【代理DLL汉化研究】wallhack制作教学

shane007 · 发表于 2009-5-26 11:41

原文
http://www.descipe.net/forum/sol ... -your-wallhack.html

视频教学
http://www.youtube.com/watch?v=6b5XMzT-b_U

HomeHome User CPUser CP FAQFAQ Members ListMembers List CalendarCalendar SearchSearch

Hello shane007,
Our records indicate that you have never posted to our site before! Why not make your first post today by saying hello to our community in our Introductions forum.

Why not start with your first post today and become an active part of DEScipe.net now!


DEScipe.net > MMOFPS's > Soldier Front > Soldier Front Cheats
How to make a wallhack and how to hook your wallhack!
Welcome, shane007.
You last visited: Today at 03:55
Private Messages: Unread 0, Total 0.
Credits: 200 [Check]

Home User CP FAQ Members List Calendar New Posts Search Quick Links Log Out

Search Forums


Show Threads Show Posts
Advanced Search
Find All Thanked Posts

Quick Links
Today's Posts
Mark Forums Read

User Control Panel
Edit Signature

Edit Options
Miscellaneous
Private Messages
Subscribed Threads

Who's Online

Go to Page...

How to make a wallhack and how to hook your wallhack!
This is a discussion on How to make a wallhack and how to hook your wallhack! within the Soldier Front Cheats forum part of the Soldier Front category; I will be showing you how to make a detected wallhack and then hook it for it to be undetected. ...

Poll: Was this helpful?
Poll Options
Was this helpful?
Yes, I WILL press the thanks button
No, I am a failure
View Poll Results

Page 1 of 3 1 2 3 >

View First Unread LinkBack Thread Tools Search this Thread Rate Thread Display Modes


05-02-2009, 20:49 #1
killax9
Punk

Join Date: Jan 2008
Credits: 2,701 [Donate]
Posts: 103
Thanks: 10
Thanked 48 Times in 25 Posts How to make a wallhack and how to hook your wallhack!

--------------------------------------------------------------------------------

I will be showing you how to make a detected wallhack and then hook it for it to be undetected.
Possible Undetected Methods:
1)F5,F6 original this was put into place cuz GG only scanned for wallhack once,until you joined a room.so basically hook a unscanned function then once in game hook d3d.
2)another way **** it hack GG.
3)breakpoint hooking;doesnt change memory... well changes debug registers.
4)code cave the hook int3->Jmp then in the code cave->Jmp(detour)d3d functions ->jmp back to original flow ;Hook hopin

Vtable:
it wont work for vista its not a vtable hook =)

the reason why my older version worked was cuz it hooked
Createdevice->pointers to the functions

kinda like a class or a struct.

and GG scans createdevice right off the back and the only way u can hook it is a few ways {DETECTED}either when d3d8.dll loaded in....{Undetected}or reversing to internal call inside the game[0x00000] pointer.

3rd maybe- some games recreate the device when a map loads...like BF1942.

Things needed to do this:
1. Microsoft Visual C++ 2008
2. DirectX_SDK_(Summer 2004)
3. D3d_hooks
4. IndirectX
I HAVE ATTACHED ALL OF THESE FILES AT THE BOTTEM

Now most of you don't know how to compile a wallhack so watch this video and you will compile with no errors:

YouTube - How to Compile WallHack [Tutorial]

Detected Source Code:

#include <windows.h>
#include <detours.h>
#include <d3d8.h>
#include <d3dx8.h>
#include "log.h"
#include <fstream>
#include <iostream>
#pragma comment(lib, "d3dx8.lib")
#pragma comment(lib, "d3d8.lib")
using namespace std;
static DWORD dwBeginScene = 0x6D9D9250;
static DWORD dwEndScene = 0x6d9d93a0;
static DWORD dwDrawIndexedPrimitive = 0x6d9d73a0;
static DWORD dwSetStreamSource = 0x6d9d6760;
static DWORD dwSetViewport = 0x6d9d5b90 ;

int m_Stride;
int texnum;
int nNumVertices;
int nPrimitiveCount;

