读取或修改进程某一地址的数据

最新推荐文章于 2025-02-10 07:00:00 发布

转载最新推荐文章于 2025-02-10 07:00:00 发布 · 174 阅读

本内容遵循CC 4.0 BY-SA版权协议

原文链接：http://www.cnblogs.com/pen-ink/archive/2011/02/03/1948941.html

本文演示了如何使用Windows API函数FindWindow, GetWindowThreadProcessId, OpenProcess, ReadProcessMemory和WriteProcessMemory来定位并操作QQ游戏-连连看角色版的进程内存，实现了对游戏中特定地址的数据读取和修改。

HWND hWnd = ::FindWindow(NULL, TEXT("QQ游戏 - 连连看角色版"));
if(hWnd != NULL) {
DWORD pid;
GetWindowThreadProcessId(hWnd, &pid);
HANDLE hProcess = OpenProcess(PROCESS_ALL_ACCESS, false, pid);
if(hProcess != NULL) {
int num;
SIZE_T cnt;
if(ReadProcessMemory(hProcess, (LPCVOID)0x112f78, (LPVOID)&num, 4, &cnt)) {
if(4 == cnt) {
//读取数据成功
}
}
}
}

HWND hWnd = ::FindWindow(NULL, TEXT("QQ游戏 - 连连看角色版"));
if(hWnd != NULL) {
DWORD pid;
GetWindowThreadProcessId(hWnd, &pid);
HANDLE hProcess = OpenProcess(PROCESS_ALL_ACCESS, false, pid);
if(hProcess != NULL) {
int num = 0;
SIZE_T cnt;
if(WriteProcessMemory(hProcess, (LPVOID)0x1163b0, &num, 4, &cnt)) {
if(4 == cnt) {
MessageBox(TEXT("GOOD!"));
}
}
}
}

转载于:https://www.cnblogs.com/pen-ink/archive/2011/02/03/1948941.html