71 lines
2.1 KiB
Python
71 lines
2.1 KiB
Python
|
import win32api
|
|||
|
|
import win32con
|
|||
|
|
import win32process
|
|||
|
|
import win32gui
|
|||
|
|
from ctypes import c_int, byref, c_void_p, windll
|
|||
|
|
from ctypes.wintypes import HANDLE
|
|||
|
|
import time
|
|||
|
|
|
|||
|
|
def get_pid_by_window_title(title):
|
|||
|
|
def callback(hwnd, hwnds):
|
|||
|
|
if win32gui.IsWindowVisible(hwnd) and win32gui.GetWindowText(hwnd) == title:
|
|||
|
|
hwnds.append(hwnd)
|
|||
|
|
return True
|
|||
|
|
|
|||
|
|
hwnds = []
|
|||
|
|
win32gui.EnumWindows(callback, hwnds)
|
|||
|
|
|
|||
|
|
pids = []
|
|||
|
|
for hwnd in hwnds:
|
|||
|
|
_, pid = win32process.GetWindowThreadProcessId(hwnd)
|
|||
|
|
pids.append(pid)
|
|||
|
|
|
|||
|
|
return pids
|
|||
|
|
|
|||
|
|
def read_process_memory(pid, address):
|
|||
|
|
hProcess = win32api.OpenProcess(win32con.PROCESS_ALL_ACCESS, False, pid)
|
|||
|
|
buffer = (c_int * 1)()
|
|||
|
|
bytes_read = c_int(0)
|
|||
|
|
success = windll.kernel32.ReadProcessMemory(HANDLE(hProcess), c_void_p(address), byref(buffer), 4, byref(bytes_read))
|
|||
|
|
win32api.CloseHandle(hProcess)
|
|||
|
|
if not success:
|
|||
|
|
raise Exception("Failed to read process memory")
|
|||
|
|
return buffer[0]
|
|||
|
|
|
|||
|
|
def write_process_memory(pid, address, value):
|
|||
|
|
hProcess = win32api.OpenProcess(win32con.PROCESS_ALL_ACCESS, False, pid)
|
|||
|
|
value_c = c_int(value)
|
|||
|
|
if not windll.kernel32.WriteProcessMemory(HANDLE(hProcess), c_void_p(address), byref(value_c), 4, None):
|
|||
|
|
raise Exception("Failed to write process memory")
|
|||
|
|
win32api.CloseHandle(hProcess)
|
|||
|
|
|
|||
|
|
def main():
|
|||
|
|
window_title = "植物大战僵尸v2.2 "
|
|||
|
|
pids = get_pid_by_window_title(window_title)
|
|||
|
|
|
|||
|
|
if len(pids) == 0:
|
|||
|
|
print("No matching windows found.")
|
|||
|
|
return
|
|||
|
|
|
|||
|
|
pid = pids[0] # 取第一个匹配的PID，如果有多个窗口，你可能需要调整逻辑
|
|||
|
|
base_address = 0x2A9EC0
|
|||
|
|
offset1 = 768
|
|||
|
|
offset2 = 5560
|
|||
|
|
final_address = base_address + offset1 + offset2
|
|||
|
|
|
|||
|
|
try:
|
|||
|
|
original_value = read_process_memory(pid, final_address)
|
|||
|
|
print(f"Original value: {original_value}")
|
|||
|
|
|
|||
|
|
new_value = 9420
|
|||
|
|
write_process_memory(pid, final_address, new_value)
|
|||
|
|
|
|||
|
|
time.sleep(1)
|
|||
|
|
|
|||
|
|
modified_value = read_process_memory(pid, final_address)
|
|||
|
|
print(f"Modified value: {modified_value}")
|
|||
|
|
except Exception as e:
|
|||
|
|
print(e)
|
|||
|
|
|
|||
|
|
if __name__ == "__main__":
|
|||
|
|
main()
|