LPDIRECT3DTEXTURE8 Red,Yellow,Green,Blue,Purple,Pink,Orange;
bool Color = true;
bool Logger = false;
ofstream ofile;
char dlldir[320];
float ScreenCenterX = 0.0f;
float ScreenCenterY = 0.0f;
bool xhair = false;
bool WallHack = false;
bool WallHack2 = false;
HANDLE hand1 =NULL;
HANDLE hand2 =NULL;

DWORD bytes;

//Logger
int texarray[1000];
int arraycounter;
int delarray[500];
int dcount;
unsigned int arrc;
int i=0;

D3DCOLOR redt = D3DCOLOR_XRGB( 255, 0, 0 );

char *GetDirectoryFile(char *filename)
{
static char path[320];
strcpy(path, dlldir);
strcat(path, filename);
return path;
}

void __cdecl add_log (const char *fmt, ...)
{
if(ofile != NULL)
{
if(!fmt) { return; }

va_list va_alist;
char logbuf[256] = {0};

va_start (va_alist, fmt);
_vsnprintf (logbuf+strlen(logbuf), sizeof(logbuf) - strlen(logbuf), fmt, va_alist);
va_end (va_alist);

ofile << logbuf << endl;
}
}

HRESULT GenerateTexture(IDirect3DDevice8 *pD3Ddev, IDirect3DTexture8 **ppD3Dtex, DWORD colour32)
{
if( FAILED(pD3Ddev->CreateTexture(8, 8, 1, 0, D3DFMT_A4R4G4B4, D3DPOOL_MANAGED, ppD3Dtex)) )
return E_FAIL;

WORD colour16 = ((WORD)((colour32>>28)&0xF)<<12)
|(WORD)(((colour32>>20)&0xF)<<8)
|(WORD)(((colour32>>12)&0xF)<<4)
|(WORD)(((colour32>>4)&0xF)<<0);

D3DLOCKED_RECT d3dlr;
(*ppD3Dtex)->LockRect(0, &d3dlr, 0, 0);
WORD *pDst16 = (WORD*)d3dlr.pBits;

for(int xy=0; xy < 8*8; xy++)
*pDst16++ = colour16;

(*ppD3Dtex)->UnlockRect(0);

return S_OK;
}

//=================================EndScene_Start=== ================================================== ============================//
typedef HRESULT ( WINAPI* oEndScene ) ( LPDIRECT3DDEVICE8 pDevice );
oEndScene pEndScene;

HRESULT WINAPI myEndScene(LPDIRECT3DDEVICE8 pDevice)
{
if(Color)
{
GenerateTexture(pDevice, &Red, D3DCOLOR_ARGB (255 , 255 , 0 , 0 ));
GenerateTexture(pDevice, &Yellow, D3DCOLOR_ARGB (255 , 255 , 255 , 0 ));
GenerateTexture(pDevice, &Green, D3DCOLOR_ARGB (255 , 0 , 255 , 0 ));
GenerateTexture(pDevice, &Blue, D3DCOLOR_ARGB (255 , 0 , 0 , 255 ));
GenerateTexture(pDevice, &Purple, D3DCOLOR_ARGB (255 , 102 , 0 , 153 ));
GenerateTexture(pDevice, &Pink, D3DCOLOR_ARGB (255 , 255 , 20 , 147 ));
GenerateTexture(pDevice, &Orange, D3DCOLOR_ARGB (255 , 255 , 165 , 0 ));
Color=false;
}

if(xhair)
{
D3DRECT rec2 = {ScreenCenterX-20, ScreenCenterY, ScreenCenterX+ 20, ScreenCenterY+2};
D3DRECT rec3 = {ScreenCenterX, ScreenCenterY-20, ScreenCenterX+ 2,ScreenCenterY+20};
pDevice->Clear(1, &rec2, D3DCLEAR_TARGET,redt, 0, 0);
pDevice->Clear(1, &rec3, D3DCLEAR_TARGET,redt, 0, 0);
}

//=============================================UnHoo K_Start=========================================== ========//

if((GetAsyncKeyState(VK_F5)&1))
{
int end =NULL;
int dip =NULL;
int svp =NULL;
int sss =NULL;

