#include<Windows.h>
#include<iostream>
#include<vector>
#include<time.h>
#include <TlHelp32.h>
using namespace std;

#define BLOCKMAXSIZE 409600//每次读取内存的最大大小
BYTE* MemoryData;//每次将读取的内存读入这里
short Next[260];




DWORD GetProcessId(char* szProcessName)
{
	HANDLE hProcessSnapShot = NULL;
	PROCESSENTRY32 pe32 = { 0 };

	hProcessSnapShot = ::CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, NULL);

	if (hProcessSnapShot == (HANDLE)-1) return NULL;

	pe32.dwSize = sizeof(PROCESSENTRY32);

	if (Process32First(hProcessSnapShot, &pe32))
	{
		do {
			if (!strcmp(szProcessName, pe32.szExeFile)) return pe32.th32ProcessID;
		} while (Process32Next(hProcessSnapShot, &pe32));
	}
	else
		::CloseHandle(hProcessSnapShot);

	return NULL;
}

//特征码转字节集
WORD GetTzmArray(char* Tzm, WORD* TzmArray)
{
	int len = 0;
	WORD TzmLength = strlen(Tzm) / 3 + 1;

	for (int i = 0; i < strlen(Tzm); )//将十六进制特征码转为十进制
	{
		char num[2];
		num[0] = Tzm[i++];
		num[1] = Tzm[i++];
		i++;
		if (num[0] != '?' && num[1] != '?')
		{
			int sum = 0;
			WORD a[2];
			for (int i = 0; i < 2; i++)
			{
				if (num[i] >= '0' && num[i] <= '9')
				{
					a[i] = num[i] - '0';
				}
				else if (num[i] >= 'a' && num[i] <= 'z')
				{
					a[i] = num[i] - 87;
				}
				else if (num[i] >= 'A' && num[i] <= 'Z')
				{
					a[i] = num[i] - 55;
				}

			}
			sum = a[0] * 16 + a[1];
			TzmArray[len++] = sum;
		}
		else
		{
			TzmArray[len++] = 256;
		}
	}
	return TzmLength;
}

//获取Next数组
void GetNext(short* next, WORD* Tzm, WORD TzmLength)
{
	//特征码（字节集）的每个字节的范围在0-255（0-FF）之间，256用来表示问号，到260是为了防止越界
	for (int i = 0; i < 260; i++)
		next[i] = -1;
	for (int i = 0; i < TzmLength; i++)
		next[Tzm[i]] = i;
}

//搜索一块内存
void SearchMemoryBlock(HANDLE hProcess, WORD* Tzm, WORD TzmLength, unsigned __int64 StartAddress, unsigned long size, vector<unsigned __int64>& ResultArray)
{
	if (!ReadProcessMemory(hProcess, (LPCVOID)StartAddress, MemoryData, size, NULL))
	{
		return;
	}

	for (int i = 0, j, k; i < size;)
	{
		j = i; k = 0;

		for (; k < TzmLength && j < size && (Tzm[k] == MemoryData[j] || Tzm[k] == 256); k++, j++);

		if (k == TzmLength)
		{
			ResultArray.push_back(StartAddress + i);
		}

		if ((i + TzmLength) >= size)
		{
			return;
		}

		int num = Next[MemoryData[i + TzmLength]];
		if (num == -1)
			i += (TzmLength - Next[256]);//如果特征码有问号，就从问号处开始匹配，如果没有就i+=-1
		else
			i += (TzmLength - num);
	}
}

//搜索整个程序
int SearchMemory(HANDLE hProcess, char* Tzm, unsigned __int64 StartAddress, unsigned __int64 EndAddress, int InitSize, vector<unsigned __int64>& ResultArray)
{
	int i = 0;
	unsigned long BlockSize;
	MEMORY_BASIC_INFORMATION mbi;

	WORD TzmLength = strlen(Tzm) / 3 + 1;
	WORD* TzmArray = new WORD[TzmLength];

	GetTzmArray(Tzm, TzmArray);
	GetNext(Next, TzmArray, TzmLength);

