这个游戏直接搜字符串什么都搜不到,于是用了地面物品数量去搜索 找到了
0000028ABC939F60 E0 26 A8 A4 F7 7F 00 00 C0 B5 19 B3 8A 02 00 00 à&¨¤÷...Àµ.³....
0000028ABC939F70 00 00 00 00 00 00 00 00 27 00 00 00 00 00 00 00 ........'.......
0000028ABC939F80 27 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 '...............
0000028ABC939F90 10 1A CA C9 8A 02 00 00 00 00 00 00 00 00 00 00 ..ÊÉ............
0000028ABC939FA0 04 00 00 00 02 00 00 00 D3 2C 37 FC 00 00 00 00 ........Ó,7ü....
物品数量的地址 于是又找到了控制数量变化的区域
00007FF7A248BDCF | CC | INT3 |
00007FF7A248BDD0 | 4C:894C24 20 | MOV QWORD PTR SS:[RSP+20],R9 |
00007FF7A248BDD5 | 4C:894424 18 | MOV QWORD PTR SS:[RSP+18],R8 |
00007FF7A248BDDA | 55 | PUSH RBP |
00007FF7A248BDDB | 53 | PUSH RBX |
00007FF7A248BDDC | 56 | PUSH RSI |
00007FF7A248BDDD | 57 | PUSH RDI |
00007FF7A248BDDE | 41:54 | PUSH R12 |
00007FF7A248BDE0 | 41:55 | PUSH R13 |
00007FF7A248BDE2 | 41:56 | PUSH R14 |
00007FF7A248BDE4 | 41:57 | PUSH R15 |
00007FF7A248BDE6 | 48:8D6C24 F1 | LEA RBP,QWORD PTR SS:[RSP-F] |
00007FF7A248BDEB | 48:81EC C8000000 | SUB RSP,C8 |
00007FF7A248BDF2 | 4C:8BE1 | MOV R12,RCX |
00007FF7A248BDF5 | 33F6 | XOR ESI,ESI |
00007FF7A248BDF7 | 8975 6F | MOV DWORD PTR SS:[RBP+6F],ESI |
00007FF7A248BDFA | 0F100A | MOVUPS XMM1,XMMWORD PTR DS:[RDX] |
00007FF7A248BDFD | 0F294D C7 | MOVAPS XMMWORD PTR SS:[RBP-39],XMM1 |
00007FF7A248BE01 | 8B42 08 | MOV EAX,DWORD PTR DS:[RDX+8] |
00007FF7A248BE04 | 8D1400 | LEA EDX,QWORD PTR DS:[RAX+RAX] |
00007FF7A248BE07 | 49:B8 7CD68B6FF8DB59DE | MOV R8,DE59DBF86F8BD67C |
00007FF7A248BE11 | 6648:0F7EC9 | MOVQ RCX,XMM1 |
00007FF7A248BE16 | E8 8569B101 | CALL pathofexile.7FF7A3FA27A0 |
00007FF7A248BE1B | 48:8BF8 | MOV RDI,RAX |
00007FF7A248BE1E | 48:8945 5F | MOV QWORD PTR SS:[RBP+5F],RAX |
00007FF7A248BE22 | 44:8BE8 | MOV R13D,EAX |
00007FF7A248BE25 | 41:83E5 0F | AND R13D,F |
00007FF7A248BE29 | 41:8BDD | MOV EBX,R13D |
00007FF7A248BE2C | 4A:8D0CAD 70000000 | LEA RCX,QWORD PTR DS:[R13*4+70] |
00007FF7A248BE34 | 49:03CD | ADD RCX,R13 |
00007FF7A248BE37 | 4D:8D3CCC | LEA R15,QWORD PTR DS:[R12+RCX*8] |
00007FF7A248BE3B | 4C:897D 77 | MOV QWORD PTR SS:[RBP+77],R15 |
00007FF7A248BE3F | 49:8BCF | MOV RCX,R15 |
00007FF7A248BE42 | FF15 68975B02 | CALL QWORD PTR DS:[<EnterCriticalSection>] |
00007FF7A248BE48 | 90 | NOP |
00007FF7A248BE49 | 48:897D 57 | MOV QWORD PTR SS:[RBP+57],RDI |
00007FF7A248BE4D | 48:6BDB 38 | IMUL RBX,RBX,38 |
00007FF7A248BE51 | 49:03DC | ADD RBX,R12 |
