【代理DLL汉化研究】wallhack制作教学

shane007

原文
http://www.descipe.net/forum/sol ... -your-wallhack.html
( G* y: W* s- i, R, c. F
视频教学
9 @0 ^. `# s3 _9 R8 ]" t$ lhttp://www.youtube.com/watch?v=6b5XMzT-b_U   

- H% ?4 `8 _/ gHomeHome User CPUser CP FAQFAQ Members ListMembers List CalendarCalendar SearchSearch
% z  a+ K  N! |8 Q, q0 }6 O$ V
3 ~0 ?! G! R4 [  ?. K; F2 r) c: o Hello shane007,
" f& Y/ z) h/ i" Y- E) K5 T# dOur records indicate that you have never posted to our site before! Why not make your first post today by saying hello to our community in our Introductions forum.
; d' m" q7 Z* a, Z
9 p9 A% w, p% ~Why not start with your first post today and become an active part of DEScipe.net now!

* C  U* M4 G3 z) Q  m8 ?( P5 K9 W
  
7 F3 _1 _* R4 h8 H8 L% s7 p   DEScipe.net > MMOFPS's > Soldier Front > Soldier Front Cheats  
How to make a wallhack and how to hook your wallhack!  
Welcome, shane007.
You last visited: Today at 03:55
Private Messages: Unread 0, Total 0.
Credits: 200 [Check]  

+ o& E2 s; S# P% r/ i# YHome User CP FAQ Members List Calendar New Posts Search   Quick Links   Log Out
& U' |$ n, M8 b6 O) q: A5 X
6 m" ^" h# I0 [* G4 ]

Search Forums
      
4 Q% n; E8 X) f2 f0 e1 f9 `: U* X
Show Threads   Show Posts  
Advanced Search
1 \9 |6 u! W7 Y! g" vFind All Thanked Posts

Quick Links
Today's Posts
Mark Forums Read

/ L% Q+ [, x- c% q5 K9 TUser Control Panel
7 F3 [1 g) D6 C* dEdit Signature

7 [7 a5 b! N0 |Edit Options
: E+ b( }1 L  S: [Miscellaneous
Private Messages
Subscribed Threads
' b3 T, C( b  H: `- o$ Q
- L* X2 s* K( U" Z4 I) pWho's Online
; B6 L+ a9 }9 Z" W; k1 L
Go to Page...
" E) C+ d$ D) F9 w5 h# o   
6 H! U+ }3 }6 L6 ?- S8 n! n2 N) E# dHow to make a wallhack and how to hook your wallhack!
/ g+ \- Z& P- g- U6 HThis is a discussion on How to make a wallhack and how to hook your wallhack! within the Soldier Front Cheats forum part of the Soldier Front category; I will be showing you how to make a detected wallhack and then hook it for it to be undetected. ...
" q& {0 i, c$ @! W$ o1 r& T! }& H
    Poll: Was this helpful?  
Poll Options
& q% F3 S% _, b/ X0 h: rWas this helpful?
  w3 @! S! O- \, g( x' f: MYes, I WILL press the thanks button
8 o; x$ \5 p6 q/ V5 B; g( }; LNo, I am a failure
View Poll Results   

Page 1 of 3 1 2 3 >   
/ w3 N' r: D4 ~2 r& h9 [
+ Q7 T( U. J% |) f' d; t  W View First Unread    LinkBack   Thread Tools   Search this Thread   Rate Thread   Display Modes   

9 @& w1 R* U# t+ B
  
05-02-2009, 20:49    #1  
killax9
$ l. e  _& ~1 `& y+ Q" OPunk
, u6 [+ ]" w' S, O

8 S6 h7 ~5 Y/ T9 f1 D8 N
! _9 U" _9 I& l+ Y4 _
6 {* C1 j# _# E; s: CJoin Date: Jan 2008
7 J9 ~% n* x6 p  @) g7 I% v' x( XCredits: 2,701 [Donate]
4 U' S2 A# @0 M, t4 QPosts: 103
Thanks: 10
# Z! j- R2 O% A7 j7 n* ^Thanked 48 Times in 25 Posts   How to make a wallhack and how to hook your wallhack!

& D( B& H% ?( S- F2 [% |+ B* F--------------------------------------------------------------------------------

I will be showing you how to make a detected wallhack and then hook it for it to be undetected.
' s$ r/ z3 Y0 _2 Y( FPossible Undetected Methods:
) X, u8 I0 m) N5 S+ R1)F5,F6 original this was put into place cuz GG only scanned for wallhack once,until you joined a room.so basically hook a unscanned function then once in game hook d3d.
2)another way **** it hack GG.
& e! E" Q4 C; ]7 U8 K3)breakpoint hooking;doesnt change memory... well changes debug registers.
/ K5 T1 P1 S: [) S! B4)code cave the hook int3->Jmp then in the code cave->Jmp(detour)d3d functions ->jmp back to original flow ;Hook hopin

Vtable:
* M5 B, _/ X( A* J* Zit wont work for vista its not a vtable hook =)
1 ~5 o7 Z8 `/ L: `+ D" c) ?' n
the reason why my older version worked was cuz it hooked
Createdevice->pointers to the functions

kinda like a class or a struct.
) |* }* b5 H6 n
; z. f5 h8 }5 d3 y9 k0 ~6 {) q
5 z3 B! k8 p, q  o! p# vand GG scans createdevice right off the back and the only way u can hook it is a few ways {DETECTED}either when d3d8.dll loaded in....{Undetected}or reversing to internal call inside the game[0x00000] pointer.
0 }" I8 X4 I+ C1 w0 \
: b0 }, W2 v, D3rd maybe- some games recreate the device when a map loads...like BF1942.

