Trainer Example (masm32)

[atak32]

hello
heres a trainer example i wrote in masm using a dialog it trains a test prog to load the project you will need RadASM the IDE i use to code masm

start the test prog press left button you will notice that each time you press the value gets increased by 1 we wanna make it stop increasing so we fireup TSearch and autohack the address we found (41D090h) we land here


401384: mov [0x41D090],eax
this is the instruction who moves our value (stored in eax) to 41D090h
we could NOP this but then it would increase once and then stop if we disassemble and scroll up a bit we see an inc eax instruction at 40137Bh we NOP that one

with this info and a bit interest in masm you should understand the source code

hf... :classic:

[Shard]

wewt Atak!
Good Job!

[Gregsy]

cool one, i will need to check this out :)
reminds me of shinero's skeleton

[McAlpha]

Very nice work :)

[atak32]

no clue who shinero is i post a lil addon who shows howto use key toggles in
a masm trainer using the SetTimer + GetAsyncKeyState API you can easily implant this in my example code

.if uMsg == WM_INITDIALOG
invoke SetTimer,hWin,0,90,0
when the dialog got initiated we set up a timer which will send a WM_TIMER message to our window handler every 90ms all we have todo now is check for it
and implement the keycheck code

.elseif uMsg == WM_TIMER
invoke GetAsyncKeyState,VK_F5
.if eax != NULL
invoke TrainProc,hWin,fixed,patch
.endif
ok this handles the WM_TIMER messages we simply check for the F5 key being pressed if so we train...i kno this will only allow u to enable the hack if you press F5 if you wanna enable/disable you need a lil bit more code find out yourself its not hard :)

[Shard]

Why is this not stickied?

[Gregsy]

im incompetant

[Quakart]

i didnt understand how exacly can i hack the lines?
wat i need to search in Tsearch?

[BlackDove]

If you cannot understand what to do in TSearch, then I highly doubt you can program in assembly.

Go to this thread: http://www.mpcforum.com/showthread.php?t=61072

It will teach you how to use memory editing programs like TSearch.

[A$$aSiN]

hi i'm new here, i know how to use the tsearch or cheat engine, but i have no idea in assembly codes. Any hint where i should start learning from? thanks

[bitchtcb]

http://win32asm.cjb.net/

[Alwa]

wow, nice thank you i will use it in my next project.

[A$$aSiN]

thank you very much that's a very useful link. :ura:
Does anyone know where to download SoftICE program?

[BlackDove]

As far as I know, SoftIce does not have a demo. The only way you can download it is illegaly and illegal downloads are not allowed on MPC.

You can always buy it from Numega. It's probably very expensive.

[A$$aSiN]

O.O i see, thank you for your information

[everbread]

Your a very Big Genie!! Thanks for this tutorial!

[REVOLTY]

Nice, im using RadASM to write a trainer right now, it's allmost done but i would need a code for push a value into EDI while ESI=7. I've sum ideas how that code would look like but i aint sure how to read ESI from a specific offset in my game. I think its the same as using cmp EDI, 7 in assemble? but i aint sure at that iether, Anyone got any idea?

Thanks.

*EDIT

Got that CMP function to work, this is the code i want to use in asm

OFFSET 55DCA6
JMP 901320

OFFSET 901320
MOV [EBP-4],ECX
CMP ESI,7
JE SHORT 90132D
JMP 55DCAB
MOV [901400],EAX
JMP 55DCAE
NOP

[dr4gunz]

Hey! Why I can't download a attchement?

[Holz]

Because this is three years old and unfortunately the attachment was lost.

[dr4gunz]

Oh! Ok, can anyone upload the archive again?