Me showing of first EndScene hook :p Please look !

[kmanev073]

Hello guys,
Today i finshed my job:



Credits : @kmanev073 (me)
I would really want to thank @lucifereviluser for helping me with finding d3d Device
and
@|Skrillex|for being nice frined and explained me some things which i didnt understand
If some one dont bealive this picture ask @derh.acker - he tested the hook on 32 bit system

@@giniyat101 as for you, my idol - see i am improving my skills but still cant understand why you always say "NO" to me


/*------------------------------------------------*/
Open Message:
/*---REGADRS
/*---CF_ShArKS Team Leader Was Here !
/*---Blazer Ss Coming
Close Message:
/*------------------------------------------------*/

[Phoenix1337]

Good

/msg2short

[CFFG.]

Very nice, can't wait 3 hours!

[NanoGold]

what do u meen

He means this :

#include <windows.h>
#include <d3d9.h>
#include <d3dx9.h>

#pragma comment(lib, "d3d9.lib")
#pragma comment(lib, "d3dx9.lib")

#define EndSceneEngine 0x00455ECF
DWORD retEndSceneEngine = ( EndSceneEngine + 0x8 );

LPD3DXFONT Font;

VOID StartFont( LPDIRECT3DDEVICE9 pDevice )
{
    if( Font ) {
        Font->Release();
        Font = NULL;
    }

    if( !Font ) {
        D3DXCreateFont( pDevice,
                        14,
                        0,
                        FW_BOLD,
                        1,
                        0,
                        DEFAULT_CHARSET,
                        OUT_DEFAULT_PRECIS,
                        DEFAULT_QUALITY,
                        DEFAULT_PITCH | FF_DONTCARE,
                        "Arial",
                        &Font );
    }
}

VOID WriteText( LPDIRECT3DDEVICE9 pDevice, INT x, INT y, DWORD color, CHAR *text )
{    
    RECT rect;
    SetRect( &rect, x, y, x, y );
    Font->DrawText( NULL, text, -1, &rect, DT_NOCLIP | DT_LEFT, color );
}

__declspec( naked ) HRESULT WINAPI EndSceneMidfunction( )
{
    static LPDIRECT3DDEVICE9 pDevice;

    __asm
    {
        MOV ECX, DWORD PTR DS:[EAX]
        MOV EDX, DWORD PTR DS:[ECX + 0xA8]
        MOV DWORD PTR DS:[pDevice], EAX
        PUSHAD
    }

    StartFont( pDevice );

    if( Font )
        WriteText( pDevice, 300, 300, Red, "CrossFire: Hook EndScene Engine" );

    __asm
    {
        POPAD
        JMP retEndSceneEngine
    }
}

void *DetourCreate( BYTE *src, const BYTE *dst, const int len )
{
    BYTE *jmp =( BYTE * ) malloc( len + 5 );
    DWORD dwBack;

    VirtualProtect( src, len, PAGE_READWRITE, &dwBack );
    memcpy( jmp, src, len );    
    jmp += len;
    jmp[0] = 0xE9;
    *( DWORD * )( jmp + 1 ) =( DWORD )( src + len - jmp ) - 5;

    src[0] = 0xE9;
    *( DWORD * )( src + 1 ) = ( DWORD )( dst - src ) - 5;
    for( int i = 5; i < len; i++ )
        src[i] = 0x90;
    VirtualProtect( src, len, dwBack, &dwBack );

    return( jmp - len );
}

DWORD WINAPI StartRoutine( LPVOID )
{
    while( TRUE )
    {
        if( memcmp( ( void * )EndSceneEngine, (void * )( PBYTE )"\x8B\x08", 2 ) == 0 )
        {
            Sleep(200);
            DetourCreate( ( PBYTE )EndSceneEngine, ( PBYTE )EndSceneMidfunction, 8 );
        }
        Sleep( 50 );
    }
 
    return 0;
}

BOOL WINAPI DllMain( HMODULE hDll, DWORD dwReason, LPVOID lpReserved )
{ 
    if( dwReason == DLL_PROCESS_ATTACH )
    {
        DisableThreadLibraryCalls( hDll );
        MessageBox( 0, "Hook EndScene Engine", "Crossfire", 0 );
        CreateThread( 0, 0, (LPTHREAD_START_ROUTINE)StartRoutine, 0, 0, 0 );
    }
 
    return TRUE;
}

Credits: WE11ington

[Dragon(H)ell]

I found an endscene in another site posted 2 days ago, weird

I believe that @kmanev073 made his own hook cuz he is not like most of others

---------- Post added at 01:04 PM ---------- Previous post was at 01:03 PM ----------

He means this :

