CA Crashes instantly when I join a game?

[TrixtSam]

Any ideas...? I'm not actually sure what could be causing this... Using my own base:|

Thanks..

[Killa233]

hmm Detours or your Hook is Detected how old is the base and when did u last update it

[TrixtSam]

hmm Detours or your Hook is Detected how old is the base and when did u last update it

Datours/Hook are fine, Or it'd crash when CA's loading. I made it yesterday.. So technicly.. updated yesterday also..

[ctpsolo]

Detections will usually occur some minutes after loading (unless they changed anything in the last few weeks). Does it always crash the second you have joined a game? That seems a bit too precise... Any possibility you have a problem with your code? Just to examplify if you check gamestatus for one or several of your hacks, faulty code might not execute until you are ingame. If this is the case check for null pointers and whatsnot that could be causing it.

Otherwise for detections crypt your strings if you don't. Do not use public code simply C&P'ed into your project. If you have some sort of packing program (themida or similar) you can easily just pack the hack and see if it still crashes, if it doesn't it's most likely a problem with detections.

[R3d_L1n3]

Datours/Hook are fine, Or it'd crash when CA's loading. I made it yesterday.. So technicly.. updated yesterday also..

U asking question that has manny answers plus u make it more complicated when u said its ur own base .. , how would we know what crashing u lol

My opinion is disable all your staff only hooking ! , then test if it crash its hooking else add ur shit back one by one until u find the crashing function

[TrixtSam]

Detections will usually occur some minutes after loading (unless they changed anything in the last few weeks). Does it always crash the second you have joined a game? That seems a bit too precise... Any possibility you have a problem with your code? Just to examplify if you check gamestatus for one or several of your hacks, faulty code might not execute until you are ingame. If this is the case check for null pointers and whatsnot that could be causing it.

Otherwise for detections crypt your strings if you don't. Do not use public code simply C&P'ed into your project. If you have some sort of packing program (themida or similar) you can easily just pack the hack and see if it still crashes, if it doesn't it's most likely a problem with detections.

Hmm it does ocur the second I enter the game, I don't even get to see the loading screen, as soon as I click Join Game.. It goes to load, then crashes.

U asking question that has manny answers plus u make it more complicated when u said its ur own base .. , how would we know what crashing u lol

My opinion is disable all your staff only hooking ! , then test if it crash its hooking else add ur shit back one by one until u find the crashing function

I'll give this a go, Could it possibly be D3DFont?

---------- Post added at 05:33 AM ---------- Previous post was at 05:18 AM ----------

Hmmm... I disabled everything:/ and it still happens.. It must be my hook.. but this works with other bases o.o

[ctpsolo]

What are you hooking? And what type of hook is it

[TrixtSam]

Main.cpp:

DWORD WINAPI HookGame(LPVOID lpArgs)
{
	DWORD dwD3D9 = 0;	
	while(!dwD3D9)
	{
		Sleep(100);
		dwD3D9 = (DWORD)GetModuleHandle(/*d3d9.dll*/XorStr<0x2A,9,0xE84E0554>("\x4E\x18\x48\x14\x00\x4B\x5C\x5D"+0xE84E0554).s);
	}
	DWORD dwVTable[1] = { 0 };
	Hook->CreateDevice(dwVTable);

	oReset   = (tReset) Hook->DetourCreate((PBYTE) dwVTable[1], (PBYTE) &ResetFunction, 5);
	oPresent = (tPresent) Hook->DetourCreate((PBYTE) dwVTable[2], (PBYTE) &PresentFunction, 5);
	return 0;
}

CreateThread(NULL, NULL,(LPTHREAD_START_ROUTINE)HookGame, NULL, NULL, NULL);

HRESULT WINAPI ResetFunction(LPDIRECT3DDEVICE9 pDevice, D3DPRESENT_PARAMETERS *a)
{	
	/*pSprite->OnLostDevice();*/
	D3D->PreReset(pDevice);

	HRESULT hTorna = oReset(pDevice, a);
	if(SUCCEEDED(hTorna))
		D3D->PostReset(pDevice);
		//pSprite->OnResetDevice();
	return hTorna;
}

