【代理DLL汉化研究】wallhack制作教学

shane007

原文
( J# [- a+ F# M/ yhttp://www.descipe.net/forum/sol ... -your-wallhack.html

视频教学
http://www.youtube.com/watch?v=6b5XMzT-b_U   

HomeHome User CPUser CP FAQFAQ Members ListMembers List CalendarCalendar SearchSearch
8 @! q5 M% E/ ~+ M0 ^
9 z, ~' q% F# C+ S% A5 \& @/ J Hello shane007,
Our records indicate that you have never posted to our site before! Why not make your first post today by saying hello to our community in our Introductions forum.
+ b3 q, ~/ Z) n% w
3 T, h- {1 }0 AWhy not start with your first post today and become an active part of DEScipe.net now!

6 c9 R, E0 a+ q6 L: Z
* _6 |; D( Y  z7 C  
7 |' Y, u. J8 v4 c* O   DEScipe.net > MMOFPS's > Soldier Front > Soldier Front Cheats  
$ w: C, C" t& L, W. ^ How to make a wallhack and how to hook your wallhack!  
9 Q! G/ v9 z0 j: T& q& N/ M Welcome, shane007.
: P6 {, v& }4 f2 E/ r/ [  DYou last visited: Today at 03:55
4 J- u6 S2 @& Z2 @# hPrivate Messages: Unread 0, Total 0.
' r' }- D/ |1 {" Z) UCredits: 200 [Check]  
" U  D5 T" b- l% x
5 O* g5 v- P* w. JHome User CP FAQ Members List Calendar New Posts Search   Quick Links   Log Out
! y! y, A6 O" K( U& |7 \
5 ?8 q) Y4 j; Y0 ?. H& ]4 X1 m1 u) h

3 p) J% z( x# ^* z; q' O+ bSearch Forums
0 G3 w$ D- ^; T5 J! g2 k, W      
& |) _0 n5 {1 C* }: Z
Show Threads   Show Posts  
9 d0 b+ C! t" h8 n) Q' `Advanced Search
! d, E; s; N: zFind All Thanked Posts

Quick Links
( K. h5 o# c% L/ i& G7 i7 FToday's Posts
9 g+ Y6 H, k2 g" Z& k2 Y6 O% FMark Forums Read

User Control Panel
Edit Signature

& \; q7 C/ r5 S- [( h' F* R3 @8 |0 zEdit Options
Miscellaneous
Private Messages
Subscribed Threads
" f1 p5 N' J, F( k6 k
Who's Online
0 s6 f+ B& U0 B6 z
" m2 M) u* Q* l! H* w1 ?5 a- \Go to Page...
   
; J/ N2 [8 Z" M8 V) t- c0 x4 wHow to make a wallhack and how to hook your wallhack!
; Y% S1 V* e/ x4 |" B6 SThis is a discussion on How to make a wallhack and how to hook your wallhack! within the Soldier Front Cheats forum part of the Soldier Front category; I will be showing you how to make a detected wallhack and then hook it for it to be undetected. ...

8 S4 x. p* O% Z/ P7 N9 j    Poll: Was this helpful?  
: L6 F* b: y  A2 V5 y5 t) hPoll Options
; c$ X6 O$ N0 OWas this helpful?
8 x4 S% \+ }8 h1 m, ZYes, I WILL press the thanks button
2 t: S$ b# x4 R* ~+ zNo, I am a failure
2 |& ^4 F$ f6 ?; u8 P- @, kView Poll Results   

) [% K% j4 V) V. l* }+ ?9 I Page 1 of 3 1 2 3 >   

& R7 p" X3 `) f8 C% S" ?1 x1 x6 I- k+ {3 d View First Unread    LinkBack   Thread Tools   Search this Thread   Rate Thread   Display Modes   


7 e& K2 J% E) [: b  
05-02-2009, 20:49    #1  
7 N8 g: H$ i$ ?2 g/ G3 P6 x% ], ckillax9
Punk

' P* W. A/ ~' r. D% x% O
' y0 t/ v. G1 S5 H# p, T- T1 _

9 U1 [9 T3 M$ n. z5 Q! S9 f' RJoin Date: Jan 2008
Credits: 2,701 [Donate]
& s8 B5 ]0 n4 x, }. Y. zPosts: 103
Thanks: 10
" o& x6 m5 y( E% ^1 wThanked 48 Times in 25 Posts   How to make a wallhack and how to hook your wallhack!