# \+ p$ R7 u# U# m5 D. yThings needed to do this:
1. Microsoft Visual C++ 2008
, ]7 d& k0 m% p' n2. DirectX_SDK_(Summer 2004)
7 B" D) y1 m4 N: k' ?0 b3. D3d_hooks
. z- r3 }. K! j5 e4. IndirectX
" x$ H/ ^( N+ |8 r1 O& h5 d1 D5 B) kI HAVE ATTACHED ALL OF THESE FILES AT THE BOTTEM
; v  ~+ B$ _1 J3 [; c+ ^
Now most of you don't know how to compile a wallhack so watch this video and you will compile with no errors:

YouTube - How to Compile WallHack [Tutorial]  
5 p& T) @2 V9 Z3 m' |- n  f
; F4 V, o7 D* A  ^

9 j2 q# o$ q0 a9 w% m: O+ FDetected Source Code:
4 |9 ]4 i1 W) _
7 N7 f4 I3 _+ g1 M#include <windows.h>
#include <detours.h>
#include <d3d8.h>
#include <d3dx8.h>
#include "log.h"
) t+ k* c0 U8 q( z' L  [#include <fstream>
: s# d3 F- s  I#include <iostream>
: H& i0 R+ |) A1 a% U  b' A#pragma comment(lib, "d3dx8.lib")
#pragma comment(lib, "d3d8.lib")
using namespace std;
# u  X( X, \: x+ N8 n0 nstatic DWORD dwBeginScene = 0x6D9D9250;
" }( f; i/ j' X& _static DWORD dwEndScene = 0x6d9d93a0;
static DWORD dwDrawIndexedPrimitive = 0x6d9d73a0;
static DWORD dwSetStreamSource = 0x6d9d6760;
# Y8 l1 D; G# Kstatic DWORD dwSetViewport = 0x6d9d5b90 ;
) V. b& E! i) g4 K7 O: c& ~

int m_Stride;
int texnum;
int nNumVertices;
2 H; a  q! h4 w5 m( tint nPrimitiveCount;
/ I4 P/ @* X$ M" }  X- C
( h7 _2 h! L- [; eLPDIRECT3DTEXTURE8 Red,Yellow,Green,Blue,Purple,Pink,Orange;
bool Color = true;
bool Logger = false;
ofstream ofile;
3 V7 f6 ?" Z0 M3 `" J5 ^& kchar dlldir[320];
9 u- C' \7 ^: N& n9 Nfloat ScreenCenterX = 0.0f;
/ Z- _  m3 k; }float ScreenCenterY = 0.0f;
bool xhair = false;
bool WallHack = false;
bool WallHack2 = false;
1 w' t2 @& Q  p* RHANDLE hand1 =NULL;
( ?4 ]5 S) ?- \2 aHANDLE hand2 =NULL;

DWORD bytes;

//Logger
; V* N+ @; l; U8 ~: e$ jint texarray[1000];
int arraycounter;
int delarray[500];
int dcount;
2 e' M; w. u: w  @! s2 Sunsigned int arrc;
6 X0 T. }' L3 M! rint i=0;
# `+ t# C$ t$ R3 I

D3DCOLOR redt = D3DCOLOR_XRGB( 255, 0, 0 );
' o1 C( Q$ k9 w( G. s
6 Y+ B. l6 K+ L
* \8 J1 w) w( `. t: c2 F: ychar *GetDirectoryFile(char *filename)
{
# v0 ]0 z& M. l* [  j: s/ j) }static char path[320];
6 l& A5 Z) ^: D% nstrcpy(path, dlldir);
6 c" n! p. L9 F! L4 p( C  |8 I' Gstrcat(path, filename);
return path;
}

. R2 O. ^- G- \, I( @6 qvoid __cdecl add_log (const char *fmt, ...)
{
if(ofile != NULL)
{
! C8 k' i& |$ t$ Zif(!fmt) { return; }
" J$ _+ x! f) i9 G- `8 q3 h
4 L; P3 G2 G, l; B; tva_list va_alist;
char logbuf[256] = {0};

! E. a0 P" R5 Pva_start (va_alist, fmt);
. `9 g' X! @9 ]+ K3 X_vsnprintf (logbuf+strlen(logbuf), sizeof(logbuf) - strlen(logbuf), fmt, va_alist);
va_end (va_alist);
) B+ I9 D( |" `' k5 `' p4 c
ofile << logbuf << endl;
}
}

