怎样写一个游戏修改器,300分，要详细可用代码、例程！(300分)

lml · 2001-04-21

特别是怎样确定目标地址的？ 最好用starcraft为例。

lha · 2001-04-21

我也想知道哦。如有比较好的答案，我再出300。

lml · 2001-04-29

no one know? 600分也没人要？

beta · 2001-04-30

给你一个思路： 先查找读取指定进程(process)的内存数据 比如水晶原来为1054，那么就把找到的 所有值为1054的地址存到一个数组（或TList） 里面，然后改变水晶的值为1062，接着 在刚才找到的那些地址里面再找，以缩小范围 如此循环，到唯一地址为止，就是要找的地址 修改它的值就可以了 可以用到以下函数： ReadProcessMemory用于读取进程(process)的内存数据 WriteProcessMemory用于写进程的内存数据 VirtualProtect用于修改进程的内存数据存取保护的区域.(详见Win32的帮助文件) 因为我也没做过，所以只能说这么多了

wangxd · 2001-04-30

哈哈，又可以捞分了，这段代码我也没试过，别人写的，你试试把 #include <vcl.h> #include <stdio.h> #include <shellapi.h> using namespace std; #pragma hdrstop #include "about.h" #include "mm3.h" #include "heroes3.h" //-------------------------------------------------------------------------- - #pragma package(smart_init) #pragma resource "*.dfm" TForm1 *Form1; static DWORD iPID,iTID; static HANDLE hHeroes3; static hero heroes[1000]; static int BASE_ADDR=0x132ffc0+sizeof(RAW_HERO)-16;//133595c;//0x1359fd2;//0 x134d633; static int curr_addr; static int count; static int resource_addr=0x132f99c; static DWORD pppppp; #define PEEK(addr,buffer,size)/     ReadProcessMemory(hHeroes3,(void*)(addr),buffer,size,&pppppp) #define POKE(addr,buffer,size)/     WriteProcessMemory(hHeroes3,(void*)(addr),buffer,size,&pppppp) static void ShowHero(hero * h); static void ShowResources(int * r); static  int HeroIndex(); static int hcount=156; static char strings[20480]; static char * unit_names[300]; static char magic_strings[20480]; static char magic_legend_strings[20480]; static char * magic_names[300]; static char * magic_legends[300]; class my_string { public:     my_string(int aa){         sprintf(buffer,"%d",aa);     }     char buffer[256]; }; //-------------------------------------------------------------------------- - __fastcall TForm1::TForm1(TComponent* Owner)     : TForm(Owner) { } //-------------------------------------------------------------------------- - void __fastcall TForm1::FormCreate(TObject *Sender) {     char buf[32];     char *p;     OSVERSIONINFO osvi;     memset(&osvi,0,sizeof(osvi));     osvi.dwOSVersionInfoSize =sizeof(osvi);     GetVersionEx (&osvi);     bool bIsWindows95orLater =          osvi.dwPlatformId == VER_PLATFORM_WIN32_WINDOWS?          true : false;     if(bIsWindows95orLater){         BASE_ADDR=0x1366d1b-16;         resource_addr=0x136627c;     }     HWND hHero3=FindWindow(NULL,"Heroes of Might and Magic III: Armageddon's  Blade");     if(hHero3){         iTID=GetWindowThreadProcessId(hHero3,&iPID);         hHeroes3=OpenProcess(PROCESS_ALL_ACCESS,false,iPID);     }else{         MessageBox(Handle,"Heroes III AB is not running,so quit.","mm3",MB_O K);         //Application->Terminate();         return;     }     sprintf(buf,"%08x",hHero3);     int i;     int start=BASE_ADDR;     for(i=0;i<hcount;i++){         RAW_HERO * hh=new RAW_HERO;         DWORD pp;         ReadProcessMemory(hHeroes3,(void*)start,hh,sizeof(RAW_HERO),&pp);         heroes.set_buffer((void*)hh);         start+=sizeof(RAW_HERO);         this->ComboBox3->Items->Add(hh->name);     };     curr_addr=BASE_ADDR+155*HERO_SIZE;     ComboBox3->ItemIndex=0;     int r[7];     char rbuf[10240];     PEEK(resource_addr,rbuf,10240);     p=rbuf;     while( !strncmp(p+48,"Computer",8) ) p+=0x160;     resource_addr+=p-rbuf;     memcpy(r,p,7*sizeof(int));     //show resources     ShowResources(r);     #define name_count  (150)     char * offsets[name_count*4];     PEEK((void*)(0x67a890+4*150),offsets,name_count*4); //    FILE * fp=fopen("names.bin","wb");   //  fwrite(names,1,10240*2,fp);     //fclose(fp);     //??????     