難的不會，來個簡單的：破解極品飛車三光碟版 (9千字)

難的不會，來個簡單的：破解極品飛車三光碟版

    極品飛車三是一款比較老的賽車遊戲了，音效感覺非常棒，現在恐怕六代都出來了，但我相信還是有不少人在玩，很久沒破東西了，就拿這個版本來試試：

老步驟，不羅瑣，下BPX GETDRIVETYPEA後跟蹤到此：

016F:004B6340 8D85C4FEFFFF    LEA      EAX,[EBP+FFFFFEC4]
016F:004B6346 A5              MOVSD 
016F:004B6347 A5              MOVSD 
016F:004B6348 66A5            MOVSW 
016F:004B634A A4              MOVSB 
016F:004B634B E840300400      CALL    004F9390
016F:004B6350 8D85C4FEFFFF    LEA      EAX,[EBP+FFFFFEC4]
016F:004B6356 E895300400      CALL    004F93F0
016F:004B635B E8B0300400      CALL    004F9410          ;這裡是驗證登錄檔檔案之處,F8進入
016F:004B6360 85C0            TEST    EAX,EAX
016F:004B6362 7430            JZ      004B6394          ;eax=0則為真，這裡要跳！
016F:004B6364 B906000000      MOV      ECX,06
016F:004B6369 8D7DDC          LEA      EDI,[EBP-24]
016F:004B636C BE94564B00      MOV      ESI,004B5694
016F:004B6371 6A30            PUSH    BYTE +30
016F:004B6373 A1503A7A00      MOV      EAX,[007A3A50]

進入016F:004B635B的CALL後來到這裡:
016F:004F9447 83F805          CMP      EAX,BYTE +05      ;5代表光碟機
016F:004F944A 7515            JNZ      004F9461          ;不是光碟機就跳出,改成JZ 004F9461
016F:004F944C B801000000      MOV      EAX,01
016F:004F9451 83C404          ADD      ESP,BYTE +04
016F:004F9454 5F              POP      EDI
016F:004F9455 5E              POP      ESI
016F:004F9456 5A              POP      EDX
016F:004F9457 59              POP      ECX
016F:004F9458 8D8000000000    LEA      EAX,[EAX+00]
016F:004F945E 8BD2            MOV      EDX,EDX

附上登錄檔檔案，要先註冊此檔案再執行遊戲噢：
REGEDIT4

[HKEY_LOCAL_MACHINE\Software\Electronic Arts]

[HKEY_LOCAL_MACHINE\Software\Electronic Arts\Need For Speed III]
"DisplayName"="Need For Speed III"
"InstallPath"="F:\\Need For Speed III"        ；這裡改成你的安裝目錄
"Version"="1.0"
"Language"=dword:00000409
"SKU_NUMBER"="7901"
"3D Device Description"="Direct3D Device 1"
"3D Card"="Direct3D Device 1"
"Thrash Driver"="d3d"
"Group"="D3D"
"D3D Device"=dword:00000000
"Triple Buffer"=dword:00000000
"Hardware Acceleration"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Electronic Arts\Need For Speed III\1.0]
"DisplayName"="Need For Speed III"
"Language"=dword:00000001
"Version"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Electronic Arts\3D Data]
"Version"=dword:0000000e
"Cards"=dword:00000012
"1"=dword:00000001
"2"=dword:00000002
"3"=dword:00000004
"4"=dword:00000005
"5"=dword:00000007
"6"=dword:00000009
"7"=dword:0000000a
"8"=dword:0000000b
"9"=dword:0000000c
"10"=dword:0000000d
"11"=dword:00000008
"12"=dword:00000003
"13"=dword:00000006
"14"=dword:0000000e
"15"=dword:0000000f
"16"=dword:00000010
"17"=dword:00000011
"18"=dword:00000012

[HKEY_LOCAL_MACHINE\Software\Electronic Arts\3D Data\Sort Order]
"1"=dword:00000001
"2"=dword:00000002
"3"=dword:00000003
"4"=dword:00000012
"5"=dword:00000006
"6"=dword:00000004
"7"=dword:00000005
"8"=dword:00000007
"9"=dword:0000000e
"10"=dword:00000008
"11"=dword:00000009
"12"=dword:0000000a
"13"=dword:0000000b
"14"=dword:0000000d
"15"=dword:0000000c
"16"=dword:0000000f
"17"=dword:00000010
"18"=dword:00000011