! ]/ L" m) u( z# O8 @HRESULT GenerateTexture(IDirect3DDevice8 *pD3Ddev, IDirect3DTexture8 **ppD3Dtex, DWORD colour32)
{
& c1 H2 D* [5 U! `1 m, C0 H6 k7 }2 a; vif( FAILED(pD3Ddev->CreateTexture(8, 8, 1, 0, D3DFMT_A4R4G4B4, D3DPOOL_MANAGED, ppD3Dtex)) )
* R" Q9 u1 k: Zreturn E_FAIL;

6 Q1 i* |) F" KWORD colour16 = ((WORD)((colour32>>28)&0xF)<<12)
: M# C) ~% n7 }1 p0 w2 j|(WORD)(((colour32>>20)&0xF)<<8)
" s. Q! V  X" L7 N3 B! A|(WORD)(((colour32>>12)&0xF)<<4)
  i- T8 J- ?# Z- Z- m9 i3 M|(WORD)(((colour32>>4)&0xF)<<0);
6 x5 T: h, m5 {" L9 t
& \( p* [0 t( a7 I  ZD3DLOCKED_RECT d3dlr;
2 J  w$ @/ O8 V& ^2 L! }(*ppD3Dtex)->LockRect(0, &d3dlr, 0, 0);
9 t9 @2 O( G' {1 ?7 z0 b' wWORD *pDst16 = (WORD*)d3dlr.pBits;
% L8 ~; B$ y0 ]) U7 H1 R$ U
for(int xy=0; xy < 8*8; xy++)
: h1 _4 `# `# s& R) O7 \/ c*pDst16++ = colour16;

2 b* i  Q# K' P8 W. }(*ppD3Dtex)->UnlockRect(0);
/ ?* ?6 ]0 {1 G. [, T
( e" d$ Q4 i$ G7 _* Breturn S_OK;
, m( M; v4 x  }}


//=================================EndScene_Start=== ================================================== ============================//
typedef HRESULT ( WINAPI* oEndScene ) ( LPDIRECT3DDEVICE8 pDevice );
+ V4 X3 R/ e7 ^7 V; a) ooEndScene pEndScene;

4 w* j7 h# S1 qHRESULT WINAPI myEndScene(LPDIRECT3DDEVICE8 pDevice)
! s2 x# {) R" U8 m{
5 _! q6 B0 Q6 `( ]6 t* v7 R/ Oif(Color)
{
GenerateTexture(pDevice, &Red, D3DCOLOR_ARGB (255 , 255 , 0 , 0 ));
GenerateTexture(pDevice, &Yellow, D3DCOLOR_ARGB (255 , 255 , 255 , 0 ));
) |) U( ]. B: `) jGenerateTexture(pDevice, &Green, D3DCOLOR_ARGB (255 , 0 , 255 , 0 ));
GenerateTexture(pDevice, &Blue, D3DCOLOR_ARGB (255 , 0 , 0 , 255 ));
) ^3 X9 ^6 \) e: U& K0 u& W) fGenerateTexture(pDevice, &Purple, D3DCOLOR_ARGB (255 , 102 , 0 , 153 ));
  Q1 \3 B) Q3 r! t  _( bGenerateTexture(pDevice, &Pink, D3DCOLOR_ARGB (255 , 255 , 20 , 147 ));
0 G& e/ L) t' c: p, j7 AGenerateTexture(pDevice, &Orange, D3DCOLOR_ARGB (255 , 255 , 165 , 0 ));
+ k  C' ?* D/ U8 e' u3 TColor=false;
. L, ], R  ^$ p# F9 L}
1 B) p5 _$ R% _4 n/ b9 l/ \/ b
if(xhair)
{
D3DRECT rec2 = {ScreenCenterX-20, ScreenCenterY, ScreenCenterX+ 20, ScreenCenterY+2};
D3DRECT rec3 = {ScreenCenterX, ScreenCenterY-20, ScreenCenterX+ 2,ScreenCenterY+20};
! @, m  p" G0 E# @  }9 V% k0 Q4 wpDevice->Clear(1, &rec2, D3DCLEAR_TARGET,redt, 0, 0);
pDevice->Clear(1, &rec3, D3DCLEAR_TARGET,redt, 0, 0);
( y; P7 @2 N  Y; A( W8 X}

  R) k- k0 b- G; X//=============================================UnHoo K_Start=========================================== ========//