p=strings;     for(i=0;i<name_count;i++)     {         PEEK((void *)offsets,p,256);         unit_names[i =p;         this->ListBox1->Items->Add(p);         this->ListBox2->Items->Add(p);         p+=strlen(p)+1;     };     ShowHero(heroes);     //magic names     int m_count=0,cc=0;     int magics[2736];     char *pp;     pp=magic_strings;     PEEK((void*)(0x66a2dc),(void*)magics,2736*sizeof(char*));     for(i=0;i<2736;i++){         int offset=(int)(magics);         char buf[256];         if(offset > 0x1000000){             if( PEEK((void*)offset,buf,256) ){                 ListBox4->Items->Add(buf);                 strcpy(pp,buf);                 magic_names[m_count++ =pp;                 for(int kkkk=0;kkkk<strlen(pp);kkkk++)                     if(pp[kkkk] == '{' || pp[kkkk =='}')                        pp[kkkk ='/n';                 pp+=strlen(pp)+1;                 cc++;             };         }     } } //-------------------------------------------------------------------------- - void ShowHero(hero * h) {     int index=h-heroes;     //PEEK(BASE_ADDR+HERO_SIZE*index,heroes[index].get_buffer(),HERO_SIZE);     char * skills=h->skills();     Form1->Edit1->Text=(int)skills[0];     Form1->Edit2->Text=(int)skills[1];     Form1->Edit3->Text=(int)skills[2];     Form1->Edit4->Text=(int)skills[3];     int * units=h->unit_codes();     int * nums=h->unit_counts(); #define code(m,p) /     Form1->Button##m->Caption=(units[p == -1 ? /         AnsiString("") : AnsiString(unit_names[units[p]])) #define num(m,p)  /     Form1->Edit##m->Text=(units[p == -1? AnsiString(0) : AnsiString(nums[p]) )     code(4,0);     code(5,1);     code(6,2);     code(7,3);     code(8,4);     code(9,5);     code(10,6);     num(12,0);     num(13,1);     num(14,2);     num(15,3);     num(16,4);     num(17,5);     num(18,6);     Form1->Edit19->Text=*(h->m_spellleft);     Form1->Edit20->Text=*(h->m_movement);     //display magic information     int i;     Form1->ListBox3->Clear();     for(i=0;i<hero::magic_count;i++){         if(h->m_magics){             //Form1->ListBox3->Items->Add(magic_names[i*6]);         };     } } void __fastcall TForm1::ComboBox3Change(TObject *Sender) {     int index=HeroIndex();     if(index >=0){         hero * h=heroes+index;         ShowHero(h);     }; } //-------------------------------------------------------------------------- - void __fastcall TForm1::Button2Click(TObject *Sender) {     RAW_HERO hh;     DWORD pp;     curr_addr-=sizeof(RAW_HERO);     int start=curr_addr;     ReadProcessMemory(hHeroes3,(void*)start,&hh,sizeof(RAW_HERO),&pp);     hero h(&hh);     ShowHero(&h);     this->Label7->Caption=AnsiString(h.name())+my_string(--::count).buffer; } //-------------------------------------------------------------------------- - void __fastcall TForm1::Button3Click(TObject *Sender) {     RAW_HERO hh;     curr_addr+=sizeof(RAW_HERO);     int start=curr_addr;     ReadProcessMemory(hHeroes3,(void*)start,&hh,sizeof(RAW_HERO),&pppppp);     hero h(&hh);     ShowHero(&h);     this->Label7->Caption=AnsiString(h.name())+my_string(++::count).buffer; } //-------------------------------------------------------------------------- - void __fastcall