1) I think the shotgun is clientsided, I could be wrong, I have been before.
2) I think he used C++, he said he was going to in a different thread.
And here's a suggestion for the DMA, make the trainer autoscan for the address or something, I've done something like that before.