From the game for dynamic memory data
Sunday, January 27th, 2008I just play a few Fengjuetanke, lost several set to make trouble that this silly, Below started to talk about how to get the game s dynamic data (address change), in order to get Fengjuetanke tanks X coordinates as an example
————————————————– —————————-
Tools:
SoftICE dynamic debugging procedures, games amend tools (Jinshan Paladin), the anti-compilation (W32Dasm), Hex Workshop
————————————————– —————————-
First, find memory X coordinate a tank with Jinshan Chivalric search, as follows (Jinshan Chivalric I do not say that the use of a)
Some of the mobile tanks left on the search reduce the right mobile tanks, the search for increased
Repeated search will find an address (of course, other games may be more than one), here are 08 BFAACC
Note: dynamic memory allocation is once again if the next time you search, address will no longer be 08 BFAACC
2, amended the code to find
X coordinates)
Loading SoftIce
In the state of Ctrl + D game out of SoftIce, input BPM 08BFAACC W, W said here if this address will be interrupted to write games, mobile tanks, to the left, interrupt procedures, SoftIce is at the top of a 004,640 B3 MOV DWORD PTR ESI +000001 A4 , EAX
This is the revised code coordinates tanks, of course, shifted to right one can be found, here is not to repeat 3, modify the program so that the data into static dynamic here that point the way, the amendment procedure, including two, a direct amendment procedure, A revision is in the process of memory (RAM patches), lazy as I am here, the first by a modified procedure:
Fengjuetanke procedures exist Fortress2.dat, if you put this document renamed EXE can run the same document, here we put him to revise into Fortress2.