DX9 Hook by ~FALLEN~

[~FALLEN~]

Visual studio 2008

[u.A.v.A]

Visual studio 2008

Visual studio 2010

[~FALLEN~]

For the people having "stability issues" it's your shitty code, I gave this to friends months ago and they never had to modify it for any reason, I also released this on UC and no on there has had "stability issues", and I have never had "stability issues" I don't know how you're hooking it, I don't know what you're doing in it, etc. But there is no problem with the code I provided. Try a vtable hook, see if that helps.

[superleecherz]

Fix your unstable code kthx.

[~FALLEN~]

Fix your unstable code kthx.

go superleech somewhere else. p.s code isn't unstable, kthnxbai

[pvgiangccc]

How to use that Code ? Need What program ? CAn u tell me plz :̣̣

[AznNicholas1314]

Should be undetected, don't know, haven't used this in a while. Have fun (: *Yes you can port this to d3d8 if you know how*

Tools : Ollydbg & IDA
Credits : ~FALLEN~
Coded in : C++

struct sStack
{
	sStack* PreviousStack;
	DWORD ReturnAddress;
	void* Arguments[ 127 ];//Maximum number of arguments to pass to a function
};

DWORD SCPtr = 0;//Table[19]
DWORD SCRet = 0;//On xp - Start of EndScene Function + 0xB9 - Vista / 7 - Start of EndScene Function + 0x9E

void __fastcall hkSceneCapture( void* ECX, void* EDX, signed int Capture )
{
	IDirect3DDevice9* pDevice;//Device interface pointer
	sStack* Stack;//Stack handling structure
	__asm
	{
	  MOV Stack, ESP
	  pushad//Preserve all General-Registers
	  pushfd//Preserve EFlags
	}
	if( Stack->ReturnAddress == SCRet )
	{
	  if( ( pDevice = Stack->PreviousStack->Arguments[ 0 ] ) != NULL )
	  {
	    //DoShit
	  }
	}
	__asm
	{
	  popfd//Restore EFlags
	  popad//Restore All General-Registers
	}
	return ( ( void( __thiscall* )( void*, signed int ) SCPtr )( ThisPtr, Capture );//Give control back to SceneCapture
}

DWORD Table = FindPattern( D3DModuleHandle, 0x105000, (PBYTE)"\xC7\x06\x00\x00\x00\x00\xC7\x46\x00\x0B\x00\x00\x00\x8B\xC6" ), "xx????xx?x???xx" );//CD3DDIDX7 SCPtr = this[19]

Nice, hooking endscene by hooking an unchecked function that is called inside endscene. I might release the code snippets needed to get this working. GJ on the find!~

[~FALLEN~]

Nice, hooking endscene by hooking an unchecked function that is called inside endscene. I might release the code snippets needed to get this working. GJ on the find!~

As I said before, theres only 2 changes to make and all it is was a small antileech and if anyone had the experience to figure it out they wouldn't have "compatibility issues" or crashes or w.e they were having... Change esp to ebp and then change thisptr to ecx in the function prototype... Easy enough...
Anyways this hook is like 2 years old... Its pretty sad on how few anticheats have picked up on it...

[AznNicholas1314]

As I said before, theres only 2 changes to make and all it is was a small antileech and if anyone had the experience to figure it out they wouldn't have "compatibility issues" or crashes or w.e they were having... Change esp to ebp and then change thisptr to ecx in the function prototype... Easy enough...
Anyways this hook is like 2 years old... Its pretty sad on how few anticheats have picked up on it...

HAHAHA that esp to ebp antilieech is pro :P almost had me there.

[oXParadoxXo]

So what does this do? Sorry, I'm kinda lost.

[zZzeta/S]

This is an Undetectet way to get the pDevice to draw your Stuff. But it's advanced code and has antileech protect

[oXParadoxXo]

Can anyone help me get this to function? I'm using MS Visual Studio Express 2012 and compiling this as a .cpp file to create a .dll file. What am I doing wrong? Sorry for being so nooby, but I really want to learn how to write in C++.

