|
#12
01-04-2009, 09:51
|
||||
|
||||
|
simple, 99.9% of them all use WriteProcessMemory to patch in the trainer code...
so we could have a tool (i guess i could make it if needed) which 'caught' the api call, and outputed what it would write, the size, and the location we do this on both trainers, and analyse the code that would be injected... we then compare it (taking rva's into account) and look for similar or identical byte patterns, which gives us a very early indication to the uniqueness of them (or otherwise)
__________________
bleh DO NOT PM me with questions, leave that in the forums...ESPECIALLY if i dont know you... |
| Thread Tools | Search this Thread |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Where to find Cheats/Trainers; also about Promo/Demo Trainers | Joe Forster/STA | Game Trainers | 1 | 24-09-2009 05:44 |
| I created the Supreme Commander trainers and also C&C 3 Demo trainer | Caliber | Game Trainers | 2 | 04-04-2007 02:30 |
| Diablo 2:No cd, and trainers | whackazog | PC Games | 0 | 03-04-2005 22:36 |
| I guess GAMECOPYWORLD didnt want the Official Operation Flashpoint v1.2 Update With CD Check Removed | DiZtraction | PC Games | 12 | 21-09-2001 00:55 |
Threaded Mode