TForm1::Label1MouseMove(TObject *Sender, TShiftState Shift,       int X, int Y) {     Label1->Font->Color=clBlue;     Label1->Font->Style<<fsUnderline; } //-------------------------------------------------------------------------- - void __fastcall TForm1:anel1MouseMove(TObject *Sender, TShiftState Shift,       int X, int Y) {     Label1->Font->Color=clBlack;     Label1->Font->Style >>fsUnderline; } //-------------------------------------------------------------------------- - void __fastcall TForm1::Label1Click(TObject *Sender) {     ShellExecute(Handle, "open", "mailto:jhunter@263.net", NULL, NULL, SW_SH OWNORMAL); } //-------------------------------------------------------------------------- - void __fastcall TForm1::Button1Click(TObject *Sender) {     int i;     if( this->PageControl1->ActivePage == this->TabSheet1 ){ //write current hero #ifdef ET #undef ET #endif #define ET(m,n) skills[n =(char)(Form1->Edit##m->Text.ToInt());         int index=HeroIndex();         if(index >=0){             //PEEK(BASE_ADDR+HERO_SIZE*index,heroes[index].get_buffer(),HERO _SIZE);             char * skills=heroes[index].skills();             i=0;             ET(1,i++);             ET(2,i++);             ET(3,i++);             ET(4,i++);             //write units             int * units=heroes[index].unit_counts(); #define num(m,p) units[p =Form1->Edit##m->Text.ToInt();             num(12,0);             num(13,1);             num(14,2);             num(15,3);             num(16,4);             num(17,5);             num(18,6);             *(heroes[index].m_spellleft)=Form1->Edit19->Text.ToInt();;             *(heroes[index].m_movement)=Form1->Edit20->Text.ToInt();;             POKE(BASE_ADDR+HERO_SIZE*index,heroes[index].get_buffer(),HERO_S IZE);         };     }else if(this->PageControl1->ActivePage == this->TabSheet2){         //write resources         int r[7]; #ifdef ET #undef ET #endif #define ET(m,n) r[n =Form1->Edit##m->Text.ToInt()         int i=0;         ET(5,i++);         ET(6,i++);         ET(7,i++);         ET(8,i++);         ET(9,i++);         ET(10,i++);         ET(11,i++);         POKE(resource_addr,&r,7*sizeof(int));     } } //-------------------------------------------------------------------------- - void ShowResources(int * r) { #ifdef ET #undef ET #endif #define ET(m,n)/     Form1->Edit##m->Text=r[n];     PEEK(resource_addr,r,7*sizeof(int));     int i=0;     ET(5,i++);     ET(6,i++);     ET(7,i++);     ET(8,i++);     ET(9,i++);     ET(10,i++);     ET(11,i++); } static  int HeroIndex() {     int i=Form1->ComboBox3->ItemIndex;     if(i<0) return i;     AnsiString s=Form1->ComboBox3->Items->Strings;     for(i=0;i<hcount;i++){         if( s==heroes.name() )             break;     }     if( i >= hcount)         i=-1;     return i; } void __fastcall TForm1::ListBox1Click(TObject *Sender) {     this->Label7->Caption=this->ListBox1->ItemIndex; } static int unit_num; //-------------------------------------------------------------------------- - static void ModifyUnitName(TButton * btn,int n) {     int h=HeroIndex();     if(h<0) return;     Form1->ListBox2->Left=btn->Left;     Form1->ListBox2->Top=btn->Top;     Form1->ListBox2->Visible=true;     unit_num=n;     int * units=heroes[h].unit_codes();     Form1->ListBox2->ItemIndex=units[n];     Form1->ListBox2->SetFocus(); }; void __fastcall TForm1::Button4Click(TObject *Sender) {     