特征码定位

游戏特征码定位X64X86通用

在一阵优美的音乐声中我们就开始了特征码定位的课程
首先我们要做一些准备工作，安装VS2019 番茄助手。
然后就可以来学了这里就不讲了
原来创建失败是工程名中用了下划线_
下面放上我们需要的常用函数
视频地址
游戏特征码定位X64X86通用视频教程

/*大写到小写*/
char toUpper(char* src)//大写到小写
{
	char* p = NULL;
	p = src;
	while (*p)//字符串不结束就循环
	{
		if (*p >= 'A' && *p <= 'Z') //判断小写字母
			*p += 32; //转大写
		p++; //指针后指，准备处理下一个字母
	}
	return *src; //返回修改后的字符串首地址
}
/*
进制十六到十
*/
UINT64 WINAPI HexToInt(char* strhex)
{
	UINT64 Dec = 0;
	UINT64 temp = 0;
	UINT64 count = 0;
	UINT64 DecCount = 0;
	//int strlen = aHex.length();

	toUpper(strhex);
	UINT64 StrLen = strlen(strhex); //计算字符串长度
	UINT64 a = 0;
	char ch[3] = { 0 };
	UINT64 b = 0;
	char cahr[256] = { 0 };
	if (StrLen >= 3)
	{
		for (size_t i = 0; i < StrLen; i++)
		{
			memcpy(ch, strhex + i, 2);
			if (strcmp(ch, "0x") == 0)
			{
				b = i + 1;
				break;
			}
		}
		// 00xAAAA
		if (b > 0)
		{
			memcpy(cahr, strhex + (b + 1), StrLen - (b + 1));
			a = StrLen - (b + 1);
		}
		else
		{
			memcpy(cahr, strhex, StrLen);
			a = StrLen;
		}

	}
	else
	{
		memcpy(cahr, strhex, StrLen);
		a = StrLen;
	}
	//MessageBox(NULL, (LPWSTR)cahr, TEXT("提示"), 1);

	StrLen = strlen(cahr);
	if (StrLen == 0)
	{
		return 0;
	}
	while (a--)
	{
		if (cahr[count] < '0' || (cahr[count] > '9' && cahr[count] < 'A') || (cahr[count] > 'F' && cahr[count] < 'a') || cahr[count]>'f')
		{
			//cout << "输入的不是十六进制格式" << endl;
			return 0;
		}
		count++;
	}


	UINT64 sum = 0;             //用long long防止结果过大
	for (UINT64 i = 0; cahr[i] != '\0'; i++)         //最后一位是'\0'，不用算进去
	{
		switch (cahr[i])
		{
		case '0': temp = 0; break;
		case '1': temp = 1; break;
		case '2': temp = 2; break;
		case '3': temp = 3; break;
		case '4': temp = 4; break;
		case '5': temp = 5; break;
		case '6': temp = 6; break;
		case '7': temp = 7; break;
		case '8': temp = 8; break;
		case '9': temp = 9; break;
		case 'A': temp = 10; break;
		case 'B': temp = 11; break;
		case 'C': temp = 12; break;
		case 'D': temp = 13; break;
		case 'E': temp = 14; break;
		case 'F': temp = 15; break;
		case 'a': temp = 10; break;
		case 'b': temp = 11; break;
		case 'c': temp = 12; break;
		case 'd': temp = 13; break;
		case 'e': temp = 14; break;
		case 'f': temp = 15; break;
		default: temp = cahr[i] - '0'; break;
		}
		sum = sum + temp * pow(16, StrLen - 1 - i);
	}
	return sum;
}

BOOL Is64BitOS()
{
	typedef VOID(WINAPI* LPFN_GetNativeSystemInfo)(__out LPSYSTEM_INFO lpSystemInfo);
	LPFN_GetNativeSystemInfo fnGetNativeSystemInfo = (LPFN_GetNativeSystemInfo)GetProcAddress(GetModuleHandleW(L"kernel32"), "GetNativeSystemInfo");
	if (fnGetNativeSystemInfo)
	{
		SYSTEM_INFO stInfo = { 0 };
		fnGetNativeSystemInfo(&stInfo);
		if (stInfo.wProcessorArchitecture == PROCESSOR_ARCHITECTURE_IA64
			|| stInfo.wProcessorArchitecture == PROCESSOR_ARCHITECTURE_AMD64)
		{
			return TRUE;
		}
	}
	return FALSE;
}

/*判断系统是否64位*/
BOOL Is64BitPorcess(DWORD dwProcessID)
{

	if (!Is64BitOS())
	{
		return FALSE;
	}
	else
	{
		HANDLE hProcess = OpenProcess(PROCESS_ALL_ACCESS, 0, dwProcessID);
		if (hProcess)
		{
			typedef BOOL(WINAPI* LPFN_ISWOW64PROCESS) (HANDLE, PBOOL);
			LPFN_ISWOW64PROCESS fnIsWow64Process = (LPFN_ISWOW64PROCESS)GetProcAddress(GetModuleHandleW(L"kernel32"), "IsWow64Process");
			if (NULL != fnIsWow64Process)
			{
				BOOL bIsWow64 = FALSE;
				fnIsWow64Process(hProcess, &bIsWow64);
				CloseHandle(hProcess);
				if (bIsWow64)
				{
					return FALSE;
				}
				else
				{
					return TRUE;
				}
			}
		}
	}
	return FALSE;
}

下面是寻找字节集的代码

/*
功能：寻找字节集
参数1：字节集 被寻找的字节集
参数2：字节集 欲寻找的字节集
参数3：整数型  欲寻找字节集的长度
返回：失败返回-1 成功返回标记
*/
int FindByte(const BYTE* bjbyte, const BYTE* YsTzm,int strL)
{
	//0123456789A
	//
	int a1 = 4096;
	int a = 0;
	for (int i = 0; i < a1; i++)
	{
		if (4096-i< strL)
		{
			return -1;
		}
		for (int j = 0; j < strL; j++)
		{
			if (YsTzm[j]=='?')
			{
				a++;
				continue;
			}
			if (bjbyte[i+j] !=YsTzm[j])//比较两个字符是否相等
			{
				a=0;
				break;//跳出循环
			}
			a++;//找到的次数
		}
         if (a>=strL)
		 {
			 return i;//成功找到返回标记
		 }
		 a = 0;
	}
	
	return -1;
}