锁蓝
{ Game : DNF.exe
Version:
Date : 2026-05-18
Author : admin
This script does blah blah blah
}
define(address,"DNF.exe"+27A05B)
define(bytes,8B 4D 08 50 51)
[ENABLE]
assert(address,bytes)
alloc(newmem,$1000)
label(code)
label(return)
newmem:
push eax
cmp esi, [1AB7CDC]
jne code
mov [ebp+08],#9999999
code:
mov ecx,[ebp+08]
push ecx
jmp return
address:
jmp newmem
return:
[DISABLE]
address:
db bytes
// mov ecx,[ebp+08]
// push eax
// push ecx
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: DNF.exe+27A05B
DNF.exe+27A03C: 83 C4 04 - add esp,04
DNF.exe+27A03F: 50 - push eax
DNF.exe+27A040: 53 - push ebx
DNF.exe+27A041: E8 CA DE B1 00 - call DNF.exe+D97F10
DNF.exe+27A046: 83 C4 14 - add esp,14
DNF.exe+27A049: 89 5D FC - mov [ebp-04],ebx
DNF.exe+27A04C: B8 52 A0 67 00 - mov eax,DNF.exe+27A052
DNF.exe+27A051: C3 - ret
DNF.exe+27A052: 8B B5 E0 FD FF FF - mov esi,[ebp-00000220]
DNF.exe+27A058: 8B 45 0C - mov eax,[ebp+0C]
// ---------- INJECTING HERE ----------
DNF.exe+27A05B: 8B 4D 08 - mov ecx,[ebp+08]
// ---------- DONE INJECTING ----------
DNF.exe+27A05E: 50 - push eax
DNF.exe+27A05F: 51 - push ecx
DNF.exe+27A060: 8B CE - mov ecx,esi
DNF.exe+27A062: E8 79 6E 19 00 - call DNF.exe+410EE0
DNF.exe+27A067: 8D 8D D0 FD FF FF - lea ecx,[ebp-00000230]
DNF.exe+27A06D: C7 45 FC 03 00 00 00 - mov [ebp-04],00000003
DNF.exe+27A074: E8 77 70 B0 00 - call DNF.exe+D810F0
DNF.exe+27A079: 8D 8D C4 FD FF FF - lea ecx,[ebp-0000023C]
DNF.exe+27A07F: C7 45 FC FF FF FF FF - mov [ebp-04],FFFFFFFF
DNF.exe+27A086: E8 65 70 B0 00 - call DNF.exe+D810F0
}

锁血
{ Game : DNF.exe
Version:
Date : 2026-05-18
Author : admin
This script does blah blah blah
}
define(address,"DNF.exe"+455DD0)
define(bytes,55 8B EC 6A FF)
[ENABLE]
assert(address,bytes)
alloc(newmem,$1000)
label(code)
label(return)
newmem:
push ebp
mov ebp,esp
push -01
cmp esi, [1AB7CDC]
jne code
mov [ebp+08],#9999999
code:
jmp return
address:
jmp newmem
return:
[DISABLE]
address:
db bytes
// push ebp
// mov ebp,esp
// push -01
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: DNF.exe+455DD0
DNF.exe+455DBB: 8B 4D F4 - mov ecx,[ebp-0C]
DNF.exe+455DBE: 64 89 0D 00 00 00 00 - mov fs:[00000000],ecx
DNF.exe+455DC5: 59 - pop ecx
DNF.exe+455DC6: 5F - pop edi
DNF.exe+455DC7: 5E - pop esi
DNF.exe+455DC8: 5B - pop ebx
DNF.exe+455DC9: 8B E5 - mov esp,ebp
DNF.exe+455DCB: 5D - pop ebp
DNF.exe+455DCC: C2 04 00 - ret 0004
DNF.exe+455DCF: CC - int 3
// ---------- INJECTING HERE ----------
DNF.exe+455DD0: 55 - push ebp
// ---------- DONE INJECTING ----------
DNF.exe+455DD1: 8B EC - mov ebp,esp
DNF.exe+455DD3: 6A FF - push -01
DNF.exe+455DD5: 68 C6 40 42 01 - push DNF.exe+10240C6
DNF.exe+455DDA: E8 23 98 88 01 - call DNF.exe+1CDF602
DNF.exe+455DDF: 90 - nop
DNF.exe+455DE0: 50 - push eax
DNF.exe+455DE1: 53 - push ebx
DNF.exe+455DE2: 56 - push esi
DNF.exe+455DE3: 57 - push edi
DNF.exe+455DE4: A1 F0 67 A3 01 - mov eax,[DNF.exe+16367F0]
}