ModifyUnitName(Button4,0); } //-------------------------------------------------------------------------- - void __fastcall TForm1::ListBox2Click(TObject *Sender) {     int i=ListBox2->ItemIndex;     if(i>=0){         int h=HeroIndex();         if(h>=0){             int * units=heroes[h].unit_codes();             units[unit_num =i;         }         ShowHero(heroes+h);     }     ListBox2->Visible=false; } //-------------------------------------------------------------------------- - void __fastcall TForm1::Button5Click(TObject *Sender) {     ModifyUnitName(Button5,1); } //-------------------------------------------------------------------------- - void __fastcall TForm1::Button6Click(TObject *Sender) {     ModifyUnitName(Button6,2); } //-------------------------------------------------------------------------- - void __fastcall TForm1::Button7Click(TObject *Sender) {     ModifyUnitName(Button7,3); } //-------------------------------------------------------------------------- - void __fastcall TForm1::Button8Click(TObject *Sender) {     ModifyUnitName(Button8,4); } //-------------------------------------------------------------------------- - void __fastcall TForm1::Button9Click(TObject *Sender) {     ModifyUnitName(Button9,5); } //-------------------------------------------------------------------------- - void __fastcall TForm1::Button10Click(TObject *Sender) {     ModifyUnitName(Button10,6); } //-------------------------------------------------------------------------- - void __fastcall TForm1::Button13Click(TObject *Sender) {     int i=HeroIndex();     if(i>=0){         memset(heroes.m_magics,1,hero::magic_count);     } } //-------------------------------------------------------------------------- - void __fastcall TForm1::ListBox4Click(TObject *Sender) {     Label7->Caption=ListBox4->ItemIndex; } //-------------------------------------------------------------------------- - void __fastcall TForm1::ListBox2KeyDown(TObject *Sender, WORD &Key,       TShiftState Shift) {     if(Key==VK_ESCAPE){         ListBox2->Visible=false;     } } //-------------------------------------------------------------------------- - void __fastcall TForm1::FormActivate(TObject *Sender) {     //refresh hero and data     ComboBox3Change(this);     int r[7];     ShowResources(r); } //-------------------------------------------------------------------------- - void __fastcall TForm1::ListBox2Exit(TObject *Sender) {     ListBox2->Visible=false; } //-------------------------------------------------------------------------- - void __fastcall TForm1::ListBox3Click(TObject *Sender) {     int idx=ListBox3->ItemIndex;     if(idx<0)   return;     int i;     AnsiString s=ListBox3->Items->Strings[idx];     char buf [1024];     for(i=0;i<80;i++){         if(s == magic_names[i*6]){             sprintf(buf,"%s /n%s/n %s/n %s/n",magic_names[i*6+1],magic_names [i*6+2],                 magic_names[i*6+3],magic_names[i*6+4]);             Memo1->Text=buf;         }     } } //-------------------------------------------------------------------------- - void __fastcall TForm1::Button14Click(TObject *Sender) {     int i;     FILE * fp=fopen("artifact.txt","w");     char buf[1024];     ListBox1->Clear();     for(i=0;i<256;i++){         DWORD tt=0x678530+(i<<2);         PEEK(tt,&tt,sizeof(tt));         PEEK(tt,buf,sizeof(buf));         ListBox1->Items->Add(buf);         fprintf(fp,"%s/n",buf);     } }

