火炬之光2_辅助工具 内存读写相关

一个共公类 Data.cs ，用于存放游戏的 信息，如人物属性，

using System;
using System.Collections.Generic;
using System.Diagnostics;
using System.Linq;
using System.Runtime.InteropServices;
using System.Text;
using System.Threading.Tasks;

namespace huojuzhiguang
{
    
    public class Game
    {
        public static String gameName = "Torchlight2";  //游戏的进程名称
        public static bool findGame = false;

    }
    public class Role
    {
        public static int Name_Addr;  //人物名称地址
        public static int Level_Addr;  //等级地址
        public static int Strength_Addr;  //力量
        public static int Dexterity_Addr; //敏捷
        public static int Wit_Addr;    //智力
        public static int Tizhi_Addr;    //体质
        public static int ShuXingDian_Addr;    //属性点
        public static int JiNengDian_Addr;    //技能点
        public static int Money_Addr;    //金币
        public static int Move_Addr;    //移动速度

    }
    public class ZhuangBei
    {
        public static int Name_Addr;  //装备名称
        public static int wlgj_Addr1;  //物理攻击1
        public static int wlgj_Addr2;  //物理攻击2
        public static int wlfy_Addr1;  //物理防御1
        public static int wlfy_Addr2;  //物理防御2
        public static int fmcs_Addr;  //附魔次数
        public static int kongshu_Addr;  //孔数
        
    }

    public class Pet
    {
        public static int Level_Addr;  //宠物等级
        public static int XueLiang_Addr;  //宠物血量
        public static int MoFa_Addr;  //宠物魔法
        public static int Jingyan_Addr;  //宠物经验
        public static int Move_Addr;  //宠物经验
    }
}

 

写一个共公方法 OperateMemory.cs ，减少窗体内的的代码

 

using System;
using System.Collections.Generic;
using System.Diagnostics;
using System.Linq;
using System.Runtime.CompilerServices;
using System.Runtime.InteropServices;
using System.Text;
using System.Windows.Forms;

namespace huojuzhiguang
{
    public class OperateMemory
    {
        /// <summary>
        /// 从指定内存中读取字节集数据
        /// </summary>
        /// <param name="hProcess">进程句柄</param>
        /// <param name="pvAddressRemote">内存地址</param>
        /// <param name="pvBufferLocal">数据存储变量</param>
        /// <param name="dwSize">长度</param>
        /// <param name="pdwNumBytesRead">读取长度</param>   

         #region 引入DLL
        private const uint PROCESS_ALL_ACCESS = 0x1f0fff;
        [DllImport("kernel32.dll")]
        private extern static IntPtr OpenProcess(uint dwDesiredAccess,int bInheritHandle,int dwProcessId);


        [DllImport("kernel32.dll")]
        private extern static bool ReadProcessMemory(IntPtr hProcess, UInt32 pvAddressRemote, int[] pvBufferLocal, UInt32 dwSize, Int32[] pdwNumBytesRead);

        [DllImportAttribute("kernel32.dll", EntryPoint = "WriteProcessMemory")]
        private static extern int WriteProcessMemory(IntPtr hProcess, IntPtr lpBaseAddress, int[] lpBuffer, int nSize, IntPtr lpNumberOfBytesWritten);
        [DllImportAttribute("kernel32.dll", EntryPoint = "WriteProcessMemory")]
        private static extern int WriteProcessMemory(IntPtr hProcess, IntPtr lpBaseAddress, int lpBuffer, int nSize, IntPtr lpNumberOfBytesWritten);

        #endregion

        private static Process[] p = Process.GetProcessesByName(Game.gameName);  //读取游戏进程
        private static IntPtr handle = OpenProcess(0x1F0FFF, 0, p[0].Id);    //获取句柄权限
      
        /// <summary>
        /// 判断游戏是否已运行
        /// </summary>
        /// <param name="gameName">程序进程名</param>
        /// <returns>false 未运行,true已运行</returns>
        public static Boolean findGame(String gameName)
        {
            if (p == null || p.Length < 1)
            {
                return Game.findGame = false;                
            }
            else
            {
                return Game.findGame = true;
            }

        }
       
        /// <summary>
        /// 读取内存,int默认读取4个字节
        /// </summary>
        /// <param name="readAddr">读取地址</param>
        /// <returns></returns>
        public static Int32 readMemory(UInt32 readAddr)
        {
            int[] result = new int[1];
            int[] lpdw = new int[1];
            bool b = ReadProcessMemory(handle, readAddr, result, 4, lpdw);
            return result[0];
        }
     
