C# 内存操作 API

using System;
using System.Text;

using System.Diagnostics;
using System.Runtime.InteropServices;

namespace PlantsVsZombiesTool
{
   
   
public abstract class Helper
    {
        [DllImportAttribute(
"kernel32.dll", EntryPoint = "ReadProcessMemory")]
       
public static extern bool ReadProcessMemory
            (
                IntPtr hProcess,
                IntPtr lpBaseAddress,
                IntPtr lpBuffer,
               
int nSize,
                IntPtr lpNumberOfBytesRead
            );

        [DllImportAttribute(
"kernel32.dll", EntryPoint = "OpenProcess")]
       
public static extern IntPtr OpenProcess
            (
               
int dwDesiredAccess,
               
bool bInheritHandle,
               
int dwProcessId
            );

        [DllImport(
"kernel32.dll")]
       
private static extern void CloseHandle
            (
                IntPtr hObject
            );

       
//写内存
        [DllImportAttribute("kernel32.dll", EntryPoint = "WriteProcessMemory")]
       
public static extern bool WriteProcessMemory
            (
                IntPtr hProcess,
                IntPtr lpBaseAddress,
               
int[] lpBuffer,
               
int nSize,
                IntPtr lpNumberOfBytesWritten
            );

       
//获取窗体的进程标识ID
        public static int GetPid(string windowTitle)
        {
           
int rs = 0;
            Process[] arrayProcess
= Process.GetProcesses();
           
foreach (Process p in arrayProcess)
            {
               
if (p.MainWindowTitle.IndexOf(windowTitle) != -1)
                {
                    rs
= p.Id;
                   
break;
                }
            }

           
return rs;
        }

       
//根据进程名获取PID
        public static int GetPidByProcessName(string processName)
        {
            Process[] arrayProcess
= Process.GetProcessesByName(processName);

           
foreach (Process p in arrayProcess)
            {
               
return p.Id;
            }
           
return 0;
        }

       
//根据窗体标题查找窗口句柄(支持模糊匹配)
        public static IntPtr FindWindow(string title)
        {
            Process[] ps
= Process.GetProcesses();
           
foreach (Process p in ps)
            {
               
if (p.MainWindowTitle.IndexOf(title) != -1)
                {
                   
return p.MainWindowHandle;
                }
            }
           
return IntPtr.Zero;
        }

       
//读取内存中的值
        public static int ReadMemoryValue(int baseAddress,string processName)
        {
           
try
            {
               
byte[] buffer = new byte[4];
                IntPtr byteAddress
= Marshal.UnsafeAddrOfPinnedArrayElement(buffer, 0); //获取缓冲区地址
                IntPtr hProcess = OpenProcess(0x1F0FFF, false, GetPidByProcessName(processName));
                ReadProcessMemory(hProcess, (IntPtr)baseAddress, byteAddress,
4, IntPtr.Zero); //将制定内存中的值读入缓冲区
                CloseHandle(hProcess);
               
return Marshal.ReadInt32(byteAddress);
            }
           
catch
            {
               
return 0;
            }
        }

       
//将值写入指定内存地址中
        public static void WriteMemoryValue(int baseAddress, string processName, int value)
        {
            IntPtr hProcess
= OpenProcess(0x1F0FFF, false, GetPidByProcessName(processName)); //0x1F0FFF 最高权限
            WriteProcessMemory(hProcess, (IntPtr)baseAddress, new int[] { value }, 4, IntPtr.Zero);
            CloseHandle(hProcess);
        }
    }
}

评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值