Dale46 · 2001-04-30

老大,不是那么简单的.... windows对内存的管理和dos下不同 而且估计需要VXD才能解决

creation-zy · 2001-04-30

我的主页上有我写的一个工具，你看一看，如果还过得去的话我可以把关于内存部分的源代码给你。 http://zhangyi1980.home.chinaren.com/MyPrograms/index.html 文件工具 Ver0.39

jingtao · 2001-05-11

跨越内存禁区修改游戏数据(2001年第2期) http://www.csdn.net/magazine/source/2/Hero.doc unit uheromate;//本单元与uheromate窗体相对应 interface uses   Windows, Messages, SysUtils, Classes, Graphics, Controls, Forms, Dialogs,   StdCtrls, Menus, ComCtrls, Grids, ExtCtrls,ShellApi; type   TModifyThread = class(TThread)  //新建线程类，用于修改英雄属性页的设置   private     { Private declarations }   protected     procedure Execute; override;   end;   TForm1 = class(TForm)     Label1: TLabel;     PageControl1: TPageControl;     TabSheet1: TTabSheet;     Label3: TLabel;     Edit1: TEdit;     UpDown1: TUpDown;     Edit2: TEdit;     UpDown2: TUpDown;     Edit3: TEdit;     UpDown3: TUpDown;     Edit4: TEdit;     UpDown4: TUpDown;     CheckBox1: TCheckBox;  //英雄技能页—是否增加所有第二技能     CheckBox2: TCheckBox;  //英雄技能页—是否修改四项第一技能     TabSheet2: TTabSheet;     TabSheet3: TTabSheet;     TabSheet4: TTabSheet;     ComboBox1: TComboBox;  //英雄技能页—下拉框，用于选择英雄     Label2: TLabel;     B_skill: TButton;  //英雄技能页—变更英雄属性按钮     B_nolimit: TButton; //机动力页—使英雄机动力无限按钮     B_allday: TButton;// 机动力页—锁定英雄机动力按钮     Timer1: TTimer;     ListBox1: TListBox;     B_okToAddArtifact: TButton; //宝物页—根据列表框中宝物修改游戏内存     B_add: TButton;//宝物页—增加宝物到列表框按钮     Label4: TLabel;     ComboBox2: TComboBox; //宝物页—宝物列表框     B_return: TButton; //返回游戏按钮     B_Remove: TButton; //宝物页—从列表框中减少宝物     procedure B_skillClick(Sender: TObject);     procedure FormCreate(Sender: TObject);     procedure ComboBox1Change(Sender: TObject);     procedure CheckBox2Click(Sender: TObject);     procedure B_nolimitClick(Sender: TObject);     procedure B_alldayClick(Sender: TObject);     procedure Timer1Timer(Sender: TObject);     procedure B_okToAddArtifactClick(Sender: TObject);     procedure B_addClick(Sender: TObject);     procedure B_returnClick(Sender: TObject);     procedure B_RemoveClick(Sender: TObject);     procedure FormDestroy(Sender: TObject);   private     { Private declarations }   public     { Public declarations }   end; var   Form1: TForm1;   heroname

