完整的奇迹DELPHI内存修改验证码函数

来源: 作者: 点击:
入口参数为一个16位的字符串MU主程序文件名返回修改成功或失败[TrueFalse]
PS:
varModiOK:Bool;
begin
ModiOK:=HellFishMEMWrite('1234567890123456''main.exe');
end;

////////////////////memwrite
functionHellFishMEMWrite(VerCode:String;MuMain:String):bool;
var
s:string;
byte1:array[0..15]ofbyte;
Found:boolean;
iibyte2:integer;
HProcessHSnapshot:THandle;
lpNumberOfBytesWritten:DWORD;
appe:TProcessEntry32;
begin
forii:=0to15do
begin
byte1[ii]:=Ord(vercode[ii+1]);
end;
byte2:=$00554668;
HSnapshot:=CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS0);
appe.dwSize:=SizeOf(appe);
found:=Process32First(HSnapshotappe);
whileinteger(Found)<>0do
begin
try
s:=ExtractFileName(appe.szExeFile);
ifAnsiUpperCase(s)=AnsiUpperCase(mumain)then
begin
HProcess:=OpenProcess(PROCESS_ALL_ACCESStrueappe.th32ProcessID);
WriteProcessMemory(HProcessptr(byte2)@byte116lpNumberOfBytesWritten);
result:=True;
exit;
end;
except
end;
Found:=Process32Next(HSnapshotappe);
end;
CloseHandle(HSnapshot);
end;
////////////////////memwrite
[顶部]