BYTE Unhook[5] = {0x8B,0xFF,0x55,0x8B,0xEC};//Original Function Bytes.
hand1 = GetCurrentProcess();
DWORD dwmodualBase=(DWORD)GetModuleHandle("d3d8.dll");
end = 0x6d9d93a0;
dip = 0x6d9d73a0;
svp = 0x6d9d5b90;
sss = 0x6d9d6760;

WriteProcessMemory(hand1, (void*) end, Unhook, 5, &bytes);
WriteProcessMemory(hand1, (void*) dip, Unhook, 5, &bytes);
WriteProcessMemory(hand1, (void*) svp ,Unhook, 5, &bytes);
WriteProcessMemory(hand1, (void*) sss,Unhook, 5, &bytes);
}
//=========================================UnHook_En d================================================= ========//

if((GetAsyncKeyState(VK_F1)&1)){xhair=!xhair;}
if((GetAsyncKeyState(VK_F2)&1)){WallHack=!WallHack ;}

return pEndScene(pDevice);
}
//====================================EndScene_End== ================================================== ========================//

//=================================Dip_Start======== ================================================== ==================================//
typedef HRESULT ( WINAPI* oDrawIndexedPrimitive ) ( LPDIRECT3DDEVICE8 pDevice, D3DPRIMITIVETYPE pType, UINT nMinIndex, UINT nNumVertices, UINT nStartIndex, UINT nPrimitiveCount );
oDrawIndexedPrimitive pDrawIndexedPrimitive;

HRESULT WINAPI myDrawIndexedPrimitive(LPDIRECT3DDEVICE8 pDevice, D3DPRIMITIVETYPE pType, UINT nMinIndex, UINT nNumVertices, UINT nStartIndex, UINT nPrimitiveCount)
{

if(WallHack)
{
texnum = (nNumVertices*100000)+nPrimitiveCount;
if(m_Stride==40 &&

(texnum==7500121 )||(texnum==8500105 )||(texnum==12400168)||(texnum==37000650)||
(texnum==18000274)||(texnum==8800105 )||(texnum==36900650)||(texnum==19600314)||
(texnum==21800306)||(texnum==7500121 )||(texnum==8500105 )||(texnum==12400168)||
(texnum==21800306)||(texnum==36900650)||(texnum==7 500121 )||(texnum==37000650)||
(texnum==18000274)||(texnum==7500121 )||(texnum==8500105 )||(texnum==38000658)||
(texnum==22100268)||(texnum==62400752)||(texnum==2 7900456)||(texnum==45700654)||
(texnum==4800040 )||(texnum==83600752)||(texnum==33400477)||(texnum ==38100666)||
(texnum==2800036 )||(texnum==62400752)||(texnum==29700492)||(texnum ==84900778)||
(texnum==27500442)||(texnum==52100658)||(texnum==6 2400752)||(texnum==33600552)||
(texnum==44100646)||(texnum==18000274)||(texnum==3 7200508)||(texnum==45700654)||
(texnum==37200508)||(texnum==52100658)||(texnum==5 2100658) &&

(nNumVertices == 100 && nPrimitiveCount == 121) || //Foot
(nNumVertices == 105 && nPrimitiveCount == 168) || //Right Arm
(nNumVertices == 132 && nPrimitiveCount == 180) || //Hand
(nNumVertices == 159 && nPrimitiveCount == 200) || //Left Arm
(nNumVertices == 338 && nPrimitiveCount == 534) || //Underbody thanks japennese guy =)
//(nNumVertices == 448 && nPrimitiveCount == 776) || //Head
(nNumVertices == 804 && nPrimitiveCount == 1016) || //Body //SRG Option item
(nNumVertices == 109 && nPrimitiveCount == 110) || //Bulletproof Vest
(nNumVertices == 336 && nPrimitiveCount == 532)) //Battle Pants

{
pDevice->SetRenderState(D3DRS_ZENABLE, D3DZB_FALSE);
pDevice->SetRenderState(D3DRS_ZFUNC,D3DCMP_NEVER);
pDevice->SetTexture(0,Orange);
//pDevice->SetRenderState(D3DRS_FILLMODE, D3DFILL_WIREFRAME );

pDrawIndexedPrimitive(pDevice, pType, nMinIndex, nNumVertices, nStartIndex, nPrimitiveCount);

