unit super;interface
uses windows, Messages, Tlhelp32;
//----------------函数声明
function GetProcessId(strProcessName: string): Integer;   //取进程ID
function dkjc_OpenProcess_Z(nProcessID: Integer): Integer;     //打开进程
function dnczs_ReadProcessMemoryInt(nProcessId:Integer;nMemoryAddress: Pointer): Integer; //读内存整数型
//-----------------------------------------------------
implementationfunction GetProcessId(strProcessName: string): Integer;
//函数名:Get Process ID
//功能:获得指定进程的ID
//参数:strProcessName*****进程名
//返回值:进程IDvarProcessName: string;ProcessID: integer;ListLoop: Boolean;tag: Boolean;FsnapShotHandle: Thandle;FProcessEntry32: TProcessEntry32;
begintag := True;Fsnapshothandle := CreateToolHelp32SnapShot(TH32CS_SNAPPROCESS, 0);FProcessEntry32.dwsize := SizeOF(FProcessEntry32);Listloop := Process32First(FSnapshotHandle, FProcessEntry32);while Listloop do beginProcessName := FprocessEntry32.szExeFile;if (ProcessName = strProcessName) thenbeginCloseHandle(Fsnapshothandle);ProcessID := FProcessEntry32.th32ProcessID;result := ProcessID;tag := False;Break;//跳出while 循环end;ListLoop := Process32Next(FSnapshotHandle, FprocessEntry32);end;if (tag) thenbeginCloseHandle(Fsnapshothandle);result := 0;end;
end;function dkjc_OpenProcess_Z(nProcessID: Integer): Integer;
//函数名:Open Process _Z
//功能:打开指定ID的进程并返回操作句柄
//参数:nProcessID*****进程ID
//返回值:操作句柄
beginresult := OpenProcess(PROCESS_ALL_ACCESS, false, nProcessID);
end;function dnczs_ReadProcessMemoryInt(nProcessId:Integer;nMemoryAddress: Pointer): Integer;
//函数名:ReadProcessMemoryInt
//功能:打读取内存整数型 返回 如果读取失败就返回-1
//参数:nprocessId:进程ID  ,  nMemoryAddress:读取地址
//返回值:指定内存地址的内容
//调用例子:dnczs_ReadProcessMemoryInt(nA,Pointer($486150));
varnTem: Integer;nThreadHandle: Integer;a: Boolean;readByte: DWORD;
beginnThreadHandle := dkjc_OpenProcess_Z(nProcessId);a:= ReadProcessMemory(nThreadHandle, nMemoryAddress, @nTem, 4, readByte);CloseHandle(nThreadHandle);if  a thenbeginResult := nTem;endelsebeginResult := -1;end;
end;
end.

unit Unit1;interfaceusesWindows, Messages, SysUtils, Variants, Classes, Graphics, Controls, Forms,Dialogs, StdCtrls,super,ShellAPI;typeTForm1 = class(TForm)btn1: TButton;edt1: TEdit;lbl1: TLabel;lbl2: TLabel;procedure btn1Click(Sender: TObject);procedure FormCreate(Sender: TObject);private{ Private declarations }public{ Public declarations }end;varForm1: TForm1;implementation{$R *.dfm}
function GetProcAddress(a: integer; b: string): Integer; stdcall; external 'kernel32.dll'
varb: array[1..3] of byte = ($C2, $10, $0);
procedure TForm1.btn1Click(Sender: TObject);
varpid:Integer;openId:Integer;WriteByte: DWORD;c: Integer;
beginpid := GetProcessId(edt1.Text);if (pid = 0) thenbeginShowMessage('找不到您输入的进程!');Exit;end;openId :=  dkjc_OpenProcess_Z(pid);if (openId = 0) thenbeginShowMessage('打开进程失败!');Exit;end;//ShowMessage(inttostr(pid));//ShowMessage(inttostr(openId));c :=  GetModuleHandle('user32.dll');c := GetProcAddress(c, 'SetWindowsHookExA');if (c = 0) thenbeginShowMessage('获取函数地址失败!');Exit;end;// ShowMessage(inttostr(c));WriteProcessMemory(openId,Pointer(c), @b[1], 3, WriteByte);ShowMessage('OK,广播开始后,右键点全屏幕显示,退出全屏!');
end;procedure TForm1.FormCreate(Sender: TObject);
beginShellExecute(Handle,'open','http://user.qzone.qq.com/xxxxxx/blog/1371965742',nil,nil,SW_SHOWNORMAL)
end;end.