I have:

DWORD SCRet = 0;//On xp - Start of EndScene Function + 0xB9 - Vista / 7 - Start of EndScene Function + 0x9E

void __fastcall hkSceneCapture( void* ECX, void* EDX, signed int Capture )
{
	IDirect3DDevice9* pDevice;//Device interface pointer
	sStack* Stack;//Stack handling structure
	__asm
	{
	  MOV Stack, EBP
	  pushad//Preserve all General-Registers
	  pushfd//Preserve EFlags
	}
	if( Stack->ReturnAddress == SCRet )
	{
	  if( ( pDevice = Stack->PreviousStack->Arguments[ 0 ] ) != NULL )
	  {
	    //DoShit
	  }
	}
	__asm
	{
	  popfd//Restore EFlags
	  popad//Restore All General-Registers
	}
	return ( ( void( __thiscall* )( void*, signed int ) SCPtr )( ecx, Capture );//Give control back to SceneCapture
}

DWORD Table = FindPattern( D3DModuleHandle, 0x105000, (PBYTE)"\xC7\x06\x00\x00\x00\x00\xC7\x46\x00\x0B\x00\x00\x00\x8B\xC6" ), "xx????xx?x???xx" );//CD3DDIDX7 SCPtr = this[19]

Is this right?

I get a error message when I try to run (click Debug to Release) it:
"Unable to start 'C:\Users\Username\Documents\Visual Studio 2012\Projects\MyFirstHack\Release\MyHacks.dll'.
The system cannot fine the file specified."

[~FALLEN~]

Can anyone help me get this to function? I'm using MS Visual Studio Express 2012 and compiling this as a .cpp file to create a .dll file. What am I doing wrong? Sorry for being so nooby, but I really want to learn how to write in C++.

I have:

DWORD SCRet = 0;//On xp - Start of EndScene Function + 0xB9 - Vista / 7 - Start of EndScene Function + 0x9E

void __fastcall hkSceneCapture( void* ECX, void* EDX, signed int Capture )
{
	IDirect3DDevice9* pDevice;//Device interface pointer
	sStack* Stack;//Stack handling structure
	__asm
	{
	  MOV Stack, EBP
	  pushad//Preserve all General-Registers
	  pushfd//Preserve EFlags
	}
	if( Stack->ReturnAddress == SCRet )
	{
	  if( ( pDevice = Stack->PreviousStack->Arguments[ 0 ] ) != NULL )
	  {
	    //DoShit
	  }
	}
	__asm
	{
	  popfd//Restore EFlags
	  popad//Restore All General-Registers
	}
	return ( ( void( __thiscall* )( void*, signed int ) SCPtr )( ecx, Capture );//Give control back to SceneCapture
}

DWORD Table = FindPattern( D3DModuleHandle, 0x105000, (PBYTE)"\xC7\x06\x00\x00\x00\x00\xC7\x46\x00\x0B\x00\x00\x00\x8B\xC6" ), "xx????xx?x???xx" );//CD3DDIDX7 SCPtr = this[19]

Is this right?

I get a error message when I try to run (click Debug to Release) it:
"Unable to start 'C:\Users\Username\Documents\Visual Studio 2012\Projects\MyFirstHack\Release\MyHacks.dll'.
The system cannot fine the file specified."

gtfo, then learn to code. You will know how to use it then.
I really hope people dont help you because you obviously have no clue what you're doing and are just copy & pasting

[oXParadoxXo]

Wow, thanks. I'm trying to understand this and that's what I get? What a fucking asshole. I'm trying to code myself, but I can't even make outputs for already known/working coding. Dude, I hope you fucking get cancer. I'm out.

[~FALLEN~]

Wow, thanks. I'm trying to understand this and that's what I get? What a fucking asshole. I'm trying to code myself, but I can't even make outputs for already known/working coding. Dude, I hope you fucking get cancer. I'm out.

goodbye. Dont let the door hit you in the ass on your way out. Btw, the reason im not helping you is because you obviously dont know how to code AT ALL, and im the asshole??? You told me to get cancer and die... Rofl... 1. My father died from cancer when I was 8 so nice one m8. And 2. The world doesn't revolve around you, people shouldnt give you handouts. People work hard to earn the respect/knowledge/money/etc they have, why should they just hand it all over just because you want it??? Grow up. Kthnxbai