GRID - hacks and hacking, trainers and others

[Sethioz]

no experience really does change, i know it should not, because it is server side. when Thuuning did this at first, i tought he is bullshitting me, but i went to game with him, he changed exp and i was able to see it too. first few times it was only so called view trick for me, but im pretty sure that it stayed at what i changed it to. i can't remember if there is some overall rank board, but if there is then check it and see if my name is there with 3030000 or 303000, i know i had something like that.

no i will not install it back. it is fairly easy to change drivetrain, compare to a 4wd car and see where's the differences.

[KITT]

... is not so easy for me to put 4wd drivetrain, i don't find any relevant value to change... I have try with hundred and hundred value but no effect..
I need your help, if you can reinstall grid and try to hack traction, with your experience is a 15min of your time... [p.l.e.a.s.e] :)

Your ex point are not in rank list.... for me don't enough to set into memory, need a packet editor or similar... bec I run always with ex point selfmade but server never save me.

Thanks for help

[Sethioz]

i just realized something, i haven't put up Colin McRae rally 05 hacks, uhm. i was about to redirect you there, because CMR05 is similiar and it has all the lines commented already.
so instead you can get CMR05, open the handling file and compare to GRID, you will get very good idea what is what.
NOTE - it is probably not just RR, FR, FF, 4WD ..etc, it means you have to actually change the values to make rear or front wheels work.
easiest way is to compare FF car to a FR car. FF car has 0.0 where FR car has some value and FR car has 0.0 where FF car has some value, there can't be much of them. you can compare like 5 FF cars to 5 FR cars, this way you will find it very easily.
to make it even easier, do not make it 4wd, instead try to change FF to FR or FR to FF. once you find that, you can easily make it 4wd.

[KITT]

... don't work... i cannot find the right value for put on the 4wd.... 0.0 or similar
I 'm not find the right way...

[Sethioz]

just go them thru one by one, how long can it take...ony day max. it can also be the traction ratio or how its called.
on FR it would be 0,100 and on FF it would be 100,0 and 4WD would be 50,50 or 40,60 or 30,70 < this is usual ratio of 4wd cars.
Thuuning seem to knew a lot about GRID too, but i doubt he deals with it anymore.

[SCFAdamVcG]

still no luck,damn its frustrating,very frustrating that I can't even get rankpoints hacked since I lost them all :/
you know of a way to kick people without others voting?

[Sethioz]

hmm nope, not sure if there even is a way, but there should be way to make anti-boot instead.
also in GTA 4, the drivetrain is handled as following:
1.0 < FF
0.0 < FR
0.5 < 4WD
0.4 < 40% front, 60% rear
0.2 < 20% front, 80% rear
0.8 < 80% front, 20% rear
you get the idea..

[KITT]

hmm nope, not sure if there even is a way, but there should be way to make anti-boot instead.
also in GTA 4, the drivetrain is handled as following:
1.0 < FF
0.0 < FR
0.5 < 4WD
0.4 < 40% front, 60% rear
0.2 < 20% front, 80% rear
0.8 < 80% front, 20% rear
you get the idea..

Very thanks for this idea, i find a "Rear power proportion for 4WD cars" parameter and is set to 0.7 .
If the car is 4wd the proportion work, but if the car is 2wd this parameter don't work..
At this moment i can't able to put 4wd in real time.. only off-line with csv mod :)

[Sethioz]

then it has 2 or more values to handle drivetrain.
1. should tell the game if car is FF, FR, RR or 4wd
2. other is to specify the ratio between front-rear (like 0.7 would be 30% front and 70% rear)
so if you find what says what drivetrain car has, then you can change it and THEN change ratio. in colin mcrae rally 05 it was simply FF, FR and 4WD.

