ct不会再发,不过觉得楼主挺可怜的就发一个功能好了。
三张卡全拿b
assert(0061D4A0,8b 44 24 04)
[ENABLE]
globalalloc(myhook_readValue,0x1000)
define(temp_eax,myhook_readValue+0f00)
define(temp_lastread,myhook_readValue+0f10)
define(gamebase,007FCBB8)
myhook_readValue:
mov [temp_eax],eax
mov eax,[gamebase]
mov eax,[eax+1d0]
jmp @s_cmp8
@s_cmp8:
cmp [eax],0000005B
jne @s_cmp9
cmp [eax+4],00000007
jne @s_cmp9
cmp [eax+8],005A0002
jne @s_cmp9
cmp [eax+0c],00000005
jne @s_cmp9
cmp [eax+10],00000011
jne @s_cmp9
cmp [eax+14],0000000A
jne @s_cmp9
cmp [eax+18],002E0018
jne @s_cmp9
cmp [eax+1c],003AD116
jne @s_cmp9
cmp [eax+20],D156002C
jne @s_cmp9
cmp [eax+24],005B003A
jne @s_cmp9
jmp @s_getboxcard
@s_cmp9:
jmp @s_end
@s_getboxcard:
cmp esi,6
jne @s_end
xor eax,eax
lea eax,[eax]
mov eax,[temp_eax]
mov eax,[eax+10]
mov esi,2
mov eax,[eax+esi*4]
jmp exit
@s_end:
mov eax,[temp_eax]
mov [temp_lastread],eax
mov eax,[eax+10]
mov [temp_lastread+4],eax
mov [temp_lastread+8],esi
mov [temp_lastread+0c],edx
mov [temp_lastread+10],ecx
mov eax,[eax+esi*4]
jmp exit
label(exit)
00612F46:
jmp myhook_readValue
nop
exit:
[DISABLE]
00612F46:
mov eax,[eax+10]
mov eax,[eax+esi*4]