
Ok, now gain some life to get your health % back to 100. That value that they returned is an address in itself (remember, these are pointers to an address that holds a value of your life). Continue through all the values above until you have a list of working addresses.Īll of the addresses above should have returned the same value. If your address returns any value other than 0 and doesn't fluctuate in value then write the address down in notepad.

Run around for a sec or so and alt+tab the game. Next click the box to the left of your address to enable the break and return to the game. Next look at the register that goes along with the address ( EAX in 501973's case), and choose it from the register list. Go to the register tab and you will see your address has been set for a Break on execute. Right click your address from the list and choose "Register". Choose the Disassembler tab from the bottom and you will see your address listed at the top. To do this, we take each address (example 501973) and go to menu "Edit" in the autohack window and choose "Disassemble", and enter your address. Next we must set a BPX, or break on execution, on each of these addresses so that that we can see if they return a value. These are the offsets that you should see in the autohack window: If you would have just set a write breakpoint you would have gotten just the pointer address that decreases everyones health, which is useless to us. Meaning that if you lock it then everyone in the game becomes immortal when you do. Notice all the offset addresses from your DMA address.įor Vice City the decreaser address affects everyone in the game, and not just you. REturn to the game and run around for a sec or so, then alt+tab and check autohack window. Click "Set" to set the breakpoint for read/write on your address. Enter your address that you found above, leave the byte settings like they are, and then choose "Read/Write" from the breakpoint list. A new screen will come up asking your for the address to set the breakpoint on, how many bytes, and the type of breakpoint. Next go to menu "Edit" and choose "Set BreakPoint". Next go to menu "AutoHack" and choose "AutoHack Window" to show the AutoHack window. In Tsearch go to the menu "AutoHack" and choose "Enable Debugger". We need to set a breakpoint for read/write on this address to see what is reading and writing to this address. *Note* Your address will not be the same as mine because of DMA. Repeat this a few times until you come up with an address that works.

Alt+tab the game and do a search for "Value Has Decreased". Go back into the game and loose a bit of health. Next use Tsearch to search for a known value of 17096. Start a new game and make sure that your health is at 100 %.
DOWNLOAD DO TSEARCH 1.6 CODE
In this tutorial, we are going to hack a vital code for Grand Theft Auto: Vice City.
DOWNLOAD DO TSEARCH 1.6 PLUS
Plus you dont have to worry about games protecting against softice when you are using Tsearch to hack everything that you need.

So i have turned to Tsearch which seems to be neck and neck with softice in my opinion. I however have a radeon 9800, and softice didn't like that. For those who can, well you are some of the lucky. Time to rewrite one of 's tutorials for those of us who can't seem to fire up the old softice debugger for some reason or another. User Knowledge Needed: Basic Asm, Tsearch Functionsīased on: 's Tutorials for Softice Subject: Code Injection - DMA To Static address with Tsearch