[SCFAdamVcG]

that'd be awesome to have your own anti damage switch and anti boot.. I can change the mass of the car, totalled 6 cars with 1 :p but then the car broke >.>
ahh anti damage for components not bodywork is in that grid trainer on page 1,it works but you gotta mess around with it and the car still gets totalled .. not as quick but because of body damage :O,Any idea why xp comes up only as integer 8 bytes or 3 bytes, i mean once i changed it in 8 bytes and did a race it changed the 3 byte value [showed in artmoney when I searched for it],But the problem is I have around 2k experience points and over 100 values come up.. or even thousands.. could it be something to do with having an origonal grid copy ? I mean It's even seen by others but Doesn't go to the leaderboard .. which Is extremely annoying .. Am I missing something? I watched your youtube tutorial on bytes and sizes ,it cleared a few things up but still the values dont seem to be working as they should, maybe I have artmoney configured wrong? I have the full version from isohunt so I'm not too sure..

[Sethioz]

bytes does not change, its hard to explain if you have no idea what byte is.
00 00 < 2 bytes of data
00 00 00 < 3 bytes of data
like that, changing bytes does not change anything .. aah just learn what byte is and how its shown in hex.

as i said, maybe you have different version and its patched, if my score is not on leaderboard, then obviously it is patched.

[SCFAdamVcG]

I said i'd learnt how bytes work lol .. Maybe my value isn't high enough or something .. last was 2226 rankpoints with no hacks .. but wanted to get to atleast number 2 on the leaderboard :P
got an idea i'll try it in a bit

[SCFAdamVcG]

ah.. now i know whats up .. although artmoney works with grid my rankpoints dont go up when artmoney is running even if i've done nothing.. seth.. it's been detected lol

[Sethioz]

whats been detected ? artmoney ? as far as i know, GRID has no anti-hack/debugging engines.
however you are still doing it wrong, no matter if rank points are patched or not, they will still change on client side.

[naruto]

whats been detected ? artmoney ? as far as i know, GRID has no anti-hack/debugging engines.
however you are still doing it wrong, no matter if rank points are patched or not, they will still change on client side.

I followed your tut, but one things bugging me. Hope you can help me.
I know how to increasse accelration etc through csv. But like you said that only works offline. Now i've searched a few values (gear ratio) with tsearch and managed to change them ( by adding for ex: a 1 in front of gear ratio). What i did was just right clicked on value, press edit, and set a hotkey and specified the value to be set after hotkey is pressed. So that went well. Now why can't i do that for torque? Am i suppoed to replace the hex?
Any help is welcome.
Thanks.

[Sethioz]

well you are on right tracks, however it is not that easy.
for example i don't know all the steps from head, so no details, sry.

hex, you mean hex memory view ? yes this is only way to find those things, because they never change and you can't search for them. as i have explained and showed in videos, you have to compare game's memory to a csv file to find the right spot.
from there...yes you can just write your own values directly into memory using hex memory view, but its annoying and long if you wanna do it quick, before the online match starts.
for that, i can only point you to the right direction, you need to learn how to make trainers. this is the darker area for me, i have only wrote one basic trainer for dead space (if im right). you have to basically write a trainer, so trainer starts before game and forces game to use your data instead of default, replacing happens in memory so you can play online.

in trainer making, you can either make an image of game's memory (which won't work on this case, because csv is loaded into different locations each time) or force game to use certain code, but as i said, i have not wrote such trainers.
you can try to google for "how to beat dma"
dma = dynamic memory allocation.

maybe in future i will take it as project and make a video tutorial on how to make such trainer, but for now you have to google for that. ofc if you manage to do that, it would be nice if you share the info.
also you should check out "easy write" in Tsearch, i doubt it does the trick, but its interesting and can be useful.

[naruto]

Well thank you for the info.
I was looking at the way you modified the c65 gear ratio( you added 2+ gears) and as i understand you did it through hex memory, by replacing the original hex of gear ration with the modified one. Will this permit you to play online with modified hex?
Secondly how did you come up with the hex modification for the c65? I know how to convert hex to dec, but your modifcation of c65 gear ratio makes no sense to me.

I assume this is your original hex memory:

4C 37 89 3D 8F C2 F5 3D 0A D7 23 3E CB A1 45 3E B0 72 68 3E B8 1E 85 3E 00 00 00 00 00 00 00 00

And this is the modified hex, where you put 2+ gears:

4C 37 89 3D 8F C2 F5 3D 0A D7 23 3E CB A1 45 3E B0 72 68 3E B8 1E 85 3E 9A 99 99 3E 7B 14 AE 3E
So what do the numbers in green mean and how did you come wup with them?


