Warhammer 40k Winter Assault Trainer

[shortferret]

Originally Posted by saulob

Ferret,
tested now.. on a skirmish map, and i think all the options, including the instant build works the same for the computer player.

he build A LOT, i mean A LOT of the first squad soldier... and fast...

the instant build, its not instant build for all, works only on updating the structures and creating squads... but for the peon building the structures its the same speed.. (its great for me that way )

too bad that works for the enemy too, I played the order campaing thinking about that.. ehhe, the enemy had a lot of soldiers, more than normal.. but i didn´t give up..

btw, nice gui

Hey thanks for testing it out Guess it's back to the old drawing board for me then

[saulob]

Originally Posted by shortferret

Hey thanks for testing it out Guess it's back to the old drawing board for me then

no problem, i´m justing playing the game now
thanks for your trainer.. ehehe

and... just started the 'disorder' campaing, and the 'pop hack' it´s not working... only the 'resource' one...

[shortferret]

Man been really busy these few days...

fixed the orks unit limit, and unlimited resources + unit/veh limits for human player only. Instant build still affects both human and computer players.

http://www.filelodge.com/files/hdd7/...iner_Plus4.rar

[DABhand]

A bit of advice, look deeper into the registers for quick builds.


Set a breakpoint before you amend the code, and keep note of eax.

See if it changes when you build, or when the computer builds.


For an example this is what the coding is like for FABLE.

10abf

mov eax,esi 
mov [00548a62],eax 
cmp [eax],127293c                          - is it going to be NPC? 
je 10ae2                                        - jump here if so 
cmp [eax],12457fc                          - is it going to be player? 
je 10af1                                        - jump here if so 
fstp [esi+b4]                                  - if none above, move current stack value to pointer 
jmp 6a6338                                    - jump back to game 
fstp [esi+b4]                                  - NPC health routine, change to mov [esi+b4],00 for 1hit kill 
nop 
nop 
nop 
nop                                              - nops needed for mov instruction later since its needs 10 bytes 
jmp 6a6338                                   - jump back to game 
fstp [esi+b4]                                 - hero's health, nop out for infinite health. Or you can force a value in? 
jmp 6a6338                                   - jump back to game.. 


6a6332 

jmp 10abf                                     - jump to code injection 
nop 



If we want 1 hit kill, rename 2nd fstp to mov [esi+b4],00

Basically when playing the game, I set a breakpoint at the real address when calculating out dmg done and removing, so i get hit game broke into debugger checked eax value, hit bad guy, broke back seen new value, tried a few times to make sure.

So then I had these 2 values...

012457fc was the players' eax value
0127293c is the NPCs'


With a bit more digging (Fable will be more complicated than Warhammer so I doubt you will need to do this)... I found out where it stored these values before moving em, then found out it used the same address each time [00548a62].

If warhammer is the same idea, then just look before the code you want to manipulate, you will eventually find the evidence you need. But I doubt it, dont have the game so cant help you any further.

[shortferret]

Hey DABhand, thanks for the tips!

I managed to find the screen update address the human player used for resources, which the comp player never uses, so was able to modify only the human player values.

I have tried to use your method for finding the specific pointer to the human player's address for instant build, seems that both player and computer are obviously using the same routines and the pointers are different for EACH building not just a simple matter of either human or comp? i might be wrong but this is what my tiny brain is interpreting now.. mebbe I'll post the Tsearch results later

[DABhand]

What you will have to do is set a read brakepoint on the screen addy/ies, so that is the just the screen values, so it has to read them from somewhere.

Tsearch should break at wherever it reads the values from, then when you find that, you should be able to set a brakepoint again to find out where the calculation for the values is. (or look about to see if you find a JMP or CALL)


EDIT: Brakepoint??? I musta been tired :P

[shortferret]

Hey thanks DABhand! I managed to find the location to poke for human player only instant build Cheers!

http://www.filelodge.com/files/hdd7/...ner_Plus4b.rar

It's been fun

[DABhand]

Nice

Not too difficult

[Koks]

great work on the trainer!

i found a weird bug though.

when i have all options on max (graphic details, unit occlusion, peristent bodies) pressing f1 and then building something crashes the game.
when i put all options on lowest (3d camera off, unit occlusion off) it works normally.

weird...
can you have a look into that?
i tried it on two different machines with different hardware and had the same results.

i can still use f1, then switch it off with f4 and it works nicely. no unlimited units then though..

[shortferret]

Originally Posted by Koks

great work on the trainer!

i found a weird bug though.

when i have all options on max (graphic details, unit occlusion, peristent bodies) pressing f1 and then building something crashes the game.
when i put all options on lowest (3d camera off, unit occlusion off) it works normally.

weird...
can you have a look into that?
i tried it on two different machines with different hardware and had the same results.

i can still use f1, then switch it off with f4 and it works nicely. no unlimited units then though..

Hmmm that's really strange, I tried mine on full details, no problems.. mebbe you can let me know your hardware specs for both machines and the map you were playing .. and also playing as which race...

Thanks for testing

[5n0wcr45h]

Hmmm. My bug is even weirder/worse. Basically at the race for the titan mission, whenever I hit F1/F2/F3, game crashes to desktop. I've tried lowering the graphics settings but still the same result, with both trainers 4 and 4b. Never crashed with trainers 2 or 3. (Trainer 2 and 3 make that mission impossible tho... infinite Obliterators 0wnz my ass )

Sys is a AMD athlon 64 3000 with 1 GB RAM, Radeon 9600 256MB. Really appreaciate the trainer and *really* hope you can help with this.

[Koks]

Sys Specs for machine 1:
Pentium 2.1 ghz with a Nvidia Geforce mx 400 (a very low crappy card) (512 mb ram)

Specs for no. 2:
P4 2.4 ghz with Geforce 6800 ultra (256mb model) (1 gig ram)

it happened in every mission of the campaign, with every race.

i tried to set all to low and only leave one option at a time to max but regardless what i max out it crashes.

its not that big a deal i can still get more or less unlimited funds (999999999 is a lot...) i just thought i let you know.

[DABhand]

Which version of the game is the trainer for shortferret.

Perhaps you havent used a patch when these people have.

I dont know.

[shortferret]

Originally Posted by DABhand

Which version of the game is the trainer for shortferret.

Perhaps you havent used a patch when these people have.

I dont know.

Thanks DABhand, that was what I was thinking too. My trainer was created using the DOW version 1.40 engine. You guys using 1.40 or 1.41?

I have tried with 3 machines, P4 2.4Gig 512MB RAM Ti4200, P4 3Gig 1 Gig RAM 6600GT, HP NC4200 laptop. Pumped them up to full details, tried also the titan race mission.. no errors

I can't really do anything if I can't replicate the errors, sorry guys

[Koks]

i didnt apply any patches, just made the normal installation...
but i guss i will try applying the latest patch and see if it makes any difference.