Empire: Total War v1.6 (Money Trainer)

                                         1 9 1 1         <JED>
                          Razor 1911 proudly presents:
                    Empire: Total War Update 6 Money Trainer
                                   (C) Sega                                  
  Date: 2009-06-23                    Game Type : Strategy
  Size: Small                         Protection: N/A
 Game Notes
 ~~~~~~~~~~
 Control  the  sea,  command  great armies, forge a new nation and conquer the
 globe.  Empire:  Total  War takes the Total War franchise to the 18th Century
 and  the  Age  of  Imperialisma  time  of  near  perpetual  war. This latest
 installation  in  the  award-winning,  multi-million  unit  selling Total War
 franchise  introduces a host of revolutionary new features, including true 3D
 naval  combat.  Players  will  be able to command single ships or vast fleets
 upon  seascapes rich with extraordinary effects. After pummeling enemies with
 cannon  fire,  players  will  close  in to grapple enemy ships and prepare to
 board,  taking  control  of  men as they fight hand-to-hand. With an entirely
 new  game  engine, Empire will see further enhancements to the 3D battles and
 turn-based  campaign  maps. Empire lets players experience combat on the high
 seas,  India,  Europe, and, for the first time, the United States of America.
 Install Notes
 ~~~~~~~~~~~~~
 1. Unpack
 2. Start the game and run the trainer
 3. Use this key:
    F1 - Add 10000$ to money
 4. Have Fun!
 Read NFO:
 ~~~~~~~~~
 Proof that Cheathappens.com stole the Sims 3 money option from Razor
 JFYI, here's the chronologic order of releases:
 First The Sims 3 trainer v1.0.615 released on:                   19-05-2009
 Second The Sims 3 trainer for the v1.0.631+v1.0.632 released on: 25-05-2009
 shithappens The Sims 3 Promo(Crippled) trainer on:               26-05-2009
 What was stolen?
 The method of obtaining the memory address of the player's money.
 Normally updates to this address are processed through some part of
 game code that is massively shared among a load of other routines.
 While having used a completely different approach in their earlier
 (read: buggy) trainer, they all of a sudden changed to using the
 exact same patch offset and filter routine as used by Razor.
 Have a look at the compares:
 The only difference between Razor and shithappens is that Razor only jumps
 for certain constant values (edx = 42 or ecx = 60) while shithappens.com code
 jumps if the value aren't equal, i.e. it's the same filtering - just inverted. 
 Razor code:
 00B9A9F6  E8 450E1400          CALL TS3.00CDB840 // jump to codecave
 00CDB840  0FB74F 02            MOVZX ECX,WORD PTR DS:[EDI+2] // original code
 00CDB844  83FA 42              CMP EDX,42 // compare if edx = 42
 00CDB847  74 04                JE SHORT TS3_mave.00CDB84D //jump if equal
 00CDB849  8B1408               MOV EDX,DWORD PTR DS:[EAX+ECX] // original code
 00CDB84C  C3                   RET // return game code
 00CDB84D  8B1408               MOV EDX,DWORD PTR DS:[EAX+ECX] // original code
 00CDB850  83F9 60              CMP ECX,60 // cmp ecx = 60
 00CDB853  75 0B                JNZ SHORT TS3_mave.00CDB860 // if not equal return
 00CDB855  A3 00F1F400          MOV DWORD PTR DS:[F4F100],EAX // extract baseadr.
 00CDB85A  90                   NOP // rent this space
 00CDB85B  90                   NOP // rent this space
 00CDB85C  90                   NOP // rent this space
 00CDB85D  90                   NOP // rent this space
 00CDB85E  90                   NOP // rent this space
 00CDB85F  90                   NOP // rent this space
 00CDB860  C3                   RET // return game code
 shithappens code:
 (cave offsets arent relevant in this case coz they use dll.injection)
 jumps from 00B9A9F6 
 00F4FFD6 0FB74F 02            MOVZX ECX,WORD PTR DS:[EDI+2]// original code
 00F4FFDA 9C                   PUSHFD //save registers
 00F4FFDB 60                   PUSHAD
 00F4FFDC 83FA 42              CMP EDX,42 // compare if edx = 42
 00F4FFDF 75 0D                JNZ SHORT TS3.00F4FFEE
 00F4FFE1 83F9 60              CMP ECX,60 // cmp ecx = 60
 00F4FFE4 75 08                JNZ SHORT TS3.00F4FFEE
 00F4FFE6 03C8                 ADD ECX,EAX// same as[EAX+ECX]
 00F4FFE8 890D 003F9303        MOV DWORD PTR DS:[3933F00],ECX // extract baseadr.
 00F4FFEE 61                   POPAD
 00F4FFEF 9D                   POPFD // restore original registers
 00F4FFF0 8B1408               MOV EDX,DWORD PTR DS:[EAX+ECX] // original code 
 Conclusion:
 We discussed this with brewers,reunion and pwz separately, all said they suspect
 that shithappens has stolen from rzr.
 While constantly accusing everyone and their grannies of ripping their work,
 they seem to have a quite a different view on things if it is for fixing their
 inferior stuff by having a look at other people's code
 (not to mention even makingmoney off of it). Talk hypocrisy...
 Razor 1911 Greetings
 ~~~~~~~~~~~~~~~~~~~~
 To all friends!
                                      /
                        Razor 1911   /__   Since 1985
                                    /  /
                                   /__/__
              SUPPORT THE COMPANIES THAT PRODUCE QUALITY SOFTWARE!
     IF YOU ENJOYED THIS PRODUCT, BUY IT!  SOFTWARE AUTHORS DESERVE SUPPORT!!