So it'd be nice if you could shed some light on that. Thanks again.

[Sethioz]

no no, you don't convert anything.
ill use Tsearch as example, you open "HEX view" in tsearch (it is memory hex view ofcourse) and along side you open c65.csv file in text editor (or in hex editor if you wish, doesnt matter what you use).

first, to make things clear. when you have opened HEX view in Tsearch, it shows you game's memory, it means you can see all the loaded files (including c65.csv), but not inside of text and/or hex editor, but inside of game's memory. hex is used for memory view, because text editor can't read it (symbols and stuff). however it has ASCii view alongside it.

so now you have original c65.csv open and hex view of game's memory. now in .csv find some unique value and simply search it in the hex view of game's memory. then just compare game's memory to a .csv. in game's memory there are 00 00 00 between values, but its in same order.
so for example if you find gears, then 7th and 8th gear comes after 6th gear ofcourse and it says 00 00 00 00 there. if im correct GRID allocated 4 bytes for each value, so 7th and 8th gear are 00 00 00 00 00 00 00 00. so this data i added "9A 99 99 3E 7B 14 AE 3E" was just values.
how i know what to put there ?
well very simple, i did not convert anything. i modified .csv, ran game, used hex view to find this location in game's memory and just looked for it and copied it into a text file, then i changed .csv back, ran game again, found the place again and pasted that hex string over the place.

lil bit messy, but you seem to understand how this stuff works. and yes this allows you to play online.
basically this is trainer, difference between trainer and this, is that trainer does all the replacing part automatically for you..all you need to do in trainer is hit the hotkey and it replaces everything needed, but here you do that manually.
the hardest part is the writing of the trainer code, which does all that automatically.

you know it from head, like i said in the earlier post:
first search for "c65_v.2.5" and the first thing that comes up in memory (using hex memory view in Ts) is the right value, but you can't really tell trainer to do that hehe. .. like search for "c65_v.2.5" and then first result and then 10 bytes after that replace THIS with THAT.
but you should get the idea ..

[naruto]

well very simple, i did not convert anything. i modified .csv, ran game, used hex view to find this location in game's memory and just looked for it and copied it into a text file, then i changed .csv back, ran game again, found the place again and pasted that hex string over the place.

I understand everything else apart from this. So let me tell you what i understand and hopefully you can correct me.

1) I modify for example Torque/acceleration values in the .csv.
2) I do test drive, pause game.
3) In tSearch i copy unique value into hex memory search.
4) I click on magnifying glass and search value from .csv ex: 0.8000 (modified value), float, exact value.
5) I pinpoint the right value from list and view the hex memory ( games memory using tsearch).
6) I copy the hex digits in the mermory address into a notpad (???)
7) I undo any modifications made to the .csv file.
8) I run game again.
9) I repeat step 4) and 5) (using original value).
10) Paste the hex string (which was copied in notepad from step 6)) into the original one (hex memory in Tsearch) by using the replace button.

[Sethioz]

nah, you don't use that search, you search inside of hex view. you search for this "c65_v.2.5"
"c65_v.2.5" < this string is inside of c65.csv file, if you find it in memory, you have found the c65.csv file inside of game's memory, now you can simply scroll up and down to find the right position. all values related to c65 are very close, this is why you have to open .csv along side with hex view and compare them to find the right place/s.

here's video that shows you exactly what i did, only that its from other game, but this is exactly same what i did in GRID.
How to use memory HEX editor to hack games - avp2 hacks

[naruto]

Ok, that makes it a whole load easier. I'll try that out then let you know if i succeeded.

So apart from that , is everything else i mentioned correct?

Thanks.

[Sethioz]

pretty much, exept as i said you can't use the normal search, you have to find it inside of hex view. once you find it, then yes you copy the "gears" hex string into notepad or something (modified gears).

if you are able to build a trainer, you can force game to load your modified .csv data instead of default.
for example instead of replacing only gears, you could replace whole car.csv inside of memory.