        /// <summary>
        /// 读取内存,数组为[基址,便宜地址]
        /// </summary>
        /// <param name="readAddr">读取地址</param>
        /// <returns></returns>
       public static Int32 readMemory(int[] readAddr)
       {
           int values = 0;
           for (int i = 0; i < readAddr.Length; i++)
           {
               values = readMemory((uint)(values + readAddr[i]));              
           }          
           return values;
       }

        /// <summary>
        /// 读取内存,数组为[基址,便宜地址]
        /// </summary>
       /// <param name="readAddr">读取地址</param>
        /// <param name="addr">数值存放的逻辑地址</param>
        /// <returns></returns>
       public static Int32 readMemory(int[] readAddr,out int addr)
       {
           int values = 0;
           int temp=0;  //临时存放人物属性的逻辑地址
           for (int i = 0; i < readAddr.Length; i++)
           {
               temp = values + readAddr[i];
               values = readMemory((uint)(values + readAddr[i]));
           }
           addr = temp;
           return values;
       }
     
        /// <summary>
       ///  写入内存4字节
        /// </summary>
       /// <param name="writeAddr">写入地址</param>
       /// <param name="writeNumber">写入数值</param>
       public static void writeMemory(UInt32 writeAddr, UInt32 writeNumber)
       {
           Process[] p = Process.GetProcessesByName(Game.gameName);
           IntPtr handle = OpenProcess(0x1F0FFF, 0, p[0].Id);
           WriteProcessMemory(handle, (IntPtr)writeAddr, new int[] { Convert.ToInt32(writeNumber) }, 4, IntPtr.Zero);
       }

        /// <summary>
       /// 写入内存,类型Byte,1字节
        /// </summary>
       /// <param name="writeAddr">写入地址</param>
       /// <param name="writeNumber">写入数值</param>
       public static void writeByte(UInt32 writeAddr, UInt32 writeNumber)
       {
           WriteProcessMemory(handle, (IntPtr)writeAddr, new int[] { Convert.ToInt32(writeNumber) }, 1, IntPtr.Zero);
       }
        
        /// <summary>
        /// 读取文本
        /// </summary>
       /// <param name="readAddr">读取地址</param>
       /// <param name="str_length">读取长度</param>
       /// <returns>读取内存中的 文本内容,文本长度就是偶数,且2位字节表示一个汉字</returns>
       public static string readText(int[] readAddr, int str_length)
       {
           str_length = str_length * 2;//Unicode每个字符占用2个字节
           int nameAddr;  // 读取每个字节时,放入此临时变量
           byte[] num_String = new byte[str_length]; //存放读取的内容
           byte[] arr1 = new byte[str_length]; //存放整理后的内容
           for (int i = 0; i < str_length; i++)
           {
               readMemory(readAddr, out nameAddr).ToString();//此处读取每个字节
               num_String[i] = (byte)readMemory((uint)nameAddr + (uint)i);
           }
           for (int i = 0; i < num_String.Length; i++)
           {
               arr1[i] = num_String[i];
               if (i > 0 && i % 2 == 1)
               {
                   swap(ref arr1[i - 1], ref arr1[i]);
               }
           }
           return System.Text.Encoding.BigEndianUnicode.GetString(arr1);
       }

        /// <summary>
       /// 读取float数值
        /// </summary>
       /// <param name="readAddr">读取地址</param>
        /// <returns>/浮点类型的单精度值具有 4 个字节,所以此次数组下标没写成动态的</returns>
       public static Int32 readMemoryFloat(UInt32 readAddr)
       {
           int[] result = new int[1];
           int[] lpdw = new int[1];
           bool b = ReadProcessMemory(handle, readAddr, result, 1, lpdw);
           return result[0];
       }
       
        /// <summary>
       /// 读取float数值
        /// </summary>
       /// <param name="readAddr">读取地址</param>
       /// <param name="addr">数值存放的逻辑地址</param>
        /// <returns>/浮点类型的单精度值具有 4 个字节,所以此次数组下标没写成动态的</returns>
       public static float readMemoryFloat(int[] readAddr, out int addr)
       {
           int values = 0;
           byte[] valuesF = new byte[4];
           for (int i = 0; i < readAddr.Length - 1; i++)
           {
               values = readMemory((uint)(values + readAddr[i]));  //拿到最后偏移地址的上一次地址(后面与得到最后地址，而非数值)
           }
           for (int j = 0; j <= 3; j++)
           {
               valuesF[j] = (byte)readMemoryFloat((uint)(values + readAddr[readAddr.Length - 1] + j));
           }
           addr = values + readAddr[readAddr.Length - 1];
           float result = BitConverter.ToSingle(valuesF, 0);
           return result;