[HKEY_LOCAL_MACHINE\Software\Electronic Arts\3D Data\Card1]
"Name"="Software Renderer"
"Module"="softtri"
"Group"="Software"
"Types"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Electronic Arts\3D Data\Card1\Type1]
"VendorID"=dword:00000000
"DeviceID"=dword:00000000

[HKEY_LOCAL_MACHINE\Software\Electronic Arts\3D Data\Card2]
"Name"="3Dfx Voodoo2"
"Module"="voodoo2"
"Group"="3Dfx"
"Types"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Electronic Arts\3D Data\Card2\Type1]
"VendorID"=dword:0000121a
"DeviceID"=dword:00000002

[HKEY_LOCAL_MACHINE\Software\Electronic Arts\3D Data\Card3]
"Name"="3Dfx Banshee"
"Module"="voodoo2"
"Group"="3Dfx"
"Types"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Electronic Arts\3D Data\Card3\Type1]
"VendorID"=dword:0000121a
"DeviceID"=dword:00000003

[HKEY_LOCAL_MACHINE\Software\Electronic Arts\3D Data\Card4]
"Name"="3Dfx Voodoo"
"Module"="voodoo"
"Group"="3Dfx"
"Types"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Electronic Arts\3D Data\Card4\Type1]
"VendorID"=dword:0000121a
"DeviceID"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Electronic Arts\3D Data\Card5]
"Name"="3Dfx Voodoo Rush"
"Module"="voodoo"
"Group"="3Dfx"
"Types"=dword:00000003

[HKEY_LOCAL_MACHINE\Software\Electronic Arts\3D Data\Card5\Type1]
"VendorID"=dword:00001142
"DeviceID"=dword:0000643d

[HKEY_LOCAL_MACHINE\Software\Electronic Arts\3D Data\Card5\Type2]
"VendorID"=dword:0000121a
"DeviceID"=dword:00008626

[HKEY_LOCAL_MACHINE\Software\Electronic Arts\3D Data\Card5\Type3]
"VendorID"=dword:000010d9
"DeviceID"=dword:00008626

[HKEY_LOCAL_MACHINE\Software\Electronic Arts\3D Data\Card6]
"Name"="Matrox G200"
"Module"="d3d"
"Group"="D3D"
"Types"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Electronic Arts\3D Data\Card6\Type1]
"VendorID"=dword:0000102b
"DeviceID"=dword:00000521

[HKEY_LOCAL_MACHINE\Software\Electronic Arts\3D Data\Card7]
"Name"="NVidia RIVA 128"
"Module"="d3d"
"Group"="D3D"
"Types"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Electronic Arts\3D Data\Card7\Type1]
"VendorID"=dword:000012d2
"DeviceID"=dword:00000018

[HKEY_LOCAL_MACHINE\Software\Electronic Arts\3D Data\Card8]
"Name"="Intel i740"
"Module"="d3d"
"Group"="D3D"
"Types"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Electronic Arts\3D Data\Card8\Type1]
"VendorID"=dword:00008086
"DeviceID"=dword:00007800

[HKEY_LOCAL_MACHINE\Software\Electronic Arts\3D Data\Card9]
"Name"="PowerVR"
"Module"="powervr"
"Group"="NEC"
"Types"=dword:00000002

[HKEY_LOCAL_MACHINE\Software\Electronic Arts\3D Data\Card9\Type1]
"VendorID"=dword:00001033
"DeviceID"=dword:0000002a

[HKEY_LOCAL_MACHINE\Software\Electronic Arts\3D Data\Card9\Type2]
"VendorID"=dword:00001033
"DeviceID"=dword:00000046

[HKEY_LOCAL_MACHINE\Software\Electronic Arts\3D Data\Card10]
"Name"="Rendition V2100/V2200"
"Module"="verite"
"Group"="Rendition"
"Types"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Electronic Arts\3D Data\Card10\Type1]
"VendorID"=dword:00001163
"DeviceID"=dword:00002000