[naruto]

I'm going to try the hex thingy right now.

about the trainer and forrcing GRID to read the modified .csv, i'm pretty sure you have to build a program for that, i might just know how to do that using simple c language but then linking it to the program is another problem, i'll let you know if i find something.

[naruto]

Hey sethioz for some reason i can't reaplce the hex, when i try to replace the hex a load bar appears but the hex stays the same????


BTW, i found a way to improve on your method. Instead of comparing .csv with hem memory editor. First find value with magnifying glass, then double click on first value, then value will move to right hand side. Above value there are buttons ( Freeze, unfreeze etc...) and there is a button which allows you to view the hex memory of the value.
Try it yourself and let me know.


EDIT:
Ok i got another question, i managed to replace the hex nut haven't tried it online.

My question is the following: Do i have to do this before EACH RACE? Or just once?

Oh and I can't find the replace option in Artmoney, I'm using Artmoney because like you said you can't replace long strings in tSearch

[Sethioz]

as about C, sure you can, you can write anything in C, but its easier to use some kind of a trainer maker.

BTW, i found a way to improve on your method. Instead of comparing .csv with hem memory editor. First find value with magnifying glass, then double click on first value, then value will move to right hand side. Above value there are buttons ( Freeze, unfreeze etc...) and there is a button which allows you to view the hex memory of the value.
Try it yourself and let me know.

to me it seems longer and harder, well yes it is also mag glass, but it is in the hex view window, not the one in 'search'.
so i do only one search and i'm already in the right position, comparing is important, because .csv loaded into game's memory does not appear exactly in right order all the time, it also has some other values between. ..or they are just swapped..etc.
I compare it to the .csv file so i know what is what in game's memory.

My question is the following: Do i have to do this before EACH RACE? Or just once?

yes, unfortunetly GRID loads .csv file only when you choose the car and memory location of the loaded .csv is always different.
i think somewhere i said you have to exit game when changing .csv, but you don't. if im correct, then .csv is loaded each time you choose car and enter race with it. so it should be enough if you just go to main menu, select the car again and enter race again (to make game reload .csv)

This is how i made the famous TurboBoost hack, I compared .csv to game's memory, then i highlighted the value and added it into cheat list and made hotkeys, but again i had to do it each time i entered race.

as about ArtMoney, it cant change very long strings either, this is why you need to build a trainer for more things.
Ofcourse there is always something that points game into right memory location, im sure it is possible to change that. either point game to your own .csv, or tell game to always load .csv into same place or find empty place in game's memory and write your data there and then tell game to read that place instead (this is how trainers work). you can inject your own data into game's memory (into empty place) and then point it there, instead of original.
Tsearch has execellent tutorial in it, but its very basic.

NOTE - while in single player race or garage, then each car has it's own data !!! yes thats right, you can make A.I. cars jump too. this is what you can see in my TurboBoost demonstration video, where i made the other car on background jump.
if you want to see videos, just click on the "Video Blog" ..all of my GRID videos are there.

[SCFAdamVcG]

Yeah.. I know somethings not right,or where i'm going wrong but,
what happens is I search for the value ,then do a match ,then try and filter the values for the one thats changed eg 2226 rankpoints to 2229 .. doesn't work...
but when I changed my username with a string it's fetched the rankpoints.. so I got one of the high rankpoints users .. searched the value ,5 values came up,2 integer 8 bytes,1 3 bytes ,and an r.integer 3 bytes ,but when I changed back to my username it seems none of these values changed.. and also the rankpoints dont change when I get artmoney up.. could it be anything to do with grid 1.2 or 1.0?

[Sethioz]

well as i said, to me they did change, and Thuuning was also able to change rank points (as seen on video)
did they showed up in leaderboard ? no idea, i think they did before.

[SCFAdamVcG]

whats wierd is ,if i freeze them it does but it doesn't save.. nothing I seem to do saves which is very wierd.. maybe I'm doing something really wrong?
Maybe If I Showed you how I do it you could correct me please?

[Sethioz]

as i said, its probably patched, it is already very strange that other ppl even see it.
basically you can compare it to this forum, if you search for "932909d09fdsa" < this value and change it, it would be visible only for you, not for others, but in GRID it changes for others, which is very strange.

