public bool Init() { //string t = "[3=08,4=00]={48,32,62,78}[3=07,4=00]={48,32,62,78}"; //RegisterRule(0x80, t); //byte[] b = new byte[] { 0x80, 0x00, 0x00, 0x08, 0x00 }; //// byte [] ret= matchRule(b); //return false; hwnd = LoadDll.FindWindow("WSGAME", null).ToInt32(); Global.addr = new mhxy.AddrManager().loadAddr(hwnd); //汇编指令 byte[] code = { 104, 0, 0, 0, 0, 104, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 87, 191, 0, 0, 46, 0, 141, 127, 1, 136, 12, 16, 131, 63, 0, 117, 10, 232, 128, 0, 0, 0, 131, 63, 0, 116, 77, 131, 127, 5, 0, 117, 11, 232, 70, 0, 0, 0, 131, 127, 5, 0, 116, 60, 133, 192, 117, 13, 96, 106, 255, 255, 55, 185, 54, 17, 159, 117, 255, 209, 97, 139, 95, 5, 136, 76, 24, 4, 131, 248, 3, 114, 31, 15, 183, 90, 1, 131, 195, 2, 57, 216, 114, 20, 139, 95, 5, 199, 3, 1, 0, 0, 0, 96, 255, 55, 187, 30, 17, 159, 117, 255, 211, 97, 95, 194, 12, 0, 96, 141, 79, 9, 81, 106, 0, 106, 2, 186, 11, 75, 159, 117, 255, 210, 104, 0, 32, 0, 0, 49, 210, 82, 82, 106, 2, 80, 186, 193, 24, 159, 117, 255, 210, 95, 87, 137, 71, 5, 97, 195, 96, 141, 79, 21, 81, 106, 0, 104, 1, 0, 31, 0, 186, 239, 239, 160, 117, 255, 210, 95, 87, 137, 7, 97, 195, 49, 192, 232, 0, 0, 0, 0, 89, 139, 121, 39, 133, 255, 116, 19, 49, 219, 102, 187, 0, 4, 137, 7, 137, 4, 59, 141, 60, 95, 137, 7, 137, 4, 59, 95, 91, 89, 194, 8, 0, 104, 0, 0, 0, 0, 104, 0, 0, 0, 0, 104, 0, 0, 0, 0, 104, 0, 0, 0, 0, 104, 0, 0, 0, 0, 104, 0, 0, 0, 0, 104, 0, 0, 0, 0, 104, 0, 0, 0, 0, 131, 124, 36, 24, 0, 117, 12, 232, 131, 0, 0, 0, 131, 124, 36, 24, 0, 116, 115, 131, 124, 36, 28, 0, 117, 12, 232, 161, 0, 0, 0, 131, 124, 36, 28, 0, 116, 96, 96, 106, 255, 255, 116, 36, 60, 185, 54, 17, 159, 117, 255, 209, 97, 49, 200, 139, 76, 36, 24, 133, 210, 117, 17, 60, 241, 117, 13, 15, 182, 89, 5, 131, 195, 2, 137, 95, 16, 198, 1, 1, 49, 219, 102, 187, 0, 4, 128, 57, 1, 15, 68, 68, 17, 4, 141, 12, 25, 137, 68, 17, 4, 137, 17, 141, 12, 25, 128, 57, 1, 15, 68, 68, 17, 4, 141, 12, 25, 137, 68, 17, 4, 96, 255, 116, 36, 60, 187, 30, 17, 159, 117, 255, 211, 97, 131, 196, 32, 95, 91, 89, 194, 8, 0, 96, 141, 76, 36, 48, 81, 106, 0, 106, 2, 187, 11, 75, 159, 117, 255, 211, 104, 0, 32, 0, 0, 49, 219, 83, 83, 106, 2, 80, 186, 193, 24, 159, 117, 255, 210, 137, 68, 36, 60, 139, 76, 36, 32, 137, 65, 210, 97, 195, 96, 141, 76, 36, 36, 81, 106, 0, 104, 1, 0, 31, 0, 186, 239, 239, 160, 117, 255, 210, 137, 68, 36, 64, 139, 76, 36, 32, 137, 65, 186, 97, 195, 0, 0, 0, 0, 0, 0 }; string hexHwnd = StringUtil.IntToHex(hwnd); recvHwnd = new util.ShareMemory("MYs" + hexHwnd, shareSize); sendHwnd = new util.ShareMemory("MYf" + hexHwnd, shareSize); recvHC = new util.WinMutex("HCs" + hexHwnd); sendHC = new util.WinMutex("HCf" + hexHwnd); Start(); code = StringUtil.ReplaceBytes(code, 11, 12, GetByteEnd(recvHwnd.HwndName, new byte[] { 0 })); code = StringUtil.ReplaceBytes(code, 23, 12, GetByteEnd(recvHC.Name, new byte[] { 0 })); byte[] jj = GetByteEnd(sendHwnd.HwndName, new byte[] { 0 }); byte[] kk = jj.Skip(jj.Length - 4).Take(4).ToArray(); //===================================== code = StringUtil.ReplaceBytes(code, 261, 4, kk); kk = jj.Skip(4).Take(4).ToArray(); code = StringUtil.ReplaceBytes(code, 266, 4, kk); kk = jj.Skip(0).Take(4).ToArray(); code = StringUtil.ReplaceBytes(code, 271, 4, kk); jj = GetByteEnd(sendHC.Name, new byte[] { 0 }); kk = jj.Skip(jj.Length - 4).Take(4).ToArray(); code = StringUtil.ReplaceBytes(code, 276, 4, kk); kk = jj.Skip(4).Take(4).ToArray(); code = StringUtil.ReplaceBytes(code, 281, 4, kk); kk = jj.Skip(0).Take(4).ToArray(); code = StringUtil.ReplaceBytes(code, 286, 4, kk); //==== int addr = (int)util.WinApi.MallocMemory((IntPtr)hwnd, 4096); code = StringUtil.ReplaceBytes(code, 37, 4, BitConverter.GetBytes(addr)); IntPtr kernelHwnd = util.WinApi.GetModuleHandleA("kernel32.dll"); int[] moduleAddrs = new int[5]; moduleAddrs[0] = (int)util.WinApi.GetProcAddress(kernelHwnd, "WaitForSingleObject"); moduleAddrs[1] = (int)util.WinApi.GetProcAddress(kernelHwnd, "ReleaseMutex"); moduleAddrs[2] = (int)util.WinApi.GetProcAddress(kernelHwnd, "OpenFileMappingA"); moduleAddrs[3] = (int)util.WinApi.GetProcAddress(kernelHwnd, "MapViewOfFile"); moduleAddrs[4] = (int)util.WinApi.GetProcAddress(kernelHwnd, "OpenMutexA"); int[] oldAddrs = new int[5] { 1973358902, 1973358878, 1973373707, 1973360833, 1973481455 }; int n = 0; int flag = 0;//标志位 for (int i = 0; i < 10; i++) { if (flag == 5) { flag = 0; } kk = BitConverter.GetBytes(oldAddrs[flag]); jj = BitConverter.GetBytes(moduleAddrs[flag]); n = n + 1; n = StringUtil.FindBytes(code, kk, n); code = StringUtil.ReplaceBytes(code, n + 1, 4, jj); flag++; } LoadDll.WriteMemoryHwndValue((IntPtr)hwnd, addr, code); code = StringUtil.AppendBytes(new byte[] { 104 }, BitConverter.GetBytes(addr + 34), new byte[] { 195 }); LoadDll.WriteMemoryHwndValue((IntPtr)hwnd, Global.addr.msg, code); code = StringUtil.AppendBytes(new byte[] { 104 }, BitConverter.GetBytes(addr + 209), new byte[] { 195 }); LoadDll.WriteMemoryHwndValue((IntPtr)hwnd, Global.addr.pkgEnd, code); code = StringUtil.AppendBytes(new byte[] { 104 }, BitConverter.GetBytes(addr + 249), new byte[] { 195 }); LoadDll.WriteMemoryHwndValue((IntPtr)hwnd, Global.addr.toPkg, code); return(false); }