EndScene Hook Test
EndScene Hook Test
Can anyone try there hooking methods on EndScene for me and play CA for a little while and see if they get shut down... I am hooking EndScene With Delphi and CA must be detecting it and closing it down, So I would really like if someone could test this for me to see if they get the same result... If they are getting the same result, It means I will be needing to hook another D3d9 Function and see if that works... Also why im on the subject I seen a topic here about a week ago(maybe more) with all the Vtables for d3d9, I couldn't find it again, So if someone knows what Each Vtable pointer is as in Functions I would really appreciate it, for example EndScene is Vtable 42 ect... I
Originally Posted by Departure
Can anyone try there hooking methods on EndScene for me and play CA for a little while and see if they get shut down... I am hooking EndScene With Delphi and CA must be detecting it and closing it down, So I would really like if someone could test this for me to see if they get the same result... If they are getting the same result, It means I will be needing to hook another D3d9 Function and see if that works... Also why im on the subject I seen a topic here about a week ago(maybe more) with all the Vtables for d3d9, I couldn't find it again, So if someone knows what Each Vtable pointer is as in Functions I would really appreciate it, for example EndScene is Vtable 42 ect... I
Also, Here's the thread with all the vtable offsets: http://www.mpgh.net/forum/207-combat...ions-more.html
Only problem is I dont know the index of Reset from the Vtable, I wont try Present because I think that has some custom d3d9 structures and types for parameters, But if you have the input structures and types for reset and the Vtable index I would try and convert that to Delphi, The only reason I used EndScene is because it takes a pointer only>
Originally Posted by Departure
Only problem is I dont know the index of Reset from the Vtable, I wont try Present because I think that has some custom d3d9 structures and types for parameters, But if you have the input structures and types for reset and the Vtable index I would try and convert that to Delphi, The only reason I used EndScene is because it takes a pointer only>
) that I released.Here's the types:
Code:
typedef HRESULT (WINAPI* Reset_T)(LPDIRECT3DDEVICE9 pDevice, D3DPRESENT_PARAMETERS * params); typedef HRESULT (WINAPI* Present_T)(LPDIRECT3DDEVICE9 pDevice, const RECT* pSourceRect, const RECT* pDestRect, HWND hDestWindowOverride, const RGNDATA* pDirtyRegion);
Code:
typedef int HWND; // I think this should work
struct RECT
{
int x, y, width, height; // iirc
}
Reset is vtable index 16
Present is vtable index 17
RGNDATA is declared in WinGDI.h I can give you a struct for it too if you need.
yeap thanks, here is the Vtable from olly
Just minus the base address and then when you want to hook it after d3d9 has loaded just add the base address of d3d9.dll, in this case here the base address was 71BE0000, for example EndScene is Vtable 42
42 DD d3d9.71BFCE09 so 71BFCE09 - 71BE0000 = 1CE09
As we know dlls have a different base address each time its loaded, so we just do something like dwEndSceneAddress = (GetModuleHandleA('d3d9.dll') + $0001CE09 )
This will give the correct address to hook without all the pointer of the pointer bullshit and chasing sig scans...
Anyway back on track here... yes the RGNDATA structor I will be needing because I dont have Delphi D3d9 Headers library so everything I need to convert and make my own Delphi Structor.
