扫雷外挂

扫雷游戏内存修改

最新推荐文章于 2021-08-11 01:17:33 发布

原创最新推荐文章于 2021-08-11 01:17:33 发布 · 836 阅读

0 ·

CC 4.0 BY-SA版权

C++ 专栏收录该内容

6 篇文章

订阅专栏

本文介绍了一种通过读写进程内存来实现扫雷游戏自动化的技术。利用Windows API函数FindWindow, GetWindowThreadProcessId, OpenProcess及ReadProcessMemory等，获取了目标进程的句柄并读取内存数据，然后通过WriteProcessMemory函数修改特定内存位置的数据，达到自动清除地雷的效果。

#include<windows.h>

int main()
{
	HWND hWinmine = FindWindow(NULL, L"扫雷");
	DWORD dwPID = 0;
	GetWindowThreadProcessId(hWinmine, &dwPID);
	HANDLE hProcess = OpenProcess(PROCESS_ALL_ACCESS, false, dwPID);
	DWORD dwBaseAddr = 0x01005330;
	DWORD dwNum = 0, dwWidth = 0, dwHeight = 0, dwSize = 0;
	ReadProcessMemory(hProcess, (LPVOID)dwBaseAddr, &dwNum, sizeof(DWORD), &dwSize);
	ReadProcessMemory(hProcess, (LPVOID)(dwBaseAddr + 0x4), &dwNum, sizeof(DWORD), &dwSize);
	ReadProcessMemory(hProcess, (LPVOID)(dwBaseAddr + 0x8), &dwNum, sizeof(DWORD), &dwSize);
	DWORD dwReadSize = dwWidth + dwHeight + dwWidth * 2 + dwHeight * 2 + 4;
	PBYTE pByte = new BYTE[dwReadSize];
	ReadProcessMemory(hProcess, (LPVOID)(dwBaseAddr + 0x10), pByte, dwReadSize, &dwSize);
	BYTE bClear = 0x8E;
	for (size_t i = 0; i < dwReadSize; i++)
	{
		if (pByte[i] == 0x8F)
		{ 
			WriteProcessMemory(hProcess, (LPVOID)(dwBaseAddr + 0x10 + i), &bClear, sizeof(BYTE), &dwSize);
		}
	}
	RECT rt = { 0 };
	GetClientRect(hWinmine, &rt);
	InvalidateRect(hWinmine, &rt, true);

	delete pByte;
	CloseHandle(hProcess);
	return 0;
}