--------------------------------------------------------------------------------
# L. C$ a0 s6 F. p7 `8 O
I will be showing you how to make a detected wallhack and then hook it for it to be undetected.
Possible Undetected Methods:
7 @/ [% q2 K! t1 S8 A8 M0 e1)F5,F6 original this was put into place cuz GG only scanned for wallhack once,until you joined a room.so basically hook a unscanned function then once in game hook d3d.
% @2 i, T. X' k  t2)another way **** it hack GG.
4 e1 Q1 o+ S; |( d3)breakpoint hooking;doesnt change memory... well changes debug registers.
* d  J/ t+ t4 ]% h7 x- E0 j$ O# N, h4)code cave the hook int3->Jmp then in the code cave->Jmp(detour)d3d functions ->jmp back to original flow ;Hook hopin

$ A1 D0 ~/ c0 G/ b0 {Vtable:
it wont work for vista its not a vtable hook =)
+ j4 C# q! F9 o6 S
the reason why my older version worked was cuz it hooked
Createdevice->pointers to the functions

: D- l7 j# Z! e5 M1 C2 Okinda like a class or a struct.
0 C' w+ n) ?* Q5 ~9 h
* y5 {0 l2 r* o9 }- r( _
9 N% f# c4 u- D& _5 U; Vand GG scans createdevice right off the back and the only way u can hook it is a few ways {DETECTED}either when d3d8.dll loaded in....{Undetected}or reversing to internal call inside the game[0x00000] pointer.
9 w9 o. J4 I* Q
( k& z) T$ L0 S, H% D4 _3rd maybe- some games recreate the device when a map loads...like BF1942.
* L$ F+ }4 @$ `; x* K; F
4 v( R1 E) A' j+ @Things needed to do this:
9 b9 \# {% R. x: r9 _5 {" h7 j( b/ z1. Microsoft Visual C++ 2008
2. DirectX_SDK_(Summer 2004)
3. D3d_hooks
! W( Z3 s$ x/ A4. IndirectX
I HAVE ATTACHED ALL OF THESE FILES AT THE BOTTEM

& U5 P( d: G% M/ x1 PNow most of you don't know how to compile a wallhack so watch this video and you will compile with no errors:
0 d4 \, y8 k( t! x7 \
# Y/ n9 Z8 x" w  hYouTube - How to Compile WallHack [Tutorial]  
, j* U" K2 q. L, ?2 l1 D1 s# M

& T! p, ^1 K7 S6 K: d% u
  w* l& n- H* b( F6 b% W6 K3 pDetected Source Code:
5 F+ n5 v  V. A/ P
4 ^5 p; R7 ^  {3 n! u#include <windows.h>
0 }  R1 ]; E( V1 [6 b* ]#include <detours.h>
6 z( G5 ?) p6 Z  x#include <d3d8.h>
#include <d3dx8.h>
#include "log.h"
#include <fstream>
/ `0 G( z* u& e& A3 i* M* ~, P#include <iostream>
. b4 `$ B3 F" ^7 C4 Z#pragma comment(lib, "d3dx8.lib")
7 x; V& [5 ]4 {: ?) i#pragma comment(lib, "d3d8.lib")
using namespace std;
: o* o- D1 y; T* g# I0 Mstatic DWORD dwBeginScene = 0x6D9D9250;
& w3 T, o2 f5 m4 }static DWORD dwEndScene = 0x6d9d93a0;
static DWORD dwDrawIndexedPrimitive = 0x6d9d73a0;
, ]; }- ^" G& g+ {1 I& l& |static DWORD dwSetStreamSource = 0x6d9d6760;
! Z- y/ R8 `* M/ K5 o; r! `! wstatic DWORD dwSetViewport = 0x6d9d5b90 ;
  U( S8 x( n. T9 w# u) Y# ?! w

