1、打开ce找个程序打开然后在'数值亿姣灵秀类型'上右键添加新类型[自动汇编],然后将下面的代码复制粘贴:alloc(TypeName,256)alloc(ByteSize,4)a造婷用痃lloc(ConvertRoutine,1024)alloc(ConvertBackRoutine,1024)TypeName:db '4 Byte Big Endian',0ByteSize:dd 4//The convert routine should hold a routine that converts the data to an integer (in eax)//function declared as: stdcall int ConvertRoutine(unsigned char *input);//Note: Keep in mind that this routine can be called by multiple threads at the same time.ConvertRoutine://jmp dllname.functionname[64-bit]//or manual://parameters: (64-bit)//rcx=address of inputxor eax,eaxmov eax,[rcx] //eax now contains the bytes 'input' pointed tobswap eax //convert to big endianret[/64-bit][32-bit]//jmp dllname.functionname//or manual://parameters: (32-bit)push ebpmov ebp,esp//[ebp+8]=input//example:mov eax,[ebp+8] //place the address that contains the bytes into eaxmov eax,[eax] //place the bytes into eax so it's handled as a normal 4 byte valuebswap eaxpop ebpret 4[/32-bit]//The convert back routine should hold a routine that converts the given integer back to a row of bytes (e.g when the user wats to write a new value)//function declared as: stdcall void ConvertBackRoutine(int i, unsigned char *output);ConvertBackRoutine://jmp dllname.functionname//or manual:[64-bit]//parameters: (64-bit)//ecx=input//rdx=address of output//example:bswap ecx //convert the little endian input into a big endian inputmov [rdx],ecx //place the integer the 4 bytes pointed to by rdxret[/64-bit][32-bit]//parameters: (32-bit)push ebpmov ebp,esp//[ebp+8]=input//[ebp+c]=address of output//example:push eaxpush ebxmov eax,[ebp+8] //load the value into eaxmov ebx,[ebp+c] //load the address into ebx//convert the value to big endianbswap eaxmov [ebx],eax //write the value into the addresspop ebxpop eaxpop ebpret 8[/32-bit]
2、打开cemu进入游戏再打开ce,把数值类蕞瞀洒疸型选为'4 byte big endian'也就是刚才添加的选项,然后搜索'07000001'十六进制,在搜索结磨营稼刻果中选择'16xxx6c00'这项上右键选择浏览内存
3、按照图中标记修改即可,附上代码[天之护石种类填0A]
4、下图就是匠10利10的护石。。挖矿终结\(^ω^\)