: L; t% q, ^2 F1 f" \: X) yif((GetAsyncKeyState(VK_F5)&1))
{
. c, C! [8 H4 R; V: s5 wint end =NULL;
int dip =NULL;
int svp =NULL;
int sss =NULL;
1 |, D1 ^3 L2 }, ]4 S
" ]8 T: O+ d% X& N1 q
$ G6 X  ]. o5 U/ jBYTE Unhook[5] = {0x8B,0xFF,0x55,0x8B,0xEC};//Original Function Bytes.
0 h. t5 y+ y+ Y% e: `! t  Fhand1 = GetCurrentProcess();
DWORD dwmodualBase=(DWORD)GetModuleHandle("d3d8.dll");
, ^8 P! r! _! @4 wend = 0x6d9d93a0;
dip = 0x6d9d73a0;
% E: }5 K' ~, H  R& c& v5 G8 Esvp = 0x6d9d5b90;
sss = 0x6d9d6760;

% u& T- c! P* }8 V" iWriteProcessMemory(hand1, (void*) end, Unhook, 5, &bytes);
WriteProcessMemory(hand1, (void*) dip, Unhook, 5, &bytes);
WriteProcessMemory(hand1, (void*) svp ,Unhook, 5, &bytes);
1 G( k& G0 P4 q7 [7 M% ~, ?; b7 |WriteProcessMemory(hand1, (void*) sss,Unhook, 5, &bytes);
}
//=========================================UnHook_En d================================================= ========//

if((GetAsyncKeyState(VK_F1)&1)){xhair=!xhair;}
% w1 R5 h. ]) v3 k$ A3 Wif((GetAsyncKeyState(VK_F2)&1)){WallHack=!WallHack ;}

* w6 \! {9 \- p) e: Q+ }% ureturn pEndScene(pDevice);
7 N5 G- @: M, x8 g}
//====================================EndScene_End== ================================================== ========================//
7 g& f1 W( }3 G/ K% U2 q
1 b/ |# ?7 D3 C

! [$ y/ \' V4 U! f
//=================================Dip_Start======== ================================================== ==================================//
typedef HRESULT ( WINAPI* oDrawIndexedPrimitive ) ( LPDIRECT3DDEVICE8 pDevice, D3DPRIMITIVETYPE pType, UINT nMinIndex, UINT nNumVertices, UINT nStartIndex, UINT nPrimitiveCount );
oDrawIndexedPrimitive pDrawIndexedPrimitive;
- H, A' d" ?# ?4 N) }7 a
HRESULT WINAPI myDrawIndexedPrimitive(LPDIRECT3DDEVICE8 pDevice, D3DPRIMITIVETYPE pType, UINT nMinIndex, UINT nNumVertices, UINT nStartIndex, UINT nPrimitiveCount)
9 `1 H3 u4 ~) l{
- p1 j" q2 P9 o3 J1 h

# V1 p% p0 Q7 x) m; r& c0 T0 d
; Q& H2 W# C  x) }6 V0 z& ]3 L
2 j! W& a2 y/ M8 }if(WallHack)
1 C7 H$ `$ M: t% {{
2 N# {7 I3 }# ~* T/ I5 ntexnum = (nNumVertices*100000)+nPrimitiveCount;
! V& ?) r9 P7 ^6 [4 z! xif(m_Stride==40 &&
. X6 |7 u) B6 {1 \* ~) ]
(texnum==7500121 )||(texnum==8500105 )||(texnum==12400168)||(texnum==37000650)||
3 |/ D6 b- H  S7 O(texnum==18000274)||(texnum==8800105 )||(texnum==36900650)||(texnum==19600314)||
" @4 s& E# [' ^7 H, v(texnum==21800306)||(texnum==7500121 )||(texnum==8500105 )||(texnum==12400168)||
7 s6 Y7 [  `- Q" `: p, e$ Z# }: J0 t(texnum==21800306)||(texnum==36900650)||(texnum==7 500121 )||(texnum==37000650)||
! {: m$ _( J7 a2 g7 k; a(texnum==18000274)||(texnum==7500121 )||(texnum==8500105 )||(texnum==38000658)||
(texnum==22100268)||(texnum==62400752)||(texnum==2 7900456)||(texnum==45700654)||
(texnum==4800040 )||(texnum==83600752)||(texnum==33400477)||(texnum ==38100666)||
(texnum==2800036 )||(texnum==62400752)||(texnum==29700492)||(texnum ==84900778)||
(texnum==27500442)||(texnum==52100658)||(texnum==6 2400752)||(texnum==33600552)||
; c5 c  `& D  w: m6 A(texnum==44100646)||(texnum==18000274)||(texnum==3 7200508)||(texnum==45700654)||
(texnum==37200508)||(texnum==52100658)||(texnum==5 2100658) &&


) Z5 B/ ^. Y1 \! Z8 c
(nNumVertices == 100 && nPrimitiveCount == 121) || //Foot
(nNumVertices == 105 && nPrimitiveCount == 168) || //Right Arm
(nNumVertices == 132 && nPrimitiveCount == 180) || //Hand
( j# e6 y* Y0 m- R(nNumVertices == 159 && nPrimitiveCount == 200) || //Left Arm
' p( `1 A6 E! f6 \% m(nNumVertices == 338 && nPrimitiveCount == 534) || //Underbody thanks japennese guy =)
//(nNumVertices == 448 && nPrimitiveCount == 776) || //Head
- Z: O( I- p7 m- e(nNumVertices == 804 && nPrimitiveCount == 1016) || //Body //SRG Option item
# i' {* |) q+ k8 F% ?) R1 e2 }(nNumVertices == 109 && nPrimitiveCount == 110) || //Bulletproof Vest
(nNumVertices == 336 && nPrimitiveCount == 532)) //Battle Pants

