Trainer Making Tutorial: (Intermediate) Defeating DMA

[Gregsy]

Ok, well since I have been getting more people asking for the tutorial, I have finally decided to do something about it, basically you will need in this tutorial:

T-Search 1.6b (http://membres.lycos.fr/tsearch/cheattools.html)
TMK - Trainer Maker Kit (http://www.extalia.com/home/index.php?down=5&id=8)

Ok, so this tutorial is going to focus more on defeating DMA in the game and letting you use your trainer when the game’s memory locations are changing as the game is turned off and on etc,
Righty! lets get started!

Ok, so firstly download the 2 tools at the top, most of you should have t-search and TMK.

Right, so first pop open t-search and get your game loaded in the normal way, for this instance here I will be making my AOE 2 TC trainer with this but you lot can use any game as this guide can be used with any game you want.

So I have AOC open along with T-SEARCH, I would start a game and find the memory locations for food wood gold or stone, if you don’t know how, go and read the noobs guide!

After finding your memory locations through searching them down, add them to the list at the side.
THIS IS WHERE WE DO SOMETHING DIFFERENT!
Ok, so you may have noticed the auto hack bit up where file is, click that and click Enable Debugger.
Now click Auto Hack Window.
You will now have the Auto Hack window open, don’t close it!
Go back to your memory locations list and select one and click the now coloured auto hack button (the one with the skull and crossbones).
Go back into the game and let the value decrease or increase depending on which one you want to prevent happening. When you get back into the game, let it do this, pause and come back out, now you will see some confusing writing on the auto hack window, depending which has been done, this is where the ASM calls whatever to happen, now if you see when you put a red smiley in it and go back into the game, it wont increase/decrease (depending on what you chose it to do).
Now, you can write this into TMK using a deferent method than shown before!

Ok, so pop open TMK and start the basic stuff off, 2 buttons etc, now you right click your on button and click write memory actions, you will now instead of clicking wiz go back to auto hack and click the TMK tab the click TMK Script, you will see the “patched script” which is hack on and the “unpatched script” which will turn it back to normal, I suggest storing these on notepad or something just to be safe if it crashes etc. now you will paste that into the tmk box which says “test script button 1” (the one you usually “wiz” from) and do the same for the other button, that’s all there really is to it!
You can now just build your trainer as you usually would in TMK and it should work and defeat DMA!

There you have it, sounds complicated, isn’t complicated, but was a pain in the arse to write up!

Now, Have fun hacking

Gregsy

Any questions, feel free to post :)

[X-Joker]

lol thx to u man i already gotten t-search adresses for like 3 games last night and thx to u i got a high score of 800,000,000 in pinball :P

score used to be scare but thx to gregsy i made the correction ty gregsy :smoke:

[Gregsy]

a high scare? /me hides
lol anyway .. btw i will try and get something on w32dasm out but it is really just a more complex way of doing this ....

[barnickell]

so how does it work to make a pinball trainer????

[X-Joker]

Explain on wht u r asking.

r u asking how to make a trainer?
or
Want a pinball trainer?

[X-Joker]

hey gregsy i had a questio abt t-search k ummm actally 2

1) If i were to chage a value in a online game for lets say money woudl tht be olny client side?

2) how do i freeze value that keep moving i have trie to freeze them but they change while they are freezed?

plz help me on this

[Gregsy]

firstly, this post goes for ALL games that it is possible with, not neccesarily pinball but there are infact many other games in the world :p
x-joker can you please keep it to 1 post when noone has replied to your previous post (meaning yes the rule about double posting) this means that you are still allowed to use the edit button on your previous post :p

right, now thats cleared

1) most likely you would lag out or nothing would happen
2) the asm is used here :p mostly the problem here would be like if there are two+ memory locations under the view, use autohack on both of them to see if you missed anything out
or there is some kind of protection

[Shard]

If you can't enable autohack on a game it means it has debugging protection.
Just thought I'd tell everyone that.

[Gregsy]

ty shard, remember feel free to also add some things i have missed :)

[barnickell]

ok
sorry for the bad post i was in a hurry

what i am trying to do is make a trainer which adds 1000000 points to my score in pinball when i hit the trainer button or the hotkey.

I am using your tutorials as guides but am having no luck

the problems are using the autohack ( i do what it says ) and writing the memory location.

All the other stuff i can do

Thanks in advance for your patience and help

[Shard]

If thats all you need to do then there is no need for you to use Autohack, or even this tutorial.

