'use strict'; // 扫描进程内魔数 571882cf664bb39401ee const PATTERN = '57 18 82 cf 66 4b b3 94 01 ee'; const mods = Process.enumerateModules(); const hits = []; for (const m of mods) { if (m.size > 300 * 1024 * 1024) continue; try { Memory.scan(m.base, m.size, PATTERN, { onMatch(addr, size) { const mm = Process.findModuleByAddress(addr); const off = mm ? addr.sub(mm.base) : addr; hits.push({ mod: mm ? mm.name : '?', off: off.toString() }); }, onComplete() {}, }); } catch (e) {} } send({ event: 'magic-scan', hits: hits.slice(0, 40), total: hits.length });