[Tutorial] Adding Scoreboard to your hack

[Crucial]

First things first credit

• Roverturbo
• P47R!CK
• Jugga
• Ultimate-Tester
• ReUnioN
• Haxing4Life

You will need the BF2 Classes for this to work.. Just do some searching

All it does is hook the DrawOverlay function in CRenderer , then you can draw all of your text/boxes with CDebugLineDrawer and CDebugTextWriter.

This is how I did my scoreboard for my public hack.

Main.cpp

#include <Windows.h>
#include "CHacks.h"

bool bScoreBoard = false;
bool bLoaded = false;

typedef void(__stdcall *DrawOverlay_orig)(void);
DrawOverlay_orig oDrawOverlay = 0;

//Hooked DrawOverlay Function
void __stdcall MyDrawOverlay(void)
{
    _asm pushad;
    
    //HotKey to turn scoreboard on/off
    if(GetAsyncKeyState(VK_F1)&1)
        bScoreBoard = !bScoreBoard;
    if(bScoreBoard)
        cHacks.ScoreBoard();

    _asm popad;
    oDrawOverlay();
}

//Initialize
DWORD WINAPI Init(LPVOID lpArgs)
{
    //Load your classes here
    for (; bLoaded == false; Sleep(5000))
    {
        bLoaded = InitObjects();
    }

    //Hook DrawOverlay
    oDrawOverlay = (DrawOverlay_orig)HookVTableFunction((DWORD**)cRenderer,(PBYTE)&MyDrawOverlay,51);

    return 0;
}

//DllMain
bool WINAPI DllMain(HMODULE hModule, DWORD ReasonForCall, LPVOID lpReserved)
{
    switch(ReasonForCall)
    {
    
    case DLL_PROCESS_ATTACH:
        CreateThread(NULL,0,Init,NULL,0,NULL);
        break;
    
    case DLL_PROCESS_DETACH:
        break;
    }
    return TRUE;
}

CHacks.h

#ifndef CHacks_H
#define CHacks_H

class CHacks {
    public:
        void ScoreBoard();

};

extern CHacks cHacks;

#endif

CHacks.cpp

#include "CHacks.h"
#include <iostream>
#include <sstream>

CHacks cHacks;

//Credits to ReUnioN
template<typename DefaultType>
string make_str_of_whatever( char cinput[], DefaultType input )
{
    ostringstream buffer;
    buffer << cinput;
    buffer << input;
    return buffer.str();
}

void CHacks::ScoreBoard()
{
    //Get the local player
    cLocal = cPlayerManager->GetLocalPlayer();
    //If the local player is not valid return
    if(!cLocal)
        return;

    DWORD Base = NULL;

    int Kills;
    int TotalScore;
    int Deaths;
    int TeamKills;
    int TeamScore;

    //Total Score
    ReadProcessMemory(GetCurrentProcess(),(void*)0xA08F60,&Base,sizeof(Base),0);
    if(Base){ReadProcessMemory(GetCurrentProcess(),(void*)(Base + 0x60),&Base,sizeof(Base),0);
    if(Base){ReadProcessMemory(GetCurrentProcess(),(void*)(Base + 0x108),&Base,sizeof(Base),0);
    if(Base){ReadProcessMemory(GetCurrentProcess(),(void*)(Base + 0x00),&TotalScore,sizeof(Base),0);}}}

    //Deaths
    ReadProcessMemory(GetCurrentProcess(),(void*)0xA08F60,&Base,sizeof(Base),0);
    if(Base){ReadProcessMemory(GetCurrentProcess(),(void*)(Base + 0x60),&Base,sizeof(Base),0);
    if(Base){ReadProcessMemory(GetCurrentProcess(),(void*)(Base + 0x108),&Base,sizeof(Base),0);
    if(Base){ReadProcessMemory(GetCurrentProcess(),(void*)(Base + 0x10),&Deaths,sizeof(Base),0);}}}

    //Kills
    ReadProcessMemory(GetCurrentProcess(),(void*)0xA08F60,&Base,sizeof(Base),0);
    if(Base){ReadProcessMemory(GetCurrentProcess(),(void*)(Base + 0x60),&Base,sizeof(Base),0);
    if(Base){ReadProcessMemory(GetCurrentProcess(),(void*)(Base + 0x108),&Base,sizeof(Base),0);        
    if(Base){ReadProcessMemory(GetCurrentProcess(),(void*)(Base + 0x14),&Kills,sizeof(Base),0);}}}