00007FF7A248BE54 | 4C:8D45 57 | LEA R8,QWORD PTR SS:[RBP+57] |
00007FF7A248BE58 | 48:8D55 A7 | LEA RDX,QWORD PTR SS:[RBP-59] |
00007FF7A248BE5C | 48:8BCB | MOV RCX,RBX |
00007FF7A248BE5F | E8 ECF86300 | CALL pathofexile.7FF7A2ACB750 |
00007FF7A248BE64 | 48:8B00 | MOV RAX,QWORD PTR DS:[RAX] |
00007FF7A248BE67 | 41:BE FFFFFFFF | MOV R14D,FFFFFFFF |
00007FF7A248BE6D | 48:3B43 08 | CMP RAX,QWORD PTR DS:[RBX+8] |
00007FF7A248BE71 | 74 28 | JE pathofexile.7FF7A248BE9B |
00007FF7A248BE73 | 48:8B48 10 | MOV RCX,QWORD PTR DS:[RAX+10] |
00007FF7A248BE77 | 48:85C9 | TEST RCX,RCX |
00007FF7A248BE7A | 74 04 | JE pathofexile.7FF7A248BE80 |
00007FF7A248BE7C | F0:FF41 08 | LOCK INC DWORD PTR DS:[RCX+8] |
00007FF7A248BE80 | 48:8B78 10 | MOV RDI,QWORD PTR DS:[RAX+10] |
00007FF7A248BE84 | 48:8B48 08 | MOV RCX,QWORD PTR DS:[RAX+8] |
00007FF7A248BE88 | 48:894D B7 | MOV QWORD PTR SS:[RBP-49],RCX |
00007FF7A248BE8C | 48:897D BF | MOV QWORD PTR SS:[RBP-41],RDI |
00007FF7A248BE90 | 48:85C9 | TEST RCX,RCX |
00007FF7A248BE93 | 0F85 D0010000 | JNE pathofexile.7FF7A248C069 |
00007FF7A248BE99 | EB 0B | JMP pathofexile.7FF7A248BEA6 |
00007FF7A248BE9B | 0F57C0 | XORPS XMM0,XMM0 |
00007FF7A248BE9E | F3:0F7F45 B7 | MOVDQU XMMWORD PTR SS:[RBP-49],XMM0 |
00007FF7A248BEA3 | 48:8BFE | MOV RDI,RSI |
00007FF7A248BEA6 | 48:8D45 7F | LEA RAX,QWORD PTR SS:[RBP+7F] |
00007FF7A248BEAA | 48:8945 C7 | MOV QWORD PTR SS:[RBP-39],RAX |
00007FF7A248BEAE | 48:8975 CF | MOV QWORD PTR SS:[RBP-31],RSI |
00007FF7A248BEB2 | B9 06000000 | MOV ECX,6 |
00007FF7A248BEB7 | C64424 20 01 | MOV BYTE PTR SS:[RSP+20],1 |
00007FF7A248BEBC | 45:33C9 | XOR R9D,R9D |
00007FF7A248BEBF | BA B8000000 | MOV EDX,B8 |
00007FF7A248BEC4 | 41:B8 10000000 | MOV R8D,10 |
00007FF7A248BECA | E8 21A7B900 | CALL pathofexile.7FF7A30265F0 |
00007FF7A248BECF | 48:8BF0 | MOV RSI,RAX |
00007FF7A248BED2 | 48:8945 CF | MOV QWORD PTR SS:[RBP-31],RAX |
00007FF7A248BED6 | C740 08 01000000 | MOV DWORD PTR DS:[RAX+8],1 |
00007FF7A248BEDD | C740 0C 01000000 | MOV DWORD PTR DS:[RAX+C],1 |
00007FF7A248BEE4 | 48:8D05 CD655F02 | LEA RAX,QWORD PTR DS:[7FF7A4A824B8] |
00007FF7A248BEEB | 48:8906 | MOV QWORD PTR DS:[RSI],RAX |
00007FF7A248BEEE | BA 14000000 | MOV EDX,14 |
00007FF7A248BEF3 | 48:8B0D F6516702 | MOV RCX,QWORD PTR DS:[7FF7A4B010F0] | 00007FF7A4B010F0:&"Game::GameObjectType>(void)"
00007FF7A248BEFA | E8 5179F7FF | CALL pathofexile.7FF7A2403850 |
00007FF7A248BEFF | 8BC0 | MOV EAX,EAX |