Code:
0 DD d3d9.71BE6E99 1 DD d3d9.71BE67F2 2 DD d3d9.71BE67C9 3 DD d3d9.71BFCD54 4 DD d3d9.71C9BCFD 5 DD d3d9.71CD971F 6 DD d3d9.71BEBB76 7 DD d3d9.71BE6F78 8 DD d3d9.71C17DFB 9 DD d3d9.71C1B972 10 DD d3d9.71C9B1C4 11 DD d3d9.71C9B69D 12 DD d3d9.71C17D10 13 DD d3d9.71C1CD50 14 DD d3d9.71BFB46C 15 DD d3d9.71C3711E 16 DD d3d9.71C38DDA 17 DD d3d9.71C210C3 18 DD d3d9.71C42A9F 19 DD d3d9.71C18945 20 DD d3d9.71C9B789 21 DD d3d9.71C9BA0F 22 DD d3d9.71C9BB4D 23 DD d3d9.71C0476B 24 DD d3d9.71C9C0B8 25 DD d3d9.71C2E93F 26 DD d3d9.71BFD40D 27 DD d3d9.71C0ED61 28 DD d3d9.71C423B8 29 DD d3d9.71C9C3D8 30 DD d3d9.71C9D72C 31 DD d3d9.71C16611 32 DD d3d9.71C34331 33 DD d3d9.71C9C687 34 DD d3d9.71C20430 35 DD d3d9.71C1A5D3 36 DD d3d9.71C34F4F 37 DD d3d9.71C20EE9 38 DD d3d9.71C211D2 39 DD d3d9.71C26E97 40 DD d3d9.71C26D10 41 DD d3d9.71BFD8BC 42 DD d3d9.71BFCE09 43 DD d3d9.71BEF244 44 DD d3d9.71BEE9D6 45 DD d3d9.71CE07A2 46 DD d3d9.71CD986F 47 DD d3d9.71CD9987 48 DD d3d9.71C257A0 49 DD d3d9.71CD9C94 50 DD d3d9.71CE111B 51 DD d3d9.71C15700 52 DD d3d9.71CE11CA 53 DD d3d9.71C15803 54 DD d3d9.71CE1313 55 DD d3d9.71CDB054 56 DD d3d9.71CE0E27 57 DD d3d9.71C22ED1 58 DD d3d9.71CE0365 59 DD d3d9.71C2F1FC 60 DD d3d9.71C21467 61 DD d3d9.71C230E3 62 DD d3d9.71CE0936 63 DD d3d9.71CE09E0 64 DD d3d9.71CDA368 65 DD d3d9.71C1B175 66 DD d3d9.71CE054C Couldn't be bothered continuing adding numbers... 71BE4D44 |E3B2C171 DD d3d9.71C1B2E3 71BE4D48 |CA06CE71 DD d3d9.71CE06CA 71BE4D4C |1EB2C171 DD d3d9.71C1B21E 71BE4D50 |B3CBC271 DD d3d9.71C2CBB3 71BE4D54 |57ACCD71 DD d3d9.71CDAC57 71BE4D58 |91AFCD71 DD d3d9.71CDAF91 71BE4D5C |5AAACD71 DD d3d9.71CDAA5A 71BE4D60 |B6ABCD71 DD d3d9.71CDABB6 71BE4D64 |B19ACD71 DD d3d9.71CD9AB1 71BE4D68 |D89BCD71 DD d3d9.71CD9BD8 71BE4D6C |EE0ECE71 DD d3d9.71CE0EEE 71BE4D70 |4803CE71 DD d3d9.71CE0348 71BE4D74 |0E5BC271 DD d3d9.71C25B0E 71BE4D78 |8957C271 DD d3d9.71C25789 71BE4D7C |6036C071 DD d3d9.71C03660 71BE4D80 |5176C071 DD d3d9.71C07651 71BE4D84 |7354C271 DD d3d9.71C25473 71BE4D88 |C6C4CD71 DD d3d9.71CDC4C6 71BE4D8C |AC1FCE71 DD d3d9.71CE1FAC 71BE4D90 |22F5C071 DD d3d9.71C0F522 71BE4D94 |46F4C071 DD d3d9.71C0F446 71BE4D98 |6577CD71 DD d3d9.71CD7765 71BE4D9C |6AB5CD71 DD d3d9.71CDB56A 71BE4DA0 |A0B6CD71 DD d3d9.71CDB6A0 71BE4DA4 |9F12C471 DD d3d9.71C4129F 71BE4DA8 |AE2BC271 DD d3d9.71C22BAE 71BE4DAC |5C43CE71 DD d3d9.71CE435C 71BE4DB0 |48EEC271 DD d3d9.71C2EE48 71BE4DB4 |D68DCD71 DD d3d9.71CD8DD6 71BE4DB8 |3478CD71 DD d3d9.71CD7834 71BE4DBC |C38FCD71 DD d3d9.71CD8FC3 71BE4DC0 |A679CD71 DD d3d9.71CD79A6 71BE4DC4 |B391CD71 DD d3d9.71CD91B3 71BE4DC8 |D15CC271 DD d3d9.71C25CD1 71BE4DCC |AAB1CD71 DD d3d9.71CDB1AA 71BE4DD0 |A1B2CD71 DD d3d9.71CDB2A1 71BE4DD4 |E1B3CD71 DD d3d9.71CDB3E1 71BE4DD8 |C25DC271 DD d3d9.71C25DC2 71BE4DDC |9CB4CD71 DD d3d9.71CDB49C 71BE4DE0 |77B1C371 DD d3d9.71C3B177 71BE4DE4 |7A2CC271 DD d3d9.71C22C7A 71BE4DE8 |5147CE71 DD d3d9.71CE4751 71BE4DEC |C3EFC271 DD d3d9.71C2EFC3 71BE4DF0 |1A48CE71 DD d3d9.71CE481A 71BE4DF4 |447CCD71 DD d3d9.71CD7C44 71BE4DF8 |5C49CE71 DD d3d9.71CE495C 71BE4DFC |B67DCD71 DD d3d9.71CD7DB6 71BE4E00 |AC4ACE71 DD d3d9.71CE4AAC 71BE4E04 |76BFCD71 DD d3d9.71CDBF76 71BE4E08 |1FC2CD71 DD d3d9.71CDC21F 71BE4E0C |287FCD71 DD d3d9.71CD7F28 71BE4E10 |26E4BF71 DD d3d9.71BFE426 71BE4E14 |F1A5CD71 DD d3d9.71CDA5F1 71BE4E18 |C8A8CD71 DD d3d9.71CDA8C8 71BE4E1C |10D6C971 DD d3d9.71C9D610 71BE4E20 |05D4C971 DD d3d9.71C9D405 71BE4E24 |B66CC171 DD d3d9.71C16CB6 71BE4E28 |B5CEC971 DD d3d9.71C9CEB5 71BE4E2C |C0CFC971 DD d3d9.71C9CFC0 71BE4E30 |67DAC171 DD d3d9.71C1DA67 71BE4E34 |F3D4C971 DD d3d9.71C9D4F3 71BE4E38 |6C8CC171 DD d3d9.71C18C6C 71BE4E3C |4EC2C971 DD d3d9.71C9C24E 71BE4E40 |ADD6C971 DD d3d9.71C9D6AD 71BE4E44 |F4C4C971 DD d3d9.71C9C4F4 71BE4E48 |85D5C971 DD d3d9.71C9D585 71BE4E4C |50A8C171 DD d3d9.71C1A850 71BE4E50 |6E56C071 DD d3d9.71C0566E 71BE4E54 |BAEEBE71 DD d3d9.71BEEEBA 71BE4E58 |C4EFBE71 DD d3d9.71BEEFC4 71BE4E5C |CA17BF71 DD d3d9.71BF17CA 71BE4E60 |46F6C071 DD d3d9.71C0F646 71BE4E64 |31E8C371 DD d3d9.71C3E831 71BE4E68 |2CCBCD71 DD d3d9.71CDCB2C 71BE4E6C |CFCCCD71 DD d3d9.71CDCCCF 71BE4E70 |0C26C471 DD d3d9.71C4260C 71BE4E74 |1A1CC471 DD d3d9.71C41C1A 71BE4E78 |69CECD71 DD d3d9.71CDCE69 71BE4E7C |1BD0CD71 DD d3d9.71CDD01B 71BE4E80 |1A58C071 DD d3d9.71C0581A 71BE4E84 |E4EDBE71 DD d3d9.71BEEDE4 71BE4E88 |A078C071 DD d3d9.71C078A0 71BE4E8C |34E0BF71 DD d3d9.71BFE034 71BE4E90 |CC74CD71 DD d3d9.71CD74CC 71BE4E94 |486BCD71 DD d3d9.71CD6B48 71BE4E98 |82EABE71 DD d3d9.71BEEA82 71BE4E9C |8A0ACE71 DD d3d9.71CE0A8A 71BE4EA0 |2345BF71 DD d3d9.71BF4523 71BE4EA4 |7701CE71 DD d3d9.71CE0177 71BE4EA8 |5909BF71 DD d3d9.71BF0959 71BE4EAC |2FE1BF71 DD d3d9.71BFE12F 71BE4EB0 |AFE9C371 DD d3d9.71C3E9AF 71BE4EB4 |E02ECE71 DD d3d9.71CE2EE0 71BE4EB8 |1430CE71 DD d3d9.71CE3014 71BE4EBC |6333CE71 DD d3d9.71CE3363 71BE4EC0 |8659C171 DD d3d9.71C15986 71BE4EC4 |DF58C171 DD d3d9.71C158DF 71BE4EC8 |BC48BF71 DD d3d9.71BF48BC 71BE4ECC |D655C271 DD d3d9.71C255D6 71BE4ED0 |D134CE71 DD d3d9.71CE34D1 71BE4ED4 |8BF3BE71 DD d3d9.71BEF38B 71BE4ED8 |3AF1BE71 DD d3d9.71BEF13A 71BE4EDC |A12AC071 DD d3d9.71C02AA1 71BE4EE0 |F22BC071 DD d3d9.71C02BF2 71BE4EE4 |5576BF71 DD d3d9.71BF7655 71BE4EE8 |5F7EBF71 DD d3d9.71BF7E5F 71BE4EEC |58B8BF71 DD d3d9.71BFB858 71BE4EF0 |17BCBF71 DD d3d9.71BFBC17
42 DD d3d9.71BFCE09 so 71BFCE09 - 71BE0000 = 1CE09
As we know dlls have a different base address each time its loaded, so we just do something like dwEndSceneAddress = (GetModuleHandleA('d3d9.dll') + $0001CE09 )
This will give the correct address to hook without all the pointer of the pointer bullshit and chasing sig scans...
