module1.bas

很不错的VB外挂代码上来和大家分想一下谢谢大家支持

Attribute VB_Name = "Module1"


Option Explicit
Public Declare Function FindWindow Lib "user32" Alias "FindWindowA" (ByVal lpClassName As String, ByVal lpWindowName As String) As Long

Public Declare Function GetWindowThreadProcessId Lib "user32" (ByVal hwnd As Long, lpdwProcessId As Long) As Long

Public Declare Function ReadProcessMemory Lib "kernel32" (ByVal hprocess As Long, lpBaseAddress As Any, lpBuffer As Any, ByVal nSize As Long, lpNumberOfBytesWritten As Long) As Long

Public Declare Function OpenProcess Lib "kernel32" (ByVal dwDesiredAccess As Long, ByVal bInheritHandle As Long, ByVal dwProcessId As Long) As Long

Private Declare Sub keybd_event Lib "user32" (ByVal bVk As Byte, ByVal bScan As Byte, ByVal dwFlags As Long, ByVal dwExtraInfo As Long)

Public Declare Function PostMessage Lib "user32" Alias "PostMessageA" (ByVal hwnd As Long, ByVal wMsg As Long, ByVal wParam As Long, ByVal lParam As Long) As Long


Public Declare Function CloseHandle Lib "kernel32" (ByVal hObject As Long) As Long

Public Declare Function FindWindowEx Lib "user32" Alias "FindWindowExA" (ByVal hWnd1 As Long, ByVal hWnd2 As Long, ByVal lpsz1 As String, ByVal lpsz2 As String) As Long

Public Const PROCESS_ALL_ACCESS = &H1F0FFF
Declare Function GetWindowText Lib "user32" Alias "GetWindowTextA" (ByVal hwnd As Long, ByVal lpString As String, ByVal cch As Long) As Long
Declare Function EnumWindows Lib "user32" (ByVal lpEnumFunc As Long, ByVal lParam As Long) As Long


Function EnumWindowsProc(ByVal hwnd As Long, ByVal lParam As Long) As Boolean
Dim S As String

S = String(80, 0)
Call GetWindowText(hwnd, S, 80)
S = Left(S, InStr(S, Chr(0)) - 1)
            
 Dim best As Long
            

If Len(S) > 0 And UCase(S) = UCase("Element Client") Then
Dim ProcID As Long, hpID As Long, BuffEnum(35) As Byte, ECXI As Long, eax As Long, Str As String, Mane As Long

GetWindowThreadProcessId hwnd, hpID
ProcID = OpenProcess(PROCESS_ALL_ACCESS, False, hpID)

        ReadProcessMemory ProcID, ByVal &H96A704, ECXI, 4, 0  '这个是存放基址的地址"诛仙:991B94"
        ReadProcessMemory ProcID, ByVal ECXI + &H20, eax, 4, 0
        ReadProcessMemory ProcID, ByVal eax + &H5F0, Mane, 4, 0
        ReadProcessMemory ProcID, ByVal Mane, BuffEnum(0), 36, 0
        Str = Left$(BuffEnum, 36)
        
         Form1.Combo1.Text = Str
    
       'best = Val("&H27B37A0")
        'ReadProcessMemory ProcID, ByVal best, ByVal VarPtr(BuffEnum(0)), 24, 0
          'Str = Left$(BuffEnum, 24)
          '物品名称 = 去空格(Trim$(物品名称)
        
End If
CloseHandle ProcID
EnumWindowsProc = True
End Function