How to memory hack in a D3D enviroment

[gcflames12]

Credits:
***-Cobra // for teaching me how to do this, and for teaching me how to hack.

This is how i was taught to do this. their is also a tutorial like this from cobra on D x T. I was taught this in D3D8 but here is it in D3D9.

At the top of d3d9dev.cpp we need to make a handle.

HANDLE CA; // this is what i use u can change it.

Then Search for Initialize()

Then add this to it. Call this in endscene too,to make sure we still have the current process.

CA = GetCurrentProcess();

now when you do ReadProcessMemory or WriteProcessMemory,we have our mem to read and write also.

#define GlassWalls 0x00000000  //define your address here with the HANDLE

CA = GetCurrentProcess();
ReadProcessMemory(Wrrk,(LPVOID*)(DWORD)GlassWalls,&v, sizeof(v), NULL);

Now we use memcpy for a second option.

#define GlassWalls 0x00000000  //<<<<<<define your address up top somewere with the HANDLE


void GlassWalls()
{
long t=0;
unsigned long Protection;
   VirtualProtect((void*)GlassWalls, sizeof(t), PAGE_READWRITE, &Protection);
   memcpy((void*)GlassWalls, &t , sizeof(t));
 VirtualProtect((void*)GlassWalls, sizeof(t), Protection, 0);

 VirtualProtect((void*)GlassWalls2, sizeof(t), PAGE_READWRITE, &Protection);
   memcpy((void*)GlassWalls2, &t , sizeof(t));
 VirtualProtect((void*)GlassWalls2, sizeof(t), Protection, 0);
}

now to use this with a hotkey.

////up top bool your hack bool means true or false///

bool G_Walls;


/////in End Scene/////Do the hotkey and hack

    if( GetAsyncKeyState( VK_NUMPAD1)&1 )
G_Walls = !G_Walls;  ////this tells it on or off

if (G_Walls)  ////if H_Spawn is true  
{
GlassWalls();  /// hack
}

this is how i made most of my hacks in my D3D hack im creating.
Credits to ***-Cobra - for teaching me this on facebook
Me - for showing u how i do it.

[Void]

Why use ReadProcessMemory if you have direct access?

[gcflames12]

i was just giving the same tutorial as cobra gave me. do you know who he is?

[Void]

i was just giving the same tutorial as cobra gave me. do you know who he is?

Nope, but I would probably suggest using direct memory access to retrieve data, ReadProcessMemory just slows everything down and if you're going to use this in a game, the anti-cheats are most likely hooking it.

[php]
int buffer;

buffer = (int) *(DWORD*)0xHealthAddy;
[/php]

Assuming HealthAddy is defined with the correct address, buffer should now hold the value the address contains. Without the use of RPM.

[lauwy]

Thanks
But how do you find the address?

[gcflames12]

same as crossfire, dump cshell and if you want engine. then just open cshell in olydbg and search for all refrenced text strings. you can find the addies for stuff or just use ptc. deadlinez has a nice post of them.

[lauwy]

I mean, how to find an address to NOP.

(crossfire example )

See Ghost:
address: 10111D4D
offsets: 0x7C, 0x07 (nop it)
signature: \x3B\xD1\x7F\x4E\x8A\x54\x24\x10

[gcflames12]

use magic mans sig scanner