Java外挂开发之内存修改程序（含源码）类似CE

package com.memory.impl; import java.util.ArrayList; import java.util.Collections; import java.util.HashMap; import java.util.List; import java.util.Map; import com.memory.entity.ExecuteResult; import com.memory.entity.MemoryValue; import com.memory.interfaces.Kernel32_DLL; import com.memory.quantity.OpenProcess; import com.memory.quantity.VirtualProtect; import com.memory.structure.MEMORY_BASIC_INFORMATION; import com.sun.jna.Memory; import com.sun.jna.Pointer; /** * 内存搜索实现类 * 作者:Code菜鸟 * 技术交流QQ:969422014 * CSDN博客:http://blog.csdn.net/qq969422014 * */ public class MemorySearchImpl { //保存查询内存结果信息的结构体类 private MEMORY_BASIC_INFORMATION memoryInfo = new MEMORY_BASIC_INFORMATION(); //查询结果的大小 private int size = memoryInfo.size(); //统计内存扫描数量 public int memoryScore = 0; //保存搜索 public List<MemoryValue> searchResult = Collections.synchronizedList(new ArrayList<MemoryValue>()); /** * 值搜索 * pid 进程ID * value 需要搜索的值 * searchDataType 搜索的实际数据类型 0=INT 1=Short 2=long 3=float 4=double 5=byte * equalsSearchValue 与搜索值相比较 0等于,1大于,2小于 * startBaseAddr 搜索开始的内存基址 * endBaseAddr 搜索结束的内存基址 * increasing 搜索地址的递增量 * **/ public ExecuteResult search(int pid,String searchValue,int searchDataType,int equalsSearchValue,int startBaseAddr,int endBaseAddr) { if(searchResult.size()!=0) searchResult.clear(); ExecuteResult executeResult = new ExecuteResult(); memoryScore = 0; //根据进程ID,打开进程,返回进程句柄 int handle = Kernel32_DLL.INSTANCE.OpenProcess(OpenProcess.PROCESS_ALL_ACCESS, false, pid); //判断进程句柄是否打开成功 int lastError = Kernel32_DLL.INSTANCE.GetLastError(); executeResult.setLastError(lastError); if(lastError==5) { executeResult.setMessage("无法打开进程,系统Debug权限获取失败,请以管理员方式重新运行程序!"); return executeResult; } else if(lastError!=0) { executeResult.setMessage("无法打开该进程,OpenProcess函数返回错误码:"+lastError); return executeResult; } try { //根据基址遍历内存 while(startBaseAddr <= endBaseAddr) { //读取内存信息 int vqe = Kernel32_DLL.INSTANCE.VirtualQueryEx(handle, startBaseAddr, memoryInfo, size); if(vqe==0) break; //判断内存是否已提交,非空闲内存 if (memoryInfo.state == MEMORY_BASIC_INFORMATION.MEM_COMMIT) { //更改内存保护属性为可写可读,成功返回TRUE,执行这个函数,OpenProcess函数必须为PROCESS_ALL_ACCESS boolean vpe = Kernel32_DLL.INSTANCE.VirtualProtectEx(handle, startBaseAddr, memoryInfo.regionSize, VirtualProtect.PAGE_READWRITE, memoryInfo.protect); //判断内存是否可读可写 if(vpe || memoryInfo.protect == MEMORY_BASIC_INFORMATION.PAGE_READWRITE) { //声明一块内存空间,保存读取内存块的值,这个空间的大小与内存块大小相同 Pointer buffer = new Memory(memoryInfo.regionSize); //判断是否读取成功 if(Kernel32_DLL.INSTANCE.ReadProcessMemory(handle, startBaseAddr, buffer, memoryInfo.regionSize, 0)) { //对比的值 double searchValueDouble = Double.parseDouble(searchValue); //根据搜索类型查找对应数据 switch(searchDataType) { //查找整形int,4字节，所以i+=4 case 0: for(int i = 0; i < memoryInfo.regionSize; i+=4) { double memoryValue = buffer.getInt(i); //统计内存数量 memoryScore++; //与搜索值相比较释放符合条件 0等于,1大于,2小于 if((equalsSearchValue ==0 && memoryValue == searchValueDouble) || (equalsSearchValue==1 && memoryValue > searchValueDouble) || (equalsSearchValue==2 && memoryValue < searchValueDouble)) { MemoryValue temp = new MemoryValue(); temp.setAddress(startBaseAddr + i); temp.setAddress16("0x"+Long.toString((startBaseAddr + i), 16).toUpperCase()); temp.setValue(memoryValue+""); searchResult.add(temp); } } break; //查找短整形short,2字节，所以i+=2 case 1: for(int i = 0; i < memoryInfo.regionSize; i+=2) { double memoryValue = buffer.getShort(i); //统计内存数量 memoryScore++; //与搜索值相比较释放符合条件 0等于,1大于,2小于 if((equalsSearchValue ==0 && memoryValue == searchValueDouble) || (equalsSearchValue==1 && memoryValue > searchValueDouble) || (equalsSearchValue==2 && memoryValue < searchValueDouble)) { MemoryValue temp = new MemoryValue(); temp.setAddress(startBaseAddr + i); temp.setAddress16("0x"+Long.toString((startBaseAddr + i), 16).toUpperCase()); temp.setValue(memoryValue+""); searchResult.add(temp); } } break; //查找长整形Long,8字节，所以i+=8 case 2: for(int i = 0; i < memoryInfo.regionSize; i+=8) { double memoryValue = buffer.getLong(i); //统计内存数量 memoryScore++; //与搜索值相比较释放符合条件 0等于,1大于,2小于 if((equalsSearchValue ==0 && memoryValue == searchValueDouble) || (equalsSearchValue==1 && memoryValue > searchValueDouble) || (equalsSearchValue==2 && memoryValue < searchValueDouble)) { MemoryValue temp = new MemoryValue(); temp.setAddress(startBaseAddr + i); temp.setAddress16("0x"+Long.toString((startBaseAddr + i), 16).toUpperCase()); temp.setValue(memoryValue+""); searchResult.add(temp); } } break; //查找单精度浮点 float,4字节，所以i+=4 case 3: for(int i = 0; i < memoryInfo.regionSize; i+=4) { double memoryValue = buffer.getFloat(i); //统计内存数量 memoryScore++; //与搜索值相比较释放符合条件 0等于,1大于,2小于 if((equalsSearchValue ==0 && memoryValue == searchValueDouble) || (equalsSearchValue==1 && memoryValue > searchValueDouble) || (equalsSearchValue==2 && memoryValue < searchValueDouble)) { MemoryValue temp = new MemoryValue(); temp.setAddress(startBaseAddr + i); temp.setAddress16("0x"+Long.toString((startBaseAddr + i), 16).toUpperCase()); temp.setValue(memoryValue+""); searchResult.add(temp); } } break; //查找双精度浮点 double,8字节，所以i+=8 case 4: for(int i = 0; i < memoryInfo.regionSize; i+=8)