HRESULT WINAPI PresentFunction(LPDIRECT3DDEVICE9 pDevice, const RECT *a, const RECT *b, HWND c, const RGNDATA *d)
{
	pDevice->SetRenderState(D3DRS_ZENABLE, false);
	if(pFont == NULL)
		D3D->PostReset(pDevice);
	/*Hack->InitiateHacks(pDevice);
	Menu.DrawMenu(pDevice);*/
	pDevice->SetRenderState(D3DRS_ZENABLE, true);

	return oPresent(pDevice, a, b, c, d);
}

Hook.cpp:

void cHooking::CreateDevice(DWORD *dwVTable)
{
	LPDIRECT3D9 pD3d9;
	LPDIRECT3DDEVICE9 pD3DDevice;
	pD3d9 = Direct3DCreate9(D3D_SDK_VERSION);
	if(pD3d9 == NULL)
		return;
	D3DPRESENT_PARAMETERS pPresentParms;
	ZeroMemory(&pPresentParms, sizeof(pPresentParms));
	pPresentParms.Windowed = TRUE;
	pPresentParms.BackBufferFormat = D3DFMT_UNKNOWN;
	pPresentParms.SwapEffect = D3DSWAPEFFECT_DISCARD;
	if(FAILED(pD3d9->CreateDevice(D3DADAPTER_DEFAULT, D3DDEVTYPE_HAL, GetDesktopWindow(), D3DCREATE_SOFTWARE_VERTEXPROCESSING, &pPresentParms, &pD3DDevice)))
		return;
	DWORD *dwTable = (DWORD *)pD3DDevice;
	dwTable = (DWORD *) dwTable[0];
	dwVTable[1] = dwTable[16];//Reset
	dwVTable[2] = dwTable[17];//Present
}

void *cHooking::DetourCreate(BYTE *src, CONST BYTE *dst, CONST INT len)
{
	BYTE *jmp = (BYTE *)malloc(len + 5);
	DWORD dwback;
	VirtualProtect(src, len, PAGE_READWRITE, &dwback);
	memcpy(jmp, src, len);
	jmp += len;
	jmp[0] = 0xE9;
	*(DWORD *)(jmp + 1) = (DWORD)(src + len - jmp) - 5;
	src[0] = 0xE9;
	*(DWORD *)(src + 1) = (DWORD)(dst - src) - 5;
	for(INT i = 5; i < len; i++) src[i] = 0x90;
	VirtualProtect(src, len, dwback, &dwback);

	return(jmp - len);
}

[ctpsolo]

Main.cpp:

	DWORD dwVTable[1] = { 0 };

	dwVTable[1] = dwTable[16];//Reset
	dwVTable[2] = dwTable[17];//Present
}

That's extremely unsafe as you are writing to memory outside your allocated array. It might not be the problem causing you to crash but suggest you fix it immediately, you have no idea what it might result in or how any errors will present themselves.

[R3d_L1n3]

am sure its detours then else change ur hooking method

[R4v0r]

[I]

Main.cpp:

DWORD WINAPI HookGame(LPVOID lpArgs)
{
	DWORD dwD3D9 = 0;	
	while(!dwD3D9)
	{
		Sleep(100);
		dwD3D9 = (DWORD)GetModuleHandle(/*d3d9.dll*/XorStr<0x2A,9,0xE84E0554>("\x4E\x18\x48\x14\x00\x4B\x5C\x5D"+0xE84E0554).s);
	}
	DWORD dwVTable[1] = { 0 };
	Hook->CreateDevice(dwVTable);

	oReset   = (tReset) Hook->DetourCreate((PBYTE) dwVTable[1], (PBYTE) &ResetFunction, 5);
	oPresent = (tPresent) Hook->DetourCreate((PBYTE) dwVTable[2], (PBYTE) &PresentFunction, 5);
	return 0;
}

CreateThread(NULL, NULL,(LPTHREAD_START_ROUTINE)HookGame, NULL, NULL, NULL);

HRESULT WINAPI ResetFunction(LPDIRECT3DDEVICE9 pDevice, D3DPRESENT_PARAMETERS *a)
{	
	/*pSprite->OnLostDevice();*/
	D3D->PreReset(pDevice);