       }
        /// <summary>
       /// 写入float数值
        /// </summary>
       /// <param name="writeAddr">读取地址</param>
       /// <param name="value">写入的float数值</param>
       public static void writeMemoryFloat(UInt32 writeAddr, float value)
       {
           byte[] byteArray = BitConverter.GetBytes(value);

           for (int i = 0; i <= byteArray.Length-1; i++)
           {
               writeByte((uint)writeAddr + (uint)i, byteArray[i]);
           }

       }
        
        //交换数组的两个元素
       private static void swap(ref byte num1,ref byte num2)
       {
           byte temp;
           temp = num1;
           num1 = num2;
           num2 = temp;
       }
    }   
}

 

 

然后就是 窗体上的按钮 相应的 事件

 

using System;
using System.Collections;
using System.Collections.Generic;
using System.ComponentModel;
using System.Data;
using System.Diagnostics;
using System.Drawing;
using System.Linq;
using System.Text;
using System.Threading.Tasks;
using System.Windows.Forms;

namespace huojuzhiguang
{
    public partial class hjzg : Form
    {
        public hjzg()
        {   
            InitializeComponent();
        }

        public void btn_readData_Click(object sender, EventArgs e)
        {
            try
            {
                lab_Role_Name.Text = OperateMemory.readText(new[] { 0x0289F22C, 0x34, 0x14, 0x5F0 }, 20);  //角色名称
                lab_Role_SW.Text = (OperateMemory.readText(new[] { 0x0289F22C, 0x34, 0x14, 0x9985c }, 20)); //角色声望
                txt_Role_Move.Text = OperateMemory.readMemoryFloat(new int[] { 0x0289F22C, 0x34, 0x14, 0x2A0 }, out Role.Move_Addr).ToString(); //角色奔跑速度
                txt_Level.Text = OperateMemory.readMemory(new int[] { 0x0289F22C, 0x34, 0x14, 0x110 }, out Role.Level_Addr).ToString(); //等级
                txt_Strength.Text = OperateMemory.readMemory(new int[] { 0x00400000 + 0x0249F22C, 0x34, 0x14, 0x578 }, out Role.Strength_Addr).ToString();//力量
                txt_Dexterity.Text = OperateMemory.readMemory(new int[] { 0x00400000 + 0x0249F22C, 0x34, 0x14, 0x574 }, out Role.Dexterity_Addr).ToString();//敏捷
                txt_Wit.Text = OperateMemory.readMemory(new int[] { 0x00400000 + 0x0249F22C, 0x34, 0x14, 0x580 }, out Role.Wit_Addr).ToString();//智力
                txt_Tizhi.Text = OperateMemory.readMemory(new int[] { 0x00400000 + 0x0249F22C, 0x34, 0x14, 0x57C }, out Role.Tizhi_Addr).ToString();//体质
                txt_ShuXingDian.Text = OperateMemory.readMemory(new int[] { 0x00400000 + 0x0249F22C, 0x34, 0x14, 0x5A8 }, out Role.ShuXingDian_Addr).ToString();//属性点
                txt_JingNengDian.Text = OperateMemory.readMemory(new int[] { 0x00400000 + 0x0249F22C, 0x34, 0x14, 0x5AC }, out Role.JiNengDian_Addr).ToString();//技能点
                txt_Money.Text = OperateMemory.readMemory(new int[] { 0x00400000 + 0x0249F22C, 0x34, 0x14, 0x590 }, out Role.Money_Addr).ToString();//金币

                btn_write.Enabled = true;// 保存人物属性按钮
                
            }
            catch (Exception)
            {
            }

        }

        private void btn_write_Click(object sender, EventArgs e)
        {
            try
            {
                if (lab_Role_Name.Text.Length <= 0)
                {
                    MessageBox.Show("游戏保存错误!");
                }