//pDevice->SetRenderState(D3DRS_FILLMODE, D3DFILL_SOLID );
pDevice->SetRenderState(D3DRS_ZENABLE, D3DZB_TRUE);
pDevice->SetRenderState(D3DRS_ZFUNC,D3DCMP_LESSEQUAL);
pDevice->SetTexture(0,Pink);
}

if(m_Stride==40 && texnum== 21300174)
{
pDevice->SetRenderState(D3DRS_ZENABLE, D3DZB_FALSE);
pDevice->SetRenderState(D3DRS_ZFUNC,D3DCMP_NEVER);
pDevice->SetTexture(0,Green);//GreenNade
pDrawIndexedPrimitive(pDevice, pType, nMinIndex, nNumVertices, nStartIndex, nPrimitiveCount);
pDevice->SetRenderState(D3DRS_ZENABLE, D3DZB_TRUE);
pDevice->SetRenderState(D3DRS_ZFUNC,D3DCMP_LESSEQUAL);
pDevice->SetTexture(0,Purple);
}

if(nNumVertices == 158 && nPrimitiveCount == 131)
{
pDevice->SetRenderState(D3DRS_ZENABLE, D3DZB_FALSE);
pDevice->SetRenderState(D3DRS_ZFUNC,D3DCMP_NEVER);
pDevice->SetTexture(0,Red);//GreenNade
pDrawIndexedPrimitive(pDevice, pType, nMinIndex, nNumVertices, nStartIndex, nPrimitiveCount);
pDevice->SetRenderState(D3DRS_ZENABLE, D3DZB_TRUE);
pDevice->SetRenderState(D3DRS_ZFUNC,D3DCMP_LESSEQUAL);
pDevice->SetTexture(0,Yellow);
}

if (nNumVertices == 171 && nPrimitiveCount == 143)
{

pDevice->SetRenderState(D3DRS_ZENABLE, D3DZB_FALSE);
pDevice->SetRenderState(D3DRS_ZFUNC,D3DCMP_NEVER);
pDevice->SetTexture(0,Red);//GreenNade
pDrawIndexedPrimitive(pDevice, pType, nMinIndex, nNumVertices, nStartIndex, nPrimitiveCount);
pDevice->SetRenderState(D3DRS_ZENABLE, D3DZB_TRUE);
pDevice->SetRenderState(D3DRS_ZFUNC,D3DCMP_LESSEQUAL);
pDevice->SetTexture(0,Yellow);
}

if(m_Stride==40 &&//face,mask etc...
(texnum==36700612) ||
(texnum==9600172 ) ||
(texnum==14200236) ||
(texnum==37800552) ||
(texnum==28100486) ||
(texnum==35500568) ||
(texnum==2200024 ) ||
(texnum==16200243) ||
(texnum==31900466) ||
(texnum==19300342) ||
(texnum==36200604) ||
(texnum==21300290) ||
(texnum==35700558) ||
(texnum==22100396) ||
(texnum==36100604) ||
(texnum==27100464) ||
(texnum==11400180) ||
(texnum==34900580) ||
(texnum==13200212) ||
(texnum==34700538) ||
(texnum==19500352)&&
(nNumVertices == 448 && nPrimitiveCount == 776))

{
pDevice->SetTexture(0,Blue);
}

{
pDevice->SetRenderState(D3DRS_FOGENABLE,false);
}

/*Logger
if(m_Stride==40){

while(GetAsyncKeyState(VK_NUMPAD1)&1) arrc--; //Used as manual index for adding textures to delarray
while(GetAsyncKeyState(VK_NUMPAD3)&1) arrc++;
bool alrdy=false;
bool inarr=false;