    //TeamKills
    ReadProcessMemory(GetCurrentProcess(),(void*)0xA08F60,&Base,sizeof(Base),0);
    if(Base){ReadProcessMemory(GetCurrentProcess(),(void*)(Base + 0x60),&Base,sizeof(Base),0);
    if(Base){ReadProcessMemory(GetCurrentProcess(),(void*)(Base + 0x108),&Base,sizeof(Base),0);
    if(Base){ReadProcessMemory(GetCurrentProcess(),(void*)(Base + 0x18),&TeamKills,sizeof(Base),0);}}}

    //TeamScore
    ReadProcessMemory(GetCurrentProcess(),(void*)0xA08F60,&Base,sizeof(Base),0);
    if(Base){ReadProcessMemory(GetCurrentProcess(),(void*)(Base + 0x60),&Base,sizeof(Base),0);
    if(Base){ReadProcessMemory(GetCurrentProcess(),(void*)(Base + 0x108),&Base,sizeof(Base),0);
    if(Base){ReadProcessMemory(GetCurrentProcess(),(void*)(Base + 0x04),&TeamScore,sizeof(Base),0);}}}


    int ScoreBoardX = 200;
    int ScoreBoardY = 400;

    int ScoreBoardWidth = 120;
    int ScoreBoardHeight = 90;

    //ScoreBoard Box
    cLineDrawer->fillrgba(ScoreBoardX,ScoreBoardY,ScoreBoardWidth,ScoreBoardHeight,0,0,0,80);
    //Text
    cTextWriter->DrawTextColoured(ScoreBoardX+30,ScoreBoardY+10,D3DCOLOR_XRGB(255,255,255),&make_str_of_whatever("TotalScore: ",TotalScore),0);
    cTextWriter->DrawTextColoured(ScoreBoardX+30,ScoreBoardY+25,D3DCOLOR_XRGB(255,255,255),&make_str_of_whatever("Kills: ",Kills),0);
    cTextWriter->DrawTextColoured(ScoreBoardX+30,ScoreBoardY+40,D3DCOLOR_XRGB(255,255,255),&make_str_of_whatever("Deaths: ",Deaths),0);
    cTextWriter->DrawTextColoured(ScoreBoardX+30,ScoreBoardY+55,D3DCOLOR_XRGB(255,255,255),&make_str_of_whatever("TeamScore: ",TeamScore),0);
    cTextWriter->DrawTextColoured(ScoreBoardX+30,ScoreBoardY+70,D3DCOLOR_XRGB(255,255,255),&make_str_of_whatever("TK's: ",TeamKills),0);
}

Hope you like it .

[smoochy]

nice post but i'm just wondering why not use the scoreboad class itself and save offsets and rpm?

PHP Code:

class CScoreBoard
{
public:
    __int32 totalscore; //0000
    __int32 teamworkscore; //0004
    char unknown0[8];
    __int32 deaths; //0010
    __int32 kills; //0014
    __int32 teamkills; //0018
    char unknown1[4];
    __int32 rank; //0020
}; 


[kolbybrooks]

was thinking the same thing, but I wasn't going to say anything..

[Crucial]

Awhile back I tried using the Scoreboard class and it kept crashing when accessing it, so I guess my class was out of alignment or I was just accessing it wrong.

[smoochy]

Originally Posted by Crucial

Awhile back I tried using the Scoreboard class and it kept crashing when accessing it, so I guess my class was out of alignment or I was just accessing it wrong.

CPlayer:

PHP Code:

CScoreBoard* scoreboard; //0100 


that where you have it?

[daavve]

what do you mean with: You will need the BF2 Classes for this to work? :P

[raiders]

Originally Posted by daavve

what do you mean with: You will need the BF2 Classes for this to work? :P

This means that you more than likely will have trouble getting this to work.

You don't need to readprocessmemory when your inside your target process

[|KungFuPenguin|]

Originally Posted by raiders

This means that you more than likely will have trouble getting this to work.

You don't need to readprocessmemory when your inside your target process

Yup , memcpy and VirtualProtect will do just as well

[ThesuperHaxor]

nice totoral thanks for sharing

[botex]

Originally Posted by ThesuperHaxor

nice totoral thanks for sharing

You are on a good roll to deserve a ban.Stop bumping threads with your stupid comments.If you want to thank him,we have reputation button here and you can write thanks there.