                OperateMemory.writeMemory((uint)Role.Level_Addr, (uint)int.Parse(txt_Level.Text));
                OperateMemory.writeMemory((uint)Role.Strength_Addr, (uint)int.Parse(txt_Strength.Text));
                OperateMemory.writeMemory((uint)Role.Dexterity_Addr, (uint)int.Parse(txt_Dexterity.Text));
                OperateMemory.writeMemory((uint)Role.Wit_Addr, (uint)int.Parse(txt_Wit.Text));
                OperateMemory.writeMemory((uint)Role.Tizhi_Addr, (uint)int.Parse(txt_Tizhi.Text));
                OperateMemory.writeMemory((uint)Role.ShuXingDian_Addr, (uint)int.Parse(txt_ShuXingDian.Text)); //属性点
                OperateMemory.writeMemory((uint)Role.JiNengDian_Addr, (uint)int.Parse(txt_JingNengDian.Text)); //技能点
                OperateMemory.writeMemory((uint)Role.Money_Addr, (uint)int.Parse(txt_Money.Text)); //金币
                OperateMemory.writeMemoryFloat((uint)Role.Move_Addr, float.Parse(txt_Role_Move.Text));//角色奔跑速度
            }
            catch (Exception)
            {
            }
        }

        private void timer_findGame_Tick(object sender, EventArgs e)
        {
            try
            {
                if (OperateMemory.findGame(Game.gameName))
                {
                    lab_State.Text = "游戏已运行！";
                    if (OperateMemory.readMemory(new int[] { 0x0289F22C, 0x34, 0x14, 0x110 }) >= 1)
                    {
                        txt_Level.Enabled = true;
                        txt_Strength.Enabled = true;
                        txt_Dexterity.Enabled = true;
                        txt_Wit.Enabled = true;
                        txt_Tizhi.Enabled = true;
                        txt_ShuXingDian.Enabled = true;
                        txt_JingNengDian.Enabled = true;
                        txt_Money.Enabled = true; //金币
                        txt_Role_Move.Enabled = true;

                        btn_readData.Enabled = true;  //读取人物属性按钮
                    }

                }
                else
                {
                    lab_State.Text = "抱歉,游戏未运行！";
                    txt_Level.Text = "";
                    txt_Level.Enabled = false;

                    txt_Strength.Text = "";
                    txt_Strength.Enabled = false;

                    txt_Dexterity.Text = "";
                    txt_Dexterity.Enabled = false;

                    txt_Wit.Text = "";
                    txt_Wit.Enabled = false;

                    txt_Tizhi.Text = "";
                    txt_Tizhi.Enabled = false;

                    txt_ShuXingDian.Text = "";
                    txt_ShuXingDian.Enabled = false;

                    txt_JingNengDian.Text = "";
                    txt_JingNengDian.Enabled = false;

                    txt_Money.Text = "";
                    txt_Money.Enabled = false;

                    txt_Role_Move.Text= "";
                    txt_Role_Move.Enabled = false;

                    btn_readData.Enabled = false;  //读取人物属性
                    btn_write.Enabled = false;  //保存人物属性

                }
            }
            catch (Exception ex)
            {
            }
        }

        private void btn_ReadZB_Click(object sender, EventArgs e)
        {

            try
            {
                txt_ZBName.Text = "";
                txt_ZBName.Text = OperateMemory.readText(new[] { 0x00400000 + 0x03437E04, 0x18, 0x98, 0xA0 }, 20);
                if (txt_ZBName.Text.Length <= 0)
                {
                    MessageBox.Show("请将物品放入附魔窗体内!","头上有小闪电");
                    return;
                }
                txt_ZBwlgj.Text = OperateMemory.readMemory(new int[] { 0x00400000 + 0x03437E04, 0x18, 0x98, 0x134 }, out ZhuangBei.wlgj_Addr1).ToString();//物理攻击1
                txt_ZBwlgj.Text = OperateMemory.readMemory(new int[] { 0x00400000 + 0x03437E04, 0x18, 0x98, 0x138 }, out ZhuangBei.wlgj_Addr2).ToString();//物理攻击2

                txt_ZBwlfy.Text = OperateMemory.readMemory(new int[] { 0x00400000 + 0x03437E04, 0x18, 0x98, 0x140 }, out ZhuangBei.wlfy_Addr1).ToString();//物理防御1
                txt_ZBwlfy.Text = OperateMemory.readMemory(new int[] { 0x00400000 + 0x03437E04, 0x18, 0x98, 0x13C }, out ZhuangBei.wlfy_Addr2).ToString();//物理防御2

                txt_ZBfmcs.Text = OperateMemory.readMemory(new int[] { 0x00400000 + 0x03437E04, 0x18, 0x98, 0x148 }, out ZhuangBei.fmcs_Addr).ToString();//附魔次数
                com_ZBks.Text = OperateMemory.readMemory(new int[] { 0x00400000 + 0x03437E04, 0x18, 0x98, 0x1D4 }, out ZhuangBei.kongshu_Addr).ToString();//打孔数