	HRESULT hTorna = oReset(pDevice, a);
	if(SUCCEEDED(hTorna))
		D3D->PostReset(pDevice);
		//pSprite->OnResetDevice();
	return hTorna;
}

HRESULT WINAPI PresentFunction(LPDIRECT3DDEVICE9 pDevice, const RECT *a, const RECT *b, HWND c, const RGNDATA *d)
{
	pDevice->SetRenderState(D3DRS_ZENABLE, false);
	if(pFont == NULL)
		D3D->PostReset(pDevice);
	/*Hack->InitiateHacks(pDevice);
	Menu.DrawMenu(pDevice);*/
	pDevice->SetRenderState(D3DRS_ZENABLE, true);

	return oPresent(pDevice, a, b, c, d);
}

Hook.cpp:

void cHooking::CreateDevice(DWORD *dwVTable)
{
	LPDIRECT3D9 pD3d9;
	LPDIRECT3DDEVICE9 pD3DDevice;
	pD3d9 = Direct3DCreate9(D3D_SDK_VERSION);
	if(pD3d9 == NULL)
		return;
	D3DPRESENT_PARAMETERS pPresentParms;
	ZeroMemory(&pPresentParms, sizeof(pPresentParms));
	pPresentParms.Windowed = TRUE;
	pPresentParms.BackBufferFormat = D3DFMT_UNKNOWN;
	pPresentParms.SwapEffect = D3DSWAPEFFECT_DISCARD;
	if(FAILED(pD3d9->CreateDevice(D3DADAPTER_DEFAULT, D3DDEVTYPE_HAL, GetDesktopWindow(), D3DCREATE_SOFTWARE_VERTEXPROCESSING, &pPresentParms, &pD3DDevice)))
		return;
	DWORD *dwTable = (DWORD *)pD3DDevice;
	dwTable = (DWORD *) dwTable[0];
	dwVTable[1] = dwTable[16];//Reset
	dwVTable[2] = dwTable[17];//Present
}

void *cHooking::DetourCreate(BYTE *src, CONST BYTE *dst, CONST INT len)
{
	BYTE *jmp = (BYTE *)malloc(len + 5);
	DWORD dwback;
	VirtualProtect(src, len, PAGE_READWRITE, &dwback);
	memcpy(jmp, src, len);
	jmp += len;
	jmp[0] = 0xE9;
	*(DWORD *)(jmp + 1) = (DWORD)(src + len - jmp) - 5;
	src[0] = 0xE9;
	*(DWORD *)(src + 1) = (DWORD)(dst - src) - 5;
	for(INT i = 5; i < len; i++) src = 0x90;
	VirtualProtect(src, len, dwback, &dwback);

	return(jmp - len);
}

DWORD dwVTable[1] = { 0 };
	Hook->CreateDevice(dwVTable);

That's your problem, now just use the Addresshooker or NORMAL vTable hooking...

[Ch40zz-C0d3r]

DWORD dwVTable[1] = { 0 };
	Hook->CreateDevice(dwVTable);

That's your problem, now just use the Addresshooker or NORMAL vTable hooking...

LOL!
Simply increase the size of the array and encrypt the detours with a virtualizer.
The hook isnt detected, also it doesnt matter if you generate a new device and take its VTable addresses or use the orig one since the addresses are the same.

[R4v0r]

LOL!
Simply increase the size of the array and encrypt the detours with a virtualizer.
The hook isnt detected, also it doesnt matter if you generate a new device and take its VTable addresses or use the orig one since the addresses are the same.

This is also very unsafe, and kind of useless. I don't think I am wrong, but correct me if I am.

[Ch40zz-C0d3r]

This is also very unsafe, and kind of useless. I don't think I am wrong, but correct me if I am.

I dont see what you mean by "unsafe", this is much easier then using the other method if you dont have the signature scan and you rae good in directx.

[TrixtSam]

DWORD dwVTable[1] = { 0 };
	Hook->CreateDevice(dwVTable);

That's your problem, now just use the Addresshooker or NORMAL vTable hooking...

This works fine in redemption base? I resulted to it after I switched from my Hook to this... but this does the same.. So it's not hooking or Detours.