实例介绍
【实例简介】
【实例截图】
【核心代码】
using System;
using System.Collections.Generic;
using System.ComponentModel;
using System.Data;
using System.Drawing;
using System.Text;
using System.Windows.Forms;
using System.Runtime.InteropServices;
using System.Diagnostics;
namespace changePlantsVsZombies
{
public partial class Form1 : Form
{
public Form1()
{
InitializeComponent();
}
[DllImportAttribute("kernel32.dll", EntryPoint = "ReadProcessMemory")]
public static extern bool ReadProcessMemory
(
IntPtr hProcess,
IntPtr lpBaseAddress,
IntPtr lpBuffer,
int nSize,
IntPtr lpNumberOfBytesRead
);
[DllImportAttribute("kernel32.dll", EntryPoint = "OpenProcess")]
public static extern IntPtr OpenProcess
(
int dwDesiredAccess,
bool bInheritHandle,
int dwProcessId
);
[DllImport("kernel32.dll")]
private static extern void CloseHandle
(
IntPtr hObject
);
//写内存
[DllImportAttribute("kernel32.dll", EntryPoint = "WriteProcessMemory")]
public static extern bool WriteProcessMemory
(
IntPtr hProcess,
IntPtr lpBaseAddress,
int[] lpBuffer,
int nSize,
IntPtr lpNumberOfBytesWritten
);
//获取窗体的进程标识ID
public static int GetPid(string windowTitle)
{
int rs = 0;
Process[] arrayProcess = Process.GetProcesses();
foreach (Process p in arrayProcess)
{
if (p.MainWindowTitle.IndexOf(windowTitle) != -1)
{
rs = p.Id;
break;
}
}
return rs;
}
//根据进程名获取PID
public static int GetPidByProcessName(string processName)
{
Process[] arrayProcess = Process.GetProcessesByName(processName);
foreach (Process p in arrayProcess)
{
return p.Id;
}
return 0;
}
//根据窗体标题查找窗口句柄（支持模糊匹配）
public static IntPtr FindWindow(string title)
{
Process[] ps = Process.GetProcesses();
foreach (Process p in ps)
{
if (p.MainWindowTitle.IndexOf(title) != -1)
{
return p.MainWindowHandle;
}
}
return IntPtr.Zero;
}
//读取内存中的值
public static int ReadMemoryValue(int baseAddress, string processName)
{
try
{
byte[] buffer = new byte[4];
IntPtr byteAddress = Marshal.UnsafeAddrOfPinnedArrayElement(buffer, 0); //获取缓冲区地址
IntPtr hProcess = OpenProcess(0x1F0FFF, false, GetPidByProcessName(processName));
ReadProcessMemory(hProcess, (IntPtr)baseAddress, byteAddress, 4, IntPtr.Zero); //将制定内存中的值读入缓冲区
CloseHandle(hProcess);
return Marshal.ReadInt32(byteAddress);
}
catch
{
return 0;
}
}
//将值写入指定内存地址中
public static void WriteMemoryValue(int baseAddress, string processName, int value)
{
IntPtr hProcess = OpenProcess(0x1F0FFF, false, GetPidByProcessName(processName)); //0x1F0FFF 最高权限
WriteProcessMemory(hProcess, (IntPtr)baseAddress, new int[] { value }, 4, IntPtr.Zero);
CloseHandle(hProcess);
}
private int baseAddress = 0x006A9EC0; //游戏内存基址
private string processName = "PlantsVsZombies";//游戏进程名字
//读取制定内存中的值
public int ReadMemoryValue(int baseAdd)
{
return ReadMemoryValue(baseAdd, processName);
}
//将值写入指定内存中
public void WriteMemory(int baseAdd, int value)
{
WriteMemoryValue(baseAdd, processName, value);