00007FF7A248BF01 | 48:8945 57 | MOV QWORD PTR SS:[RBP+57],RAX |
00007FF7A248BF05 | B9 06000000 | MOV ECX,6 |
00007FF7A248BF0A | C64424 20 01 | MOV BYTE PTR SS:[RSP+20],1 |
00007FF7A248BF0F | 45:33C9 | XOR R9D,R9D |
00007FF7A248BF12 | BA 20000000 | MOV EDX,20 | 20:' '
00007FF7A248BF17 | 41:B8 10000000 | MOV R8D,10 |
00007FF7A248BF1D | E8 CEA6B900 | CALL pathofexile.7FF7A30265F0 |
00007FF7A248BF22 | 48:8BD8 | MOV RBX,RAX |
00007FF7A248BF25 | 48:8B45 67 | MOV RAX,QWORD PTR SS:[RBP+67] |
00007FF7A248BF29 | 4C:8B40 08 | MOV R8,QWORD PTR DS:[RAX+8] |
00007FF7A248BF2D | 48:8B10 | MOV RDX,QWORD PTR DS:[RAX] |
00007FF7A248BF30 | 0F57C0 | XORPS XMM0,XMM0 |
00007FF7A248BF33 | 0F1103 | MOVUPS XMMWORD PTR DS:[RBX],XMM0 |
00007FF7A248BF36 | 33C0 | XOR EAX,EAX |
00007FF7A248BF38 | 48:8943 10 | MOV QWORD PTR DS:[RBX+10],RAX |
00007FF7A248BF3C | 48:8943 18 | MOV QWORD PTR DS:[RBX+18],RAX |
00007FF7A248BF40 | 48:8BCB | MOV RCX,RBX |
00007FF7A248BF43 | E8 F8BFFBFF | CALL pathofexile.7FF7A2447F40 |
00007FF7A248BF48 | 0F57C0 | XORPS XMM0,XMM0 |
00007FF7A248BF4B | 0F1145 D7 | MOVUPS XMMWORD PTR SS:[RBP-29],XMM0 |
00007FF7A248BF4F | 33C0 | XOR EAX,EAX |
00007FF7A248BF51 | 48:8945 E7 | MOV QWORD PTR SS:[RBP-19],RAX |
00007FF7A248BF55 | 48:8945 EF | MOV QWORD PTR SS:[RBP-11],RAX |
00007FF7A248BF59 | 48:8B45 67 | MOV RAX,QWORD PTR SS:[RBP+67] |
00007FF7A248BF5D | 4C:8B40 08 | MOV R8,QWORD PTR DS:[RAX+8] |
00007FF7A248BF61 | 48:8B10 | MOV RDX,QWORD PTR DS:[RAX] |
00007FF7A248BF64 | 48:8D4D D7 | LEA RCX,QWORD PTR SS:[RBP-29] |
00007FF7A248BF68 | E8 D3BFFBFF | CALL pathofexile.7FF7A2447F40 |
00007FF7A248BF6D | 48:8D45 57 | LEA RAX,QWORD PTR SS:[RBP+57] |
00007FF7A248BF71 | 48:894424 58 | MOV QWORD PTR SS:[RSP+58],RAX |
00007FF7A248BF76 | C64424 50 01 | MOV BYTE PTR SS:[RSP+50],1 |
00007FF7A248BF7B | 48:C74424 48 08000000 | MOV QWORD PTR SS:[RSP+48],8 |
00007FF7A248BF84 | 48:C74424 40 A8020000 | MOV QWORD PTR SS:[RSP+40],2A8 |
00007FF7A248BF8D | 48:895C24 38 | MOV QWORD PTR SS:[RSP+38],RBX |
00007FF7A248BF92 | 48:8D05 9737F7FF | LEA RAX,QWORD PTR DS:[7FF7A23FF730] |
00007FF7A248BF99 | 48:894424 30 | MOV QWORD PTR SS:[RSP+30],RAX |
00007FF7A248BF9E | 48:8D05 8B37F7FF | LEA RAX,QWORD PTR DS:[7FF7A23FF730] |
00007FF7A248BFA5 | 48:894424 28 | MOV QWORD PTR SS:[RSP+28],RAX |
00007FF7A248BFAA | 48:8D05 3F5BFCFF | LEA RAX,QWORD PTR DS:[7FF7A2451AF0] |
00007FF7A248BFB1 | 48:894424 20 | MOV QWORD PTR SS:[RSP+20],RAX |
00007FF7A248BFB6 | 4C:8D0D 03150000 | LEA R9,QWORD PTR DS:[7FF7A248D4C0] |