char;  //当前修改的英雄名   heroBaseAdd,heroAdd:integer;  //第一个英雄的地址和当前英雄的序号   heros:array[0..180] of pchar;  //英雄名序列   isdebug:integer; //是否已用OpenProcess函数打开游戏进程   winhwnd:hwnd;  //游戏窗口句柄   pId,threadId:Integer; //拥有游戏主窗口的进程和线程ID   hProcess: THandle;  //用OpenProcess函数游戏进程的句柄   str1:string='锁定机动力';   str2:string='取消锁定'; implementation {$R *.DFM} procedure TForm1.B_skillClick(Sender: TObject);//修改英雄属性页设置 var    threadNew:TModifyThread; begin  threadNew:=TModifyThread.Create(false);  threadNew.Execute;  if not SetForegroundWindow(winhWnd) then    showmessage(inttostr(getlasterror)); end; procedure TForm1.FormCreate(Sender: TObject); begin isdebug:=0; heroBaseAdd:=$015c7f63;  //<--光盘版$015d7f63;//硬盘版 $015c7f63; heros[0]:='Orrin'; heros[1]:='Valeska'; heros[2]:='Edric'; heros[3]:='Sylvia'; heros[4]:='Lord Haart(1)';heros[5]:='Sorsha'; heros[6]:='Christian'; heros[7]:='Tyris'; heros[8]:='Rion'; heros[9]:='Adela'; heros[10]:='Cuthbert';  heros[11]:='Adelaide'; heros[12]:='Ingham';   heros[13]:='Sanya'; heros[14]:='Loynis'; heros[15]:='Caitlin'; heros[16]:='Mephala'; heros[17]:='Ufretin'; heros[18]:='Jenova'; heros[19]:='Ryland'; heros[20]:='Thorgrim'; heros[21]:='Ivor'; heros[22]:='Clancy'; heros[23]:='Kyrre'; heros[24]:='Coronius'; heros[25]:='Uland'; heros[26]:='Elleshar'; heros[27]:='Gem'; heros[28]:='Malcom'; heros[29]:='Melodia'; heros[30]:='Alagar'; heros[31]:='Aeris'; heros[32]:='Piquedram'; heros[33]:='Thane'; heros[34]:='Josephine'; heros[35]:='Neela'; heros[36]:='Torosar'; heros[37]:='Fafner'; heros[38]:='Rissa'; heros[39]:='Iona'; heros[40]:='Astral'; heros[41]:='Halon'; heros[42]:='Serena'; heros[43]:='Daremyth'; heros[44]:='Theodorus'; heros[45]:='Solmyr'; heros[46]:='Cyra'; heros[47]:='Aine'; heros[48]:='Fiona'; heros[49]:='Rashka'; heros[50]:='Marius'; heros[51]:='Ignatius'; heros[52]:='Octavia'; heros[53]:='Calh'; heros[54]:='Pyre'; heros[55]:='Nymus'; heros[56]:='Ayden'; heros[57]:='Xyron'; heros[58]:='Axsis'; heros[59]:='Olema'; heros[60]:='Calid'; heros[61]:='Ash'; heros[62]:='Zydar'; heros[63]:='Xarfax'; heros[64]:='Straker'; heros[65]:='Vokial'; heros[66]:='Moandor'; heros[67]:='Charna'; heros[68]:='TamikaIsra'; heros[69]:='Isra'; heros[70]:='Clavius'; heros[71]:='Galthran'; heros[72]:='Septienna'; heros[73]:='Aislinn'; heros[74]:='Sandro'; heros[75]:='Nimbus'; heros[76]:='Thant'; heros[77]:='Xsi'; heros[78]:='Vidomina'; heros[79]:='Nagash'; heros[80]:='Lorelei'; heros[81]:='Arlach'; heros[82]:='Dace'; heros[83]:='Ajit'; heros[84]:='Damacon'; heros[85]:='Gunnar'; heros[86]:='Synca'; heros[87]:='Shakti'; heros[88]:='Alamar'; heros[89]:='Jaegar'; heros[90]:='Malekith'; heros[91]:='Jeddite'; heros[92]:='Geon'; heros[93]:='Deemer'; heros[94]:='Sephinroth'; heros[95]:='Darkstorn'; heros[96]:='Yog'; heros[97]:='Gurnisson'; heros[98]:='Jabarkas'; heros[99]:='Shiva'; heros[100]:='Gretchin'; heros[101]:='Krellion'; heros[102]:='Crag Hack';heros[103]:='Tyraxor'; heros[104]:='Gird'; heros[105]:='Vey'; heros[106]:='Dessa'; heros[107]:='Terek'; heros[108]:='Zubin'; heros[109]:='Gundula'; heros[110]:='Oris'; heros[111]:='Saurug'; heros[112]:='Bron'; heros[113]:='Drakon'; heros[114]:='Wystan'; heros[115]:='Tazar'; heros[116]:='Alkin'; heros[117]:='Korbac'; heros[118]:='Gerwulf'; heros[119]:='Broghild'; heros[120]:='Mirlanda'; heros[121]:='Rosic'; heros[122]:='Voy'; heros[123]:='Verdish'; heros[124]:='Merist'; heros[125]:='Styg'; heros[126]:='Andra'; heros[127]:='Tiva'; heros[128]:='Pasis'; heros[129]:='Thunar'; heros[130]:='Ignissa'; heros[131]:='Lacus'; heros[132]:='Monere'; heros[133]:='Erdamon'; heros[134]:='Fiur'; heros[135]:='Kalt'; heros[136]:='Luna'; heros[137]:='Brissa'; heros[138]:='Ciele'; heros[139]:='Labetha'; heros[140]:='Inteus'; heros[141]:='Aenain'; heros[142]:='Gelare'; heros[143]:='Grindan'; heros[144]:='Sir