if(texarray[arrc]==texnum)
if(delarray==texarray[arrc])
7 r( i$ j: E  g3 n- o! t& dalrdy=true;4 [. G0 h7 I3 \: S7 _+ v' i% `/ q
for(int i=0;i<dcount;i++) //sees if said texture is in delarray
3 I" S' I( @4 y8 _# t1 q6 G5 C% lif(delarray==texnum); o8 |; L' u# o" B
inarr=true;. f" U" @; Y* g- r: ?/ `
if(texarray[arrc]==texnum || inarr){ //If true, color model differently
4 F! L  c: j/ S% K( E5 X3 O: TLPDIRECT3DTEXTURE8 texCol;5 W3 a$ K! n, Q" |1 ]% i  U6 ^3 A
DWORD dwOldZEnable = D3DZB_TRUE;
, [% {& H6 s+ x. gpDevice->SetTexture(0, NULL);
. ~8 Z7 b( M7 i7 y8 @* M/ ~pDevice->GetRenderState(D3DRS_ZENABLE, &dwOldZEnable);
# s/ p( ?2 _* G7 UpDevice->SetRenderState(D3DRS_ZENABLE, D3DZB_FALSE);
* j0 m6 h' e: D3 ~if(alrdy) //Different colors for selected models that are already being logged (For removal from array)" O/ ]$ R/ W: x, I* J9 b  i
texCol=Blue;) O& R8 O8 o) \, \) H! L
else" h! B, u  u4 |: j+ Z1 V
texCol=Red;
1 V4 X" \* ]6 j$ v9 QpDevice->SetTexture(0, texCol);
1 k  j  c0 j- {) Y3 lpDrawIndexedPrimitive(pDevice, pType, nMinIndex, nNumVertices, nStartIndex, nPrimitiveCount);
1 k! m9 C+ c# G# P( D3 ]0 S6 t: BpDevice->SetRenderState(D3DRS_ZENABLE, dwOldZEnable);
4 C# V% t8 m1 U5 V4 l6 {  C- J7 M; c8 [3 ^$ C/ L+ D4 {
}' x% i& l) U) S* u
}3 S4 C6 n& _8 i* N
if(GetAsyncKeyState(VK_F5)&1) add_log("Logged tesx: %i", texarray[arrc]); //F5 will print currently selected texnum to logfile" n: d2 M# x* d/ a& T6 o# c: a$ I
if(GetAsyncKeyState(VK_F6)&1) { //For adding/removing textures to array% y% v! o# y1 m6 v; K5 {7 R
bool inarr=true;. C' q, \; U, Z/ Y8 v$ [
for(int k=0;k<dcount;k++){
/ r  A, ?% h% _- lif(delarray[k]==texarray[arrc])
( y6 _# q/ u6 c3 y+ s$ b6 P# D{6 J2 @+ R* C6 |5 u" i; N
inarr=false;//Found selected texture to already exist
+ i9 Y. a) b  y: A2 Rdelarray[k]=0;//Delete texture3 w4 C. s, F, O4 [2 Y* v' k
break;//Cancel loop
, a5 A) i9 U2 n' n}/ M9 c# L) i/ Q+ P  |0 R
}
0 L# e  Y; o' Y2 |+ W7 m9 U' Nif(inarr==true)
( T/ K, O/ s2 p8 n( V0 k& w{
) Y) B) h3 t" |+ `- X# F8 Edelarray[dcount]=texarray[arrc];//Add texture
7 L! D8 V, w$ h% A% M4 u+ m0 Bdcount++;
, j7 ?( C9 N2 [; l" y) r- g% P}
2 W7 u/ f( d: r& W}' D: c4 s% m; a4 u% o+ y
if(GetAsyncKeyState(VK_F7)&1){
  K" [7 r! C# S5 m5 g9 z- M+ K2 {int total=1;
+ X$ s6 u2 a5 E; c: Tadd_log("omfg values?!? {");
  ?9 z& A: c! j# N- r/ ]& ^# V# Ufor(int x=0;x<dcount;x++)//Loops through all recorded variables and prints them in a nice array based format8 i- ?, h0 L- F8 x$ G- Z
if(delarray[x]){; x' r7 G7 w# ]7 k: q' g# D
add_log("%i,",delarray[x]); //add_log2==add_log but without endl
* }# A4 ^5 n; n/ M$ btotal++;
8 U* v, F1 n7 _' [2 v- t4 C" z9 h}
1 ]1 U% f- q! Y: A: G' W3 Z) {add_log("}; %i variables in array",total);
. m, d. _6 _7 N2 e4 p}
. i$ C& H, x2 o3 W* ]# ebool found = false; //THIS PART CREDITS TO KRYPTEC
, b# _* `) |: J0 t7 k# vfor(int y=0; y<arraycounter; y++) //THIS IS HIS LOGGING FUNCTION# X/ f  s, R; W* d0 q& S9 k! H( @- E
{/ V" R7 O. c$ y
if(texnum==texarray[y])found=true; //I JUST CREATED AN INTERFACE FOR IT/ ]3 |' R/ [. m/ N. A
}- t" e9 q0 V8 j) \2 R- h7 c. `
if(!found && arraycounter < 1000)8 M( j5 j9 Z( C" I; }  H
{6 G5 R' b3 I! t. t! _1 V' R
texarray[arraycounter]=texnum;$ }$ ]2 @1 K# {# e: E4 V0 v1 n
arraycounter++;
" H/ j) j* N. |8 w5 z! K}*/
4 Y7 ~% W1 W) C! L) z5 i, P3 E  s0 ~
- b4 z( [. R1 w' G( a% L
}
8 C( _4 `5 U+ Y# r9 u. zreturn pDrawIndexedPrimitive(pDevice, pType, nMinIndex, nNumVertices, nStartIndex, nPrimitiveCount);  @$ I$ R' K* m, z+ Z
}
# N+ n2 a% z% n. n1 x5 B//=====================================Dip_End====== ================================================== ===================//% @4 S2 q8 C3 S* r
& j! a8 O# O; u+ C