: O; `1 z! `; q$ q5 c, ?{
7 `8 b/ J0 z: z; kpDevice->SetRenderState(D3DRS_ZENABLE, D3DZB_FALSE);
pDevice->SetRenderState(D3DRS_ZFUNC,D3DCMP_NEVER);
8 D8 Z3 l$ W- CpDevice->SetTexture(0,Orange);
//pDevice->SetRenderState(D3DRS_FILLMODE, D3DFILL_WIREFRAME );

8 U6 v7 F6 z% e/ T* k5 E0 ?pDrawIndexedPrimitive(pDevice, pType, nMinIndex, nNumVertices, nStartIndex, nPrimitiveCount);

+ U: D( `! H5 y//pDevice->SetRenderState(D3DRS_FILLMODE, D3DFILL_SOLID );
" h# c# D' _, \7 I. q0 }, i' i+ f1 wpDevice->SetRenderState(D3DRS_ZENABLE, D3DZB_TRUE);
- W; x9 u( s' k; E, q( [pDevice->SetRenderState(D3DRS_ZFUNC,D3DCMP_LESSEQUAL);
pDevice->SetTexture(0,Pink);
) }$ G  A# c4 P1 g6 l2 G' v5 [) X; C' t}

if(m_Stride==40 && texnum== 21300174)
9 U! h; ^" F5 a- f* I{
pDevice->SetRenderState(D3DRS_ZENABLE, D3DZB_FALSE);
3 O5 A. X* A& G2 ?) G  {0 VpDevice->SetRenderState(D3DRS_ZFUNC,D3DCMP_NEVER);
" q( \- w% @3 p) }pDevice->SetTexture(0,Green);//GreenNade
pDrawIndexedPrimitive(pDevice, pType, nMinIndex, nNumVertices, nStartIndex, nPrimitiveCount);
9 e! j$ G& I8 B3 s: L8 `pDevice->SetRenderState(D3DRS_ZENABLE, D3DZB_TRUE);
pDevice->SetRenderState(D3DRS_ZFUNC,D3DCMP_LESSEQUAL);
$ {3 H6 L4 P/ T; M% d" [( JpDevice->SetTexture(0,Purple);
) n( e4 N6 B  `5 I5 z}
# F* A7 n5 Q& q- @0 g
4 |1 V; }+ w& m5 w7 _$ }' [& _; X
( \2 Y8 i& y. i. f( Dif(nNumVertices == 158 && nPrimitiveCount == 131)
{
# x# O1 D8 e$ t- ~8 I6 b! ^pDevice->SetRenderState(D3DRS_ZENABLE, D3DZB_FALSE);
! h! l0 W4 d8 r. G! u8 \pDevice->SetRenderState(D3DRS_ZFUNC,D3DCMP_NEVER);
pDevice->SetTexture(0,Red);//GreenNade
" E3 D& F) Y! c! N) `+ g% apDrawIndexedPrimitive(pDevice, pType, nMinIndex, nNumVertices, nStartIndex, nPrimitiveCount);
pDevice->SetRenderState(D3DRS_ZENABLE, D3DZB_TRUE);
  Z5 A7 Q8 h% D# P5 npDevice->SetRenderState(D3DRS_ZFUNC,D3DCMP_LESSEQUAL);
pDevice->SetTexture(0,Yellow);
2 L0 |. L. S( W# y6 ]+ R}
! d4 ~) H# V/ C" H1 ^- Y
5 U, Y( m3 A+ S( e4 \* ~, }0 gif (nNumVertices == 171 && nPrimitiveCount == 143)
' z# s8 H0 E3 f: n" ?4 u2 |{

+ ~0 n$ i# R  b$ O$ cpDevice->SetRenderState(D3DRS_ZENABLE, D3DZB_FALSE);
pDevice->SetRenderState(D3DRS_ZFUNC,D3DCMP_NEVER);
pDevice->SetTexture(0,Red);//GreenNade
pDrawIndexedPrimitive(pDevice, pType, nMinIndex, nNumVertices, nStartIndex, nPrimitiveCount);
pDevice->SetRenderState(D3DRS_ZENABLE, D3DZB_TRUE);
pDevice->SetRenderState(D3DRS_ZFUNC,D3DCMP_LESSEQUAL);
7 L. A7 n4 l! t6 q) KpDevice->SetTexture(0,Yellow);
}