[X-Joker]

barni all u have to use in pinball is tsearch and tmk if u got it to work (mine still ahsent) :( anyway just find the 2 adresses and chage the valuse of them and freeze them and bam u got a new high score

**EDIT**: Gregsy would u happen to knw any good newb tuts for wpe or packet sniffing :alien:

[Gregsy]

im afraid i havent done much with packet editing, sorry man,
barnickel pleaser use the correct thread kthnx :)

[kermy]

**EDIT**: Gregsy would u happen to knw any good newb tuts for wpe or packet sniffing :alien:

Here's 1 nanobot (http://pc.nanobot2k.org/Tutorials/packet.htm)


Here is the main site nanobot2k (http://pc.nanobot2k.org/?articles)

[X-Joker]

Thx a lot man plus now i cna finally make a trainers cause i reinstalled XP :-D

[thedragster]

lol thank you. It really isn't that hard, is it?
I'm anxiously awaiting your win32dasm tut

[Gregsy]

heh, thanx,
tbh there isnt too much to w32dasm,
i usually just use it to check things, but i will try and get something written up soon,
just i plan to be buisy with other things on the last few weeks of the holidays

[shadowwoelf]

hey gregsy u prob. sick of me asking questions but here is my final 2 questions
1.in pinball when ever i press the button it just freezes the stats then i go makes some points and it is nothing then when i press the other button it unfreezes the stats and i get everything back to normal and i dont have any higher stats or nothing so i was wondering about that
2.wat other programs do u suggest for to me practice on?

[Gregsy]

its what i am here for :)
1. Autohacking pinball does that, so dont autohack it or if your on xp use packman.
2. Programs as in what, I i think along with many others t-search is the best mem scanner+ tmk is good for newer people to make trainers with.. then if you learn coding...
in my opinion, t-search + trainer coding is the best way to do it, i only use a dissasembler to check things out, although i am gonna start on some softice stuff soon enough :)
hope this helps,
Gregs

[jammie]

great tutorial, very useful ... but only 1 problem....


im hacking a java applet in internet explorer.exe and i cant seem to get auto hack to work?

the auto hack window loads up with the address and everything it just doesnt show the calls that it makes etc.

any ideas on what i can do?

Thanks,


Jammie

[Gregsy]

maybe because ie is the program, and you will be messing with its addys rather than the game's?
you will just have to use t-search each time.

[jammie]

aww tht sucks!

if ur ever bored and want to see if u can figure out a way to do it ... here the site http://www.fastwars.com

have fun =)

it kinda ruins the whole game, but ah well!

[04hsv]

i can not download t-search 1.6b from your link it says the file is corrupt is there any place i can download it from???

[X-Joker]

aww tht sucks!

if ur ever bored and want to see if u can figure out a way to do it ... here the site http://www.fastwars.com

have fun =)

it kinda ruins the whole game, but ah well!


LMao yep it dose lol look at the hige score for this week

[yahoho]

hey, im makin a trainer for mohaa net demo, and basically it comes up with 71 memory adresses on tsearch, is there any way to put them all into the autohack window at once? rather than doing 1by1? or is that even possible to put more than 1 in the window? please help, cheers =]

[00kes]

i think the bullets r serverside so u cant edit them..

i have a problem too:
i search for my adress eg recoil no problem to find the correct then i set a breakpoint and get a few results but none of those r working they dont freeze it or change it...is there some memory protection?
and can i get memory offsets with the code of the game?

[yahoho]

i just wanna know how to put multiple adresses into the auto hacker on t-search. so that i can use the red face on all of them and create a code for tkm for each of the memory adresses beacuse atm it only allows two entries in the auto hacker, if i try to add more they just dont appear....

ok ive managed, by trial and error to find 2 adresses that seem to give me infinate ammo on the demo...when i just freeze them in the tsearch menu, but then wen i open the autohack window and hit the red face bit it crashes the game im currently using,but then i get the code and put it into TMK, and set it up bah blah and hotkey it, but wen im in game or i turn it on before game, it will crash as soon as i either hit the hotkey or when its loading the game (if ive allready turned it on before launching), why is this? and are the two problems related? the red face crashing teh game earli on and the crashing now? also is there a way to put more than 2 adresses into the auto hacker? cheers

[D_E_V_I_L696]

sounds like uve changed a wrong address, doing this would cause the game to crash.

[yahoho]

well i mean it comes up with bloody 71 adresses lol and i cant find a way to narrow it down any more...how can i tell which is the right adress ? out of 71...

[00kes]

trial and error
or change ur searching type

[Gregsy]

any mohaa questions> mohaa section.

if you have 71 addys, try going through them seperate and see if they use the same calls etc. this tends to happen alot.

