[Source]Vtable Hook?

[SoreBack]

#include <Windows.h>
#include <d3d9.h>
#include <detours.h>
#include "stdafx.h"
#pragma comment (lib, "d3d9.lib")

IDirect3DDevice9 * pGameDevice;
LPDIRECT3DTEXTURE9  Red,Yellow,Green,Blue,Purple,Pink,Orange;
UINT iStride;
bool Chams = true;

 
//============================================================//
HRESULT GenerateTexture(IDirect3DDevice9 *pD3Ddev, IDirect3DTexture9 **ppD3Dtex, DWORD colour32)
{
    if( FAILED(pD3Ddev->CreateTexture(8, 8, 1, 0, D3DFMT_A4R4G4B4, D3DPOOL_MANAGED, ppD3Dtex)) )
        return E_FAIL;
 
    WORD colour16 =    ((WORD)((colour32>>28)&0xF)<<12)
            |(WORD)(((colour32>>20)&0xF)<<8)
            |(WORD)(((colour32>>12)&0xF)<<4)
            |(WORD)(((colour32>>4)&0xF)<<0);
 
    D3DLOCKED_RECT d3dlr;    
    (*ppD3Dtex)->LockRect(0, &d3dlr, 0, 0);
    WORD *pDst16 = (WORD*)d3dlr.pBits;
 
    for(int xy=0; xy < 8*8; xy++)
        *pDst16++ = colour16;
 
    (*ppD3Dtex)->UnlockRect(0);
 
    return S_OK;
}//==================================Texture=========================//
////////////////
///BeginScene///
////////////////
typedef HRESULT(WINAPI* BeginScene_)(LPDIRECT3DDEVICE9 pDevice);
BeginScene_ pBeginScene;
HRESULT WINAPI nBeginScene(LPDIRECT3DDEVICE9 pDevice)
{
	_asm NOP;
	HRESULT hRet = pBeginScene(pDevice);
	if (GetAsyncKeyState(VK_F1)&1)
{
	Chams = !Chams;
}

	return hRet;
}

/**************************************************************************************************/

//////////////
///EndScene///
//////////////
typedef HRESULT(WINAPI* EndScene_)(LPDIRECT3DDEVICE9 pDevice);
EndScene_ pEndScene;
HRESULT WINAPI nEndScene(LPDIRECT3DDEVICE9 pDevice)
{	
	if(Chams)
{ 
GenerateTexture(pDevice, &Red,      D3DCOLOR_ARGB    (255   ,   255  ,     0      ,    0      ));
GenerateTexture(pDevice, &Yellow,   D3DCOLOR_ARGB    (255   ,   255  ,     255    ,    0      ));
GenerateTexture(pDevice, &Green,    D3DCOLOR_ARGB    (255   ,   0    ,     255    ,    0      ));
GenerateTexture(pDevice, &Blue,     D3DCOLOR_ARGB    (255   ,   0    ,     0      ,    255    ));
GenerateTexture(pDevice, &Purple,   D3DCOLOR_ARGB    (255   ,   102  ,     0      ,    153    ));
GenerateTexture(pDevice, &Pink,     D3DCOLOR_ARGB    (255   ,   255  ,     20      ,   147    ));
GenerateTexture(pDevice, &Orange,   D3DCOLOR_ARGB    (255   ,   255  ,     165      ,  0      ));
Color=false; 
}
 
return pEndScene(pDevice);
}

/**************************************************************************************************/

//////////////////////////
///DrawIndexedPrimitive///
//////////////////////////
typedef HRESULT(WINAPI* DrawIndexedPrimitive_)(LPDIRECT3DDEVICE9 pDevice, D3DPRIMITIVETYPE Type, INT BaseVertexIndex, UINT MinIndex,
											  UINT NumVertices, UINT StartIndex, UINT PrimitiveCount);
DrawIndexedPrimitive_ pDrawIndexedPrimitive;
HRESULT WINAPI nDrawIndexedPrimitive(LPDIRECT3DDEVICE9 pDevice, D3DPRIMITIVETYPE Type, INT BaseVertexIndex, UINT MinIndex,
									UINT NumVertices, UINT StartIndex, UINT PrimitiveCount)
{	
	