& l+ v/ a$ ~/ M8 D( S
2 G: |+ V) G. r& v
6 w: m6 r$ |; c) wif(m_Stride==40 &&//face,mask etc...
# K3 S' U+ T- Y3 w3 n6 M' X(texnum==36700612) ||
; Q8 p5 O9 k/ t7 i. e(texnum==9600172 ) ||
(texnum==14200236) ||
(texnum==37800552) ||
; q- T0 O) M" G1 h' y* ^2 P(texnum==28100486) ||
* I4 c+ Z$ i+ e3 _9 S(texnum==35500568) ||
(texnum==2200024 ) ||
(texnum==16200243) ||
(texnum==31900466) ||
: T: ]# Q! u2 w! W/ a: c(texnum==19300342) ||
(texnum==36200604) ||
(texnum==21300290) ||
(texnum==35700558) ||
(texnum==22100396) ||
(texnum==36100604) ||
/ o* y* B- a" U2 u* D5 `* D(texnum==27100464) ||
. j1 r7 N6 `7 z7 Q, S5 _(texnum==11400180) ||
8 s: Y6 i6 I1 p: h* J(texnum==34900580) ||
(texnum==13200212) ||
(texnum==34700538) ||
$ n/ F9 e& A- O6 K' l(texnum==19500352)&&
. w8 c6 ^7 E, J5 v2 M& a(nNumVertices == 448 && nPrimitiveCount == 776))

. P* K) f  ~, z9 D& u{
! n2 ~- g1 I3 h% D$ w& RpDevice->SetTexture(0,Blue);
}

0 v/ u; q. K9 ^
{
: f6 Z  Y+ B2 @8 I5 ], gpDevice->SetRenderState(D3DRS_FOGENABLE,false);
}

/*Logger
if(m_Stride==40){
- T5 h  i  _0 y8 y/ \

7 @) L- v1 i: }' N2 D$ Cwhile(GetAsyncKeyState(VK_NUMPAD1)&1) arrc--; //Used as manual index for adding textures to delarray
2 @" e$ Z2 [" g, L& T/ w* ^/ i3 Iwhile(GetAsyncKeyState(VK_NUMPAD3)&1) arrc++;
; J1 f2 D' V' x( sbool alrdy=false;
% l* o1 x6 n1 Rbool inarr=false;
/ x( P8 D; F8 w9 U
if(texarray[arrc]==texnum)
1 k' z. W8 w: h. Kif(delarray==texarray[arrc])
! j6 G! ~0 q4 P! i# d# G6 xalrdy=true;
) L4 [% ?" Q5 a5 ]# }, Z6 K5 h+ ffor(int i=0;i<dcount;i++) //sees if said texture is in delarray
0 S( h- [! P* s' ]6 Y$ M' ^) ~* Lif(delarray==texnum)
* t3 F  j2 U6 U' sinarr=true;
  s6 R) d- ?  K# k8 |+ wif(texarray[arrc]==texnum || inarr){ //If true, color model differently
. d. A5 A! O: t: b+ X; ^LPDIRECT3DTEXTURE8 texCol;
DWORD dwOldZEnable = D3DZB_TRUE;
) R1 M$ _7 x8 J6 B2 TpDevice->SetTexture(0, NULL);
pDevice->GetRenderState(D3DRS_ZENABLE, &dwOldZEnable);
pDevice->SetRenderState(D3DRS_ZENABLE, D3DZB_FALSE);
if(alrdy) //Different colors for selected models that are already being logged (For removal from array)
  _" d2 J& n0 o( R2 p; n$ m* EtexCol=Blue;
else
texCol=Red;
3 c4 n% w' r2 w: spDevice->SetTexture(0, texCol);
pDrawIndexedPrimitive(pDevice, pType, nMinIndex, nNumVertices, nStartIndex, nPrimitiveCount);
pDevice->SetRenderState(D3DRS_ZENABLE, dwOldZEnable);
7 P5 r6 \0 B+ T
0 y. e3 A+ q5 O}
}
5 R, t, l  J0 J( N* F% m1 E2 `2 tif(GetAsyncKeyState(VK_F5)&1) add_log("Logged tesx: %i", texarray[arrc]); //F5 will print currently selected texnum to logfile
: o) \% B0 Q/ ?( L0 T5 Y: @if(GetAsyncKeyState(VK_F6)&1) { //For adding/removing textures to array
5 I3 F2 e8 j9 W/ Tbool inarr=true;
for(int k=0;k<dcount;k++){
9 h1 g; O  H9 m( q# Z! Y$ H; Wif(delarray[k]==texarray[arrc])
. M0 F% Z  ]$ C9 r% g+ R: |3 X{
inarr=false;//Found selected texture to already exist
% c& X7 N% G' N: s- hdelarray[k]=0;//Delete texture
- o& ~& r+ v2 ubreak;//Cancel loop
}
}
if(inarr==true)
8 f+ M4 x2 {; r. A% ?{
delarray[dcount]=texarray[arrc];//Add texture
dcount++;
}
}
1 `7 ^8 x7 N# d$ I+ a' iif(GetAsyncKeyState(VK_F7)&1){
& r9 e* b2 D9 q7 Y$ `int total=1;
$ J' \) h4 O( l8 ^7 dadd_log("omfg values?!? {");
for(int x=0;x<dcount;x++)//Loops through all recorded variables and prints them in a nice array based format
2 @: p5 Q4 z$ N# H' d) k3 G4 rif(delarray[x]){
add_log("%i,",delarray[x]); //add_log2==add_log but without endl
total++;
0 p3 ]* n' z% i1 D4 y  I}
# [5 I1 P' M! C. k: Ladd_log("}; %i variables in array",total);
7 ?' y8 O2 j9 {+ ]- o( k8 N}
; ]  E( a) N1 jbool found = false; //THIS PART CREDITS TO KRYPTEC
* }8 d* B5 e# ifor(int y=0; y<arraycounter; y++) //THIS IS HIS LOGGING FUNCTION
) d- I1 V% Y* o{
! t$ E5 I* [( ^5 B! t$ ]3 q7 o7 q+ Q5 Iif(texnum==texarray[y])found=true; //I JUST CREATED AN INTERFACE FOR IT
& _2 o/ H) N: z0 n# v% k& a! G}
if(!found && arraycounter < 1000)
+ v9 i( B9 A" J+ v{
6 M( ^  K2 C) R3 }$ |9 _7 |" ?  Utexarray[arraycounter]=texnum;
arraycounter++;
}*/
8 R0 }5 J# @5 p( n1 i7 l! M1 t& y
" z( H0 N* _( P7 a3 ~
5 p& l: C" |! W, k}
$ [  E; E. O) f4 v2 G. Lreturn pDrawIndexedPrimitive(pDevice, pType, nMinIndex, nNumVertices, nStartIndex, nPrimitiveCount);
}
2 j" m5 w, i. ~) g  r//=====================================Dip_End====== ================================================== ===================//

