CreateDevice hooking detected...
Would advise me some method hooking CreateDevice or..
my method detected...
so I make it another method but game error...
PHP Code:
//=====================================================================================
// Roverturbo | www.uc-forum.com
#include <windows.h>
#include <d3d8.h>
#include <stdio.h>
#pragma comment(lib, "d3d8.lib")
//=====================================================================================
typedef HRESULT (WINAPI* CreateDevice_Prototype) (LPDIRECT3D8, UINT, D3DDEVTYPE, HWND, DWORD, D3DPRESENT_PARAMETERS*, LPDIRECT3DDEVICE8*);
typedef HRESULT (WINAPI* Reset_Prototype) (LPDIRECT3DDEVICE8, D3DPRESENT_PARAMETERS*);
typedef HRESULT (WINAPI* EndScene_Prototype) (LPDIRECT3DDEVICE8);
typedef HRESULT (WINAPI* DrawIndexedPrimitive_Prototype)(LPDIRECT3DDEVICE8, D3DPRIMITIVETYPE, UINT, UINT, UINT, UINT);
CreateDevice_Prototype CreateDevice_Pointer = NULL;
Reset_Prototype Reset_Pointer = NULL;
EndScene_Prototype EndScene_Pointer = NULL;
DrawIndexedPrimitive_Prototype DrawIndexedPrimitive_Pointer = NULL;
HRESULT WINAPI Direct3DCreate8_VMTable (VOID);
HRESULT WINAPI CreateDevice_Detour (LPDIRECT3D8, UINT, D3DDEVTYPE, HWND, DWORD, D3DPRESENT_PARAMETERS*, LPDIRECT3DDEVICE8*);
void WINAPI Reset_Detour (LPDIRECT3DDEVICE8, D3DPRESENT_PARAMETERS*);
HRESULT WINAPI EndScene_Detour (LPDIRECT3DDEVICE8);
void WINAPI DrawIndexedPrimitive_Detour(LPDIRECT3DDEVICE8, D3DPRIMITIVETYPE, UINT, UINT, UINT, UINT);
PDWORD Direct3D_VMTable = NULL;
//=====================================================================================
#define SIZE 5
BYTE checkByte[SIZE] = {0};
BYTE JMP[SIZE] = {0};
DWORD oldProtect, myProtect = PAGE_EXECUTE_READWRITE;
DWORD pOrigMBAddress = NULL;
DWORD JMPSize = NULL;
BYTE backUp[SIZE] = { 0x90, };
BYTE tempJMP[SIZE] = { 0x90, };
#define rsSIZE 5
BYTE rscheckByte[rsSIZE] = {0};
BYTE rsJMP[rsSIZE] = {0};
DWORD rsoldProtect, rsmyProtect = PAGE_EXECUTE_READWRITE;
DWORD rspOrigMBAddress = NULL;
DWORD rsJMPSize = NULL;
BYTE rsbackUp[rsSIZE] = { 0x90, };
BYTE rstempJMP[rsSIZE] = { 0x90, };
//=====================================================================================
DWORD WINAPI CodePatching(LPVOID Param);
DWORD WINAPI haru( void* p );
DWORD WINAPI goRs( void* p );
DWORD WINAPI gogogo( void* p );
void Un();
void Ho();
void rsUn();
void rsHo();
bool sil = false;
//=======================================================================================
DWORD WINAPI hanoi(LPVOID aaaa)
{
*(PDWORD)&DrawIndexedPrimitive_Pointer = (DWORD)0x6DE973A0;
CreateThread(NULL, 0, CodePatching, NULL, 0, NULL);
return 1;
}
BOOL WINAPI DllMain(HINSTANCE hinstModule, DWORD dwReason, LPVOID lpvReserved)
{
if(dwReason == DLL_PROCESS_ATTACH)
{
DisableThreadLibraryCalls(hinstModule);
CreateThread(NULL, 0, hanoi, NULL, 0, NULL);