	
	
	
	{	

		pDevice->SetRenderState( D3DRS_FOGENABLE, false );

	}	



	IDirect3DVertexBuffer9* pStreamData = NULL;

	UINT iOffsetInBytes,iStride; 

	pDevice->GetStreamSource(0,&pStreamData,&iOffsetInBytes,&iStride); 

	if (Chams) 
	{
		if (iStride == 44)
		{
             DWORD dwOldZEnable = D3DZB_TRUE;
             pDevice->SetTexture(0, Orange);
             pDevice->GetRenderState(D3DRS_ZENABLE, &dwOldZEnable);
             pDevice->SetRenderState(D3DRS_ZENABLE, D3DZB_FALSE);
			 pDevice->DrawIndexedPrimitive(Type, BaseVertexIndex, MinVertexIndex, NumVertices, startIndex, primCount);
             pDevice->SetRenderState(D3DRS_ZENABLE, dwOldZEnable);
             pDevice->SetTexture(0, Red);
}
	}

	
	
	
	
	return pDrawIndexedPrimitive(pDevice, Type, BaseVertexIndex, MinIndex, NumVertices, StartIndex, PrimitiveCount);
			
	
}

/**************************************************************************************************/

/////////////////////
///SetStreamSource///
/////////////////////
typedef HRESULT(WINAPI* SetStreamSource_)(LPDIRECT3DDEVICE9 pDevice, UINT StreamNumber, IDirect3DVertexBuffer9 * pStreamData, UINT OffsetInBytes, UINT Stride);
SetStreamSource_ pSetStreamSource;
HRESULT WINAPI nSetStreamSource(LPDIRECT3DDEVICE9 pDevice, UINT StreamNumber, IDirect3DVertexBuffer9 * pStreamData, UINT OffsetInBytes, UINT Stride)
{	
	_asm NOP;
	HRESULT hRet = pSetStreamSource(pDevice, StreamNumber, pStreamData, OffsetInBytes, Stride);
if( StreamNumber == 0 ){iStride = Stride;}

	return hRet;
}

/**************************************************************************************************/

///////////
///Reset///
///////////
typedef HRESULT(WINAPI* Reset_)(LPDIRECT3DDEVICE9 pDevice, D3DPRESENT_PARAMETERS* pPresentationParameters);
Reset_ pReset;
HRESULT WINAPI nReset(LPDIRECT3DDEVICE9 pDevice, D3DPRESENT_PARAMETERS* pPresentationParameters)
{
	_asm NOP;
	HRESULT hRet = pReset(pDevice, pPresentationParameters);

	return hRet;
}

/**************************************************************************************************/


DWORD dwWait(LPVOID lpArgs)
{
	
	DWORD Base = NULL;

	for (;Base == NULL;Sleep(100))           
		Base = (DWORD)GetModuleHandle("Engine.exe//Whatever the processname is");  
	
	for(;pGameDevice == NULL; Sleep(10000))  
	{
		DWORD dwProtect;
		VirtualProtect((void*)(0x7D0840), 4, PAGE_EXECUTE_READWRITE, &dwProtect);
		memcpy(&pGameDevice, (void*)(0x7D0840), 4);
		VirtualProtect((void*)(0x7D0840), 4, dwProtect, NULL);
	}
			
		


	DWORD* pdwNewDevice  =(DWORD*)*(DWORD*)pGameDevice;
	pdwNewDevice = (DWORD*)pdwNewDevice[0];  //turn our pointer into an array for the vtable
	
	
	pReset = (Reset_)DetourFunction((PBYTE)pdwNewDevice[16],(PBYTE)nReset);
	pBeginScene = (BeginScene_)DetourFunction((PBYTE)pdwNewDevice[41],(PBYTE)nBeginScene);
	pEndScene = (EndScene_)DetourFunction((PBYTE)pdwNewDevice[42],(PBYTE)nEndScene);
	pDrawIndexedPrimitive = (DrawIndexedPrimitive_)DetourFunction((PBYTE)pdwNewDevice[82],(PBYTE)nDrawIndexedPrimitive);
	pSetStreamSource = (SetStreamSource_)DetourFunction((PBYTE)pdwNewDevice[100],(PBYTE)nSetStreamSource);
	
	return 0;
}

bool WINAPI DllMain(HMODULE hMod, DWORD dwReason, LPVOID lpReserved)
{
	if(dwReason == DLL_PROCESS_ATTACH)
	{
				