Anyway back on track here... yes the RGNDATA structor I will be needing because I dont have Delphi D3d9 Headers library so everything I need to convert and make my own Delphi Structor.
Originally Posted by Departure
yeap thanks, here is the Vtable from olly
Just minus the base address and then when you want to hook it after d3d9 has loaded just add the base address of d3d9.dll, in this case here the base address was 71BE0000, for example EndScene is Vtable 42
42 DD d3d9.71BFCE09 so 71BFCE09 - 71BE0000 = 1CE09
As we know dlls have a different base address each time its loaded, so we just do something like dwEndSceneAddress = (GetModuleHandleA('d3d9.dll') + $0001CE09 )
This will give the correct address to hook without all the pointer of the pointer bullshit and chasing sig scans...
Anyway back on track here... yes the RGNDATA structor I will be needing because I dont have Delphi D3d9 Headers library so everything I need to convert and make my own Delphi Structor.
Code:
0 DD d3d9.71BE6E99 1 DD d3d9.71BE67F2 2 DD d3d9.71BE67C9 3 DD d3d9.71BFCD54 4 DD d3d9.71C9BCFD 5 DD d3d9.71CD971F 6 DD d3d9.71BEBB76 7 DD d3d9.71BE6F78 8 DD d3d9.71C17DFB 9 DD d3d9.71C1B972 10 DD d3d9.71C9B1C4 11 DD d3d9.71C9B69D 12 DD d3d9.71C17D10 13 DD d3d9.71C1CD50 14 DD d3d9.71BFB46C 15 DD d3d9.71C3711E 16 DD d3d9.71C38DDA 17 DD d3d9.71C210C3 18 DD d3d9.71C42A9F 19 DD d3d9.71C18945 20 DD d3d9.71C9B789 21 DD d3d9.71C9BA0F 22 DD d3d9.71C9BB4D 23 DD d3d9.71C0476B 24 DD d3d9.71C9C0B8 25 DD d3d9.71C2E93F 26 DD d3d9.71BFD40D 27 DD d3d9.71C0ED61 28 DD d3d9.71C423B8 29 DD d3d9.71C9C3D8 30 DD d3d9.71C9D72C 31 DD d3d9.71C16611 32 DD d3d9.71C34331 33 DD d3d9.71C9C687 34 DD d3d9.71C20430 35 DD d3d9.71C1A5D3 36 DD d3d9.71C34F4F 37 DD d3d9.71C20EE9 38 DD d3d9.71C211D2 39 DD d3d9.71C26E97 40 DD d3d9.71C26D10 41 DD d3d9.71BFD8BC 42 DD d3d9.71BFCE09 43 DD d3d9.71BEF244 44 DD d3d9.71BEE9D6 45 DD d3d9.71CE07A2 46 DD d3d9.71CD986F 47 DD d3d9.71CD9987 48 DD d3d9.71C257A0 49 DD d3d9.71CD9C94 50 DD d3d9.71CE111B 51 DD d3d9.71C15700 52 DD d3d9.71CE11CA 53 DD d3d9.71C15803 54 DD d3d9.71CE1313 55 DD d3d9.71CDB054 56 DD d3d9.71CE0E27 57 DD d3d9.71C22ED1 58 DD d3d9.71CE0365 59 DD d3d9.71C2F1FC 60 DD d3d9.71C21467 61 DD d3d9.71C230E3 62 DD d3d9.71CE0936 63 DD d3d9.71CE09E0 64 DD d3d9.71CDA368 65 DD d3d9.71C1B175 66 DD d3d9.71CE054C Couldn't be bothered continuing adding numbers... 