赞 | 0 |
VIP | 1 |
好人卡 | 0 |
积分 | 1 |
经验 | 2107 |
最后登录 | 2014-12-21 |
在线时间 | 1 小时 |
Lv1.梦旅人
- 梦石
- 0
- 星屑
- 50
- 在线时间
- 1 小时
- 注册时间
- 2009-7-7
- 帖子
- 136
|
话说第二行不对啊,少了一个w:
附:正确脚本:- $ReadProcessMemory=Win32API.new("kernel32","ReadProcessMemory","llpll","l")
- $WriteProcessMemory=Win32API.new("kernel32","WriteProcessMemory","llpll","l")
- $GetCurrentProcess=Win32API.new("kernel32","GetCurrentProcess","","l")
- $CloseHandle=Win32API.new("kernel32","CloseHandle","l","l")
- $LoadLibrary=Win32API.new("kernel32","LoadLibraryA","p","l")
- $GetProcAddress=Win32API.new("kernel32","GetProcAddress","lp","l")
- def Str2Long(data)
- r=0
- tmp=0
- tmp=data[3].to_i<<24
- r+=tmp
- tmp=data[2].to_i<<16
- r+=tmp
- tmp=data[1].to_i<<8
- r+=tmp
- tmp=data[0].to_i
- r+=tmp
- end
- $r_lib=$LoadLibrary.call("RGSS102J.dll") #取得DLL的句柄
- $r_in=$GetProcAddress.call($r_lib,"RGSSEval") #取得RGSSEval的地址
- $r_in+=1138948 #取得dword_18B9C84的地址,使用和RGSSEval的相对地址……
- $r_pro=$GetCurrentProcess.call()
- $tmp=" "
- $ReadProcessMemory.call($r_pro,$r_in,$tmp,4,0)
- $r_in=Str2Long($tmp)+0xC # lea ecx,[esi+0C] 取得标题字符串地址
- def changeTitle(data)
- data+="\000"
- $WriteProcessMemory.call($r_pro,$r_in,data,data.size,0)
- end
复制代码 |
|