		CreateThread(NULL, NULL, (LPTHREAD_START_ROUTINE)dwWait, NULL, NULL, NULL);
		
		return true;
	}
	
	return false;
}

It has errors, i dont know if it still works.

This isnt flawless, identify the errors and fix it. I dont want to make it a easy c/p..

Have fun. Hopefully you'll get the base idea.

Credits for Strife for the base.

Credits to fatboy for his D3D8 offsets tutorial.
I did this on the top of my head.

[Obama]

#include <Windows.h>
#include <d3d9.h>
#include <detours.h>
#include "stdafx.h"
#pragma comment (lib, "d3d9.lib")

IDirect3DDevice9 * pGameDevice;
LPDIRECT3DTEXTURE9  Red,Yellow,Green,Blue,Purple,Pink,Orange;
UINT iStride;
bool Chams = true;

 
//============================================================//
HRESULT GenerateTexture(IDirect3DDevice9 *pD3Ddev, IDirect3DTexture9 **ppD3Dtex, DWORD colour32)
{
    if( FAILED(pD3Ddev->CreateTexture(8, 8, 1, 0, D3DFMT_A4R4G4B4, D3DPOOL_MANAGED, ppD3Dtex)) )
        return E_FAIL;
 
    WORD colour16 =    ((WORD)((colour32>>28)&0xF)<<12)
            |(WORD)(((colour32>>20)&0xF)<<8)
            |(WORD)(((colour32>>12)&0xF)<<4)
            |(WORD)(((colour32>>4)&0xF)<<0);
 
    D3DLOCKED_RECT d3dlr;    
    (*ppD3Dtex)->LockRect(0, &d3dlr, 0, 0);
    WORD *pDst16 = (WORD*)d3dlr.pBits;
 
    for(int xy=0; xy < 8*8; xy++)
        *pDst16++ = colour16;
 
    (*ppD3Dtex)->UnlockRect(0);
 
    return S_OK;
}//==================================Texture=========================//
////////////////
///BeginScene///
////////////////
typedef HRESULT(WINAPI* BeginScene_)(LPDIRECT3DDEVICE9 pDevice);
BeginScene_ pBeginScene;
HRESULT WINAPI nBeginScene(LPDIRECT3DDEVICE9 pDevice)
{
	_asm NOP;
	HRESULT hRet = pBeginScene(pDevice);
	if (GetAsyncKeyState(VK_F1)&1)
{
	Chams = !Chams;
}

	return hRet;
}

/**************************************************************************************************/

//////////////
///EndScene///
//////////////
typedef HRESULT(WINAPI* EndScene_)(LPDIRECT3DDEVICE9 pDevice);
EndScene_ pEndScene;
HRESULT WINAPI nEndScene(LPDIRECT3DDEVICE9 pDevice)
{	
	if(Chams)
{ 
GenerateTexture(pDevice, &Red,      D3DCOLOR_ARGB    (255   ,   255  ,     0      ,    0      ));
GenerateTexture(pDevice, &Yellow,   D3DCOLOR_ARGB    (255   ,   255  ,     255    ,    0      ));
GenerateTexture(pDevice, &Green,    D3DCOLOR_ARGB    (255   ,   0    ,     255    ,    0      ));
GenerateTexture(pDevice, &Blue,     D3DCOLOR_ARGB    (255   ,   0    ,     0      ,    255    ));
GenerateTexture(pDevice, &Purple,   D3DCOLOR_ARGB    (255   ,   102  ,     0      ,    153    ));
GenerateTexture(pDevice, &Pink,     D3DCOLOR_ARGB    (255   ,   255  ,     20      ,   147    ));
GenerateTexture(pDevice, &Orange,   D3DCOLOR_ARGB    (255   ,   255  ,     165      ,  0      ));
Color=false; 
}
 
return pEndScene(pDevice);
}

/**************************************************************************************************/