71BE4D44 |E3B2C171 DD d3d9.71C1B2E3 71BE4D48 |CA06CE71 DD d3d9.71CE06CA 71BE4D4C |1EB2C171 DD d3d9.71C1B21E 71BE4D50 |B3CBC271 DD d3d9.71C2CBB3 71BE4D54 |57ACCD71 DD d3d9.71CDAC57 71BE4D58 |91AFCD71 DD d3d9.71CDAF91 71BE4D5C |5AAACD71 DD d3d9.71CDAA5A 71BE4D60 |B6ABCD71 DD d3d9.71CDABB6 71BE4D64 |B19ACD71 DD d3d9.71CD9AB1 71BE4D68 |D89BCD71 DD d3d9.71CD9BD8 71BE4D6C |EE0ECE71 DD d3d9.71CE0EEE 71BE4D70 |4803CE71 DD d3d9.71CE0348 71BE4D74 |0E5BC271 DD d3d9.71C25B0E 71BE4D78 |8957C271 DD d3d9.71C25789 71BE4D7C |6036C071 DD d3d9.71C03660 71BE4D80 |5176C071 DD d3d9.71C07651 71BE4D84 |7354C271 DD d3d9.71C25473 71BE4D88 |C6C4CD71 DD d3d9.71CDC4C6 71BE4D8C |AC1FCE71 DD d3d9.71CE1FAC 71BE4D90 |22F5C071 DD d3d9.71C0F522 71BE4D94 |46F4C071 DD d3d9.71C0F446 71BE4D98 |6577CD71 DD d3d9.71CD7765 71BE4D9C |6AB5CD71 DD d3d9.71CDB56A 71BE4DA0 |A0B6CD71 DD d3d9.71CDB6A0 71BE4DA4 |9F12C471 DD d3d9.71C4129F 71BE4DA8 |AE2BC271 DD d3d9.71C22BAE 71BE4DAC |5C43CE71 DD d3d9.71CE435C 71BE4DB0 |48EEC271 DD d3d9.71C2EE48 71BE4DB4 |D68DCD71 DD d3d9.71CD8DD6 71BE4DB8 |3478CD71 DD d3d9.71CD7834 71BE4DBC |C38FCD71 DD d3d9.71CD8FC3 71BE4DC0 |A679CD71 DD d3d9.71CD79A6 71BE4DC4 |B391CD71 DD d3d9.71CD91B3 71BE4DC8 |D15CC271 DD d3d9.71C25CD1 71BE4DCC |AAB1CD71 DD d3d9.71CDB1AA 71BE4DD0 |A1B2CD71 DD d3d9.71CDB2A1 71BE4DD4 |E1B3CD71 DD d3d9.71CDB3E1 71BE4DD8 |C25DC271 DD d3d9.71C25DC2 71BE4DDC |9CB4CD71 DD d3d9.71CDB49C 71BE4DE0 |77B1C371 DD d3d9.71C3B177 71BE4DE4 |7A2CC271 DD d3d9.71C22C7A 71BE4DE8 |5147CE71 DD d3d9.71CE4751 71BE4DEC |C3EFC271 DD d3d9.71C2EFC3 71BE4DF0 |1A48CE71 DD d3d9.71CE481A 71BE4DF4 |447CCD71 DD d3d9.71CD7C44 71BE4DF8 |5C49CE71 DD d3d9.71CE495C 71BE4DFC |B67DCD71 DD d3d9.71CD7DB6 71BE4E00 |AC4ACE71 DD d3d9.71CE4AAC 71BE4E04 |76BFCD71 DD d3d9.71CDBF76 71BE4E08 |1FC2CD71 DD d3d9.71CDC21F 71BE4E0C |287FCD71 DD d3d9.71CD7F28 71BE4E10 |26E4BF71 DD d3d9.71BFE426 71BE4E14 |F1A5CD71 DD d3d9.71CDA5F1 71BE4E18 |C8A8CD71 DD d3d9.71CDA8C8 71BE4E1C |10D6C971 DD d3d9.71C9D610 71BE4E20 |05D4C971 DD d3d9.71C9D405 71BE4E24 |B66CC171 DD d3d9.71C16CB6 71BE4E28 |B5CEC971 DD d3d9.71C9CEB5 71BE4E2C |C0CFC971 DD d3d9.71C9CFC0 71BE4E30 |67DAC171 DD