: y) B$ Y' V9 P: i  z6 b& {" M; @% hint m_Stride;
int texnum;
int nNumVertices;
  o3 y, M! r' |2 [( Kint nPrimitiveCount;
6 a) V+ M# s; ]5 ?  u
LPDIRECT3DTEXTURE8 Red,Yellow,Green,Blue,Purple,Pink,Orange;
# N* U, Z9 }* v- x9 x8 E8 ~bool Color = true;
! ^% s* n5 ~0 Lbool Logger = false;
; H# ~" A$ p/ D, C6 V0 k6 sofstream ofile;
( w6 x# s& _- {# P" c$ D8 O1 _char dlldir[320];
* x+ ^# M8 C+ O5 R0 m  a2 `float ScreenCenterX = 0.0f;
8 p* D8 N. |/ @1 efloat ScreenCenterY = 0.0f;
bool xhair = false;
bool WallHack = false;
+ n. t/ b' O1 M$ Fbool WallHack2 = false;
: O9 c% s/ b7 ?4 r6 r; rHANDLE hand1 =NULL;
HANDLE hand2 =NULL;
% N% Q0 m$ B) d6 _3 t2 `
* l* @, E2 C. ~& q9 B& vDWORD bytes;

//Logger
int texarray[1000];
int arraycounter;
int delarray[500];
- L* l9 r; \* i$ Fint dcount;
  D6 S1 m7 h* p7 e9 [. Lunsigned int arrc;
; x8 d9 p: W# n6 jint i=0;
& F" P0 u2 B0 B3 e( ?( X) f

9 W  G% ^! U1 c5 J6 ?, cD3DCOLOR redt = D3DCOLOR_XRGB( 255, 0, 0 );
% Y- Z4 B$ u: J% `+ t  I$ P
4 t& N7 T1 W; r: h
% e3 h9 {* H4 P. e+ O0 Kchar *GetDirectoryFile(char *filename)
{
) j" S' y* ^) H# @2 `static char path[320];
strcpy(path, dlldir);
' V1 h- `) c" G. x" y& G# j2 }strcat(path, filename);
: p* ~# X5 A7 @+ s0 A% jreturn path;
1 E+ Q: f3 ~1 {! j! F+ i0 I  W% D}
. }/ m  }$ J7 y9 z' g
" \! e' C7 ]6 z5 T  Lvoid __cdecl add_log (const char *fmt, ...)
{
if(ofile != NULL)
{
if(!fmt) { return; }

va_list va_alist;
$ o# ?$ g& L/ l/ r' e+ gchar logbuf[256] = {0};
5 C. Q6 p7 B5 Z: n6 F0 n
va_start (va_alist, fmt);
_vsnprintf (logbuf+strlen(logbuf), sizeof(logbuf) - strlen(logbuf), fmt, va_alist);
; T- i( ?2 D+ E3 {8 zva_end (va_alist);
; e0 S7 |  M8 s! g; J
ofile << logbuf << endl;
) S6 d( D9 ]4 M* |}
}
+ R) a& N5 T8 d6 ~# I4 i
* b; v+ A$ J$ B1 ?HRESULT GenerateTexture(IDirect3DDevice8 *pD3Ddev, IDirect3DTexture8 **ppD3Dtex, DWORD colour32)
{
- w0 a' v" x1 S8 G- E7 T- bif( FAILED(pD3Ddev->CreateTexture(8, 8, 1, 0, D3DFMT_A4R4G4B4, D3DPOOL_MANAGED, ppD3Dtex)) )
* H( p( a" }5 s- u6 treturn E_FAIL;

9 X/ N% v* v: ]0 \/ `5 a6 M- {8 xWORD colour16 = ((WORD)((colour32>>28)&0xF)<<12)
# L; X, H3 y! _9 v( C: e; K. r& x|(WORD)(((colour32>>20)&0xF)<<8)
|(WORD)(((colour32>>12)&0xF)<<4)
|(WORD)(((colour32>>4)&0xF)<<0);
, `1 P+ p( L, z% S8 K, H% V
5 i7 A6 G! c! w+ ED3DLOCKED_RECT d3dlr;
; t4 k+ o" c& f% b" j(*ppD3Dtex)->LockRect(0, &d3dlr, 0, 0);
WORD *pDst16 = (WORD*)d3dlr.pBits;
- G7 @9 _4 x5 w* Y8 M
+ e; v2 b& m* e& L7 kfor(int xy=0; xy < 8*8; xy++)
+ D2 m1 o+ T4 C3 @) Y9 a*pDst16++ = colour16;

