[GUIDE]Hooking the source engine.
[GUIDE]Hooking the source engine.
Hai guys, I'll be teaching you how to make a source engine hook(CS: Source, National Bloodsports, Hidden: Source)
The game I'll be using for this tutorial is Hidden: Source
The same can be applied to the orange box, altho orange box games have some extra protections on stuff like CUserCMD.
Installing the Source SDK
Go to the Tools tab in steam and right click -> install 'Source SDK' if you don't already have it.
Installing the code
Launch the source SDK and make sure you've set up the engine version matches the game you're going to code for.
Now that you've set up the correct engine version click 'Create a Mod' and click 'Source code only'.
Install it into an empty folder so it is easily accesible.
After it's finished copying you can close the SDK.
Finally open up the Game_HL2-2005.sln in Visual Studio 2005.
Setting up the project
Since we'll be coding for the client only, we won't need the server part of the SDK, so delete the server folder from the project.
We won't be using the .cpp files either since we will write our own, so remove all of them from the project(Yes, I know its alot of work :P)
Open up the project's settings, go to the Custom Build Steps under the submenu Configuration Properties and clear out the 3 properties.
Don't close the settings just yet, first go to the Linker tab and replace output dir with $(OutDir)/MyLeetVIPHax.dll.
Under the C/C++ submenu, turn off precompiled headers.
Note: You can delete the headers from the project aslong as you make sure they aren't removed from your harddrive. I removed these to make things easier to manage.
Lets get started!
Create main.cpp and SDK.h.
SDK.h will contain all the header's we're going to use, main.cpp will the file where we do our hooking.
Open up SDK.h and add the following code:
And open up main.cpp and add the following:
Now this in itself doesn't do a whole lot, besides waiting for your target to load up client.dll.
Doing some usefull stuff
Since the above doesn't do a whole lot of usefull stuff, lets do something usefull like writing to the game's console =D
Normally if you would do this from scratch you'd have to open up your target game and search for console related strings.
You'd find a CreateInterface call in 'gameui.dll' with a "GameConsole003", which is the interface version the game is requesting.
The CreateInterface call returns a pointer to a class, and if you check out that pointer you'll see a vtable with 7 functions.
By watching calls you can then figure out which does what, and by looking at the disassembly you could see how many arguments the function takes etc.
Now, here's the console class(create a new file called IGameConsole.h):
The class IGameConsole is an extention of IBaseInterface, which is located in interface.h
Now, we haven't hooked the console yet, we'll need the following code to do that.
Place this at the top:
And place this in MainThread:
To use CreateInterface we'll have to include interface.h and to use our console class, we'll have to include IGameConsole.h.
We'll also need to include tier0/dbg.h, because we used ConMsg.
Here's the new SDK.h
Notice the #undef CreateThread? We'll need to do that because tier0/dbg.h makes some weird defines that conflict with what we want to do ;(
That will be it for now(tired), I'll write up some stuff about hooking CInput and using CUserCMD for fun stuff like spinbots
The game I'll be using for this tutorial is Hidden: Source
The same can be applied to the orange box, altho orange box games have some extra protections on stuff like CUserCMD.
Installing the Source SDK
Go to the Tools tab in steam and right click -> install 'Source SDK' if you don't already have it.
Installing the code
Launch the source SDK and make sure you've set up the engine version matches the game you're going to code for.
Now that you've set up the correct engine version click 'Create a Mod' and click 'Source code only'.
Install it into an empty folder so it is easily accesible.
After it's finished copying you can close the SDK.
Finally open up the Game_HL2-2005.sln in Visual Studio 2005.
Setting up the project
Since we'll be coding for the client only, we won't need the server part of the SDK, so delete the server folder from the project.
We won't be using the .cpp files either since we will write our own, so remove all of them from the project(Yes, I know its alot of work :P)
Open up the project's settings, go to the Custom Build Steps under the submenu Configuration Properties and clear out the 3 properties.
Don't close the settings just yet, first go to the Linker tab and replace output dir with $(OutDir)/MyLeetVIPHax.dll.
Under the C/C++ submenu, turn off precompiled headers.
Note: You can delete the headers from the project aslong as you make sure they aren't removed from your harddrive. I removed these to make things easier to manage.
Lets get started!
Create main.cpp and SDK.h.
SDK.h will contain all the header's we're going to use, main.cpp will the file where we do our hooking.
