逆向解析 FinalSuspect 的"独占运行"机制：如何让它与其他模组共存

1
public static class DllChecker
2
{
3
    [PluginModuleInitializer(InitializePriority.High)]
4
    internal static void OnInitialization()
5
    {
6
        string[] blacklist = { "SickoMenu.dll", "version.dll" };
7
        string pluginDir = Path.GetDirectoryName(Assembly.GetExecutingAssembly().Location);
8
        string gameDir = Environment.CurrentDirectory;
9

10
        // ① 扫描 plugins 目录：白名单之外一律闪退
11
        if (pluginDir != null)
12
        {
13
            foreach (string file in Directory.EnumerateFiles(pluginDir, "*.*"))
14
            {
15
                string fileName = Path.GetFileName(file);
16
                bool isWhitelisted = fileName == "FinalSuspect.dll"
17
                                  || fileName == "PolarNight.dll";
18
                if (!isWhitelisted)
19
                {
20
                    FinalLogger.Error("检测到非法/模组文件: " + fileName + "！游戏将被强制终止。");
21
                    Application.Quit(1);   // ← 闪退元凶
22
                }
23
            }
24
        }
25

26
        // ② 检查游戏根目录的外挂文件（反作弊，建议保留）
27
        foreach (string dll in blacklist)
28
        {
29
            if (File.Exists(Path.Combine(gameDir, dll)))
30
            {
31
                FinalLogger.Error("检测到非法文件: " + dll + "！游戏将被强制终止。");
32
                Application.Quit(1);
33
            }
34
        }
35
    }
36
}

1
[HarmonyPatch(typeof(MainMenuManager), "Start")]
2
internal static class Git
3
{
4
    // XOR 解密：字符串常量都用密钥异或隐藏，防止被直接搜索到
5
    private static string Decrypt(byte[] data, byte key)
6
    {
7
        byte[] result = new byte[data.Length];
8
        for (int i = 0; i < data.Length; i++)
9
            result[i] = (byte)(data[i] ^ key);
10
        return Encoding.UTF8.GetString(result);
11
    }
12

13
    public static void Prefix(MainMenuManager __instance)
14
    {
15
        string[] rootBlacklist = { Git.A, Git.B };   // 解密后 = SickoMenu.dll / version.dll
16
        string pluginDir = Path.GetDirectoryName(Assembly.GetExecutingAssembly().Location);
17
        string gameDir = Environment.CurrentDirectory;
18

19
        // ① 与 DllChecker 相同的 plugins 目录白名单检测（这里是杀模组的关键）
20
        if (pluginDir != null)
21
        {
22
            foreach (string file in Directory.EnumerateFiles(pluginDir, "*.*"))
23
            {
24
                string fileName = Path.GetFileName(file);
25
                // Git.C / Git.D 解密后 = FinalSuspect.dll / PolarNight.dll
26
                if (fileName != Git.C && fileName != Git.D)
27
                {
28
                    FinalLogger.Error(Git.G, Git.J);   // "检测到非法/模组文件..."
29
                    Application.Quit(1);
30
                }
31
            }
32
        }
33

34
        // ② 检测外挂进程、外挂窗口，并挂一个每分钟一次的定时器（反作弊部分）
35
        if (Process.GetProcessesByName(Git.E).Length != 0) Application.Quit(1);
36
        if (FindWindow(null, Git.F) != IntPtr.Zero)        Application.Quit(1);
37
        // ...省略定时器逻辑
38
    }
39
}