#include <windows.h>
#include <d3d9.h>
#include <d3dx9.h>

#pragma comment(lib, "d3d9.lib")
#pragma comment(lib, "d3dx9.lib")

#define EndSceneEngine 0x00455ECF
DWORD retEndSceneEngine = ( EndSceneEngine + 0x8 );

LPD3DXFONT Font;

VOID StartFont( LPDIRECT3DDEVICE9 pDevice )
{
    if( Font ) {
        Font->Release();
        Font = NULL;
    }

    if( !Font ) {
        D3DXCreateFont( pDevice,
                        14,
                        0,
                        FW_BOLD,
                        1,
                        0,
                        DEFAULT_CHARSET,
                        OUT_DEFAULT_PRECIS,
                        DEFAULT_QUALITY,
                        DEFAULT_PITCH | FF_DONTCARE,
                        "Arial",
                        &Font );
    }
}

VOID WriteText( LPDIRECT3DDEVICE9 pDevice, INT x, INT y, DWORD color, CHAR *text )
{    
    RECT rect;
    SetRect( &rect, x, y, x, y );
    Font->DrawText( NULL, text, -1, &rect, DT_NOCLIP | DT_LEFT, color );
}

__declspec( naked ) HRESULT WINAPI EndSceneMidfunction( )
{
    static LPDIRECT3DDEVICE9 pDevice;

    __asm
    {
        MOV ECX, DWORD PTR DS:[EAX]
        MOV EDX, DWORD PTR DS:[ECX + 0xA8]
        MOV DWORD PTR DS:[pDevice], EAX
        PUSHAD
    }

    StartFont( pDevice );

    if( Font )
        WriteText( pDevice, 300, 300, Red, "CrossFire: Hook EndScene Engine" );

    __asm
    {
        POPAD
        JMP retEndSceneEngine
    }
}

void *DetourCreate( BYTE *src, const BYTE *dst, const int len )
{
    BYTE *jmp =( BYTE * ) malloc( len + 5 );
    DWORD dwBack;

    VirtualProtect( src, len, PAGE_READWRITE, &dwBack );
    memcpy( jmp, src, len );    
    jmp += len;
    jmp[0] = 0xE9;
    *( DWORD * )( jmp + 1 ) =( DWORD )( src + len - jmp ) - 5;

    src[0] = 0xE9;
    *( DWORD * )( src + 1 ) = ( DWORD )( dst - src ) - 5;
    for( int i = 5; i < len; i++ )
        src[i] = 0x90;
    VirtualProtect( src, len, dwBack, &dwBack );

    return( jmp - len );
}

DWORD WINAPI StartRoutine( LPVOID )
{
    while( TRUE )
    {
        if( memcmp( ( void * )EndSceneEngine, (void * )( PBYTE )"\x8B\x08", 2 ) == 0 )
        {
            Sleep(200);
            DetourCreate( ( PBYTE )EndSceneEngine, ( PBYTE )EndSceneMidfunction, 8 );
        }
        Sleep( 50 );
    }
 
    return 0;
}

BOOL WINAPI DllMain( HMODULE hDll, DWORD dwReason, LPVOID lpReserved )
{ 
    if( dwReason == DLL_PROCESS_ATTACH )
    {
        DisableThreadLibraryCalls( hDll );
        MessageBox( 0, "Hook EndScene Engine", "Crossfire", 0 );
        CreateThread( 0, 0, (LPTHREAD_START_ROUTINE)StartRoutine, 0, 0, 0 );
    }
 
    return TRUE;
}

Credits: WE11ington

I don't think this is going to work and you should get x-trap error

[|Skrillex|]

you are kidding me right? where are my credits? omg-.-

[NanoGold]

you are kidding me right? where are my credits? omg-.-

Credits for what ??

[Haxon[T]]

Good luck @kmanev073
With D3D Menu
But i think u will not release the hack

[|Skrillex|]

@NanoGold i fucking helped him man!

[vipk-2]

Great U Will Put Features And Release Or As All Time ?

[ramo]

Good work i told you that endscene works !! Good Luck
and i am sure that you didn't leech it . @kmanev073

[giniyat101]

u know i say no for a reason..

[mslol]

-.- you never can be sure 100% that an hack isn't leeched until you see project, also mpgh vip hack can be leeched for example, did i ever saw project for prove that it isn't?

Anyway i didn't say that he leeched a code, but that he fixed a code

---------- Post added at 11:32 PM ---------- Previous post was at 11:31 PM ----------



You are just a pander

look dude , not all coders working like you c+p . we have here in mpgh some great coders !
and yes we have lots of leechers, like you

[[S]aeed]

@kmanev073 good job dude, i was late to test it
WTF ! @xKickAssBackup stop insulting pro coders please

[lucifereviluser]

Start draw your MENU boy ! I will help you more :-s