C#做外挂常用API

using  System;
using  System.Collections.Generic;
using  System.Text;
using  System.Runtime.InteropServices;   // 这个肯定要的  

namespace  WindowsApplication1
{
     class  win32API
    {
         public   const   int  OPEN_PROCESS_ALL  =   2035711 ;
         public   const   int  PAGE_READWRITE  =   4 ;
         public   const   int  PROCESS_CREATE_THREAD  =   2 ;
         public   const   int  PROCESS_HEAP_ENTRY_BUSY  =   4 ;
         public   const   int  PROCESS_VM_OPERATION  =   8 ;
         public   const   int  PROCESS_VM_READ  =   256 ;
         public   const   int  PROCESS_VM_WRITE  =   32 ;

         private   const   int  PAGE_EXECUTE_READWRITE  =   0x4 ;
         private   const   int  MEM_COMMIT  =   4096 ;
         private   const   int  MEM_RELEASE  =   0x8000 ;
         private   const   int  MEM_DECOMMIT  =   0x4000 ;
         private   const   int  PROCESS_ALL_ACCESS  =   0x1F0FFF ;

        


         // 查找窗体
        [DllImport( " User32.dll " , EntryPoint  =   " FindWindow " )]
         public   extern   static  IntPtr FindWindow(
             string  lpClassName, 
             string  lpWindowName
            );

         // 得到目标进程句柄的函数
        [DllImport( " USER32.DLL " )] 
         public   extern   static   int  GetWindowThreadProcessId(
             int  hwnd, 
             ref   int  lpdwProcessId
            );
        [DllImport( " USER32.DLL " )]
         public   extern   static   int  GetWindowThreadProcessId(
            IntPtr hwnd, 
             ref   int  lpdwProcessId
            );

         // 打开进程
        [DllImport( " kernel32.dll " )]
         public   extern   static   int  OpenProcess(
             int  dwDesiredAccess, 
             int  bInheritHandle, 
             int  dwProcessId
            );
        [DllImport( " kernel32.dll " )]
         public   extern   static  IntPtr OpenProcess(
             uint  dwDesiredAccess, 
             int  bInheritHandle, 
             uint  dwProcessId
            );
        
         // 关闭句柄的函数
        [DllImport( " kernel32.dll " , EntryPoint  =   " CloseHandle " )]
         public   static   extern   int  CloseHandle(
             int  hObject
            );

         // 读内存
        [DllImport( " Kernel32.dll  " )]
         public   static   extern  Int32 ReadProcessMemory(
            IntPtr hProcess,
            IntPtr lpBaseAddress,
            [In, Out]  byte [] buffer,
             int  size,
             out  IntPtr lpNumberOfBytesWritten
            );
        [DllImport( " Kernel32.dll  " )]
         public   static   extern  Int32 ReadProcessMemory(
             int  hProcess,
             int  lpBaseAddress,
             ref   int  buffer,
             // byte[] buffer,
             int  size,
             int  lpNumberOfBytesWritten
            );
        [DllImport( " Kernel32.dll  " )]
         public   static   extern  Int32 ReadProcessMemory(
             int  hProcess,
             int  lpBaseAddress,
             byte [] buffer,
             int  size,
             int  lpNumberOfBytesWritten
            );

         // 写内存
        [DllImport( " kernel32.dll " )]
         public   static   extern  Int32 WriteProcessMemory(
            IntPtr hProcess,
            IntPtr lpBaseAddress, 
            [In, Out]  byte [] buffer, 
             int  size, 
             out  IntPtr lpNumberOfBytesWritten
            );

        [DllImport( " kernel32.dll " )]
         public   static   extern  Int32 WriteProcessMemory(
             int  hProcess, 
             int  lpBaseAddress, 
             byte [] buffer, 
             int  size, 
             int  lpNumberOfBytesWritten
            );

         // 创建线程
        [DllImport( " kernel32 " , EntryPoint  =   " CreateRemoteThread " )]
         public   static   extern   int  CreateRemoteThread(
             int  hProcess,
             int  lpThreadAttributes,
             int  dwStackSize,
             int  lpStartAddress,
             int  lpParameter,
             int  dwCreationFlags,
             ref   int  lpThreadId
            );

         // 开辟指定进程的内存空间
        [DllImport( " Kernel32.dll " )]
         public   static   extern  System.Int32 VirtualAllocEx(
         System.IntPtr hProcess,
         System.Int32 lpAddress,
         System.Int32 dwSize,
         System.Int16 flAllocationType,
         System.Int16 flProtect
         );

        [DllImport( " Kernel32.dll " )]
         public   static   extern  System.Int32 VirtualAllocEx(
         int  hProcess,
         int  lpAddress,
         int  dwSize,
         int  flAllocationType,
         int  flProtect
        );

         // 释放内存空间
        [DllImport( " Kernel32.dll " )]
         public   static   extern  System.Int32 VirtualFreeEx(
         int  hProcess,
         int  lpAddress,
         int  dwSize,
         int  flAllocationType
        );
    }
}