vmware 虚拟机过检测 VM10-VM16 NP 传奇私服 等游戏

cywsh

记录下检测历程。

vmware.exe  启动虚拟机会创建 vmware-vmx.exe进程，    vmware-vmx.exe里存在了   vmware版权信息  硬盘信息   SMBIOS  等等  

1：目前私服类游戏  等   会检测虚拟机CPUID   CPU型号    系统内 是否有vmware注册表信息       VMP的虚拟机检测，  TMD的虚拟机检测。   

过VMP驱动 github有人家大佬 开源的。      过检测代码 百度那些就行。


2：简单的方法过检测，  修改CPU型号

monitor_control.enable_fullcpuid = TRUE
cpuid.80000002.eax = "0010:0000:0100:0100:0100:1101:0100:0001"
cpuid.80000002.ebx = "0110:0101:0111:1010:0111:1001:0101:0010"
cpuid.80000002.ecx = "0010:0000:0011:0111:0010:0000:0110:1110"
cpuid.80000002.edx = "0011:0000:0011:0000:0011:0111:0011:0011"
cpuid.80000003.eax = "0010:1101:0011:1000:0010:0000:0101:1000"
cpuid.80000003.ebx = "0110:0101:0111:0010:0110:1111:0100:0011"
cpuid.80000003.ecx = "0110:1111:0111:0010:0101:0000:0010:0000"
cpuid.80000003.edx = "0111:0011:0111:0011:0110:0101:0110:0011"
cpuid.80000004.eax = "0010:0000:0010:0000:0111:0010:0110:1111"
cpuid.80000004.ebx = "0010:0000:0010:0000:0010:0000:0010:0000"
cpuid.80000004.ecx = "0010:0000:0010:0000:0010:0000:0010:0000"
cpuid.80000004.edx = "0000:0000:0010:0000:0010:0000:0010:0000"
-分割---------------------------------------------------------------------------------
monitor_control.enable_fullcpuid = TRUE
cpuid.0.eax ="0000:0000:0000:0000:0000:0000:0000:1101"
cpuid.0.ebx ="0111:0101:0110:1110:0110:0101:0100:0111"
cpuid.0.ecx ="0110:1100:0110:0101:0111:0100:0110:1110"
cpuid.0.edx ="0100:1001:0110:0101:0110:1110:0110:1001"
cpuid.1.eax ="0000:0000:0000:0011:0000:0110:1010:1001"
cpuid.1.ebx ="0000:0100:0001:0000:0000:1000:0000:0000"
cpuid.1.ecx ="0111:1111:1011:1010:1110:0011:1111:1111"
cpuid.1.edx ="1011:1111:1110:1011:1111:1011:1111:1111"
cpuid.2.eax ="0111:0110:0000:0011:0101:1010:0000:0001"
cpuid.2.ebx ="0000:0000:1111:0000:1011:0010:1111:1111"
cpuid.2.ecx ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.2.edx ="0000:0000:1100:1010:0000:0000:0000:0000"
cpuid.3.eax ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.3.ebx ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.3.ecx ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.3.edx ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.4.0.eax ="0001:1100:0000:0000:0100:0001:0010:0001"
cpuid.4.0.ebx ="0000:0001:1100:0000:0000:0000:0011:1111"
cpuid.4.0.ecx ="0000:0000:0000:0000:0000:0000:0011:1111"
cpuid.4.0.edx ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.4.1.eax ="0001:1100:0000:0000:0100:0001:0010:0010"
cpuid.4.1.ebx ="0000:0001:1100:0000:0000:0000:0011:1111"
cpuid.4.1.ecx ="0000:0000:0000:0000:0000:0000:0011:1111"
cpuid.4.1.edx ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.4.2.eax ="0001:1100:0000:0000:0100:0001:0100:0011"
cpuid.4.2.ebx ="0000:0001:1100:0000:0000:0000:0011:1111"
cpuid.4.2.ecx ="0000:0000:0000:0000:0000:0001:1111:1111"
cpuid.4.2.edx ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.4.3.eax ="0001:1100:0000:0011:1100:0001:0110:0011"
cpuid.4.3.ebx ="0000:0011:1100:0000:0000:0000:0011:1111"
cpuid.4.3.ecx ="0000:0000:0000:0000:0001:1111:1111:1111"
cpuid.4.3.edx ="0000:0000:0000:0000:0000:0000:0000:0110"
cpuid.5.eax ="0000:0000:0000:0000:0000:0000:0100:0000"
cpuid.5.ebx ="0000:0000:0000:0000:0000:0000:0100:0000"
cpuid.5.ecx ="0000:0000:0000:0000:0000:0000:0000:0011"
cpuid.5.edx ="0000:0000:0000:0000:0001:0001:0010:0000"
cpuid.6.eax ="0000:0000:0000:0000:0000:0000:0111:0111"
cpuid.6.ebx ="0000:0000:0000:0000:0000:0000:0000:0010"
cpuid.6.ecx ="0000:0000:0000:0000:0000:0000:0000:1001"
cpuid.6.edx ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.7.eax ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.7.ebx ="0000:0000:0000:0000:0000:0010:1000:0001"
cpuid.7.ecx ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.7.edx ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.8.eax ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.8.ebx ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.8.ecx ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.8.edx ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.9.eax ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.9.ebx ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.9.ecx ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.9.edx ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.a.eax ="0000:0111:0011:0000:0000:0100:0000:0011"