[HKEY_LOCAL_MACHINE\Software\Electronic Arts\3D Data\Card11]
"Name"="Chromatic Mpact 2"
"Module"="d3d"
"Group"="D3D"
"Types"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Electronic Arts\3D Data\Card11\Type1]
"VendorID"=dword:0000110b
"DeviceID"=dword:00000004

[HKEY_LOCAL_MACHINE\Software\Electronic Arts\3D Data\Card12]
"Name"="ATI Rage Pro"
"Module"="rage"
"Group"="ATI"
"Types"=dword:00000002

[HKEY_LOCAL_MACHINE\Software\Electronic Arts\3D Data\Card12\Type1]
"VendorID"=dword:00001002
"DeviceID"=dword:00004742

[HKEY_LOCAL_MACHINE\Software\Electronic Arts\3D Data\Card12\Type2]
"VendorID"=dword:00001002
"DeviceID"=dword:00004750

[HKEY_LOCAL_MACHINE\Software\Electronic Arts\3D Data\Card13]
"Name"="3DLabs Permedia 2"
"Module"="d3d"
"Group"="D3D"
"Types"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Electronic Arts\3D Data\Card13\Type1]
"VendorID"=dword:0000104c
"DeviceID"=dword:00003d07

[HKEY_LOCAL_MACHINE\Software\Electronic Arts\3D Data\Card14]
"Name"="S3 Savage 3D"
"Module"="d3d"
"Group"="D3D"
"Types"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Electronic Arts\3D Data\Card14\Type1]
"VendorID"=dword:00005333
"DeviceID"=dword:00008a20

[HKEY_LOCAL_MACHINE\Software\Electronic Arts\3D Data\Card15]
"Name"="S3 Virge VX"
"Module"="d3d"
"Group"="D3D"
"Types"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Electronic Arts\3D Data\Card15\Type1]
"VendorID"=dword:00005333
"DeviceID"=dword:0000883d

[HKEY_LOCAL_MACHINE\Software\Electronic Arts\3D Data\Card16]
"Name"="S3 Virge DX/GX"
"Module"="d3d"
"Group"="D3D"
"Types"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Electronic Arts\3D Data\Card16\Type1]
"VendorID"=dword:00005333
"DeviceID"=dword:00008a01

[HKEY_LOCAL_MACHINE\Software\Electronic Arts\3D Data\Card17]
"Name"="S3 Virge"
"Module"="d3d"
"Group"="D3D"
"Types"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Electronic Arts\3D Data\Card17\Type1]
"VendorID"=dword:00005333
"DeviceID"=dword:00005631

[HKEY_LOCAL_MACHINE\Software\Electronic Arts\3D Data\Card18]
"Name"="NVidia TNT"
"Module"="d3d"
"Group"="D3D"
"Types"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Electronic Arts\3D Data\Card18\Type1]
"VendorID"=dword:000010de
"DeviceID"=dword:00000020

還有一個很重要的安裝檔案，INSTALL.WIN，裡面記錄了檔案路徑，改成當前路徑後，把它也複製到安裝目錄下：

english
local
.\GameData\
.\GameData\Tracks\
.\GameData\Tracks\Tutor\
.\GameData\CarModel\
.\GameData\Render\pc\
.\GameData\DashHud\
.\GameData\Audio\pc\
.\GameData\Audio\SFX\
.\GameData\Audio\Speech\English\
.\GameData\Audio\Speech\German\
.\GameData\Audio\Speech\French\
.\GameData\Audio\Speech\Spanish\
.\GameData\Audio\Speech\Italian\
.\FeData\art\
.\FeData\text\
.\FeData\text\
.\FeData\save\
.\FeData\stats\
.\FeData\config\
.\FeData\audio\
.\FeData\Art\Slides\
.\FeData\Art\Track\
.\FeData\Art\Showcase\
.\FeData\movies\
.\FeData\stats\prh\

最後用HIEW開啟NFS3.EXE:
找：E8B030040085C07430  改：E8B030040085C0EB30
找：83F8057515B801000000 改：83F8057415B801000000

搞定！

大波羅[BCG][FCG]
Company:Beginner's Cracking Group
        Free Cracking Group
http://wdfdiablo.myetang.com
http://dblhome.myrice.com
2001.11.26