JavaRush /Blog Java /Random-MS /Manipulasi Memori Java

Manipulasi Memori Java

Diterbitkan dalam kumpulan
Hello Guru Jawa! Secara umum, saya bertanya kepada diri sendiri soalan berikut: bolehkah saya membaca dan menulis ke dalam aplikasi proses yang saya tulis terima kasih kepada perpustakaan Manipulasi Memori Java ? Ini bukan kali pertama saya bertanya soalan ini, tetapi terdapat sedikit maklumat mengenai isu ini di Internet, kerana semua orang menulis bahawa ini adalah mustahil di Jawa, walaupun saya melihat beberapa catatan bahawa ini adalah nyata. Itulah sebabnya saya ingin meminta bantuan anda, bagaimana saya boleh melaksanakan produk ini? :)
public static void main(String args[]) {
    	//Get ProcessID
    	long pid = findProcessId("nuclearthrone.exe");
    	if(pid == 0) {
    		System.err.println("ProcessId not found.");
    		System.exit(1);
    	}
    	System.out.println(pid);

    	Pointer readProcess = openProcess(readRight, pid);//opens process with read privileges
    	Pointer writeProcess = openProcess(writeRight, pid);

    	int size = 4;//we want to read 4 bytes
    	int adress = Integer.parseInt("036CB314", 16);

    	//ReadMemory
    	 read = readMemory(readProcess, adress, size);
    	System.out.println(read.getInt(0));//value of memory read

    	//Write Memory
    	Cheater.writeMemory(4, 1079246848, writeProcess, adress);
    }

    static long findProcessId(String processName) {
		//This Reference will contain the processInfo that will be parsed t recover the ProcessId
		Tlhelp32.PROCESSENTRY32.ByReference processInfo = new Tlhelp32.PROCESSENTRY32.ByReference();

		//this handle allows us to parse the process map
		WinNT.HANDLE processesSnapshot = kernel32.CreateToolhelp32Snapshot(Tlhelp32.TH32CS_SNAPPROCESS, new DWORD(0L));
		if(processesSnapshot == kernel32.INVALID_HANDLE_VALUE) {
			if(DEBUG) System.err.println("INVALID_HANDLE_VALUE");
			return 0L;
		}

		try {// This will parse all the processes to find the process id corresponding to the process name
			kernel32.Process32First(processesSnapshot, processInfo);
			if(processName.equals(Native.toString(processInfo.szExeFile))) {
				if(DEBUG) if(DEBUG) System.out.println("Process " + processName + " found : " + processInfo.th32ProcessID.longValue());
                return processInfo.th32ProcessID.longValue();
			}

			while(kernel32.Process32Next(processesSnapshot, processInfo)) {
				if(processName.equals(Native.toString(processInfo.szExeFile)))
                {
                    if(DEBUG) System.out.println("Process " + processName + " found : " + processInfo.th32ProcessID.longValue());
                    return processInfo.th32ProcessID.longValue();
                }
			}

			if(DEBUG) System.out.println("Did not find requested Process: " + processName);
			return 0L;
		} finally {
			kernel32.CloseHandle(processesSnapshot);
		}
	}//findProcessId

    static Pointer openProcess( permissions, long pid) {
    	Pointer process = myKernel32.OpenProcess(permissions, true, (int)pid);
    	 process;
    }
    static Memory readMemory( process, int adress, int readSize) {
    	 output = new Memory(readSize);
		if(!myKernel32.ReadProcessMemory(process, adress, output, readSize, new IntByReference(0))) {
			int error =myKernel32.getLastError();
			switch(error) {
			default:
				System.err.println("Failed to read the process: " + error);
				break;
			case 0x12B:
				System.err.println("Failed to read the specified adress");
				break;
			}
			System.exit(1);
		}
		return output;
    }
    static void writeMemory(int readSize, int newValue, Pointer process, long adress) {
    	IntByReference written = new IntByReference(0);
		 toWrite = new Memory(readSize);

		toWrite.setInt(0, newValue);

		if(!myKernel32.WriteProcessMemory(process, (int)adress toWrite, , written)) {
			int error = myKernel32.getLastError();
			switch(error)
            {
                default:
                    System.err.println("Failed to write in the process : " + error);
                    break;
            }
            System.exit(1);
		}
		System.out.println("Wrote " + written.getValue() + " times");
    }
Komen
TO VIEW ALL COMMENTS OR TO MAKE A COMMENT,
GO TO FULL VERSION