#include

#include

#include

#define???PROCESS_base_ADDRESS???//用戶級程序基地址



//牛逼的提權函數，，牛逼的一塌糊涂

void?EnableDebugPriv（）

{

	HANDLE?hToken;

	LUID?sedebugnameValue;

	TOKEN_PRIVILEGES?tkp;

	OpenProcessToken（GetCurrentProcess（）?TOKEN_ADJUST_PRIVILEGES?|?TOKEN_QUERY?&hToken）;

	LookupPrivilegeValue（NULL?SE_DEBUG_NAME?&sedebugnameValue）;

	tkp.PrivilegeCount?=?1;

	tkp.Privileges[0].Luid?=?sedebugnameValue;

	tkp.Privileges[0].Attributes?=?SE_PRIVILEGE_ENABLED;

	AdjustTokenPrivileges（hToken?false?&tkp?sizeof?tkp?NULL?NULL）;

	CloseHandle（hToken）;

}





int?main（）

{

????int?flagfk=0;

	EnableDebugPriv（）;

	DWORD???dwp?;???//???讀進來的buffer

	DWORD???dwm?=?0fk1fk2fk3fk4;

	//???Get???Process?‘s???Handle???with???read/write???VM

	HWND?hwar3?=?FindWindow（“War3.exe“NULL）;

	DWORD?pid;

	GetWindowThreadProcessId（hwar3?&pid）;

	HANDLE?hProcessID???=???OpenProcess（

????????PROCESS_ALL_ACCESS???//???注意啊！就是用這兩個參數

????????FALSE

????????pid）;???//???進程的ID

	int?j?=?10?;

	LPVOID???pProcess?=?（LPVOID）0x07C400C3;

	int?k?=?0;

	

	

	for（int?i=0;i<65536;i++）{

		ReadProcessMemory（hProcessID???（LPVOID）（0x0000009C+0x10000*i）???&dwp???4???NULL）;

		if（dwp?==?1）{

		????ReadProcessMemory（hProcessID???（LPVOID）（0x0000009C+0x10000*i-8）???&fk1???4???NULL）;

		????ReadProcessMemory（hProcessID???（LPVOID）（0x0000009C+0x10000*i-4）???&fk2???4???NULL）;

		????ReadProcessMemory（hProcessID???（LPVOID）（0x0000009C+0x10000*i+4）???&fk3???4???NULL）;

		????ReadProcessMemory（hProcessID???（LPVOID）（0x0000009C+0x10000*i+8）???&fk4???4???NULL）;

		????if（fk1==1&&fk2==1&&fk3==3&&fk4==3）{

		??????????cout<<“陰影地址為:“?;

			?????cout<<（LPVOID）（0x0000009C+0x10000*i）<
			????????WriteProcessMemory（hProcessID???（LPVOID）（0x0000009C+0x10000*i）???&dwm???4???NULL）;
				WriteProcessMemory（hProcessID???（LPVOID）（0x0000009C+0x10000*i-0X4）???&dwm???4???NULL）;
				?flagfk=1;

			?????break?;

			}

		}

	}

?????if（flagfk?==?1）{

???????cout<<“修改完成，按回車結束！“<
???????cout<<“\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n“?;

???????cout<<“\t\t\t\t\t\t\t\t作者：方凱“<
???????cout<<“\t\t\t\t\t\t\t\t日期：2011/4/27“<
???????cout<<“\t\t\t\t\t\t\t\t謝謝支持“<
???????getchar（）?;

?????}else{

???????cout<<“抱歉，我失敗了.（爭霸進入地圖后再運行我哦。）按回車結束！“<
???????cout<<“\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n“?;

???????cout<<“\t\t\t\t\t\t\t\t作者：方凱“<
???????cout<<“\t\t\t\t\t\t\t\t日期：2011/4/27“<
???????cout<<“\t\t\t\t\t\t\t\t謝謝支持“<
???????getchar（）?;

?????}
}

?屬性????????????大小?????日期????時間???名稱
-----------?---------??----------?-----??----

?????文件???????2805??2013-04-10?09:41??1.24.cpp

-----------?---------??----------?-----??----

?????????????????2805????????????????????1