[yahoho]

i managed to find an address that worked but when i put it into the tmk and saved it, it didnt actually work wen i joined a server, is that cos bullets are server side ?

[Gregsy]

yeah, thats when packet editing and stuff comes into play :x

[yahoho]

bah lol, there a tut on that here? also u got any idea what kinda things i could possibly make a trainer for in mohaa? without using damn packet editing ? lolz

[Virtuosofriend]

There are a lot of tuts for packet sniffing and packet sending out there.search this forum a bit you will get some.I also think that in the first page of this thread someone gave two links for tuts on wpe which is a packet editor.

[echewz]

how do i search for decimal values ?
ie: 0.831716

oh yeah i didnt see double i got it

[Gregsy]

lolz, spammer :p
useful post though, i guess :p

[DyslexicCheater]

how do i search for decimal values ?
ie: 0.831716

oh yeah i didnt see double i got it

Use float.

[Rocker]

Cool tutorial again!!! I like it @U@/~~~

[Arkalite]

awww NICE.... its good but i cant send the trainer for a friend of mines cause pinball uses diferent PID... doesnt it?

[faldo]

I'm not sure what you mean with "uses another PID".
Pinball uses semi-static DMA addresses. Your friends Pinball uses another DMA address, that's why he can't use your hack.

[xwmaxx]

O.O ohhh, ic now so when u get the address and changing the values of watever u wanna chang working, u need to do some packeting editing if the game is server side? humm...I found a tutorial on that seems really difficult, and ya these tutorials of urs r really helping I actually got to changing the money in one of the mmorpg games but since its on server side I have to do more research, Thanks alot! :)

do u guys have any tuts on packet editing with ethereal

[Gregsy]

if there was a packet editing tutorial, it would be on the forums :p

[stavfx]

i've been practicing on Pinball...i managed to make a trainer that gives infinite lifes; but how can i make the button ADD a value to the score instead of just freeze it?

Thanks,
StavFX;

[Rip0r]

nice tut! how do u apply the offset you found in t-search into a C app tho??....
got the C app made, just when i write to the memory possition its the dynamic possition so every time the game restarts its changed...???

[Gregsy]

so you had to post here AND send me an e-mail?
Google.com

[Rip0r]

so you had to post here AND send me an e-mail?
Google.com
wouldnt have posted if i hadnt tryed google.....
asked a question about your tut' thats all soz!

mail and post..... wen it says Gregsy Online and perminsion denied to pm, alls i wanted was a quick answer or some advice so i tryed to catch you wen u was online, i do appologyse!

[horrorlord]

Sorry for a stupid question but where can i find a free downloaddable DMA program? I want to practise as the current one i have is an online one quite heavily safeguarded.

[kiLLer_001]

i have a questionso now i can freez the values great but i need 2 set the value 2 a specific number now how do i do this ??/

cause i need 1 of the buttons to change the value to 1

and the other needs to change the value to 0

how do i let it do this with overwriting dma ??

[SicKn3sS]

it says how to do this in the help file of t-seach

[kiLLer_001]

yeah by writing register values but how do i place this in my trainer ussing game trainer studio or trainer maker kit i have both so

[REVOLTY]

Nice one.

But guess what, i´ve a question. It´s kinda offtopic since i want reverse this a lil.
Ok so im using this as you, in a strategy game. I found the adress i wanted, it´s dynamic and i got your tutorial doing the job but freezing its not really what i want. I just want the value i got from the dynamic to show up in my trainer, i know how to use the "add edit" thing in TMK thats np. Here´s the info i got from Cheat Engine 5.0

STATIC: 04A0224 - ADD [EAX] .ECX
DYNAMIC: EAX=0D340178 [VALUE: 1120]

I know that the EAX is the dynamic adress but how do i put that in TMK
To track the dynamic adress i mean.. cos the static dont "hold" the value i want

*NOTE this is an old game shit like PB wont be any problems

[Trojan_Horse404]

what does this mean? it doesnt make sence:

Go back into the game and let the value decrease or increase depending on which one you want to prevent happening. When you get back into the game, let it do this, pause and come back out

Please explain that to me?

[ualnaibaf]

help i was making a light hack trainer for tibia,but when i did what u said,it stuck at darkness instead of having light what am i doing wrong?

