Tutorials and Faqs brainstorm - submit information and opinions here

[bubbrock316]

I'm having a little trouble relating what's in the tutorials to what want to try do.

In Madden 06 there are few menu options that are grayed out under certian conditions. I want to try poke the addresses and see if I can keep them selectable under those conditions. And then see if they stay functional, or if further training is needed.

What I'm having trouble with is, these aren't really values that would change from what I can see. Unless they changed when grayed out, which brings me to my next problem. The menu labels for these are text based like R Elbow, L Wrist, Attributes. I'm just a little confused on what the best way to find those values would be. If I would just search normally using those label titles or what?

Any help on this is greatly appreciated. As you can tell, I'm a total newb at this. But I'm trying to learn so I can at least attempt what I want to do.

[weevil]

i would like someone to fully explain in a tutorial how to use xdkassist and artmoney in conjunction witheachother assuming you can connect with it also explaining that if you get 011b1738 integre 4 byte as a memory location what do you do with that next ?

weevil

[thatguy2001]

I am actually in the process of writing a simple to follow tutorial. But instead of using XDKAssist I am using xbxmdump.exe which basically does the same thing, and instead of using Artmoney I am using TSearch.

I should have it ready over the weekend.

[matthew]

where can i download tsearch from

[dirksteelca]

Just wanted to say a quick thank you to all the people that make the trainers! I don't know the first thing about making them, so this is great! It's so much fun when after you beat a game without cheats, that you can go through again with the trainers and just have fun. Thanks again!

[mikerowesoft]

I need everyone to take a minute and read this thread. Do not post to it, just read. Thank you all so much for your time and effort.

http://forums.maxconsole.net/showthread.php?t=12743

[Deerpark]

In Evox's debug TSR, once a break point is reached what is the easiest way to find the address of the subroutine's caller? I know it's on the stack but how do I look at the stack? Thanks.

[dootdoo]

In Evox's debug TSR, once a break point is reached what is the easiest way to find the address of the subroutine's caller? I know it's on the stack but how do I look at the stack? Thanks.

from my recollection (its been awhile), the tsr doesnt show you esps address. If it DOES, then a db address would show you what is on the stack.

if you were really in need of finding esp I can think of a slow and painful way to get it. Basically set a bpx wherever you wanted to get esp, and then you could change the op directly in front of it to move esp into eax, and then view the stack to find the address you are looking for, then either fix the instruction, or reboot and go at it again.
If I misunderstood your question, please repost a clarification

[Deerpark]

Thanks Dootdoo. You're a saint. You answered my question perfectly. I was actually already considering writing a small program to change the op and then fix it automatically. I'll let you know once I make some progress.

[stevewassy]

hi just quick question i have a game that has godmode in txt is there a way of getting this to enable also is there any tuts on using xdkassas i get addy for ammo can change in game but does not seem to be right addy how do i trace this

.text:00038FC7 lea ecx, [esp+24h+var_18]
.text:00038FCB mov [esp+24h+var_4], edi
.text:00038FCF call sub_216A0
.text:00038FD4 push offset aGodmode_on ; "GODMODE_ON"
.text:00038FD9 lea ecx, [esp+28h+var_18]
.text:00038FDD call sub_22650
.text:00038FE2 mov ecx, [esi+30h]
.text:00038FE5 push 0
.text:00038FE7 lea eax, [esp+28h+var_18]
.text:00038FEB push eax
.text:00038FEC mov [esp+2Ch+var_4], 16h
.text:00038FF4 call sub_23BCA0
.text:00038FF9 lea ecx, [esp+24h+var_18]
.text:00038FFD mov [esp+24h+var_4], edi
.text:00039001 call sub_216A0
.text:00039006 push offset aGodmode_off ; "GODMODE_OFF"
.text:0003900B lea ecx, [esp+28h+var_18]
.text:0003900F call sub_22650
.text:00039014 mov ecx, [esi+30h]
.text:00039017 push 3F800000h
.text:0003901C lea edx, [esp+28h+var_18]
.text:00039020 push edx
.text:00039021 mov [esp+2Ch+var_4], 17h


any help appreciated thx

[8ball]

Hello everyone,
I've got a question and it probably has been asked, but I have been working on some trainers. Some I have no problem with making the trainer. Baldur's Gate DA2, Frontline, so so forth. The relatively simple ones to get myself going with a little knowledge. But some games lockup when when they start with tsr on debug, I have one that starts then locks up when you go to play, others I just can't connect. The game plays but can't use ett to telnet. I have tried to different patches to see if they would work to no avail. What can i do or use to work around this, I have plenty of time to learn. I'm disabled and have the time to try and invest to help out the scene. Like I said I have created a few trainers and worked on a few more, Maybe just alittle shove in the right direction, But not to hard.
Any help would be greatly appreciated and hopefully afterwards I would be able to help others!
8ball

[stevewassy]

hi just quick question i have a game that has godmode in txt is there a way of getting this to enable also is there any tuts on using xdkassas i get addy for ammo can change in game but does not seem to be right addy how do i trace this

.text:00038FC7 lea ecx, [esp+24h+var_18]
.text:00038FCB mov [esp+24h+var_4], edi
.text:00038FCF call sub_216A0
.text:00038FD4 push offset aGodmode_on ; "GODMODE_ON"
.text:00038FD9 lea ecx, [esp+28h+var_18]
.text:00038FDD call sub_22650
.text:00038FE2 mov ecx, [esi+30h]
.text:00038FE5 push 0
.text:00038FE7 lea eax, [esp+28h+var_18]
.text:00038FEB push eax
.text:00038FEC mov [esp+2Ch+var_4], 16h
.text:00038FF4 call sub_23BCA0
.text:00038FF9 lea ecx, [esp+24h+var_18]
.text:00038FFD mov [esp+24h+var_4], edi
.text:00039001 call sub_216A0
.text:00039006 push offset aGodmode_off ; "GODMODE_OFF"
.text:0003900B lea ecx, [esp+28h+var_18]
.text:0003900F call sub_22650
.text:00039014 mov ecx, [esi+30h]
.text:00039017 push 3F800000h
.text:0003901C lea edx, [esp+28h+var_18]
.text:00039020 push edx
.text:00039021 mov [esp+2Ch+var_4], 17h


any help appreciated thx

Been trying xdkass the addys that show up in window what are these i really want to stert making triners as i think you guys are great thx.

[8ball]

Can anyone say where to get xbxmdump!

[8ball]

How about a better tool, what does everyone use? I think i have everything but this program! Just trying to go by a tutorial, to learn this stuff.

[Platty]

Can anyone say where to get xbxmdump!

http://trainers.maxconsole.net/index.php?dlid=314


Platty