[release] BF2 ITC v0.9

[p3n1]

So here comes the *working* Instant Team Changer.

--> No memory errors so far
--> Tested on Single Player / RETAIL version v1.0 (HOODLAME RLS)
--> Written with TMK 1.51 -> Hotkey Hook will be found by AVs
--> Changed the Hotkey to "-" / MINUS on NUMBLOCK

If anybody has a *working* trainer template for c, delphi or asm, i would be glad to rewrite this trainer.

PLS do not complain about things like:
"Does not work in Demo, why?" -> Maybe it will be released, maybe not.
"Why does it not work with the Retail w/o cr4ck?" -> read the nfo! I haven't tested it!
"Where do i get the HLM cr4ck?" F*ck 0ff, l4m0r! No warez in this board!
"Wheres the source?" -> on my hdd, give me a trainer template and you'll get it.

Credits:
-all ppl here @ MPC that helped me (Helios, Sparten, CaptainCox etc.)
-google
-mary jane ;)

@MODS: If you want to delete the post with the beta version, i don't care, was buggy like sh!t. If you want to delete this post, i can't stop you :p

Edit: I've added a version for the DEMO, since the game isn't released yet.
2nd Edit: Forgot to change the caption of the demo-hack, please reapprove - sorry for incovenience
3rd Edit: A little Bug in the BF2DemoITC brought the game to crash, but i didn't test it, because i deleted the demo yesterday. Now BOTH versions should work, online AND offline. Sorry again, i think i have to smoke a little less ;)

[VoN DuTch™]

--Approved

[scruie]

p3n1 there are several trainer templates on the web; http://pc.nanobot2k.org/?action=downloads has several in different languages. and Faldo made this: http://www.mpcforum.com/showthread.php?t=72780 written in C++. not sure if they're what ur after.

[p3n1]

p3n1 there are several trainer templates on the web; http://pc.nanobot2k.org/?action=downloads has several in different languages. and Faldo made this: http://www.mpcforum.com/showthread.php?t=72780 written in C++. not sure if they're what ur after.

BIG THX! That's exactly, what i've been looking for! But now i got one problem: Which one shall i use?!?!
-Information Overload- :D
Now i got something to do...

EDIT: Assembly Trainer Maker is great: Easy GUI, EasyWrite POKE recognition and compiles small exes - my favourite, a recommendation for all n00bs like me :)

[scruie]

p3n1 there are several trainer templates on the web; http://pc.nanobot2k.org/?action=downloads has several in different languages. and Faldo made this: http://www.mpcforum.com/showthread.php?t=72780 written in C++. not sure if they're what ur after.

BIG THX! That's exactly, what i've been looking for! But now i got one problem: Which one shall i use?!?!
-Information Overload- :D
Now i got something to do...

EDIT: Assembly Trainer Maker is great: Easy GUI, EasyWrite POKE recognition and compiles small exes - my favourite, a recommendation for all n00bs like me :)


ur welcome, yeah it is information overload, heck i've been tryin to do this hackin stuff for an age and still haven't gotten to grips with it. still tryin to hack BF with DMA for me fog/tags hack - spend a couple of hours on a sunday with it and advance no further - oh well...

if u look at the first link i gave there are some other stuff, such as a poke convertor. the next thing is gettin a complier thingy like VB or C++ etc, there are free alternatives to M$ offerings.

[p3n1]

ur welcome, yeah it is information overload, heck i've been tryin to do this hackin stuff for an age and still haven't gotten to grips with it. still tryin to hack BF with DMA for me fog/tags hack - spend a couple of hours on a sunday with it and advance no further - oh well...

if u look at the first link i gave there are some other stuff, such as a poke convertor. the next thing is gettin a complier thingy like VB or C++ etc, there are free alternatives to M$ offerings.

the dma thing isn't that hard, i'm willing to send you the source via pm. the tags is a number harder, i tried them to, spend hours looking at the RendDX9.dll, found some things, that made the Tags completely disappear :ermm:
The things HelioS mentioned, regarding the enemy tags -> hook the getteam function, log every call from the RendDX9.dll, convert the adresses to the file offset and you have about 30 locations to look for the code - you could probably nop them one by one (better: if enemies are on team one, try to set the return value of getteam to 1, for every single call), to find the right. I know, how i could achieve that, but i'm just to lazy :)

There are many free compilers, lcc, gcc, free pascal etc. I'm not *that* n00b in programming, just memory patching is new to me. But there are enough trainer makers, so i'll concentrate on the hacking :)

[Spontaneous]

Yea there are tons of trainer templates out there. Personally I code all my trainers in VB6. Granted I know C++ or ASM would be better, but VB is what I know.

As for DMAs, they are easy once you understand it a bit better.