00007FF7A248BFBD | 4C:8D05 8C140000 | LEA R8,QWORD PTR DS:[7FF7A248D450] |
00007FF7A248BFC4 | 48:8D55 D7 | LEA RDX,QWORD PTR SS:[RBP-29] |
00007FF7A248BFC8 | 48:8D5E 10 | LEA RBX,QWORD PTR DS:[RSI+10] |
00007FF7A248BFCC | 48:8BCB | MOV RCX,RBX |
00007FF7A248BFCF | E8 6CBBAF01 | CALL pathofexile.7FF7A3F87B40 |
00007FF7A248BFD4 | 48:8D05 05675F02 | LEA RAX,QWORD PTR DS:[7FF7A4A826E0] |
00007FF7A248BFDB | 48:8903 | MOV QWORD PTR DS:[RBX],RAX |
00007FF7A248BFDE | 48:895D B7 | MOV QWORD PTR SS:[RBP-49],RBX |
00007FF7A248BFE2 | 48:8975 BF | MOV QWORD PTR SS:[RBP-41],RSI |
00007FF7A248BFE6 | 48:85FF | TEST RDI,RDI |
00007FF7A248BFE9 | 74 2C | JE pathofexile.7FF7A248C017 |
00007FF7A248BFEB | 41:8BC6 | MOV EAX,R14D |
00007FF7A248BFEE | F0:0FC147 08 | LOCK XADD DWORD PTR DS:[RDI+8],EAX |
00007FF7A248BFF3 | 83F8 01 | CMP EAX,1 |
00007FF7A248BFF6 | 75 1F | JNE pathofexile.7FF7A248C017 |
00007FF7A248BFF8 | 48:8B07 | MOV RAX,QWORD PTR DS:[RDI] |
00007FF7A248BFFB | 48:8BCF | MOV RCX,RDI |
00007FF7A248BFFE | FF10 | CALL QWORD PTR DS:[RAX] |
00007FF7A248C000 | 41:8BC6 | MOV EAX,R14D |
00007FF7A248C003 | F0:0FC147 0C | LOCK XADD DWORD PTR DS:[RDI+C],EAX |
00007FF7A248C008 | 83F8 01 | CMP EAX,1 |
00007FF7A248C00B | 75 0A | JNE pathofexile.7FF7A248C017 |
00007FF7A248C00D | 48:8B07 | MOV RAX,QWORD PTR DS:[RDI] |
00007FF7A248C010 | 48:8BCF | MOV RCX,RDI |
00007FF7A248C013 | FF50 08 | CALL QWORD PTR DS:[RAX+8] |
00007FF7A248C016 | 90 | NOP |
00007FF7A248C017 | 0F57C0 | XORPS XMM0,XMM0 |
00007FF7A248C01A | F3:0F7F45 A7 | MOVDQU XMMWORD PTR SS:[RBP-59],XMM0 |
00007FF7A248C01F | 48:85F6 | TEST RSI,RSI |
00007FF7A248C022 | 74 04 | JE pathofexile.7FF7A248C028 |
00007FF7A248C024 | F0:FF46 08 | LOCK INC DWORD PTR DS:[RSI+8] |
00007FF7A248C028 | 48:895D A7 | MOV QWORD PTR SS:[RBP-59],RBX |
00007FF7A248C02C | 48:8975 AF | MOV QWORD PTR SS:[RBP-51],RSI |
00007FF7A248C030 | 4C:8D4D A7 | LEA R9,QWORD PTR SS:[RBP-59] |
00007FF7A248C034 | 45:8BC5 | MOV R8D,R13D |
00007FF7A248C037 | 48:8B55 5F | MOV RDX,QWORD PTR SS:[RBP+5F] |
00007FF7A248C03B | 49:8BCC | MOV RCX,R12 |
00007FF7A248C03E | E8 DDA7AF01 | CALL pathofexile.7FF7A3F86820 |
00007FF7A248C043 | 0F57C0 | XORPS XMM0,XMM0 |
00007FF7A248C046 | F3:0F7F45 A7 | MOVDQU XMMWORD PTR SS:[RBP-59],XMM0 |
00007FF7A248C04B | 48:85F6 | TEST RSI,RSI |
00007FF7A248C04E | 74 04 | JE pathofexile.7FF7A248C054 |
00007FF7A248C050 | F0:FF46 08 | LOCK INC DWORD PTR DS:[RSI+8] |