[SCFAdamVcG]

I figured it out,the value changes when I exit the score board but if I freeze it ,the value seems to change adress.. possibly it's stored in the savegame..
but I can't quite figure out ,I beleive it's receiving the score from the server

[Sethioz]

ofcourse it is recieving it from server, thats the whole thing, this is why i was surprised when Thuuning changed it, and it changed for others.
ive explained it many times, server side things cannot be changed, they only change for you, but not for others. its probably fixed and it does not need game update to be fixed.

i think that the bug was in their server system. so it temporarly stored data in your pc and when race was done, then your client sent that data back to server and then server updated it, but now they obviously fixed it, so server checks that there is no 'mysterious' adds to the points. for example if your points are stored in server, 303 points. you go into race, then server checks how many points you gained, if you gained 1 point, but server recieves like 303003 points back, then server detects the difference and simply won't update it.

[SCFAdamVcG]

good point there , I found a float of 4 bytes that only shows up in the leaderboard but.. I changed some other values,came out of the leaderboard,rankpoints were still the same but the game froze when loading the track..
So how would I go about sending a packet that confuses the server.. another thing .

[Sethioz]

you can't really 'confuse' server, as i said, it is obviously fixed.
if you wan't to play around with packets, then WPE pro and commview and with proxocket you can permanently modifiy packet/s once you have found what you looking for.

[SCFAdamVcG]

hmm .. but wins wouldn't be patched?
thanks ,i'll figure out how to use that tool

[gigablaster]

hi there, i know you dont like grid much, but i think there could be something interesting to do with it still... when you complete career mode (or when you enter a cheat) you get a few bonus cars like ebay mustang, 2 bmws and a few others... is it possible to make it so that, instead of one of these cars, you get a porsche 911 gt3? this could be a way to drive the porsche in career other than in those "driver offer" challenges...

[Sethioz]

im quite sure i already explained how you can get the 911 and stock lacetti.
you just replace the cars with those, then you can replace handling and sounds too.

[gigablaster]

but replacing files (method you described earlier) means all bmws become porsches.

what i wanted is the following: cheats give you one zonda, one aston, one mustang, and two bmws. i wanted to make it so that, instead of two bimmers, i got one bmw and one porsche.

[Sethioz]

oh, the BMWs use same model with different color theme ?
if that's the case, i have an idea, but i cant check. i deleted GRID long ago.
my idea is to find the place in game's memory where it tells game to load this specific car and the config for this car and replace it with porsche.

there's several methods you can use to find it, either just open "hex editor" in tsearch and just search for the bmw model (whatever the name was). for example if you find the right place in memory where game loads bmw model and replace it with porsche model, then once you select other car (just view it) and move back to bmw, it should load porsche instead.
with this one i could be wrong, but here goes:
you can use filemon and set bmw as filter (full name of bmw model file, cant tell you cuz i dont have game, it would be like bmw.mdl or something like this) then you run game in window and look in which point game loads it. that will give you an idea when game loads it so you know when it is loaded into game's memory and then find it.
basically it should be possible to make a trainer or write asm code (tsearch's easywrite) that will do this automatically after you have found it.

you can also use olly debugger to try to find the places where grid.exe loads the bmw model files. sry no tutorial about olly at this time, it is not that hard to figure out how to search. here's quick guide:
open olly
click file > open and open grid.exe (not when its running)
now once its loaded, click on that "M" button above (blue buttons) it opens "memory map"
right click on first address and select search. now into ASCii you type the name of the porsche model file (check it up in your game's directory).
see if it finds anything. and dont forget to try with both, case sensitive checked and unchecked.
if you do find something, see how many times it occurs there. now if im right about this, then you can replace the right one (the one that is ebay bmw or whatever) and then in game, it will always reload porsche instead of bmw.

*basically with this memory editing method, in one game i made game load the models that should never be loaded. it was shooter and i made myself appear as a grenade or some invalid model that was never appeared in game. however i did not change model name, there was value that simply told the game that model_blah is number 123 and model_supnat is 124. so it could be same in grid that each car has some value and it changes once you select car. there could be several methods, however in that game it was possible to change models directly too (by name), but then they only appeared offline and for you, other ppl online still saw you as default (this is why i used the other method).

