内存外挂（Memory plug-in）.docVIP

内存外挂（Memory plug-in） Many games now store some information into memory units, so we can only modify the specific memory value to modify the properties in the game, and many online games are no more than that. Only a short while ago, some online games can also be used to modify the external memory, was later found, these games have a single memory address into multiple memory address check, modify to increase the difficulty, but you can still can break through the memory analyzer. Software such as FPE provides some memory analysis capabilities. FPE is based on memory plug-in leader, is a well-known game modification software. Many similar software is imitated FPE and get the players approval. And the FPE implementation of the technology so far has not been open, and many people can only guess through FPE method of implementation, similar plug-in. I have also imitated FPE to realize the corresponding functions, such as memory modification, memory query and so on. This technique will be analyzed later. Since you want to do the memory plug-in, then you must understand the memory mechanism of Windows. The memory of the computer (RAM) is always not enough, in the operating system memory has physical memory and virtual memory, because the program created into the physical memory address is changing, so the game does not get attribute direct access to physical memory address. In v86 mode, segment registers used in the same way as with real mode, you can use the left 4 bits plus the address offset can be obtained by linear address value segment register, and program created in the linear address retained in the section of the 4MB-2GB address, the game is put in this attribute. In windows, the virtual memory block is called a page, and each page is 4KB. When you read the game properties while accessing memory, youd better access one page at a time without damaging the data integrity for quick access to memory address values. In the operation process memory, there is no need t