TA的每日心情 | 开心
2018-8-6 15:15 |
|---|
签到天数: 10 天 [LV.3]偶尔看看II
解元
 
- 积分
- 1347
|
本帖最后由 wadu 于 2019-4-2 00:46 编辑
感觉如果只是为了把 HTML 提取到文件的话直接用 Cheat Engine 打补丁就好了，只是这个词典不释放内存，不知道是否有意的，滚动多了就崩溃退出了。
我自己在 Cheat Engine 用它的 Auto Assemble 工具直接用下面的代码就可以提取内容了，接下来用 AutoHotkey 模拟滚动就行了。只是程序会崩溃真是比较麻烦（再次强调是程序自己原本在没有任何修改时不断滚动就会崩溃），需要自己过一段时间检查看看程序是不是挂掉了，然后手动重新运行程序，还要手动查看最后一个提取文件中最后一个词条的单词，回到软件上搜索到该词条，重新开 Cheat Engine 打开进程，继续重复步骤。
这个附件 txt 重命名为 .CT 文件然后在 Cheat Engine 里点左上角的第二个文件夹按钮 Open a cheat table 打开这个 .CT 文件，然后在下方把列表的第一个 Auto Assemble script 前面的框打勾就可以使用 script 自动把 HTML 的内容保存到 C:\OALD9_Out\ 文件夹下了。
OALD9.CT.removethis.txt
(5.38 KB, 下载次数: 4)
define(FILE_APPEND_DATA,4)
define(OPEN_ALWAYS,4)
define(FILE_ATTRIBUTE_NORMAL,0x00000080)
define(FILE_END,2)
globalalloc(html_str, 4)
globalalloc(html_len, 4)
globalalloc(html_cnt, 4)
globalalloc(file_bytes, 4)
globalalloc(html_filedir, 255)
globalalloc(html_filepath, 255)
globalalloc(html_pathnumaddr, 4)
globalalloc(html_pathnumformat, 20)
html_str:
dd 0
html_len:
dd 0
html_cnt:
dd 0
html_filedir:
db 'C:\OALD9_Out\'
html_filepath:
db 0
html_pathnumaddr:
dd 0
html_pathnumformat:
db '%06d.html', 0
/*
// lua is slow, so this is not used for now
{$lua}
function myfunction(straddr)
--showMessage('html: '..straddr)
len = readInteger('html_len')
--showMessage('len: '..len)
--str = readString(straddr, len)
--showMessage('str: '..str)
--showMessage('len of str is: '..string.len(str))
cnt = readInteger('html_cnt')
cnt = cnt + 1
writeInteger('html_cnt', cnt)
filePath = string.format("C:\\OALD\\%d.html", cnt)
writeRegionToFile(filePath, straddr, len)
end
{$asm}
loadlibrary(luaclient-i386.dll)
luacall(openLuaServer('CELUASERVER'))
CELUA_ServerName:
db 'CELUASERVER',0
alloc(str_myfunction,32)
alloc(functionid,4)
str_myfunction:
db 'return myfunction(parameter)',0
*/
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048)
alloc(hFile,4)
label(IncNumFileCheck)
label(IncNumWriteFile)
label(DoWriteFile)
label(Cleanup)
label(returnhere)
label(originalcode)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
mov [html_str],esp
push edx
push ecx
push eax
mov edx, [html_str]
sub edx, 28
mov edx, [edx]
mov [html_str],edx
push [html_str]
call kernel32.lstrlenA // stdcall, no cleanup
mov [html_len], eax
// check if this is the first time
cmp [html_cnt], 0
jne IncNumWriteFile
push html_filedir
push html_filepath
call kernel32.lstrcpyA
push 0
push html_filepath
call kernel32.CreateDirectoryA
push html_filepath
call kernel32.lstrlenA
lea edx,[html_filepath]
add edx,eax
mov [html_pathnumaddr], edx
// find the next available number
mov [html_cnt], 1
IncNumFileCheck:
push [html_cnt]
push html_pathnumformat
push [html_pathnumaddr]
call user32.wsprintfA
push html_filepath
call kernel32.GetFileAttributesA
cmp eax, 0xFFFFFFFF
je DoWriteFile
mov eax, [html_cnt]
inc eax
mov [html_cnt], eax
jmp IncNumFileCheck
IncNumWriteFile:
mov eax, [html_cnt]
inc eax
mov [html_cnt], eax
push [html_cnt]
push html_pathnumformat
push [html_pathnumaddr]
call user32.wsprintfA
DoWriteFile:
//push [html_str]
//push str_myfunction
//call CELUA_ExecuteFunction
push 0
push FILE_ATTRIBUTE_NORMAL
push OPEN_ALWAYS
push 0
push 0
push FILE_APPEND_DATA
push html_filepath
call kernel32.CreateFileA
test eax, eax
je Cleanup
mov [hFile], eax
push FILE_END
push 0
push 0
push [hFile]
call kernel32.SetFilePointer
push 0
push file_bytes
push [html_len]
push [html_str]
push [hFile]
call kernel32.WriteFile
push [hFile]
call kernel32.CloseHandle
Cleanup:
pop eax
pop ecx
pop edx
originalcode:
mov [ebp-04],eax
push 00
exit:
jmp returnhere
"OALD9.exe"+32127:
jmp newmem
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
"OALD9.exe"+32127:
mov [ebp-04],eax
push 00
//Alt: db 89 45 FC 6A 00 |
|
发表于 2019-4-1 00:31:03
楼主
