[Tut]How to make a dll trainer

[Nerrazzuri]

I already use a var for desired misses, wich is miss_amount. Misses is how many times i got missed. Anyways, i just noticed that i forgot to initialize "Misses" to 0. But i still have the KB problem o_0. They miss me, but i get knockback wich is not supposed to happen.

Okay, just read back your script and realize that.
About the no kb part did it work in AA script form?

[Raiden]

I already use a var for desired misses, wich is miss_amount. Misses is how many times i got missed. Anyways, i just noticed that i forgot to initialize "Misses" to 0. But i still have the KB problem o_0. They miss me, but i get knockback wich is not supposed to happen.

Okay, just read back your script and realize that.
About the no kb part did it work in AA script form?

OMG? Got bypass liao meh? Or GMS one?

Well, maybe the No-KB script got problem or code wrong gua.......

HEY, I need some help!!! Some pointers like Mob X/Y have 2~3 offsets!!! Watz the code?!
Also, can I have a v94 list of pointers(like Cam`s GMS v81 CT), coz I need it to work on.
(Dun say I lazy, I have really no time......3rd exam near, need go school study, need do geography project, semi banned-playing (I can only surf the forum for 10~20 minutes every morning or when I doing project T.T(a.k.a. sneak-playing))

[francesco149]

I already use a var for desired misses, wich is miss_amount. Misses is how many times i got missed. Anyways, i just noticed that i forgot to initialize "Misses" to 0. But i still have the KB problem o_0. They miss me, but i get knockback wich is not supposed to happen.

Okay, just read back your script and realize that.
About the no kb part did it work in AA script form?

Its GMS, and yes it does work in the AA form.

[Nerrazzuri]

I already use a var for desired misses, wich is miss_amount. Misses is how many times i got missed. Anyways, i just noticed that i forgot to initialize "Misses" to 0. But i still have the KB problem o_0. They miss me, but i get knockback wich is not supposed to happen.

Okay, just read back your script and realize that.
About the no kb part did it work in AA script form?

Its GMS, and yes it does work in the AA form.

Well, I'm not sure with the script tho, but if you want to have a 7 miss god mode with NoKB together I can do something like this for you.

Code: Select all

void __declspec(naked) MissAsm()
{
	__asm
	{
		inc [bMissRound]
		cmp [bMissRound], [MissAmount]
		ja StopMiss
		xor eax,eax
		jmp [ulMissOpcode]

		StopMiss:
		mov [bMissRound],0x00
		jmp [ulMissReturn]
	}
}

void MissNoKB()
{
	CopyMemory(bMissMem, (void*)ulMissAddy, 6);
	Jump(ulMissAddy, MissAsm, 1);
        *(unsigned char*)0x008581BD = 0x00;//enable byte for nokb
	while(!MissExit)
	{
		Sleep(200);
	}
	CopyMemory((void*)ulMissAddy, bMissMem, 6);
        *(unsigned char*)0x008581BD = 0x01;//disable byte for nokb
}

of course you'll need to define

Code: Select all

const unsigned long ulMissAddy = 0x00A5F318;
const unsigned long ulMissOpcode = ulMissAddy + *(unsigned long*)(ulMissAddy + 2) + 6;
const unsigned long ulMissReturn = ulMissAddy + 6;
unsigned char MissAmount;//FF maximum, a.k.a 225 miss, i think you know what you are doing right since you know how to edit some of the ASM script.

and for the Jump part, define something like this before your inline asm

Code: Select all

bool Jump(unsigned long ulAddress, void* Function, unsigned long ulNops)
{
   __try
   {
      *(unsigned char*)ulAddress = 0xE9;
      *(unsigned long*)(ulAddress + 1) = jmp(ulAddress, Function);
      memset((void*)(ulAddress + 5), 0x90, ulNops);
      return true;
   }
   __except (EXCEPTION_EXECUTE_HANDLER) { return false; }
}

Hope that helps. And check before copy paste, cause I type this in plain text, might be some mistake there, but generally, you can combine 2 hacks together as you make it in ASM but different method in C++.

[Off Topic]
PM me your MSN, someone is offering you something good.

