<br /><br />我下载了位于https://pcgamestorrents.com/omega-labyrinth-life.html的Omega Labyrinth Life(亲测带繁体中文)<br />这个版本并不能正常游戏(读取时候会卡死)<br />解法是,用1170430=Omega Labyrinth Life - Pacifier Sword替换1170550=Omega Labyrinth Life - KR并删除全部带着SteamDB Unknown App内容的行<br /><br />然后就正常打开游戏了<br />能不能玩还没有试<br />感谢未加密组……让我①步①步学习如何修正未加密版本<br />感觉……离能独立未加密①款游戏,已经不远了<br />(谁要这个啊摔~~~)<br />BTW:增加开花效率的CT表:<br /><ol><li>{ Game : OmegaLabyrinth Life.exe<br /><li> Version: <br /><li> Date : 2019-12-13<br /><li> Author : Neutron<br /><li><br /><li> This script does blah blah blah<br /><li>}<br /><li><br /><li>define(address,"GameAssembly.dll"+2F0728)<br /><li>define(bytes,41 8B 46 1C 89 47 1C)<br /><li><br /><li>[ENABLE]<br /><li><br /><li>assert(address,bytes)<br /><li>alloc(newmem,$1000,"GameAssembly.dll"+2F0728)<br /><li><br /><li>label(code)<br /><li>label(return)<br /><li><br /><li>newmem:<br /><li><br /><li>code:<br /><li> mov eax,[r14+1C]<br /><li> shl eax 7<br /><li> mov [rdi+1C],eax<br /><li> jmp return<br /><li><br /><li>address:<br /><li> jmp newmem<br /><li> nop 2<br /><li>return:<br /><li><br /><li>[DISABLE]<br /><li><br /><li>address:<br /><li> db bytes<br /><li> // mov eax,[r14+1C]<br /><li> // mov [rdi+1C],eax<br /><li><br /><li>dealloc(newmem)<br /><li><br /><li>{<br /><li>// ORIGINAL CODE - INJECTION POINT: "GameAssembly.dll"+2F0728<br /><li><br /><li>"GameAssembly.dll"+2F0703: 89 77 28 - mov [rdi+28],esi<br /><li>"GameAssembly.dll"+2F0706: 48 89 77 30 - mov [rdi+30],rsi<br /><li>"GameAssembly.dll"+2F070A: 4D 85 F6 - test r14,r14<br /><li>"GameAssembly.dll"+2F070D: 0F 84 08 01 00 00 - je GameAssembly.dll+2F081B<br /><li>"GameAssembly.dll"+2F0713: 41 8B 46 10 - mov eax,[r14+10]<br /><li>"GameAssembly.dll"+2F0717: 89 47 10 - mov [rdi+10],eax<br /><li>"GameAssembly.dll"+2F071A: 41 8B 46 14 - mov eax,[r14+14]<br /><li>"GameAssembly.dll"+2F071E: 89 47 14 - mov [rdi+14],eax<br /><li>"GameAssembly.dll"+2F0721: 41 8B 46 18 - mov eax,[r14+18]<br /><li>"GameAssembly.dll"+2F0725: 89 47 18 - mov [rdi+18],eax<br /><li>// ---------- INJECTING HERE ----------<br /><li>"GameAssembly.dll"+2F0728: 41 8B 46 1C - mov eax,[r14+1C]<br /><li>"GameAssembly.dll"+2F072C: 89 47 1C - mov [rdi+1C],eax<br /><li>// ---------- DONE INJECTING ----------<br /><li>"GameAssembly.dll"+2F072F: 41 8B 46 20 - mov eax,[r14+20]<br /><li>"GameAssembly.dll"+2F0733: 89 47 20 - mov [rdi+20],eax<br /><li>"GameAssembly.dll"+2F0736: 41 8B 46 24 - mov eax,[r14+24]<br /><li>"GameAssembly.dll"+2F073A: 89 47 24 - mov [rdi+24],eax<br /><li>"GameAssembly.dll"+2F073D: 41 8B 46 28 - mov eax,[r14+28]<br /><li>"GameAssembly.dll"+2F0741: 89 47 28 - mov [rdi+28],eax<br /><li>"GameAssembly.dll"+2F0744: 48 8B 0D 4D 1F E2 00 - mov rcx,[GameAssembly.dll+1112698]<br /><li>"GameAssembly.dll"+2F074B: E8 40 49 8D 00 - call GameAssembly.dll+BC5090<br /><li>"GameAssembly.dll"+2F0750: 48 8B D8 - mov rbx,rax<br /><li>"GameAssembly.dll"+2F0753: 48 8B 15 FE 61 E3 00 - mov rdx,[GameAssembly.dll+1126958]<br /><li>}</ol><br />用https://github.com/Perfare/Il2CppDumper可以很快地找到要修改的位置(看RVA)<br />至于Offset,那是人肉改dll时候用的<br /><br /> |