//return TRUE;
}
return TRUE;
}
//=====================================================================================
HRESULT WINAPI Direct3DCreate8_VMTable(VOID)
{
/*
LPDIRECT3D8 Direct3D_Object = Direct3DCreate8(D3D_SDK_VERSION);
if(Direct3D_Object == NULL)
return D3DERR_INVALIDCALL;
Direct3D_VMTable = (PDWORD)*(PDWORD)Direct3D_Object;
Direct3D_Object->Release();
DWORD dwProtect;
if(VirtualProtect(&Direct3D_VMTable[15], sizeof(DWORD), PAGE_READWRITE, &dwProtect) != 0)
{
*(PDWORD)&CreateDevice_Pointer = Direct3D_VMTable[15];
*(PDWORD)&Direct3D_VMTable[15] = (DWORD)CreateDevice_Detour;
if(VirtualProtect(&Direct3D_VMTable[15], sizeof(DWORD), dwProtect, &dwProtect) == 0)
return D3DERR_INVALIDCALL;
}
else
return D3DERR_INVALIDCALL;
*/
return D3D_OK;
}
//=====================================================================================
//=====================================================================================
void WINAPI Reset_Detour(LPDIRECT3DDEVICE8 Device_Interface, D3DPRESENT_PARAMETERS* PresentationParameters)
{
if(sil == true)
{
rsUn();
Un();
Sleep(10);
}
Reset_Pointer(Device_Interface, PresentationParameters);
if(sil == true)
{
rsHo();
Ho();
}
}
//=====================================================================================
//=====================================================================================
void WINAPI DrawIndexedPrimitive_Detour(LPDIRECT3DDEVICE8 Device_Interface, D3DPRIMITIVETYPE Type,
UINT MinIndex, UINT NumVertices, UINT StartIndex, UINT PrimitiveCount)
{
if(sil == true)
Un(); // UnHook DIP
LPDIRECT3DVERTEXBUFFER8 Stream_Data;
UINT Stride = 0;
if(Device_Interface->GetStreamSource(0, &Stream_Data, &Stride) == D3D_OK)
Stream_Data->Release();
if(Stride == 40 || Stride == 44 )
{
Device_Interface->SetRenderState(D3DRS_LIGHTING,false);
Device_Interface->SetRenderState(D3DRS_ZENABLE, D3DZB_FALSE);
Device_Interface->SetRenderState(D3DRS_ZFUNC,D3DCMP_NEVER);
Device_Interface->SetRenderState(D3DRS_FILLMODE, D3DFILL_WIREFRAME);
Device_Interface->SetRenderState(D3DRS_CULLMODE, D3DCULL_CW);
Device_Interface->SetRenderState(D3DRS_CULLMODE, D3DCULL_CCW);
DrawIndexedPrimitive_Pointer( Device_Interface, Type, MinIndex, NumVertices, StartIndex, PrimitiveCount);
Device_Interface->SetRenderState(D3DRS_FILLMODE, D3DFILL_SOLID);
Device_Interface->SetRenderState(D3DRS_ZENABLE, D3DZB_TRUE);
Device_Interface->SetRenderState(D3DRS_ZFUNC,D3DCMP_LESSEQUAL);
Device_Interface->SetRenderState(D3DRS_CULLMODE, D3DCULL_CW);
Device_Interface->SetRenderState(D3DRS_CULLMODE, D3DCULL_CCW);
}
DrawIndexedPrimitive_Pointer(Device_Interface, Type, MinIndex, NumVertices, StartIndex, PrimitiveCount);
if(sil == true)
Ho(); // Hook
}
//=====================================================================================