//////////////////////////
///DrawIndexedPrimitive///
//////////////////////////
typedef HRESULT(WINAPI* DrawIndexedPrimitive_)(LPDIRECT3DDEVICE9 pDevice, D3DPRIMITIVETYPE Type, INT BaseVertexIndex, UINT MinIndex,
											  UINT NumVertices, UINT StartIndex, UINT PrimitiveCount);
DrawIndexedPrimitive_ pDrawIndexedPrimitive;
HRESULT WINAPI nDrawIndexedPrimitive(LPDIRECT3DDEVICE9 pDevice, D3DPRIMITIVETYPE Type, INT BaseVertexIndex, UINT MinIndex,
									UINT NumVertices, UINT StartIndex, UINT PrimitiveCount)
{	
	
	
	
	
	{	

		pDevice->SetRenderState( D3DRS_FOGENABLE, false );

	}	



	IDirect3DVertexBuffer9* pStreamData = NULL;

	UINT iOffsetInBytes,iStride; 

	pDevice->GetStreamSource(0,&pStreamData,&iOffsetInBytes,&iStride); 

	if (Chams) 
	{
		if (iStride == 44)
		{
             DWORD dwOldZEnable = D3DZB_TRUE;
             pDevice->SetTexture(0, Orange);
             pDevice->GetRenderState(D3DRS_ZENABLE, &dwOldZEnable);
             pDevice->SetRenderState(D3DRS_ZENABLE, D3DZB_FALSE);
			 pDevice->DrawIndexedPrimitive(Type, BaseVertexIndex, MinVertexIndex, NumVertices, startIndex, primCount);
             pDevice->SetRenderState(D3DRS_ZENABLE, dwOldZEnable);
             pDevice->SetTexture(0, Red);
}
	}

	
	
	
	
	return pDrawIndexedPrimitive(pDevice, Type, BaseVertexIndex, MinIndex, NumVertices, StartIndex, PrimitiveCount);
			
	
}

/**************************************************************************************************/

/////////////////////
///SetStreamSource///
/////////////////////
typedef HRESULT(WINAPI* SetStreamSource_)(LPDIRECT3DDEVICE9 pDevice, UINT StreamNumber, IDirect3DVertexBuffer9 * pStreamData, UINT OffsetInBytes, UINT Stride);
SetStreamSource_ pSetStreamSource;
HRESULT WINAPI nSetStreamSource(LPDIRECT3DDEVICE9 pDevice, UINT StreamNumber, IDirect3DVertexBuffer9 * pStreamData, UINT OffsetInBytes, UINT Stride)
{	
	_asm NOP;
	HRESULT hRet = pSetStreamSource(pDevice, StreamNumber, pStreamData, OffsetInBytes, Stride);
if( StreamNumber == 0 ){iStride = Stride;}

	return hRet;
}

/**************************************************************************************************/

///////////
///Reset///
///////////
typedef HRESULT(WINAPI* Reset_)(LPDIRECT3DDEVICE9 pDevice, D3DPRESENT_PARAMETERS* pPresentationParameters);
Reset_ pReset;
HRESULT WINAPI nReset(LPDIRECT3DDEVICE9 pDevice, D3DPRESENT_PARAMETERS* pPresentationParameters)
{
	_asm NOP;
	HRESULT hRet = pReset(pDevice, pPresentationParameters);

	return hRet;
}

/**************************************************************************************************/


