#pyWinmineCrack.py# coding: utf-8import win32guiimport win32processimport win32conimport win32apifrom ctypes import *#雷區(qū)最大行列數(shù)MAX_ROWS = 24MAX_COLUMNS = 30#雷區(qū)格子在窗體上的起始坐標(biāo)及每個格子的寬度MINE_BEGIN_X = 0xCMINE_BEGIN_Y = 0x37MINE_GRID_WIDTH = 0x10MINE_GRID_HEIGHT = 0x10#邊框、無雷、有雷的內(nèi)部表示MINE_BOARDER = 0x10MINE_SAFE = 0x0FMINE_DANGER = 0x8F#“雷區(qū)”在 掃雷程序中的存儲地址BOARD_ADDR = 0x1005340class SMineCtrl(Structure): _fields_ = [("hWnd", c_uint),  ("board", (c_byte * (MAX_COLUMNS + 2)) * (MAX_ROWS + 2)),  ("rows", c_byte),  ("columns", c_byte) ]kernel32 = windll.LoadLibrary("kernel32.dll")ReadProcessMemory = kernel32.ReadProcessMemoryWriteProcessMemory = kernel32.WriteProcessMemoryOpenProcess = kernel32.OpenProcessctrlData = SMineCtrl()#找到掃雷程序并打開對應(yīng)進(jìn)程try: ctrlData.hWnd = win32gui.FindWindow("掃雷", "掃雷")except: win32api.MessageBox(0, "請先運(yùn)行掃雷程序", "錯誤！", win32con.MB_ICONERROR) exit(0)hreadID, processID = win32process.GetWindowThreadProcessId(ctrlData.hWnd)hProc = OpenProcess(win32con.PROCESS_ALL_ACCESS, 0, processID)#讀取雷區(qū)數(shù)據(jù)bytesRead = c_ulong(0)ReadProcessMemory(hProc, BOARD_ADDR, byref(ctrlData.board), SMineCtrl.board.size, byref(bytesRead))if(bytesRead.value != SMineCtrl.board.size): str = "ReadProcessMemory error, only read ", bytesRead.value, " should read ", SMineCtrl.board.size win32api.MessageBox(0, str, "錯誤！", win32con.MB_ICONERROR) exit()#獲取本次程序雷區(qū)的實際大小ctrlData.rows = 0ctrlData.columns = 0for i in range(0, MAX_COLUMNS + 2): if MINE_BOARDER == ctrlData.board[0]: ctrlData.columns += 1 else : breakctrlData.columns -= 2 for i in range(1, MAX_ROWS + 1): if MINE_BOARDER != ctrlData.board[1]: ctrlData.rows += 1 else: break#模擬鼠標(biāo)點擊動作for i in range(0, ctrlData.rows): for j in range(0, ctrlData.columns): if MINE_SAFE == ctrlData.board[i + 1][j + 1]:  win32api.SendMessage(ctrlData.hWnd,   win32con.WM_LBUTTONDOWN,   win32con.MK_LBUTTON,   win32api.MAKELONG(MINE_BEGIN_X + MINE_GRID_WIDTH * j + MINE_GRID_WIDTH / 2,   MINE_BEGIN_Y + MINE_GRID_HEIGHT * i + MINE_GRID_HEIGHT / 2))win32api.SendMessage(ctrlData.hWnd,   win32con.WM_LBUTTONUP,win32con.MK_LBUTTON,   win32api.MAKELONG(MINE_BEGIN_X + MINE_GRID_WIDTH * j + MINE_GRID_WIDTH / 2,   MINE_BEGIN_Y + MINE_GRID_HEIGHT * i + MINE_GRID_HEIGHT / 2))#搞定!win32api.MessageBox(0, "搞定！", "信息", win32con.MB_ICONINFORMATION)