> upload your grid.exe as attachment and i can check it for you (if attachment doesnt work, then use some share sites) or maybe you can email it to me > [email protected]

NOTE: filemon method is only if you can't find right bmw model in game's memory.

[KITT]

Hi, can explain me please a method to load an edited .csv (car and tyregrip) for online session ?
You can make a trainer where is possible to chose in real time the .csv load ?
Tyregrip.csv load into memory some string value, example i find the value of 100 but is string type, and my unique value under string value..
when i try to edit take no effect ingame.....
Thanks

[Sethioz]

no, i do not have game anymore and i dont make trainers.

all that is explained already in earlier posts. how to change car in memory and how to find car in memory.
i tested it and it worked online. you just need to change right value.

[KITT]

Is there a way to load directly an edited .csv and bypass the check of modified game files ?
Or edit the value into a memory by loading a full .csv file without edit single value ?
Thanks

[Sethioz]

im sure there is, but i have not looked into this.
you can write a trainer like program to load your own .csv over the original, but reverse engineering and debugging is not really my field.
you would need to find the function that loads a specific .csv into memory and then modify it so it would load your .csv instead, but then it might still say that file is modified, if thats the case, then you would have to wait until .csv is loaded and then press hotkey on your trainer so it would load whole .csv into memory and like all trainers, you would write that new .csv into new place and then point game to that.

Tsearch has some good tutorials under help if you want to know about that. only thing i dont know, is how i could find the function that loads specific .csv. if i would have that i could probably write a trainer, but i wont (i have no interest in grid anymore).
however i can always point you into right direction.

[KITT]

Thanks Seth !!!!

[KITT]

Hey Sethioz !! reinstall the game with 1.3 update !!! don't work the trick with address... this thread is out now, need new guide, need your technical help !!!

[Sethioz]

don't work the trick with address

what trick with what address ?
you refer that address is not same ? or what are you talking about, somebody get me a changelog from 1.3. im sure you are trying the same addresses. you just need to find all again.

[KITT]

some address are not the same but i find the new address, just the value is changed the car is automatic banned/kicked from session !!
Reinstall the game please !! :) help us !!!
Need new guide..

[Sethioz]

if you changed your values in memory and still got kicked, then it means that game now has memory check too, but i highly doubt, i have never seen or heard anything like this. most likely you did something wrong.

[KITT]

try,
i find the right value again !! and if I try to change the value even after the loading (when the car is on-street) I receive a automatic kick from session !!!

[Sethioz]

as i said, it means that they have planted some kind of a memory check, but its still very weird. game's does not have it, they have external tools/programs to do that. like gameguard, hackshield..etc or in RE5 case it was that dumb 'windows live' shit.

UPDATE:

GRID Patch 1.3 changelog:

- Added support for additional content packs.
- Added support for Motion Platform D-Box.
- Increasing the maximum view distance by 1 km so it is possible to see the entire length of the hill roads on San Francisco
- Fix for personal best lap time not replacing world record lap time when playing without internet connection.
- Fix for race day personal best lap times only being valid for first race in a grid world event.
- Fix for being able to select too many different types of cars in multiplayer events Long Beach Battle and Drift Inter GP.
- Fix for being able to select the Pontiac GTO in multiplayer Touring cars events.
- Fix for vehicles bought on eBay applying performance modifiers when playing multiplayer events.
- Fix for being awarded 1 lap in online stats for freestyle drift events.
- Prevented the editing ebay.xml cheat

i don't see anything that could perform the check. I even don't see anything that could detect Tsearch.

[KITT]

as i said, it means that they have planted some kind of a memory check, but its still very weird. game's does not have it, they have external tools/programs to do that. like gameguard, hackshield..etc or in RE5 case it was that dumb 'windows live' shit.




i don't see anything that could perform the check. I even don't see anything that could detect Tsearch.

no Seth !! if you change the right memory value when the car is online, with t-search or mhs receive an instantly kick from session !!
try !!install the game !!!
sry but with 1.3patch this thread guide is totally out !! no more cheat for grid ?