d3d9.71C1DA67 71BE4E34 |F3D4C971 DD d3d9.71C9D4F3 71BE4E38 |6C8CC171 DD d3d9.71C18C6C 71BE4E3C |4EC2C971 DD d3d9.71C9C24E 71BE4E40 |ADD6C971 DD d3d9.71C9D6AD 71BE4E44 |F4C4C971 DD d3d9.71C9C4F4 71BE4E48 |85D5C971 DD d3d9.71C9D585 71BE4E4C |50A8C171 DD d3d9.71C1A850 71BE4E50 |6E56C071 DD d3d9.71C0566E 71BE4E54 |BAEEBE71 DD d3d9.71BEEEBA 71BE4E58 |C4EFBE71 DD d3d9.71BEEFC4 71BE4E5C |CA17BF71 DD d3d9.71BF17CA 71BE4E60 |46F6C071 DD d3d9.71C0F646 71BE4E64 |31E8C371 DD d3d9.71C3E831 71BE4E68 |2CCBCD71 DD d3d9.71CDCB2C 71BE4E6C |CFCCCD71 DD d3d9.71CDCCCF 71BE4E70 |0C26C471 DD d3d9.71C4260C 71BE4E74 |1A1CC471 DD d3d9.71C41C1A 71BE4E78 |69CECD71 DD d3d9.71CDCE69 71BE4E7C |1BD0CD71 DD d3d9.71CDD01B 71BE4E80 |1A58C071 DD d3d9.71C0581A 71BE4E84 |E4EDBE71 DD d3d9.71BEEDE4 71BE4E88 |A078C071 DD d3d9.71C078A0 71BE4E8C |34E0BF71 DD d3d9.71BFE034 71BE4E90 |CC74CD71 DD d3d9.71CD74CC 71BE4E94 |486BCD71 DD d3d9.71CD6B48 71BE4E98 |82EABE71 DD d3d9.71BEEA82 71BE4E9C |8A0ACE71 DD d3d9.71CE0A8A 71BE4EA0 |2345BF71 DD d3d9.71BF4523 71BE4EA4 |7701CE71 DD d3d9.71CE0177 71BE4EA8 |5909BF71 DD d3d9.71BF0959 71BE4EAC |2FE1BF71 DD d3d9.71BFE12F 71BE4EB0 |AFE9C371 DD d3d9.71C3E9AF 71BE4EB4 |E02ECE71 DD d3d9.71CE2EE0 71BE4EB8 |1430CE71 DD d3d9.71CE3014 71BE4EBC |6333CE71 DD d3d9.71CE3363 71BE4EC0 |8659C171 DD d3d9.71C15986 71BE4EC4 |DF58C171 DD d3d9.71C158DF 71BE4EC8 |BC48BF71 DD d3d9.71BF48BC 71BE4ECC |D655C271 DD d3d9.71C255D6 71BE4ED0 |D134CE71 DD d3d9.71CE34D1 71BE4ED4 |8BF3BE71 DD d3d9.71BEF38B 71BE4ED8 |3AF1BE71 DD d3d9.71BEF13A 71BE4EDC |A12AC071 DD d3d9.71C02AA1 71BE4EE0 |F22BC071 DD d3d9.71C02BF2 71BE4EE4 |5576BF71 DD d3d9.71BF7655 71BE4EE8 |5F7EBF71 DD d3d9.71BF7E5F 71BE4EEC |58B8BF71 DD d3d9.71BFB858 71BE4EF0 |17BCBF71 DD d3d9.71BFBC17
42 DD d3d9.71BFCE09 so 71BFCE09 - 71BE0000 = 1CE09
As we know dlls have a different base address each time its loaded, so we just do something like dwEndSceneAddress = (GetModuleHandleA('d3d9.dll') + $0001CE09 )
This will give the correct address to hook without all the pointer of the pointer bullshit and chasing sig scans...
Anyway back on track here... yes the RGNDATA structor I will be needing because I dont have Delphi D3d9 Headers library so everything I need to convert and make my own Delphi Structor.