% `" q  x; E) V& e
//=====================================Sss_Start==== ================================================== ====================//
# }0 d0 f# Y; F+ K+ K5 E& r: H+ Mtypedef HRESULT ( WINAPI* oSetStreamSource ) ( LPDIRECT3DDEVICE8 pDevice, UINT nStreamNumber, LPDIRECT3DVERTEXBUFFER8 pStreamData, UINT nStride );
oSetStreamSource pSetStreamSource;
. @: n6 c) _) @
  l/ N) m& O) O% \1 Y% }HRESULT WINAPI mySetStreamSource(LPDIRECT3DDEVICE8 pDevice, UINT nStreamNumber, LPDIRECT3DVERTEXBUFFER8 pStreamData, UINT nStride)
0 V; w' J% Q( s+ _9 a9 w& j. s9 f{
$ n3 Q0 F+ w- R' M* ]if(nStreamNumber==0)
& u% \/ }; V% f( Bm_Stride = nStride;
( W/ j8 Y1 M, J0 T5 `8 z; C1 S2 d
* n, X4 U2 k0 nreturn pSetStreamSource(pDevice, nStreamNumber, pStreamData, nStride);
}
//====================================Sss_End======= ================================================== ===================//
8 f# c% d# \7 y- ]0 e9 E
/ [9 s/ n$ x! j3 C; {( Q//====================================Svp_Start===== ================================================== ===================//
5 v7 q& ]( r8 ^/ r' Gtypedef HRESULT (WINAPI* oSetViewport)(LPDIRECT3DDEVICE8 pDevice,CONST D3DVIEWPORT8* pViewport);
; p1 z8 w) Q! _& s4 N2 a- u- ooSetViewport pSetViewport;
- T; M, P0 v9 ^6 v4 C
6 s; }$ l+ l7 v7 O: FHRESULT WINAPI mySetViewport(LPDIRECT3DDEVICE8 pDevice,CONST D3DVIEWPORT8* pViewport)
{
& L' [! |# h* J: R3 @. [ScreenCenterX = ( float )pViewport->Width / 2;
& f9 {0 M* f7 H& o3 l/ e* f% eScreenCenterY = ( float )pViewport->Height / 2;

return pSetViewport(pDevice,pViewport);
}
//===================================Svp_End======== ================================================== ===================//
2 `/ P/ d( v4 B( A: \" v; E5 n
9 \0 |/ B) V6 j0 S; ztypedef HRESULT ( WINAPI* oBeginScene ) ( LPDIRECT3DDEVICE8 pDevice );
- _  a+ |" ~; K6 s1 JoBeginScene pBeginScene;
/ r: u4 n* l: @/ m) b
HRESULT WINAPI myBeginScene(LPDIRECT3DDEVICE8 pDevice)
! y+ j0 Y: T; f% {6 T8 S) e{
1 X2 H- R' V+ O6 Z0 j3 ^if((GetAsyncKeyState(VK_F6)&1))
, p/ z& A- y/ L8 e7 v{
+ N3 w! @- p2 y4 c4 N3 r9 I7 D' epEndScene = (oEndScene)DetourFunction((PBYTE)dwEndScene, (PBYTE)myEndScene);
pDrawIndexedPrimitive = (oDrawIndexedPrimitive)DetourFunction((PBYTE)dwDra wIndexedPrimitive, (PBYTE)myDrawIndexedPrimitive);
pSetStreamSource = (oSetStreamSource)DetourFunction((PBYTE)dwSetStrea mSource, (PBYTE)mySetStreamSource);
6 p4 g9 ~0 C4 G4 p1 M% IpSetViewport=(oSetViewport)DetourFunction((PBYTE)d wSetViewport,(PBYTE)mySetViewport);
}