[scruie]

p3n1 i didn't mean to imply ur a noob when programmin etc, sorry if u thought that, heck u've released a hack to the public and caught on to this malarky quicker than i've done. the reason i mentioned the compliers was because PB detects the trainer maker kits, all my first Bf code-cave hacks used trainer makers and sooner or later i got kicked because of the kit not the code-cave. but i haven't tried to use a trainer maker kit with magicfolders (http://www.magicfolders.com/des.htm#mf) to hide it, might be something to look into...

i haven't even installed the demo yet, and can't decide whether to get the full BF2 game. i'm still messin about with plain old BF42 as i like the retro stuff ;). but as spont says the DMA is my main problem coz i don't fully understand it, too busy with work and other stuff to fully focus on it.

[Supremespeed]

File: BF2DemoITC.rar
Status:
INFECTED/MALWARE (Note: only non-destructive malware has been found. Considering the non-destructive nature of samples like these - although they can be a pain -, results will not be stored in the database.)
MD5 5a41712be49b1803bf475df362df63b8
Packers detected:
-
Scanner results
AntiVir
Found nothing
ArcaVir
Found Trojan.Keylogger.Hatkeys.M04.A2
Avast
Found nothing
AVG Antivirus
Found nothing
BitDefender
Found Trojan.Keylogger.HotKeysHook.A
ClamAV
Found nothing
Dr.Web
Found not a virus Tool.GameCrack
F-Prot Antivirus
Found nothing
Fortinet
Found nothing
Kaspersky Anti-Virus
Found not-a-virus:CrackTool.Win32.HotHook
NOD32
Found Win32/Keylogger.HotKeysHook.A
Norman Virus Control
Found nothing
VBA32
Found Embedded.Win32.Keylogger.HatKeys (probable variant)

Explain.

[Spontaneous]

Man you really dont pay attention do you. All TMK trainers comes up with that. Its a false positive. Show you how good them scanners really are.

[Supremespeed]

I scanned my TMK and have the hotkeys hook but never saw the

Trojan.Keylogger.Hatkeys.M04.A2

Wierd. Guess its a new false scan.

[Spontaneous]

This has been a problem for a long time with TMK, showing as a false positive. Its common here in the BF series since a lot of people released trainers made from TMK. We know its a false positive from the over 1 year of it coming up as that.

[p3n1]

This has been a problem for a long time with TMK, showing as a false positive. Its common here in the BF series since a lot of people released trainers made from TMK. We know its a false positive from the over 1 year of it coming up as that.
Yeah, better read again and carefully:
--> Written with TMK 1.51 -> Hotkey Hook will be found by AVs

I am really sorry for that, but i've tested both versions again, the demoitc ONLINE.
Both work NOW - read above in the 1st post, there was a little bug in the demoITC. Now it's all ok - regarding to the TMK thing, i'll rewrite both versions tomorrow with asmtmk, that should do the trick. Sorry again for the wrong demoITC...

[Supremespeed]

The only reason I asked is cause you got warned over at UC cause they said it was a keylogger and they warned you.

[p3n1]

p3n1 i didn't mean to imply ur a noob when programmin etc, sorry if u thought that, heck u've released a hack to the public and caught on to this malarky quicker than i've done. the reason i mentioned the compliers was because PB detects the trainer maker kits, all my first Bf code-cave hacks used trainer makers and sooner or later i got kicked because of the kit not the code-cave. but i haven't tried to use a trainer maker kit with magicfolders (http://www.magicfolders.com/des.htm#mf) to hide it, might be something to look into...

i haven't even installed the demo yet, and can't decide whether to get the full BF2 game. i'm still messin about with plain old BF42 as i like the retro stuff ;). but as spont says the DMA is my main problem coz i don't fully understand it, too busy with work and other stuff to fully focus on it.

Hey, i never thought, that you wanted to imply, that i'm a noob. I said that to myself, in another post. That magic folder stuff is cool, maybe it's really pb proof, we have to check that later.

The only reason I asked is cause you got warned over at UC cause they said it was a keylogger and they warned you.

THX supreme, i just saw it... I give a d4mn sh!t about those n00bs, they closed the thread w/o giving me the chance to explain. My answer to AntiHexe and all other is:
EVERYBODY WHO WANTS TO CHECK, THAT THERE ISN'T A VIRUS/TROJAN/KEYLOGGER ETC. CAN HAVE THE F*CKING SOURCE OF THIS HACK. I MADE IT NOT 4 ME, CAUSE I DON'T USE CHEATS AND I DO NOT PLAY GAMES, FOR WHICH CHEATS ARE OUT THERE. I PLAY ONLY ON LOCAL SERVERS, SO I CAN BEAT THE CHEATERS IN REAL LIFE!

[WhizzKid]

Can We Please Get This Approved Ffs Its Just Tmk!

[VoN DuTch™]

--Approved

[WhizzKid]

Detected By Punksuckster

[p3n1]

Detected By Punksuckster
Every day the same :)
Could you be a little more specific?