Open up SDK.h and add the following code:
Code:
#pragma once #include <windows.h>
Code:
#include "SDK.h"
void MainThread(void)
{
HMODULE hClient = NULL;
// Wait for the process to load its client.dll, which we'll use for fun.
while(hClient == NULL)
{
hClient = GetModuleHandle("client.dll");
Sleep(100);
}
}
BOOL WINAPI DllMain( HINSTANCE hinstDLL, DWORD dwReason, LPVOID lpReserved )
{
if( dwReason == DLL_PROCESS_ATTACH )
{
CreateThread( NULL, NULL, (LPTHREAD_START_ROUTINE)MainThread, NULL, NULL, NULL);
}
return TRUE;
}
Doing some usefull stuff
Since the above doesn't do a whole lot of usefull stuff, lets do something usefull like writing to the game's console =D
Normally if you would do this from scratch you'd have to open up your target game and search for console related strings.
You'd find a CreateInterface call in 'gameui.dll' with a "GameConsole003", which is the interface version the game is requesting.
The CreateInterface call returns a pointer to a class, and if you check out that pointer you'll see a vtable with 7 functions.
By watching calls you can then figure out which does what, and by looking at the disassembly you could see how many arguments the function takes etc.
Now, here's the console class(create a new file called IGameConsole.h):
Code:
#pragma once
class IGameConsole : public IBaseInterface
{
public:
virtual void Show() = 0;
virtual void Init() = 0;
virtual void Hide() = 0;
virtual void Clear() = 0;
virtual bool IsShown() = 0;
// ???
virtual void UnknownA() = 0;
virtual void UnknownB() = 0;
};
#define GAMECONSOLE_INTERFACE_VERSION "GameConsole003"
Now, we haven't hooked the console yet, we'll need the following code to do that.
Place this at the top:
Code:
IGameConsole *g_pIGameConsole=NULL;
Code:
CreateInterfaceFn ConCreateInterface = (CreateInterfaceFn)GetProcAddress(GetModuleHandle("gameui.dll"), "CreateInterface");
g_pIGameConsole = (IGameConsole *)ConCreateInterface(GAMECONSOLE_INTERFACE_VERSION, NULL);
if (g_pIGameConsole == NULL) return;
if (g_pIGameConsole->IsConsoleShown() == false)
{
g_pIGameConsole->Show();
ConMsg(0, "Our hook has been loaded :D\n");
}
We'll also need to include tier0/dbg.h, because we used ConMsg.
Here's the new SDK.h
Code:
#pragma once #include <windows.h> #include "tier0/dbg.h" #undef CreateThread #include "interface.h" #include "IGameConsole.h"
That will be it for now(tired), I'll write up some stuff about hooking CInput and using CUserCMD for fun stuff like spinbots
Finally! I've been waiting for this forever! wo_Ot! Thanks HD. I will read the whole thing and write a 1 paragraph summary to be turned in Tuesday for 20% of my grade. \___*____*___/
Will add to tut list soon :P
EDIT: Read, so this first part is about hooking the console. Neat trick
Will add to tut list soon :P
EDIT: Read, so this first part is about hooking the console. Neat trick
Originally Posted by why06
Finally! I've been waiting for this forever! wo_Ot! Thanks HD. I will read the whole thing and write a 1 paragraph summary to be turned in Tuesday for 20% of my grade. \___*____*___/
Will add to tut list soon :P
EDIT: Read, so this first part is about hooking the console. Neat trick
Will add to tut list soon :P
EDIT: Read, so this first part is about hooking the console. Neat trick
Originally Posted by Hell_Demon
Next part will be about hooking CL_DrawHud and CL_CreateMove, drawhud being used for ESP and other drawings, and createmove being used for aimbots, spinbots and that kinda crap
Whats a spinbot??
Nice job
Originally Posted by |-|3|_][({}PT3R12
Whats a spinbot??
Nice job
Nice job
dat be it :l... pardon crappy vid.
Originally Posted by Hell_Demon
people that spectate you will see you spin extremely hard, while you see urself walking like u normally wud :P
Hmmm.... Aimbot seems more useful haha
Originally Posted by why06
dat be it :l... pardon crappy vid.
added to list.
Just asking but is it true that all game engines have their own consoles?
Originally Posted by falzarex
Just asking but is it true that all game engines have their own consoles?
Originally Posted by why06
Hmmm... for the most part yeah, but they can be removed or hidden sometimes. Even if there's not a console there still usually has to be a game object or something.
not bad i like it)
)Ahh u just need to kno wad game engine the game is built on then u can determine the way of hooking it
like unreal engine 3?
combat arms lithtech engine?
cryengine? Etcetc
like unreal engine 3?
combat arms lithtech engine?
cryengine? Etcetc
ye
¹³³7 POST TOO SHORT ¹³³7
¹³³7 POST TOO SHORT ¹³³7
This thread is closed for replies.
