修改远程进程空间数据示例

yangcock

于 2011-12-06 15:27:34 发布

阅读量283

点赞数

分类专栏： TEST 文章标签： access null

本文链接：https://blog.csdn.net/yangcock/article/details/7046328

版权

TEST 专栏收录该内容

1 篇文章 0 订阅

订阅专栏

void CTestDlgDlg::OnButton1()
{
   // TODO: Add your control notification handler code here
   HWND hwnd = ::FindWindow(NULL, "dtor21Test");
   if (!hwnd)
   {
       MessageBox("can't find!");
       return;
   }

   DWORD pid = 0;
   GetWindowThreadProcessId(hwnd, &pid);
   if (!pid)
   {
       MessageBox("! pid");
       return;
   }

   HANDLE h = OpenProcess(PROCESS_ALL_ACCESS,   FALSE, pid);
   if (!h)
   {
       MessageBox("!h");
       return;
   }

   LPVOID rAddr = (LPVOID)0x401000;
   UCHAR ucwtBuf[4] = {0x01,0x01,0x01,0x01};
   DWORD rwt = 0;
   if (!WriteProcessMemory(h, rAddr, ucwtBuf, 4, &rwt))
   {
       MessageBox("!WriteProcessMemory(h, rAddr, ucwtBuf, 4, &rwt)");
       return;
   }

}