[nw33]

Well i havnt tried in Multiplayer But i Confirm it does Work In Single Player:):) Keep up the great work:)

[p3n1]

I can confirm: IT HAS BEEN DETECTED
ban for two minutes because of GAMEHACK #89015
Can s.b. tell me, if thats because of TMK?

EDIT: I think, it's because of TMK...
Because the cheat id #89015 is much older than my hack, as you can see here (http://www.pbbans.com/MBI/bans/generate.php?action=1&game_id=1).

Now i got the same problem as two days ago, i need a better trainer template. What i need, is a trainer maker, that can choose its target by EXE name and not by window caption/class. Help me pls! I'll try some other...

EDIT: I got a Trainer Template, but as mentioned above, i uses the FindWindow function, but i need one, that uses the FindWindowLike function...

[scruie]

p3n1 that magic folders was mentioned in the AA forum i think, they use it to hide their hacks coz PB was blockin that process-guard they all used, as far as i remember its not a PB problem.

anyways the hack is more than likely detected by PB because of the TMK. in the old days i use to activate the hack and then close it. really wouldn't woory too much about the ID given my PB for the kick most are generic codes. but if i remember correctly that was for TMK.

[p3n1]

p3n1 that magic folders was mentioned in the AA forum i think, they use it to hide their hacks coz PB was blockin that process-guard they all used, as far as i remember its not a PB problem.

anyways the hack is more than likely detected by PB because of the TMK. in the old days i use to activate the hack and then close it. really wouldn't woory too much about the ID given my PB for the kick most are generic codes. but if i remember correctly that was for TMK.

Hopefully it is :)
I'm still searching for an alternate Trainer Creation Kit or template, that can find the window by the name of the .exe and not the caption and/or class of the window. I'll post here, if i got something. The magicfolders thing does not work, i get kicked although i put the trainer in there...

EDIT: I can now verify, it has been detected, because it was written in TMK. I just played with a custom made trainer for half an hour on the same server and had a lot of fun :dead: AND I DIDN'T GOT KICKED :D

[Spontaneous]

What wrong with using a trainer that finds the game by caption/window class? I personally use that method for all my hacks. Anyways, I know your not looking for a VB trainer template, but there is a VB modules called GetHProcExe. In short it does the following code, you might be able to port it to C++ or whatever by looking at the api it uses and what not

Private Declare Function CreateToolhelpSnapshot Lib "kernel32" Alias "CreateToolhelp32Snapshot" (ByVal lFlags As Long, ByVal lProcessID As Long) As Long
Private Declare Function Process32First Lib "kernel32" (ByVal hSnapShot As Long, uProcess As PROCESSENTRY32) As Long
Private Declare Function Process32Next Lib "kernel32" (ByVal hSnapShot As Long, uProcess As PROCESSENTRY32) As Long
Private Declare Function OpenProcess Lib "kernel32" (ByVal dwDesiredAccess As Long, ByVal bInheritHandle As Long, ByVal dwProcessId As Long) As Long
Private Declare Sub CloseHandle Lib "kernel32" (ByVal hPass As Long)

Private Const PROCESS_ALL_ACCESS = &H1F0FFF

Private Type PROCESSENTRY32
dwSize As Long
cntUsage As Long
th32ProcessID As Long
th32DefaultHeapID As Long
th32ModuleID As Long
cntThreads As Long
th32ParentProcessID As Long
pcPriClassBase As Long
dwFlags As Long
szExeFile As String * 260
End Type
Public Function GetHProcExe(strExeName As String) As Long
Dim hSnap As Long
'Create a snapshot of all of the processes, and information
'about them (saving the handle so we can iterate through the
'processes)
hSnap = CreateToolhelpSnapshot(2, 0)

Dim peProcess As PROCESSENTRY32
peProcess.dwSize = LenB(peProcess)

Dim nProcess As Long
nProcess = Process32First(hSnap, peProcess)

'Loop through the processes until we find the one we want
'and return its process handle
Do While nProcess
If StrComp(Trim$(peProcess.szExeFile), strExeName, vbTextCompare) _
= 0 Then
GetHProcExe = OpenProcess(PROCESS_ALL_ACCESS, False, peProcess.th32ProcessID)
Exit Function
End If
peProcess.szExeFile = vbNullString
nProcess = Process32Next(hSnap, peProcess)
Loop
CloseHandle hSnap
End Function

[p3n1]

What wrong with using a trainer that finds the game by caption/window class? I personally use that method for all my hacks. Anyways, I know your not looking for a VB trainer template, but there is a VB modules called GetHProcExe. In short it does the following code, you might be able to port it to C++ or whatever by looking at the api it uses and what not

THX, i'll try that :)
The API functions should be the same, i'm glad to have ppl like u here, that help me making this real.
Hope to have it working in a matter of hours...