; b  K* E* H6 x& H//=====================================Sss_Start==== ================================================== ====================//
2 |3 }- U9 V: Mtypedef HRESULT ( WINAPI* oSetStreamSource ) ( LPDIRECT3DDEVICE8 pDevice, UINT nStreamNumber, LPDIRECT3DVERTEXBUFFER8 pStreamData, UINT nStride );- `! `. B5 `8 A
oSetStreamSource pSetStreamSource;
- z3 H3 b5 D* Q( `
HRESULT WINAPI mySetStreamSource(LPDIRECT3DDEVICE8 pDevice, UINT nStreamNumber, LPDIRECT3DVERTEXBUFFER8 pStreamData, UINT nStride)
+ X2 q2 t. D+ A9 M; E{
* a# F0 Z5 v8 j" ^/ ]if(nStreamNumber==0)) E8 k  X& U$ w9 }3 [& c( R
m_Stride = nStride;+ c# Y9 J+ n( B, E- [

/ ?' j4 t$ {2 ?return pSetStreamSource(pDevice, nStreamNumber, pStreamData, nStride);
  I. I! ~8 x" h, g/ ]* K* U}  z/ K0 V8 d6 A8 H4 ^
//====================================Sss_End======= ================================================== ===================//
, z+ g7 ?! ?# p* g9 v) J$ E, }6 M. D4 C' h: Y# C& d* O8 a8 Q
//====================================Svp_Start===== ================================================== ===================//8 e7 P5 A, q/ ^( _, P3 r+ W
typedef HRESULT (WINAPI* oSetViewport)(LPDIRECT3DDEVICE8 pDevice,CONST D3DVIEWPORT8* pViewport);
2 E3 Y% g) i" g% JoSetViewport pSetViewport;
& l* [  c. t0 Z# m0 O' v( J  {  T7 A
HRESULT WINAPI mySetViewport(LPDIRECT3DDEVICE8 pDevice,CONST D3DVIEWPORT8* pViewport)
  g) T9 K2 y6 z# ^1 s/ |; c6 o{, H; p+ [" G4 Z  g" p, n; t
ScreenCenterX = ( float )pViewport->Width / 2;
0 e+ z2 m8 Q( |* w4 sScreenCenterY = ( float )pViewport->Height / 2;
9 l( ]( D! _% o* y: o/ K& P1 Q  Z" z6 C, T4 K. ^! R
return pSetViewport(pDevice,pViewport);
" c7 F8 J7 J1 b8 S1 K}
  U# A# h+ `6 D//===================================Svp_End======== ================================================== ===================//3 Z; b; Z: m3 c) {, h0 g  @; K9 g* H

  b2 G3 [  J) l" o* Ttypedef HRESULT ( WINAPI* oBeginScene ) ( LPDIRECT3DDEVICE8 pDevice );
6 G& d* ]1 `- d3 D8 A- `% RoBeginScene pBeginScene;$ _+ X4 W6 I* b8 Y% i% k