[70ckit]

jeeezzz yea baby just what i needet!! tnx man Gregsy tnx

[akumquat]

gregsy.. can you post a link of where to download
TMK and T-Search 1.6b??
ive searched google but no luck so far

[Warrior37]

nice tutorial Greg

[designayr]

alternative for tsearch
http://mambo.cheaters-heaven.com/download.php?site=36&file=tsearch_16b.zip

can anyone explain that with pictures plzzzzzzzzzzzzzz for example i wanna learn how xjoker hacked pinball plzzzzzzzzzz

[trainer man]

hey man
i can;t make a trainer
i did all the steps.
the game i am talking is AOE rise of rome
My autohack address is 4E9F88.
but i want to know how and freeze and add value.
for .eg i want 999999 food freezed!!!
please tell me sow to do it
I an using T_search 1.6
and trainer maker kit
my email adress is samaynahi1@yahoo.co.in
please reply

[Stump150]

Where Do You Download This Stuff

[lawlrus1]

Sorry for the newb questions but I really don't understand some of the concepts involved. Getting around this DMA problem will let you be able to alter your in-game gold and keep it that way, even after picking up more gold? Does this work on multiplayer online games? Can you edit and keep changes on server-side things like Exp and how do you even know if its server-sided or not?
Thanks, sorry again for all the questions. I've read the awesome new tutorial and I understand most of this, just a few things I didn't catch.

[Ashlak]

I think you can't edit server-sided values...

I have a question too! Using autohack "freezes" the value I'm using, right? Is it possible to poke new values to the static address because I tried it yesterday (had money address) but the static address had something like 46328432 value... The amount of money was 1500, so I guess I don't understand the whole thing of autohacking. :)

Sorry if you don't understand what I'm saying, but could someone help me? :paranoid:

[MuikkuKukko]

I've got a question too about this..dunno if its suitable to this section

Well i try to make trainer for KalOnline (its MMORPG if u didn't know). The prob. is that when I open this game before or after I open T-search to search adresses, the game considers it as a hack and closes. Any idea how could I disable this guarding..

Yea btw, nice tut and i learned the pinball tut you made,nice work.

[deve]

nice tut.. tnx
but I chould not do a trainer for deer hunter 2005 ...
I was searching for the points value but I was not able to find the value for it....
I searched like increased -decreased and thene also I tryed the exact values but the nearest results I get was about 350 results is this possible that some games are not memory hackable for some values if yes how to?
do I something wrong or is there another way to find thene tsearch for this game ???

[edit] second problem is if I changed the values to what I like and generated the hack.it works until I go online on online it writes 2 other adresses to the autohack window see picture http://img119.imageshack.us/img119/1908/pano02pr7.jpg

How can I resolve this...


add the end of the tutorial you wrote
"now you will paste that into the tmk box which says “test script button 1” (the one you usually “wiz” from) and do the same for the other button, that’s all there really is to it!
You can now just build your trainer as you usually would in TMK and it should work and defeat DMA!"

if I put this adress looks like this "
Poke 4461A7 90 90 90 90 90 90 90 90 90 90 90 "

the hack does not work ????

[nanoman]

Hello...Everything is perfect I understanded everything with 1st time, This is what I was looking for cause the game all the time changed the adresses but with this now it works perfect, for that thanks, but when I pressed on my trainer infinite health it worked yes, I mean I was indestructable but the other enemys was indestructable too so I was thinking how do I change that? And another question - I want to example freeze the value and in the trainer add a text box where I can edit the value and allow increase but dont allow decrease please I would be thankfull if someone would answer my question. I love MPC Forums And Downloads....btw the game was Two Worlds version 1.2 =)

[alexutu16]

can somone make me a trainer for sherwood for lvl,life,damage

and 1 hit kill plssss

[hot_revenge]

so gregsy ty for all u did and am fully understand what u are doing but am trying to hack an online game so it is diffrent from what u are hacking now so can i talk with u on email msn or anything i hope u answer me waiting for ur answer and thx again

[hanselx]

i tried this tutorial on aoe2 tc but there are bugs such as my enemies villagers dissappear! And at the start of the game when i send my villagers to build my buildings they die or either dissappear. So how do i just hack the individual pointer for player 1 only?

[Sn!p3r]

umm the trainer kit does not work it says corruption istalation detected

[smallvile]

Ok, i know this post was quite a while ago, but i have a problem...

The game that i was hacking (Warhammer 40,000: Dawn of War) turned off as soon as the red smiley face turned on in the autohack window...O.O

So I'm wondering why this is and what i can do to bypass it, I'm only hacking the single player side of the game so it doesn't have gameguard or punkbuster or client side problems or anything like that.

Edit: >.< i just looked over replies to your post and read shards reply about debugging protection...is that what's happening here?

Also, the reason i looked into this guide is...the game keeps resetting the addresses that Requisition (basically money) is assigned to, and judging by your introduction, i assumed thats what you are helping to teach to prevent.

letting you use your trainer when the game’s memory locations are changing as the game is turned off and on