[Detected] GameDevice Pointer Example Code

[disco]

Posted by Gellin.




I began making a combat arms hook yesterday, and after much much much trying to make this undetected i have switched to engine hooking so i decided to share some EXAMPLE CODE.

The pointers are for NA version.

Seems to get detected a few seconds after you enter a game because it close's silently.

bool IsIngame = false;

void __cdecl PushToConsole( const char* szCommand )//Untested
{
    DWORD *LTClient = ( DWORD* )( 0x37577B3 );

    __asm
    {
        PUSH szCommand;
        CALL DWORD PTR [LTClient + 0x208];
        ADD ESP, 0x4;
    }
} 

void DrawTri(LPDIRECT3DDEVICE9 dev, int x, int y, int w, int h, DWORD Color)//I know this isnt the fastest method to render a rect but its just
{                                                                            //to make sure the d3d hooked
    D3DRECT BarRect = { x, y, x + w, y + h }; 
    dev->Clear(1, &BarRect, D3DCLEAR_TARGET | D3DCLEAR_ZBUFFER, Color, 0,  0); 
}

HRESULT WINAPI gellPres(LPDIRECT3DDEVICE9 pDevice, CONST RECT *pSourceRect, CONST RECT *pDestRect, HWND hDestWindowOverride, CONST RGNDATA *pDirtyRegion)
{
    DrawTri(pDevice, 100, 100, 100, 100, 0xFFFF0000);
        
    if(GetAsyncKeyState(VK_UP)&1)
        IsIngame =! IsIngame;

    if(IsIngame)
    {
        if(GetAsyncKeyState(VK_SPACE) < 0)//Fly hack
            PushToConsole("PlayerGravity 800");//tested and working in EU 
        else
            PushToConsole("PlayerGravity -800");
    }

    return pPres(pDevice, pSourceRect, pDestRect, hDestWindowOverride, pDirtyRegion);
}

DWORD GetPointer(int index)
{
    DWORD* devicePtr = ***(DWORD****)0x7E4CE0;

    if( devicePtr == NULL ) 
        return 0;

    return devicePtr[index];
}

bool IsGameReadyForHook()
{
    if( GetModuleHandle( "d3d9.dll"     ) != NULL 
     && GetModuleHandle( "ClientFX.fxd" ) != NULL 
     && GetModuleHandle( "CShell.dll"   ) != NULL )
        return true;

    return false;
}

void Hook()
{
    m_dwDip = GetPointer(17);
   //CALL your detour here
}

DWORD WINAPI dwMainThread(LPVOID)
{
    while ( !IsGameReadyForHook() )
        Sleep(5);

    Hook();

    return 0;
}

BOOL WINAPI DllMain ( HMODULE hDll, DWORD dwReason, LPVOID lpReserved )
{
    DisableThreadLibraryCalls(hDll);

    if ( dwReason == DLL_PROCESS_ATTACH )
    {
        CreateThread(NULL, NULL, dwMainThread, NULL, NULL, NULL);
    }

    return TRUE;
}

Enjoy or Not.

Credits: Credzis tested the fly hack in EU, let me use his comp to get the EU pointers which he converted to NA pointers.