cpuid.a.ebx ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.a.ecx ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.a.edx ="0000:0000:0000:0000:0000:0110:0000:0011"
cpuid.b.0.eax ="0000:0000:0000:0000:0000:0000:0000:0001"
cpuid.b.0.ebx ="0000:0000:0000:0000:0000:0000:0000:0010"
cpuid.b.0.ecx ="0000:0000:0000:0000:0000:0001:0000:0000"
cpuid.b.0.edx ="0000:0000:0000:0000:0000:0000:0000:0100"
cpuid.b.1.eax ="0000:0000:0000:0000:0000:0000:0000:0100"
cpuid.b.1.ebx ="0000:0000:0000:0000:0000:0000:0000:1000"
cpuid.b.1.ecx ="0000:0000:0000:0000:0000:0010:0000:0001"
cpuid.b.1.edx ="0000:0000:0000:0000:0000:0000:0000:0100"
cpuid.c.eax ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.c.ebx ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.c.ecx ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.c.edx ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.d.0.eax ="0000:0000:0000:0000:0000:0000:0000:0111"
cpuid.d.0.ebx ="0000:0000:0000:0000:0000:0011:0100:0000"
cpuid.d.0.ecx ="0000:0000:0000:0000:0000:0011:0100:0000"
cpuid.d.0.edx ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.d.1.eax ="0000:0000:0000:0000:0000:0000:0000:0001"
cpuid.d.1.ebx ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.d.1.ecx ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.d.1.edx ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.d.2.eax ="0000:0000:0000:0000:0000:0001:0000:0000"
cpuid.d.2.ebx ="0000:0000:0000:0000:0000:0010:0100:0000"
cpuid.d.2.ecx ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.d.2.edx ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.80000000.eax ="1000:0000:0000:0000:0000:0000:0000:1000"
cpuid.80000000.ebx ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.80000000.ecx ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.80000000.edx ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.80000001.eax ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.80000001.ebx ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.80000001.ecx ="0000:0000:0000:0000:0000:0000:0000:0001"
cpuid.80000001.edx ="0010:1000:0001:0000:0000:0000:0000:0000"
cpuid.80000002.eax ="0010:0000:0010:0000:0010:0000:0010:0000"
cpuid.80000002.ebx ="0110:1110:0100:1001:0010:0000:0010:0000"
cpuid.80000002.ecx ="0010:1000:0110:1100:0110:0101:0111:0100"
cpuid.80000002.edx ="0101:1000:0010:0000:0010:1001:0101:0010"
cpuid.80000003.eax ="0010:1000:0110:1110:0110:1111:0110:0101"
cpuid.80000003.ebx ="0100:0011:0010:0000:0010:1001:0101:0010"
cpuid.80000003.ecx ="0100:0101:0010:0000:0101:0101:0101:0000"
cpuid.80000003.edx ="0011:0010:0011:0001:0010:1101:0011:0011"
cpuid.80000004.eax ="0101:0110:0010:0000:0011:0000:0011:0011"
cpuid.80000004.ebx ="0010:0000:0100:0000:0010:0000:0011:0010"
cpuid.80000004.ecx ="0011:0000:0011:0011:0010:1110:0011:0011"
cpuid.80000004.edx ="0000:0000:0111:1010:0100:1000:0100:0111"
cpuid.80000005.eax ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.80000005.ebx ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.80000005.ecx ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.80000005.edx ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.80000006.eax ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.80000006.ebx ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.80000006.ecx ="0000:0001:0000:0000:0110:0000:0100:0000"
cpuid.80000006.edx ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.80000007.eax ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.80000007.ebx ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.80000007.ecx ="0000:0000:0000:0000:0000:0000:0000:0000"
cpuid.80000007.edx ="0000:0000:0000:0000:0000:0001:0000:0000"

3：修改虚拟机硬盘等信息，    vmware-vmx.exe   中是否包含   SMBIOS等 vmware 字样。            进制编辑       ASCII码 可查找     

4：当游戏需要DX11   那就根据VM官网说明  看看当前版本是否支持DX11.     需要高版本的驱动。   

5：某些私服 会检测虚拟机USB控制器  需要移除。