00007FF7A248C054 | 48:895D A7 | MOV QWORD PTR SS:[RBP-59],RBX |
00007FF7A248C058 | 48:8975 AF | MOV QWORD PTR SS:[RBP-51],RSI |
00007FF7A248C05C | 4C:8D4D A7 | LEA R9,QWORD PTR SS:[RBP-59] |
00007FF7A248C060 | 49:8BCC | MOV RCX,R12 |
00007FF7A248C063 | E8 38A8AF01 | CALL pathofexile.7FF7A3F868A0 |
00007FF7A248C068 | 90 | NOP |
00007FF7A248C069 | 4D:85FF | TEST R15,R15 |
00007FF7A248C06C | 74 09 | JE pathofexile.7FF7A248C077 |
00007FF7A248C06E | 49:8BCF | MOV RCX,R15 |
00007FF7A248C071 | FF15 59955B02 | CALL QWORD PTR DS:[<LeaveCriticalSection>] |
00007FF7A248C077 | 48:8B45 B7 | MOV RAX,QWORD PTR SS:[RBP-49] |
00007FF7A248C07B | F0:FF40 44 | LOCK INC DWORD PTR DS:[RAX+44] |
00007FF7A248C07F | 48:8B55 B7 | MOV RDX,QWORD PTR SS:[RBP-49] | 111
00007FF7A248C083 | 8B05 73EDF602 | MOV EAX,DWORD PTR DS:[7FF7A53FADFC] |
00007FF7A248C089 | 8942 40 | MOV DWORD PTR DS:[RDX+40],EAX |
00007FF7A248C08C | 48:8B4D BF | MOV RCX,QWORD PTR SS:[RBP-41] |
00007FF7A248C090 | 48:85C9 | TEST RCX,RCX |
00007FF7A248C093 | 74 35 | JE pathofexile.7FF7A248C0CA |
00007FF7A248C095 | 41:8BC6 | MOV EAX,R14D |
00007FF7A248C098 | F0:0FC141 08 | LOCK XADD DWORD PTR DS:[RCX+8],EAX |
00007FF7A248C09D | 83F8 01 | CMP EAX,1 |
00007FF7A248C0A0 | 75 22 | JNE pathofexile.7FF7A248C0C4 |
00007FF7A248C0A2 | 48:8B5D BF | MOV RBX,QWORD PTR SS:[RBP-41] |
00007FF7A248C0A6 | 48:8B03 | MOV RAX,QWORD PTR DS:[RBX] |
00007FF7A248C0A9 | 48:8BCB | MOV RCX,RBX |
00007FF7A248C0AC | FF10 | CALL QWORD PTR DS:[RAX] |
00007FF7A248C0AE | F044:0FC173 0C | LOCK XADD DWORD PTR DS:[RBX+C],R14D |
00007FF7A248C0B4 | 41:83FE 01 | CMP R14D,1 |
00007FF7A248C0B8 | 75 0A | JNE pathofexile.7FF7A248C0C4 |
00007FF7A248C0BA | 48:8B4D BF | MOV RCX,QWORD PTR SS:[RBP-41] |
00007FF7A248C0BE | 48:8B01 | MOV RAX,QWORD PTR DS:[RCX] |
00007FF7A248C0C1 | FF50 08 | CALL QWORD PTR DS:[RAX+8] |
00007FF7A248C0C4 | 48:8B45 B7 | MOV RAX,QWORD PTR SS:[RBP-49] |
00007FF7A248C0C8 | EB 03 | JMP pathofexile.7FF7A248C0CD |
00007FF7A248C0CA | 48:8BC2 | MOV RAX,RDX |
00007FF7A248C0CD | 48:81C4 C8000000 | ADD RSP,C8 |
00007FF7A248C0D4 | 41:5F | POP R15 |
00007FF7A248C0D6 | 41:5E | POP R14 |
00007FF7A248C0D8 | 41:5D | POP R13 |
00007FF7A248C0DA | 41:5C | POP R12 |
00007FF7A248C0DC | 5F | POP RDI |
00007FF7A248C0DD | 5E | POP RSI |
00007FF7A248C0DE | 5B | POP RBX |
00007FF7A248C0DF | 5D | POP RBP |
00007FF7A248C0E0 | C3 | RET |
但是实在是太菜了 一直找不到存放坐标和物品名称的指针
[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课