关于ReadProcessMemory函数的小问题

人造人

附上代码，自行研究

1. #include <iostream>
   
2. #include <windows.h>
   
3. #include <tlhelp32.h>
   
4. #include <cstdarg>
   
5. 
   
6. UINT32 ReadAddress_4Byte(HANDLE hProcess, UINT32 BaseAddress)
   
7. {
   
8.         UINT32 data;
   
9.         SIZE_T NumberOfBytesRead;
   
10. 
    
11.         ReadProcessMemory(hProcess, (LPCVOID)BaseAddress, &data, 4, &NumberOfBytesRead);
    
12.         return data;
    
13. }
    
14. 
    
15. void WriteAddress_4Byte(HANDLE hProcess, UINT32 BaseAddress, UINT32 data)
    
16. {
    
17.         SIZE_T NumberOfBytesWritten;
    
18. 
    
19.         WriteProcessMemory(hProcess, (LPVOID)BaseAddress, &data, 4, &NumberOfBytesWritten);
    
20. }
    
21. 
    
22. DWORD GetProcessIdByName(std::string ProcessName)
    
23. {
    
24.         DWORD dwProcessId = 0;
    
25.         PROCESSENTRY32 pe32;
    
26.         HANDLE hProcessSnap = CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, 0);
    
27. 
    
28.         pe32.dwSize = sizeof(PROCESSENTRY32);
    
29.         Process32First(hProcessSnap, &pe32);
    
30. 
    
31.         do
    
32.         {
    
33.                 if(ProcessName == pe32.szExeFile)
    
34.                 {
    
35.                        
    
36.                         dwProcessId = pe32.th32ProcessID;
    
37.                         break;
    
38.                 }
    
39.         }
    
40.         while(Process32Next(hProcessSnap, &pe32));
    
41. 
    
42.         CloseHandle(hProcessSnap);
    
43.         return dwProcessId;
    
44. }
    
45. 
    
46. UINT32 GetAddress(HANDLE hProcess, UINT32 base, int level, ...)
    
47. {
    
48.         va_list ap;
    
49. 
    
50.         UINT32 address = base;
    
51.         UINT32 offset;
    
52.         address = ReadAddress_4Byte(hProcess, address);
    
53. 
    
54.         va_start(ap, level);
    
55.         for(int i = 0; i < level - 1; ++i)
    
56.         {
    
57.                 address = ReadAddress_4Byte(hProcess, address + va_arg(ap, UINT32));
    
58.         }
    
59.         offset = va_arg(ap, UINT32);
    
60.         va_start(ap, level);
    
61. 
    
62.         return address + offset;
    
63. }
    
64. 
    
65. int main()
    
66. {
    
67.         DWORD dwProcessId = GetProcessIdByName("PlantsVsZombies.exe");
    
68.         if(dwProcessId == 0)
    
69.                 return 0;
    
70. 
    
71.         HANDLE hProcess = OpenProcess(PROCESS_QUERY_INFORMATION | PROCESS_VM_OPERATION | PROCESS_VM_READ | PROCESS_VM_WRITE, 0, dwProcessId);
    
72.        
    
73. 
    
74.         UINT32 address;
    
75.         address = GetAddress(hProcess, 0x5aa054, 5, 0x3a4, 0x10, 0x230, 0x50, 0x80);
    
76.         UINT32 data = ReadAddress_4Byte(hProcess, address);
    
77.         WriteAddress_4Byte(hProcess, address, data - 100);
    
78.        
    
79.         CloseHandle(hProcess);
    
80.         return 0;
    
81. }
    

复制代码