zoukankan      html  css  js  c++  java
  • 一个游戏的进程,读写内存

    一个游戏的进程(魔兽争霸),
    想要读写内存.
    直接openprocess获取的都是0.
    一个朋友说是要打开令牌环,修改权限.
    他提供的API
    OpenProcessToken这句是打开令牌环
    LookupPrivilegeValue这句是寻找令牌环权限模块
    AdjustTokenPrivileges改变权限

    c++代码,爱要不要

    //提升进程访问权限
    bool enableDebugPriv()
    {
      HANDLE hToken;
      LUID sedebugnameValue;
      TOKEN_PRIVILEGES tkp;
       
      if (!OpenProcessToken(GetCurrentProcess(),  
      TOKEN_ADJUST_PRIVILEGES | TOKEN_QUERY, &hToken)) {
      return false;
      }
      if (!LookupPrivilegeValue(NULL, SE_DEBUG_NAME, &sedebugnameValue)) {
      CloseHandle(hToken);
      return false;
      }
      tkp.PrivilegeCount = 1;
      tkp.Privileges[0].Luid = sedebugnameValue;
      tkp.Privileges[0].Attributes = SE_PRIVILEGE_ENABLED;
      if (!AdjustTokenPrivileges(hToken, FALSE, &tkp, sizeof(tkp), NULL, NULL)) {
      CloseHandle(hToken);
      return false;
      }
      return true;
    }

    vb 解决了 
      var hwar3 = Api.FindWindow("", "Warcraft III");  
      var hcurrent = Api.GetCurrentProcess();  
      var hToken = IntPtr.Zero;  
      Api.OpenProcessToken(hcurrent, 40, ref hToken);  
      var luid = new LUID();  
      Api.LookupPrivilegeValue(null, "SeDebugPrivilege", ref luid);  
      TOKEN_PRIVILEGES NewState, PreviousState = new TOKEN_PRIVILEGES();  
      const int ReturnLength = 0;  
      NewState.PrivilegeCount = 1;  
      NewState.Luid = luid;  
      NewState.Attributes = 2;  
      Api.AdjustTokenPrivileges(hToken, 0, ref NewState, 28, ref PreviousState, ReturnLength);  
      int PID;  
      Api.GetWindowThreadProcessId(hwar3, out PID);  
      var hopen = Api.OpenProcess(PROCESS_ALL_ACCESS, false, (UInt32)PID);  

    放出代码,免得以后有人需要同样的内容搜索不到.

  • 相关阅读:
    手机电阻式和电容式触摸屏九大区别
    AMBA、AHB、APB总线简介
    PHY芯片
    S3C2440A Memory design
    ARM、DSP、FPGA的技术特点和区别
    LPC2104的Boot与Remap详解(一)
    Memorymapped I/O
    Motherboard Chipsets and the Memory Map
    88f6282 notes
    太网设计FAQ:以太网MAC和PHY
  • 原文地址:https://www.cnblogs.com/carl2380/p/2296169.html
Copyright © 2011-2022 走看看