Mullich';heros[145]:='Adrienne';heros[146]:='Catherine'; heros[147]:='Dracon'; heros[148]:='Gelu'; heros[149]:='Kilgor'; heros[150]:='Lord Haart';heros[151]:='Mutare'; heros[152]:='Roland'; heros[153]:='Mutare Drake';heros[154]:='Boragus';heros[155]:='Xeron'; end; procedure TForm1.ComboBox1Change(Sender: TObject);  //取得当前英雄的内存地址 var    OrrinBuffer:array[0..4] of byte;    i:integer;    lpNumberOfBytesWritten: DWORD; begin    ListBox1.Items.Clear; if isdebug=0 then  //未执行OpenProcess begin    winhwnd:=FindWindow(NIL,'Heroes of Might and Magic III: Armageddon''s Blade');    if winhwnd=0 then winhwnd:=FindWindow(NIL,'Heroes of Might and Magic III');        if winhwnd=0 then  showmessage('Heroes III is not running');    threadId:=GetWindowThreadProcessId(winhwnd,@pId) ;              if threadId=0 then    showmessage('not find id');    hProcess:=OpenProcess(PROCESS_ALL_ACCESS,true, pId);    isdebug:=1;    //查找英雄数据区基地址heroBaseAdd    for i:=5 to 20 do //in least add 600000    begin        ReadProcessMemory(hProcess,ptr(heroBaseAdd), @OrrinBuffer,5, lpNumberOfBytesWritten);        //英雄数据区基地址处的值应是第一个英雄的名字：”Orrin”        if (OrrinBuffer[0]=79) and (OrrinBuffer[1]=114)             and (OrrinBuffer[2]=114)  and (OrrinBuffer[3]=105)             and (OrrinBuffer[4]=110)  then   break;        if (i mod 2)=1 then //            heroBaseAdd:=heroBaseAdd+$10000 // <--光盘版比硬盘版多$10000        else            heroBaseAdd:=$015c7f63+$100000*(i div 2) +$30000; //硬盘版    end; end; //得到欲修改的英雄的序号    heroname:=Pchar(combobox1.text);    for i :=0  to 165 do    begin          if strcomp(heros,heroname)=0 then            begin                heroadd:=i;                exit;            end;    end; end; procedure TModifyThread.Execute; //修改英雄属性页的设置 var    lpBuffer: array[0..56] of byte;    four: array[0..3] of byte;    lpNumberOfBytesWritten: DWORD;    i:integer; begin   for i := 0 to 27 do   begin       lpBuffer:=3;   end;   for i := 28 to 35 do   begin       lpBuffer:=i-27;   end;   lpBuffer[56]:=27;  //总共有27项魔法   lpBuffer[12]:=0;   //不设置招魂术   four[0]:=Form1.UpDown1.Position;   four[1]:=Form1.UpDown2.Position;   four[2]:=Form1.UpDown3.Position;   four[3]:=Form1.UpDown4.Position;   if Form1.CheckBox1.Checked=true then //增加第二技能     begin       if not WriteProcessMemory(hProcess,ptr(heroBaseAdd+heroadd*$492+$A6), @lpBuffer,               57, lpNumberOfBytesWritten) then               showmessage('Write mem Error');     end;   if Form1.CheckBox2.Checked=true then //设置第一技能     begin       if not WriteProcessMemory(hProcess,ptr(heroBaseAdd+heroadd*$492+$453), @four,               4, lpNumberOfBytesWritten) then               showmessage('Write mem Error');     end; end; procedure TForm1.CheckBox2Click(Sender: TObject); begin       edit1.Enabled:=not(edit1.Enabled);       edit2.Enabled:=not(edit2.Enabled);       edit3.Enabled:=not(edit3.Enabled);       edit4.Enabled:=not(edit4.Enabled);       updown1.Enabled:=not(updown1.Enabled);       updown2.Enabled:=not(updown2.Enabled);       updown3.Enabled:=not(updown3.Enabled);       updown4.Enabled:=not(updown4.Enabled); end; procedure