return pBeginScene(pDevice);
}

; K# T: N% P. |  F5 o
BOOL WINAPI DllMain ( HMODULE hModule, DWORD dwReason, LPVOID lpReserved )
{
DisableThreadLibraryCalls(hModule);

" L" {. \3 ~* V4 l% kif ( dwReason == DLL_PROCESS_ATTACH )
{
7 o$ x  W# ~4 \
//=========Log==========================//
GetModuleFileName(hModule, dlldir, 512);
for(int i = strlen(dlldir); i > 0; i--) { if(dlldir == '\\') { dlldir[i+1] = 0; break; } }
ofile.open(GetDirectoryFile("log.txt"), ios::app);
" W6 a% s1 ~0 ]//=========Log=========================//

* ?' ~! e9 q- r: {1 ~: a) n1 SpBeginScene = (oBeginScene)DetourFunction((PBYTE)dwBeginScene, (PBYTE)myBeginScene);
pEndScene = (oEndScene)DetourFunction((PBYTE)dwEndScene, (PBYTE)myEndScene);
pDrawIndexedPrimitive = (oDrawIndexedPrimitive)DetourFunction((PBYTE)dwDra wIndexedPrimitive, (PBYTE)myDrawIndexedPrimitive);
pSetStreamSource = (oSetStreamSource)DetourFunction((PBYTE)dwSetStrea mSource, (PBYTE)mySetStreamSource);
pSetViewport=(oSetViewport)DetourFunction((PBYTE)d wSetViewport,(PBYTE)mySetViewport);
9 `+ w/ }1 b- Q7 p7 y
}
& n' a/ u# t0 N1 _, n( s/ @0 k2 ?. _return TRUE;
}

1 G$ ?# k5 I& k4 ]- Z
Log.h (The header File):
. C4 P& v8 p4 D! s1 R
#define WIN32_LEAN_AND_MEAN
4 R1 E) r- m# o; B
#ifndef _MAIN_H
#define _MAIN_H
9 o" s& |; X3 q! V" l
char *GetDirectoryFile(char *filename);
" n; d1 @! C! g5 `; Xvoid __cdecl add_log (const char * fmt, ...);
#endif
. I8 H* t3 r+ U$ `
+ @! x4 T; S8 D' I3 `3 D3 g0 U  HNow after you have built your wallhack you will be able 2 find it in :
C:\Users\Your Name\Documents\Visual Studio 2008\Projects\Wallhack\debug (something like that)
5 ~2 o6 N4 ^. ?5 e1 J- U4 o0 W! c
# U* T/ d$ r4 _Now I will show you how to make your wallhack undetected:
: {$ `7 M/ {! ^7 j2 B+ F( t8 t1. Download D3d hooks
2. Open the file that says "create device code made by me.h"
6 P! H/ V; |( s9 t$ A5 t8 Y3 w3. You will need to make another header file in your project and then put name it create device and paste that code it.
4. Your wallhack is now undetected.

Credits:
1. ME FOR THE TUTURIAL
2. THE1FEAR FOR THE VIDEO ON HOW TO COMPILE THE SOURCE CODE
6 t% y1 _5 w- z3 f5 p4 u# c3. FATBOY88 FOR THE SOURCE CODE
5 N; i( D3 b; W. ~# h, p4. THE INDIRECTX I JUST FOUND :P
; ]2 e% r* O' |: U8 }# ]
Attachments:
D3d_hooks: http://www.mediafire.com/?qzz0gwdjvj5
IndirectX: http://www.mediafire.com/?gimzgmeny11
: j! y, ^* \/ V* l& W$ h, V  {6 JMicrosoft Visual C++ 2008: http://www.mediafire.com/?vmyjjnk1qj5
4 ~" |* G) X9 A$ T' O7 ASEARCH THE LAST ONE UP
8 E* B  Z, t( }5 X% ^4 v9 q__________________

<---------- WALLHACKED

XYZ

想请教一下，这个代理研究是什么概念？

shane007

把对DirectX 相关的函数调用都转发到我们自己的函数上，这就叫代理。
0 P- \5 A; X0 ?主要用来对付众多的图片字库游戏。同时要结合图像识别技术来运用。
这是我想出来的新技术，一旦研究出来，就可以实现不少图片字库游戏的汉化，这个技术有一定的通用性。
有个帖子，简单的说了一下，以后还会有大量资料放出来的。
( i& p! U1 W* z( U: c, ~https://www.chinaavg.com/read.php?tid=17190