Delphi写内存补丁范例

最新推荐文章于 2025-09-13 11:52:45 发布

转载最新推荐文章于 2025-09-13 11:52:45 发布 · 1.1k 阅读

标签

#delphi #forms #string #byte #class

DELPHI编程专栏收录该内容

379 篇文章

订阅专栏

本文介绍了一种使用Delphi实现的内存补丁注入技术。该技术通过修改正在运行进程的内存来达到修复或解锁软件的目的。文章展示了如何创建并挂载进程、读取和写入进程内存的具体步骤。

interface uses Windows, Messages, SysUtils, Variants, Classes, Graphics, Controls, Forms, Dialogs; type TForm1 = class(TForm) procedure FormCreate(Sender: TObject); private { Private declarations } public { Public declarations } end; var Form1: TForm1; implementation {$R *.dfm} var si:STARTUPINFO ; pi:PROCESS_INFORMATION ; NewData : array[0..1] of byte = ($90,$90); NewDataSize : DWORD; Bytesread : DWORD; Olddata : array[0..1] of byte; dir:string ; procedure TForm1.FormCreate(Sender: TObject); begin dir:=ExtractFileDir(Application.ExeName ); if FileExists(dir+'/crackme1.exe') then begin ZeroMemory(@Pi,SizeOf(pi)); FillChar (si,SizeOf(si),0); si.cb :=SizeOf(si); NewDatasize :=SizeOf(NewData ) ; if CreateProcess (nil,'crackme1.exe',nil,nil,False ,CREATE_SUSPENDED ,nil ,nil,si,pi)=True then begin ReadProcessMemory(pi.hProcess ,Pointer($00401586 ),@olddata,2 ,BytesRead ); if (OldData[0]=$75) and (OldData[1]=$18) then begin WriteProcessMemory(pi.hProcess ,Pointer($00401586 ),@newdata,NewDatasize ,BytesRead ); ResumeThread(pi.hThread ); CloseHandle(pi.hProcess ); CloseHandle(pi.hThread ); end else MessageBox(Handle, PChar('无法打入内存补丁'), PChar('错误'),MB_ICONERROR or MB_OK); TerminateProcess(pi.hProcess ,0); CloseHandle(pi.hProcess ); CloseHandle(pi.hThread ); end; end else begin ShowMessage('本补丁必须与原文件放在同一目录下'); Application.Terminate ; end; end; end.