- f- I/ W4 q. P( L9 b: D3 e: uHRESULT WINAPI myBeginScene(LPDIRECT3DDEVICE8 pDevice)8 O. z4 I- e" f/ ?  O, d9 P
{
; G; Y/ K# g' \" f- e7 Uif((GetAsyncKeyState(VK_F6)&1))
2 N; ?0 a5 p% y! d{
$ \3 ~( h0 Q9 J% ~. vpEndScene = (oEndScene)DetourFunction((PBYTE)dwEndScene, (PBYTE)myEndScene);
, ~9 C! N) T. K$ Q( lpDrawIndexedPrimitive = (oDrawIndexedPrimitive)DetourFunction((PBYTE)dwDra wIndexedPrimitive, (PBYTE)myDrawIndexedPrimitive);  I0 X# |4 F1 R
pSetStreamSource = (oSetStreamSource)DetourFunction((PBYTE)dwSetStrea mSource, (PBYTE)mySetStreamSource);2 S1 p& D- h0 b% ~7 \5 T- \
pSetViewport=(oSetViewport)DetourFunction((PBYTE)d wSetViewport,(PBYTE)mySetViewport);; U/ e# v6 x+ t# W
}
. W. i! v4 a, q' j6 n) x  E8 E0 w6 }. {0 L$ e( s# Z8 W! I
return pBeginScene(pDevice);4 y" r5 |  x# r, C7 ^( R8 M' u
}. C6 `# j7 i0 {/ |
$ M4 I% o7 M+ f# B1 Z3 z- `* u
; W" ]) }0 C' [1 q; F9 h- Z
BOOL WINAPI DllMain ( HMODULE hModule, DWORD dwReason, LPVOID lpReserved )
; l7 ^2 Q, E7 ]{
) a$ ?  B7 m8 Q1 v! sDisableThreadLibraryCalls(hModule);
7 C  F+ y; {) N7 m) U1 z& R
1 ]+ C$ P1 z! D& Jif ( dwReason == DLL_PROCESS_ATTACH )' H' v: M: C  ^3 H5 s1 ?
{
% n" l9 {- [" }/ G8 N$ i1 n. n; B1 C& H
) u0 W: ?  k) T+ L2 w: V//=========Log==========================//
% w* a" w) s6 K9 Y' V6 oGetModuleFileName(hModule, dlldir, 512);. ^$ L  c% u, x7 P# v) P- F6 Y/ a
for(int i = strlen(dlldir); i > 0; i--) { if(dlldir == '\\') { dlldir[i+1] = 0; break; } }7 q& ]$ g: a+ l2 j7 d5 c( ^
ofile.open(GetDirectoryFile("log.txt"), ios::app); & e; X/ u" Q' F- f1 o6 w5 m
//=========Log=========================//
8 r( T6 D3 Z* \6 K+ W/ ]
. j% Z: ?# V$ r5 U0 ~pBeginScene = (oBeginScene)DetourFunction((PBYTE)dwBeginScene, (PBYTE)myBeginScene);5 _6 u% N; d0 Y" }+ q
pEndScene = (oEndScene)DetourFunction((PBYTE)dwEndScene, (PBYTE)myEndScene);- N- n1 }/ Y: k! [% M( i
pDrawIndexedPrimitive = (oDrawIndexedPrimitive)DetourFunction((PBYTE)dwDra wIndexedPrimitive, (PBYTE)myDrawIndexedPrimitive);
: p4 _) `" T" `4 a+ r. |3 P; rpSetStreamSource = (oSetStreamSource)DetourFunction((PBYTE)dwSetStrea mSource, (PBYTE)mySetStreamSource);
1 V9 i+ K* Z) n" s3 ipSetViewport=(oSetViewport)DetourFunction((PBYTE)d wSetViewport,(PBYTE)mySetViewport);8 C) G" G8 e+ F" N2 ]' u8 I