TForm1.B_nolimitClick(Sender: TObject);  //无限机动力 var    newdistance: array[0..1] of byte;    lpNumberOfBytesWritten: DWORD; begin    newdistance[0]:=$99;    newdistance[1]:=$99;    if not WriteProcessMemory(hProcess,ptr(heroBaseAdd+heroadd*$492+$2A), @newdistance,               2, lpNumberOfBytesWritten) then               showmessage(inttostr(getlasterror)+'Write mem Error');    if not SetForegroundWindow(winhWnd) then             showmessage(inttostr(getlasterror)); end; procedure TForm1.B_alldayClick(Sender: TObject); //锁定机动力 begin    if  B_allday.Caption=str1 then       begin         B_allday.Caption:=str2;         Timer1.Enabled:=true;       end    else       begin         B_allday.Caption:=str1;         Timer1.Enabled:=False;       end; end; procedure TForm1.Timer1Timer(Sender: TObject);  //锁定机动力 var    olddistance: array[0..1] of byte;    newdistance: array[0..1] of byte;    lpNumberOfBytesWritten: DWORD; begin    if not ReadProcessMemory(hProcess,ptr(heroBaseAdd+heroadd*$492+$26), @olddistance,               2, lpNumberOfBytesWritten) then               showmessage(inttostr(getlasterror)+'Read mem Error');    newdistance[0]:=olddistance[0];    newdistance[1]:=olddistance[1];    if not WriteProcessMemory(hProcess,ptr(heroBaseAdd+heroadd*$492+$2A), @newdistance,               2, lpNumberOfBytesWritten) then               showmessage(inttostr(getlasterror)+'Write mem Error');   if not SetForegroundWindow(winhWnd) then           showmessage(inttostr(getlasterror)); end; procedure TForm1.B_okToAddArtifactClick(Sender: TObject); //增加宝物 var    i:integer;    Artifact:array[0..7] of byte;    lpNumberOfBytesWritten: DWORD; begin    Artifact[1]:=0;   Artifact[2]:=0;   Artifact[3]:=0;    Artifact[4]:=$FF; Artifact[5]:=$FF; Artifact[6]:=$FF; Artifact[7]:=$FF; for i:=0 to Form1.ListBox1.Items.Count-1 do begin   Artifact[0]:=ComboBox2.Items.IndexOf(listbox1.Items.Strings)+2;   if Artifact[0]<>2 then         Artifact[0]:=Artifact[0]+4;   if not WriteProcessMemory(hProcess,ptr(heroBaseAdd+heroadd*$492+$1B1+8*i), @Artifact,               8, lpNumberOfBytesWritten) then               showmessage(inttostr(getlasterror)+'Write mem Error'); end;   if not SetForegroundWindow(winhWnd) then           showmessage(inttostr(getlasterror)); end; procedure TForm1.B_addClick(Sender: TObject); begin    ListBox1.Items.Add(ComboBox2.Text); end; procedure TForm1.B_returnClick(Sender: TObject); begin    showwindow(winhwnd,SW_MAXIMIZE); end;                                   procedure TForm1.B_RemoveClick(Sender: TObject); begin    ListBox1.Items.Delete(ListBox1.ItemIndex);    ListBox1.ItemIndex:=0; end; procedure TForm1.FormDestroy(Sender: TObject); begin if hProcess <>0 then   closehandle(hProcess); //关闭句柄 end; end.

lml · 2001-05-12

其实我已经找到答案了，而且是针对starcraft，但无法给自己加分，可惜了，300分哦！ 我找内存的方法是通过softice+fpe2000，至于操作内存的方法和大家差不多。     凡是提到GetWindowThreadProcessId、OpenProcess、Read(Write)ProcessMemory的朋友 们加较多的分，没有意见吧？

lml · 2001-05-12

一点补充：这个问题的关键在于StarCraft的内存地址的确定，大家都没有提到这一点，其实、 sc的两种资源的内存地址是变化的，所以只能用softice反汇编之来确定其地址。

怎样写一个游戏修改器,300分，要详细可用代码、例程！(300分)

lml

Unregistered / Unconfirmed

lha

Unregistered / Unconfirmed

lml

Unregistered / Unconfirmed

beta

Unregistered / Unconfirmed

wangxd

Unregistered / Unconfirmed

Dale46

Unregistered / Unconfirmed

creation-zy

Unregistered / Unconfirmed

jingtao

Unregistered / Unconfirmed

lml

Unregistered / Unconfirmed

lml

Unregistered / Unconfirmed

Similar threads