            }
            catch (Exception ex)
            {
                
            }
        }

        private void btn_ZBSave_Click(object sender, EventArgs e)
        {
            try
            {
                if (txt_ZBName.Text.Length <= 0)
                {
                    MessageBox.Show("请将物品放入附魔窗体内!", "头上有小闪电");
                    return;
                }
                OperateMemory.writeMemory((uint)ZhuangBei.wlgj_Addr1, (uint)int.Parse(txt_ZBwlgj.Text));//物理攻击1
                OperateMemory.writeMemory((uint)ZhuangBei.wlgj_Addr1, (uint)int.Parse(txt_ZBwlgj.Text));//物理攻击2

                OperateMemory.writeMemory((uint)ZhuangBei.wlfy_Addr1, (uint)int.Parse(txt_ZBwlfy.Text));//物理防御1
                OperateMemory.writeMemory((uint)ZhuangBei.wlfy_Addr2, (uint)int.Parse(txt_ZBwlfy.Text));//物理防御2

                OperateMemory.writeMemory((uint)ZhuangBei.fmcs_Addr, (uint)int.Parse(txt_ZBfmcs.Text));//附魔次数
                OperateMemory.writeMemory((uint)ZhuangBei.kongshu_Addr, (uint)int.Parse(com_ZBks.Text));//打孔数
            }
            catch (Exception)
            {
            }
        }
        private void btn_CWread_Click(object sender, EventArgs e)
        {
            try
            {
                lab_Pet_Name.Text = OperateMemory.readText(new[] { 0x00400000 + 0x31C6674, 0x14, 0x3b5f0 }, 20);
                txt_CWLevel.Text = OperateMemory.readMemory(new int[] { 0x00400000 + 0x31C6674, 0x14, 0x3b110 }, out Pet.Level_Addr).ToString(); //宠物等级
                txt_Pet_XueL.Text = OperateMemory.readMemory(new int[] { 0x00400000 + 0x31C6674, 0x14, 0x3b564 }, out Pet.XueLiang_Addr).ToString(); //宠物血量
                txt_Pet_MF.Text = OperateMemory.readMemory(new int[] { 0x00400000 + 0x31C6674, 0x14, 0x3b588 }, out Pet.MoFa_Addr).ToString(); //宠物魔法
                txt_CWJingyan.Text = OperateMemory.readMemory(new int[] { 0x00400000 + 0x31C6674, 0x14, 0x3b594 }, out Pet.Jingyan_Addr).ToString(); //宠物经验
                txt_Pet_Move.Text = OperateMemory.readMemoryFloat(new int[] { 0x00400000 + 0x31C6674, 0x14, 0x3b2a0 }, out Pet.Move_Addr).ToString(); //宠物移动速度
            }
            catch (Exception ex)
            {
                
            }
        }

        private void btn_CWsave_Click(object sender, EventArgs e)
        {
            try
            {
                if (lab_Pet_Name.Text.Length <= 0)
                {
                    MessageBox.Show("游戏保存错误!");
                }

                OperateMemory.writeMemory((uint)Pet.Level_Addr, (uint)int.Parse(txt_CWLevel.Text));//等级
                OperateMemory.writeMemory((uint)Pet.XueLiang_Addr, (uint)int.Parse(txt_Pet_XueL.Text));//血量
                OperateMemory.writeMemory((uint)Pet.MoFa_Addr, (uint)int.Parse(txt_Pet_MF.Text));//魔法
                OperateMemory.writeMemory((uint)Pet.Jingyan_Addr, (uint)int.Parse(txt_CWJingyan.Text));
                OperateMemory.writeMemoryFloat((uint)Pet.Move_Addr, float.Parse(txt_Pet_Move.Text));//角色奔跑速度
            }
            catch (Exception)
            {
            }
        }

    }
}

 

 

游戏修改截图  虐boss啦