7 H& k1 M+ F( m# [2 f}
9 W1 b" c$ x( S# b0 s0 Ereturn TRUE;
4 m+ a4 o4 ~+ J" G7 a0 g# s}

1 g$ T" p9 Z% L7 B( E
) e9 f) l& `- g2 ~; w* l6 CLog.h (The header File):
: Z! @' R+ H" h, j8 O* P+ n6 i7 P/ y& W' y
#define WIN32_LEAN_AND_MEAN8 |4 o: L$ @' K% q$ W- p1 y

5 T8 A5 P3 ?8 `" i3 `# |: V$ ]  q#ifndef _MAIN_H
1 F  T( f+ [3 ~1 v5 Q1 C/ M3 C8 G#define _MAIN_H
9 L5 u# k- N# ~' t& x- A& s1 o/ P: O$ a
char *GetDirectoryFile(char *filename);
1 Z& b6 A7 Y+ {void __cdecl add_log (const char * fmt, ...);5 u$ a: F/ z- `: a- y) y7 e
#endif
" m* v: E7 |' F; v+ w2 q3 R5 @. e7 x9 _6 Z6 \
Now after you have built your wallhack you will be able 2 find it in :% P  X  ?* _0 J( y
C:\Users\Your Name\Documents\Visual Studio 2008\Projects\Wallhack\debug (something like that)* V* a4 y6 S/ c7 T
7 Q$ ^2 _2 v5 N) I  a1 K
Now I will show you how to make your wallhack undetected:
) F7 X; b2 \1 c1. Download D3d hooks3 A, L" c8 ?( ^$ e0 b- F2 p
2. Open the file that says "create device code made by me.h"
7 o+ L. P$ R6 x9 f9 X3. You will need to make another header file in your project and then put name it create device and paste that code it.3 }1 B$ w( }* L
4. Your wallhack is now undetected.
) Y2 w& F, b: j' ]
. ?2 D* n$ \5 e0 r' nCredits:
( f. d* H# ?' M# b1. ME FOR THE TUTURIAL
0 j& e4 `& u$ c2. THE1FEAR FOR THE VIDEO ON HOW TO COMPILE THE SOURCE CODE! y" \5 v3 N7 `; B
3. FATBOY88 FOR THE SOURCE CODE
' U, u  ~6 i, ^! U7 `7 q0 t4. THE INDIRECTX I JUST FOUND :P2 H2 p9 U( R# T1 Z, H9 }5 j
) s8 p4 i; C" `& M6 S5 z/ S5 j
Attachments:
D3d_hooks: http://www.mediafire.com/?qzz0gwdjvj55 X) x' h* V  F! X2 a
IndirectX: http://www.mediafire.com/?gimzgmeny115 O# K" l8 ~; G9 n; a. i3 q
Microsoft Visual C++ 2008: http://www.mediafire.com/?vmyjjnk1qj5
SEARCH THE LAST ONE UP
; c! @6 U4 S1 \* I__________________
/ I: J% k& L6 Z' @( {0 m# a/ i" _0 o/ f2 y
<---------- WALLHACKED

shane007 · 发表于 2009-5-26 17:13

把对DirectX 相关的函数调用都转发到我们自己的函数上，这就叫代理。
主要用来对付众多的图片字库游戏。同时要结合图像识别技术来运用。
这是我想出来的新技术，一旦研究出来，就可以实现不少图片字库游戏的汉化，这个技术有一定的通用性。
有个帖子，简单的说了一下，以后还会有大量资料放出来的。
https://www.chinaavg.com/read.php?tid=17190

XYZ · 发表于 2009-5-26 11:46

想请教一下，这个代理研究是什么概念？

【代理DLL汉化研究】wallhack制作教学

【代理DLL汉化研究】wallhack制作教学

楼主热贴

社区热点

本帖子中包含更多资源