	//初始化结果数组
	ResultArray.clear();
	ResultArray.reserve(InitSize);

	while (VirtualQueryEx(hProcess, (LPCVOID)StartAddress, &mbi, sizeof(mbi)) != 0)
	{
		//获取可读可写和可读可写可执行的内存块
		if (mbi.Protect == PAGE_READWRITE || mbi.Protect == PAGE_EXECUTE_READWRITE)
		{
			i = 0;
			BlockSize = mbi.RegionSize;
			//搜索这块内存
			while (BlockSize >= BLOCKMAXSIZE)
			{
				SearchMemoryBlock(hProcess, TzmArray, TzmLength, StartAddress + (BLOCKMAXSIZE * i), BLOCKMAXSIZE, ResultArray);
				BlockSize -= BLOCKMAXSIZE; i++;
			}
			SearchMemoryBlock(hProcess, TzmArray, TzmLength, StartAddress + (BLOCKMAXSIZE * i), BlockSize, ResultArray);

		}
		StartAddress += mbi.RegionSize;

		if (EndAddress != 0 && StartAddress > EndAddress)
		{
			return ResultArray.size();
		}
	}
	free(TzmArray);
	return ResultArray.size();
}

int main()
{
	//初始化MemoryData大小
	MemoryData = new BYTE[BLOCKMAXSIZE];


	//HWND hWnd = FindWindow(NULL, "实时RVC变声器");
	DWORD dwProcId = GetProcessId((char*)"web-client.exe");
	//GetWindowThreadProcessId(hWnd, &dwProcId);



	DWORD pid = 0;
	vector<unsigned __int64> ResultArray;

	if (dwProcId != 0)
	{
		cout << "进程ID：" << dwProcId << endl;
	}
	else
	{
		cout << "进程ID获取失败" << endl;
	}


	//cin >> pid;



	//通过进程ID获取进程句柄
	HANDLE hProcess = OpenProcess(PROCESS_ALL_ACCESS, false, pid);

	//68 74 74 70 73 3A 2F 2F 73 70 61 63 65 2E 62 69 6C 69 62 69 6C 69 2E 63 6F 6D 2F 31 39 37 36 39 31 37 37 34 7D 22 00 00
	int start = clock();
	SearchMemory(hProcess, (char*)"68 74 74 70 73 3A 2F 2F 73 70 61 63 65 2E 62 69 6C 69 62 69 6C 69 2E 63 6F 6D 2F 31 39 37 36 39 31 37 37 34 7D 22 00 00", 0x0000000000000000, 0x00007fffffffffff, 30, ResultArray);
	int end = clock();

	cout << "用时：" << end - start << "毫秒" << endl;
	cout << "搜索到" << ResultArray.size() << "个结果" << endl;

	long long addr = NULL;

	for (vector<unsigned __int64>::iterator it = ResultArray.begin(); it != ResultArray.end(); it++)
	{
		printf("%llx\n", *it);

		addr = *it;
		
	}

	printf("%llx\n", addr);
	//68 74 74 70 3A 2F 2F 73 70 61 63 65 2E 62 69 6C 69 62 69 6C 69 2E 63 6F 6D 2F 31 37 39 37 39 36 30 37 35 32 7D 22 00 00
	BYTE Buffer[] = { 0x68,0x74,0x74,0x70,0x3A,0x2F,0x2F,0x73,0x70,0x61,0x63,0x65,0x2E,0x62,0x69,0x6C,0x69,0x62,0x69,0x6C,0x69,0x2E,0x63,0x6F,0x6D,0x2F,0x31,0x37,0x39,0x37,0x39,0x36,0x30,0x37,0x35,0x32,0x7D,0x22,0x00,0x00 };

	WriteProcessMemory(hProcess, (LPVOID)addr, Buffer, sizeof(Buffer), NULL);



	getchar();
	getchar();
	getchar();
	getchar();
	system("pause");
	return 0;
}

#include <stdio.h>
#include <stdint.h>
#include <limits.h> /* for CHAR_BIT */ /** formatted output of ieee-754 representation of float */
void show_ieee754 (float f)
{
		union
		{
		float f;
		uint32_t u;
		} fu = {.f = f};
		int i = sizeof f * CHAR_BIT;

		printf("  ");
		while (i--)
		printf("%d ", (fu.u >> i) & 0x1);

		putchar('\n');
		printf(" |- - - - - - - - - - - - - - - - - - - - - - "
			   "- - - - - - - - - -|\n");
		printf(" |s|      exp      |                  mantissa"
			   "                   |\n\n");
}

int main(void)
{

		float f = 3.14159f;

		printf("\nIEEE-754 Single-Precision representation of: %f\n\n", f);
		show_ieee754(f);

		return 0;
}