DWORD dwWait(LPVOID lpArgs)
{
	
	DWORD Base = NULL;

	for (;Base == NULL;Sleep(100))           
		Base = (DWORD)GetModuleHandle("crossfire.exe");  
	
	for(;pGameDevice == NULL; Sleep(10000))  
	{
		DWORD dwProtect;
		VirtualProtect((void*)(0x7D0840), 4, PAGE_EXECUTE_READWRITE, &dwProtect);
		memcpy(&pGameDevice, (void*)(0x7D0840), 4);
		VirtualProtect((void*)(0x7D0840), 4, dwProtect, NULL);
	}
			
		


	DWORD* pdwNewDevice  =(DWORD*)*(DWORD*)pGameDevice;
	pdwNewDevice = (DWORD*)pdwNewDevice[0];  //turn our pointer into an array for the vtable
	
	
	pReset = (Reset_)DetourFunction((PBYTE)pdwNewDevice[16],(PBYTE)nReset);
	pBeginScene = (BeginScene_)DetourFunction((PBYTE)pdwNewDevice[41],(PBYTE)nBeginScene);
	pEndScene = (EndScene_)DetourFunction((PBYTE)pdwNewDevice[42],(PBYTE)nEndScene);
	pDrawIndexedPrimitive = (DrawIndexedPrimitive_)DetourFunction((PBYTE)pdwNewDevice[82],(PBYTE)nDrawIndexedPrimitive);
	pSetStreamSource = (SetStreamSource_)DetourFunction((PBYTE)pdwNewDevice[100],(PBYTE)nSetStreamSource);
	
	return 0;
}

bool WINAPI DllMain(HMODULE hMod, DWORD dwReason, LPVOID lpReserved)
{
	if(dwReason == DLL_PROCESS_ATTACH)
	{
				
		CreateThread(NULL, NULL, (LPTHREAD_START_ROUTINE)dwWait, NULL, NULL, NULL);
		
		return true;
	}
	
	return false;
}

It has errors, i dont know if it still works.

This isnt flawless, identify the errors and fix it. I dont want to make it a easy c/p..

Have fun. Hopefully you'll get the base idea.

Credits for Strife for the base.

Credits to fatboy for his D3D8 offsets tutorial.
I did this on the top of my head.

Wrong section bro.

[SoreBack]

No one finds any use for this?

/cut

I know, but this is strictly for Combat ARms lol.

The strides and pointer and module name could be changed to be applicable to other games.

[megaflcl]

this will probably be of more use in one of the programming sections

[Obama]

No one finds any use for this?

/cut

I know, but this is strictly for Combat ARms lol.

The strides and pointer and module name could be changed to be applicable to other games.

Honestly i dont no what the hell all of this is. Can you explain sorry.

[SoreBack]

like anyone goes there >.>

Every post on this site barely has anything to do with Coding or any importance. Only the releases and glitches. You know you could easily make a undetected chams with what i just posted it just needs a little adjusting.

Btw, i did this in NotePad.

[megaflcl]

well odds are it will be moved there anyways =/

[SoreBack]

like anyone goes there >.>

Every post on this site barely has anything to do with Coding or any importance. Only the releases and glitches. You know you could easily make a undetected chams with what i just posted it just needs a little adjusting.

Btw, i did this in NotePad.

Re read it all.....

[Remorse]

mmm i get some of this i think but looks more like for thegaysquads cham.
and yeah noone around here can probably make heads or tails of this.

[SoreBack]

But the people who can will appreciate this.

[Obama]

But the people who can will appreciate this.

We have none that can. If we did we wouldnt be waiting for hacks right now.

[rwkeith]

I am working onsomething after this upcoming patch. Its actually a cracked updater for free FPS CA Hacks. No joke and we all know FPS makes some pretty good stuff...

[Iwin]

I am working onsomething after this upcoming patch. Its actually a cracked updater for free FPS CA Hacks. No joke and we all know FPS makes some pretty good stuff...

why not just release free chams and shit?

i heard you were an experienced coder

[Synns]

Why does it say crossfire.exe ?

[rwkeith]

why not just release free chams and shit?

i heard you were an experienced coder

I would if I had some help here >.>. I prefer to do something all the way too. If going to make something its going to have everything. Plus I wouldn't charge a dime. I'm better at cracking anyways.