Code:
typedef struct _RGNDATAHEADER {
DWORD dwSize;
DWORD iType;
DWORD nCount;
DWORD nRgnSize;
RECT rcBound;
} RGNDATAHEADER, *PRGNDATAHEADER;
typedef struct _RGNDATA {
RGNDATAHEADER rdh;
char Buffer[1];
} RGNDATA, *PRGNDATA, NEAR *NPRGNDATA, FAR *LPRGNDATA;
Your probably right It it might have that already... But just incase and it saves me looking for it as the Delphi Windows Unit is very large...
Anyway im thinking of Hooking DrawIndexedPrimitive (Vtable 82) Doesn't seem to need a heap of arguments passed to it.
//Edit
Yes you where right... It was in the Delphi Windows Unit
Anyway im thinking of Hooking DrawIndexedPrimitive (Vtable 82) Doesn't seem to need a heap of arguments passed to it.
//Edit
Yes you where right... It was in the Delphi Windows Unit
Code:
type
PRgnDataHeader = ^TRgnDataHeader;
{$EXTERNALSYM _RGNDATAHEADER}
_RGNDATAHEADER = packed record
dwSize: DWORD;
iType: DWORD;
nCount: DWORD;
nRgnSize: DWORD;
rcBound: TRect;
end;
TRgnDataHeader = _RGNDATAHEADER;
{$EXTERNALSYM RGNDATAHEADER}
RGNDATAHEADER = _RGNDATAHEADER;
PRgnData = ^TRgnData;
{$EXTERNALSYM _RGNDATA}
_RGNDATA = record
rdh: TRgnDataHeader;
Buffer: array[0..0] of CHAR;
Reserved: array[0..2] of CHAR;
end;
TRgnData = _RGNDATA;
{$EXTERNALSYM RGNDATA}
RGNDATA = _RGNDATA;
Originally Posted by Departure
Your probably right It it might have that already... But just incase and it saves me looking for it as the Delphi Windows Unit is very large...
Anyway im thinking of Hooking DrawIndexedPrimitive (Vtable 82) Doesn't seem to need a heap of arguments passed to it.
Anyway im thinking of Hooking DrawIndexedPrimitive (Vtable 82) Doesn't seem to need a heap of arguments passed to it.
Originally Posted by Apoc91
Won't work, someone said there's a special way you can hook it, but I haven't cared enough to figure out. If I remember right, hooking DIP causes it to crash instantaneously
you gotta have a bypass for hackshield
//EDIT read my post on your other thread
Thanks, Looks like im going to have to hook "Present" Vtable(17) which thanks to Apoc91 I should be able to do ... just to confirm with you guys hooking Present still works with CA?
... just to confirm with you guys hooking Present still works with CA? Originally Posted by Departure
Thanks, Looks like im going to have to hook "Present" Vtable(17) which thanks to Apoc91 I should be able to do ... just to confirm with you guys hooking Present still works with CA?
... just to confirm with you guys hooking Present still works with CA? Originally Posted by Apoc91
Won't work, someone said there's a special way you can hook it, but I haven't cared enough to figure out. If I remember right, hooking DIP causes it to crash instantaneously
You have to either bypass it (NOP some scan addresses in hackshield) or find your own undetected way of hooking.
Originally Posted by Departure
Thanks, Looks like im going to have to hook "Present" Vtable(17) which thanks to Apoc91 I should be able to do ... just to confirm with you guys hooking Present still works with CA?
... just to confirm with you guys hooking Present still works with CA? Originally Posted by Departure
Thanks, Looks like im going to have to hook "Present" Vtable(17) which thanks to Apoc91 I should be able to do ... just to confirm with you guys hooking Present still works with CA?
... just to confirm with you guys hooking Present still works with CA?It's working for me so far
Hmm I have an idea... What if on keypress you do the following in order
Hook EndScene
Send PushToConsole
UnHook EndScene
This way the EndScene is only Hooked for Split second, Then when you turn off the hack
you would do the same...
Hooke EmdScene
Send PushToConsole
UnHook EndScene
So if your completely unlucky and CA happens to be checking at that exact moment when you hook the EndScene (which would be 1 in a billion) you will get kicked but the chances that will even happen would be extremely small
Hook EndScene
Send PushToConsole
UnHook EndScene
This way the EndScene is only Hooked for Split second, Then when you turn off the hack
you would do the same...
Hooke EmdScene
Send PushToConsole
UnHook EndScene
So if your completely unlucky and CA happens to be checking at that exact moment when you hook the EndScene (which would be 1 in a billion) you will get kicked but the chances that will even happen would be extremely small