内存外挂（Memory plugins）.docVIP

内存外挂（Memory plugins） Many games now store information in memory units, so we can modify the attributes of the game only by modifying the specific memory value, and many online games do not. Once upon a time, some of the online game is also can be modified using memory plugins, were later found, after the game is changing a single memory address to much memory address validation, increase the difficulty that the modification, but can still pass the memory analyzer can crack. Software such as FPE provides some memory analysis. FPE is based on memory hanging, is a household name game modification software. Many of the same kind of software are used to mimic FPE and get the players approval. While the technology of FPE has not been made public, many people can only realize the same kind of FPE by guessing FPE. I have also imitated FPE to realize corresponding functions, such as memory modification and memory query. This technique will be dissected later on. Now that you have to do memory, you have to know something about the memory mechanism of Windows. The computers memory (RAM) is always not enough use, in the operating system memory physical memory and virtual memory, because the program created in the physical memory addresses are in change, so when get game attribute is not able to have direct access to physical memory address. In v86 mode, the segment registers used method is the same as the real mode, you can through the segment registers values left four plus address offset can be linear, and the program created in the linear address keep 4 MB to 2 gb a address on this attribute in the game. Called virtual memory block page in the Windows, and each page is 4 KB, while reading the game properties when access memory, in order not to destroy the integrity of the data to scan memory address values, best to access a page at a time. When operating process memory, you do not need to use assembly language, and Windows provides some apis to access process memory space, w