗
CpuCheat:
bphws 004381C0
run
mov eax,0
mov ecx,0
mov edx,0
bphwcall
bphws 004381D6
run
mov eax,100F23
mov ecx,802009
mov edx,178BFBFF
bphwcall
//硬盘欺骗
HardDiskCheat:
bphws 00404298
run
mov address,edi
mov [address]," STF204ML19WXDP"
bphwcall
//网卡欺骗
NetworkAdapterCheat:
bphws 00404E9B
bphws 00438210
run
cmp eip,00438210
je CpuCheat2
mov address,[ebp-4]
mov [address],"00:22:68:45:9C:B1"
bphwcall
bphws 00438210
//后36-38位
sslssb:
bphws 0041904E
run
mov address,eax
mov skllll,[address]
mov [skllll],"56"
bphwcall
//后39-40位
ssjss:
bphws 00419136
run
mov address,edx
mov [address],"18"
bphwcall
//播放过程中依然会需要进行验证
LOOP:
run
bphws 00404298
run
cmp eip,00404298
je RepeatHardDiskCheat
jmp Exit
//CPU二次验证
CpuCheat2:
mov eax,100F23
mov ecx,802009
mov edx,178BFBFF
bphwcall
bphws 00438226
run
mov eax,0
mov ecx,0
mov edx,0
bphwcall
jmp LOOP
//Disk二次验证
RepeatHardDiskCheat:
mov address,edi
mov [address]," STF204ML19WXDP"
jmp LOOP
//退出函数
Exit:
ret
改动了一点点! |