DWORD WINAPI CodePatching(LPVOID Param)
{
UNREFERENCED_PARAMETER(Param);
// *(PDWORD)&Direct3D_VMTable[14] = *(PDWORD)&Reset_Pointer;
// *(PDWORD)&Direct3D_VMTable[71] = *(PDWORD)&DrawIndexedPrimitive_Pointer;
haru(NULL);
return 1;
}
DWORD WINAPI haru( void* p )
{
Sleep(50000); // Pass GG
HANDLE h1 = CreateThread(NULL, 0, gogogo, NULL, 0, NULL);
// HANDLE h2 = CreateThread(NULL, 0, goRs, NULL, 0, NULL);
// HANDLE h[2] = { h1, h2 };
// WaitForMultipleObjects ( 2, h, TRUE, INFINITE);
WaitForSingleObject( h1, INFINITE);
CloseHandle( h1 );
// CloseHandle( h2 );
// *(PDWORD)&Direct3D_VMTable[14] = *(PDWORD)&Reset_Pointer;
// *(PDWORD)&Direct3D_VMTable[71] = *(PDWORD)&DrawIndexedPrimitive_Pointer;
return 1;
}
DWORD WINAPI goRs( void* p )
{
// codepatching
int n, j;
n = rsSIZE - 5;
for( j = 0; j< n; j++)
{
rstempJMP[j] = 0x90;
}
rstempJMP[n] = 0xE9;
rspOrigMBAddress = *(PDWORD)&Reset_Pointer ;
rsJMPSize = (DWORD)Reset_Detour - (DWORD)rspOrigMBAddress - rsSIZE;
VirtualProtect((LPVOID)rspOrigMBAddress, rsSIZE, PAGE_EXECUTE_READWRITE, &rsoldProtect);
memcpy(rsbackUp, (const void*)rspOrigMBAddress, rsSIZE);
memcpy(&rstempJMP[rsSIZE - 4], &rsJMPSize, 4);
memcpy((LPVOID)rspOrigMBAddress, (void *)rstempJMP, rsSIZE);
VirtualProtect((LPVOID)rspOrigMBAddress, rsSIZE, PAGE_EXECUTE, NULL);
return 1;
}
DWORD WINAPI gogogo( void* p )
{
// codepatching
int n, j;
n = SIZE - 5;
for( j = 0; j< n; j++)
{
tempJMP[j] = 0x90;
}
tempJMP[n] = 0xE9;
pOrigMBAddress = *(PDWORD)&DrawIndexedPrimitive_Pointer ;
JMPSize = (DWORD)DrawIndexedPrimitive_Detour - (DWORD)pOrigMBAddress - SIZE;
VirtualProtect((LPVOID)pOrigMBAddress, SIZE, PAGE_EXECUTE_READWRITE, &oldProtect);
memcpy(backUp, (const void*)pOrigMBAddress, SIZE);
memcpy(&tempJMP[SIZE - 4], &JMPSize, 4);
memcpy((LPVOID)pOrigMBAddress, (void *)tempJMP, SIZE);
VirtualProtect((LPVOID)pOrigMBAddress, SIZE, PAGE_EXECUTE, NULL);
sil = true;
return 1;
}
void Un()
{
VirtualProtect((LPVOID)pOrigMBAddress, SIZE, PAGE_EXECUTE_READWRITE, &oldProtect);
memcpy((LPVOID)pOrigMBAddress, (void *)backUp, SIZE);
VirtualProtect((LPVOID)pOrigMBAddress, SIZE, PAGE_EXECUTE_READ, NULL);
}
void Ho()
{
VirtualProtect((LPVOID)pOrigMBAddress, SIZE, PAGE_EXECUTE_READWRITE, &oldProtect);
memcpy((LPVOID)pOrigMBAddress, (void *)tempJMP, SIZE);
VirtualProtect((LPVOID)pOrigMBAddress, SIZE, PAGE_EXECUTE_READ, NULL);
}
void rsUn()
{
VirtualProtect((LPVOID)rspOrigMBAddress, rsSIZE, PAGE_EXECUTE_READWRITE, &rsoldProtect);
memcpy((LPVOID)rspOrigMBAddress, (void *)rsbackUp, rsSIZE);
VirtualProtect((LPVOID)rspOrigMBAddress, rsSIZE, PAGE_EXECUTE_READ, NULL);
}
void rsHo()
{
VirtualProtect((LPVOID)rspOrigMBAddress, rsSIZE, PAGE_EXECUTE_READWRITE, &rsoldProtect);
memcpy((LPVOID)rspOrigMBAddress, (void *)rstempJMP, rsSIZE);
VirtualProtect((LPVOID)rspOrigMBAddress, rsSIZE, PAGE_EXECUTE_READ, NULL);
}