}
private void btnJQWX_Click(object sender, EventArgs e)
{
if (GetPidByProcessName(processName) == 0)
{
MessageBox.Show("请先运行植物大战僵尸游戏", "提示", MessageBoxButtons.OK, MessageBoxIcon.Information);
return;
}
if (btnJQWX.Text == "启用金钱无限")
{
timer1.Start();
btnJQWX.Text = "关闭金钱无限";
}
else
{
timer1.Stop();
btnJQWX.Text = "启用金钱无限";
}
}
private void btnYGWX_Click(object sender, EventArgs e)
{
if (GetPidByProcessName(processName) == 0)
{
MessageBox.Show("请先运行植物大战僵尸游戏", "提示", MessageBoxButtons.OK, MessageBoxIcon.Information);
return;
}
if (btnYGWX.Text == "启用阳光无限")
{
timer2.Start();
btnYGWX.Text = "关闭阳光无限";
}
else
{
timer2.Stop();
btnYGWX.Text = "启用阳光无限";
}
}
private void timer1_Tick(object sender, EventArgs e)
{
if (GetPidByProcessName(processName) == 0)
{
timer1.Stop();
btnJQWX.Text = "启用金钱无限";
return;
}
int address = ReadMemoryValue(baseAddress); //读取基址(该地址不会改变)
address = address 0x82C; //获取2级地址
address = ReadMemoryValue(address);
address = address 0x28; //得到金钱地址
WriteMemory(address, 0x1869F); //写入数据到地址（0x1869F表示99999）
timer1.Interval = 1000; //重新设定时间间隔，不要太小，否则会占用很多内存
}
private void timer2_Tick(object sender, EventArgs e)
{
if (GetPidByProcessName(processName) == 0)
{
timer2.Stop();
btnYGWX.Text = "启用阳光无限";
return;
}
int address = ReadMemoryValue(baseAddress); //读取基址(该地址不会改变)
address = address 0x768; //获取2级地址
address = ReadMemoryValue(address);
address = address 0x5560; //获取存放阳光数值的地址
WriteMemory(address, 0x1869F); //写入数据到地址（0x1869F表示99999）
timer2.Interval = 1000; //重新设定时间间隔，不要太小，否则会占用很多内存
}
private void btnGO_Click(object sender, EventArgs e)
{
if (GetPidByProcessName(processName) == 0)
{
MessageBox.Show("请先运行植物大战僵尸游戏", "提示", MessageBoxButtons.OK, MessageBoxIcon.Information);
return;
}
if (txt.Text.Trim() == "")
{
MessageBox.Show("请先输入关卡！", "提示", MessageBoxButtons.OK, MessageBoxIcon.Information);
txt.Focus();
return;
}
int address = ReadMemoryValue(baseAddress); //读取基址(该地址不会改变)
address = address 0x82C; //获取2级地址
address = ReadMemoryValue(address);
address = address 0x24;
int lev = 1;
try
{
lev = int.Parse(txt.Text.Trim());
}
catch
{
MessageBox.Show("输入的关卡格式不正确！默认值为1", "提示", MessageBoxButtons.OK, MessageBoxIcon.Information);
}
WriteMemory(address, lev);
}
}
}
好例子网口号：伸出你的我的手 — 分享！
网友评论
小贴士
感谢您为本站写下的评论，您的评论对其它用户来说具有重要的参考价值，所以请认真填写。
- 类似“顶”、“沙发”之类没有营养的文字，对勤劳贡献的楼主来说是令人沮丧的反馈信息。
- 相信您也不想看到一排文字/表情墙，所以请不要反馈意义不大的重复字符，也请尽量不要纯表情的回复。
- 提问之前请再仔细看一遍楼主的说明，或许是您遗漏了。
- 请勿到处挖坑绊人、招贴广告。既占空间让人厌烦，又没人会搭理，于人于己都无利。
关于好例子网
本站旨在为广大IT学习爱好者提供一个非营利性互相学习交流分享平台。本站所有资源都可以被免费获取学习研究。本站资源来自网友分享，对搜索内容的合法性不具有预见性、识别性、控制性，仅供学习研究，请务必在下载后24小时内给予删除，不得用于其他任何用途，否则后果自负。基于互联网的特殊性，平台无法对用户传输的作品、信息、内容的权属或合法性、安全性、合规性、真实性、科学性、完整权、有效性等进行实质审查；无论平台是否已进行审查，用户均应自行承担因其传输的作品、信息、内容而可能或已经产生的侵权或权属纠纷等法律责任。本站所有资源不代表本站的观点或立场，基于网友分享，根据中国法律《信息网络传播权保护条例》第二十二与二十三条之规定，若资源存在侵权或相关问题请联系本站客服人员，点此联系我们。关于更多版权及免责申明参见 版权及免责申明
支持(0) 盖楼(回复)