[francesco149]

Thanks, works fine if i combine regular nokb with 7miss like you said . I am sorry to bother you yet again but i tryed to convert Timed BP Godmode but it doesnt seem to do anything, doesnt crash either. The Original AA script works fine.
Oh, and the delay is adjusted from the GUI, and its a DWORD var

My CodeCave:

Code: Select all

void __declspec(naked) _stdcall TGM_Exit() {
	_asm {
		jmp [TIMED_GM]
	}
}

void __declspec(naked) _stdcall TGM_Exit2() {
	_asm {
		test eax,eax
		je [IHateInlineAsm]
		jmp [TIMED_GM_RET]

		IHateInlineAsm:
		jmp [TIMED_GM]
	}
}

void __declspec(naked) _stdcall TGM_delay1() {
	_asm {
		call [TGM_CALL]
		mov eax,[TimedGMPtr]
		mov eax,[eax+0x18]
		sub eax,[godmode_timer]
		cmp eax,[TGM_nextGo]
		jbe [JumpToExit]
		mov eax,[TimedGMPtr]
		mov eax,[eax+0x18]
		add eax,[godmode_timer]
		mov [TGM_nextGo],eax
		jmp TGM_Exit2

		JumpToExit:
		jmp TGM_Exit
	}
}

Activation:

Code: Select all

VOID Timed_Godmode(__in BOOL bEnable){
	if(bEnable){
		*(BYTE*)  TIMED_GODMODE = 0xe9;
		*(DWORD*)(TIMED_GODMODE + 1) = jmp(TIMED_GODMODE, TGM_delay1);
	} else
		WriteAddress((LPVOID)TIMED_GODMODE, TimedGMOff, 5);
}

Original AA Script:

Code: Select all

[enable]
// 58 Seconds Godmode
// Base address :　CENSORED
// Assembly scan the opcode you find with that AoB. The base addy is one of those that have CENSORED after the opcode.
// Made by iverson66 for TWMS v111
// Converted to GMS v88 by Franc[e]sco aka Noffa
//-----------------------------------------------------------------------------

registersymbol(delay1)
alloc(delay1,512)
label(Exit)
label(Exit2)
registersymbol(delay)
alloc(delay,4)
registersymbol(nextGo)
alloc(nextGo,4)

CENSORED:
jmp delay1  

delay: // Godmode delay in hex ms: 2710 = 10000ms = 10s, E290 = 58s
dd E290
nextGo:
dd 0

delay1:
call CENSORED // Base addy opcode
mov eax,[CENSORED] // CENSORED
mov eax,[eax+18]
sub eax,[delay] 
cmp eax,[nextGo]
jbe Exit
mov eax,[CENSORED]
mov eax,[eax+18]
add eax,[delay]
mov [nextGo],eax

jmp Exit2  

Exit:
jmp CENSORED // CENSORED

Exit2:
test eax,eax 
je CENSORED
jmp CENSORED // CENSORED

//-----------------------------------------------------------------------------

[disable]
CENSORED:
call CENSORED

unregistersymbol(delay)
dealloc(delay)
unregistersymbol(nextGo)
dealloc(nextGo)
unregistersymbol(delay1)
dealloc(delay1)

[Nerrazzuri]

you did not call your TGM_Exit and TGM_Exit2
Make it all in 1 script and it will work.

[joeld1915]

i keep getting 34 errors and 7 warnings ive done everything that in the tut but still ive done it about 3 times now still happens i dont get it
im also new at this

[Nerrazzuri]

show me the errors and warnings.

[joeld1915]

im only getting this one now

[royalsymbol]

Hehe, thanks to your help, i was able to make a dll trainer with Microsoft Visual Studios 2010, there seems to be some error with Microsoft Studio Express 2010 the way you taught me :\

This .dll trainer is coded in C++, injectable with any injector to msn, for example Cheat Engine's injector or NRZ Injector
the nudgehack is for Windows Live Messenger 2009(Build 14.0.8117.416)

i Downloaded Windows Live Messenger in 2010 May or June onwards, it might be very likely that your msn version is same as mine

http://i35.tinypic.com/o94wb4.png


perfectly working for me right now( dont know about tommorow xd )

ALL CREDITS TO : Nerrazzuri & Goomba

What a nice thread revival!

P.S, the target is my sister xd