(*ppD3Dtex)->UnlockRect(0);

  z) x1 g3 ?7 D; F7 u0 xreturn S_OK;
0 l+ V' X9 G& l4 I0 f}

/ B5 _+ Z$ ]/ H/ T5 x8 N& y0 j
: ?* S& W# b9 Y" }4 {+ V/ F//=================================EndScene_Start=== ================================================== ============================//
4 {3 x4 D" v0 P, Vtypedef HRESULT ( WINAPI* oEndScene ) ( LPDIRECT3DDEVICE8 pDevice );
  {# x! n8 i: M% E  i' C3 b$ j: boEndScene pEndScene;
8 G  o* S4 K) ^2 `( E5 N7 N
6 I1 E# j4 E) Z. C, I9 R% {/ ~1 WHRESULT WINAPI myEndScene(LPDIRECT3DDEVICE8 pDevice)
7 N2 C" e' X% D5 l{
if(Color)
{
+ f) `6 U% V; p$ G/ @. g) AGenerateTexture(pDevice, &Red, D3DCOLOR_ARGB (255 , 255 , 0 , 0 ));
GenerateTexture(pDevice, &Yellow, D3DCOLOR_ARGB (255 , 255 , 255 , 0 ));
GenerateTexture(pDevice, &Green, D3DCOLOR_ARGB (255 , 0 , 255 , 0 ));
' W* n- c( O4 r+ u! s2 f. BGenerateTexture(pDevice, &Blue, D3DCOLOR_ARGB (255 , 0 , 0 , 255 ));
# I+ u$ d; s  H: S: H: q8 E+ GGenerateTexture(pDevice, &Purple, D3DCOLOR_ARGB (255 , 102 , 0 , 153 ));
: w  x% o; I/ C; Y+ u7 [& @GenerateTexture(pDevice, &Pink, D3DCOLOR_ARGB (255 , 255 , 20 , 147 ));
GenerateTexture(pDevice, &Orange, D3DCOLOR_ARGB (255 , 255 , 165 , 0 ));
9 P. l8 `+ {9 [1 w  c  T3 iColor=false;
. n: X, [! w# ^}
5 \* T: S( u7 [' ^
if(xhair)
9 [- K' v9 ^" V0 Y; N{
D3DRECT rec2 = {ScreenCenterX-20, ScreenCenterY, ScreenCenterX+ 20, ScreenCenterY+2};
) R$ Y" I9 z0 n! Z3 eD3DRECT rec3 = {ScreenCenterX, ScreenCenterY-20, ScreenCenterX+ 2,ScreenCenterY+20};
pDevice->Clear(1, &rec2, D3DCLEAR_TARGET,redt, 0, 0);
' Z& w8 s& y/ o+ Y5 f0 NpDevice->Clear(1, &rec3, D3DCLEAR_TARGET,redt, 0, 0);
6 Z! d6 |( e8 _2 b}
1 M- m6 s- F; I6 R1 n
//=============================================UnHoo K_Start=========================================== ========//
3 k  T# j# c' s3 H
% k, R2 l$ u8 _: R' q2 L7 \5 l9 Hif((GetAsyncKeyState(VK_F5)&1))
{
, \! ^* r& ?9 q, [, T0 Gint end =NULL;
int dip =NULL;
int svp =NULL;
: g1 `+ Z8 M" X" I, Wint sss =NULL;
* s! S8 r4 Y( o( O% v/ I( R
, C1 e3 @5 p5 S: j
# g, I# p& s4 h! ^/ h# D! |BYTE Unhook[5] = {0x8B,0xFF,0x55,0x8B,0xEC};//Original Function Bytes.
, j8 d$ ?$ a$ H; W6 ghand1 = GetCurrentProcess();
5 H3 T$ e. ]3 VDWORD dwmodualBase=(DWORD)GetModuleHandle("d3d8.dll");
" q0 B5 o0 m1 `9 E7 Cend = 0x6d9d93a0;
* R/ O1 D. L, a& Hdip = 0x6d9d73a0;
svp = 0x6d9d5b90;
. |( b$ x$ D4 b$ k9 msss = 0x6d9d6760;
3 a3 }* W6 i7 d' ]
( Q* ^4 E. i) q% u6 M( Y5 s# LWriteProcessMemory(hand1, (void*) end, Unhook, 5, &bytes);
4 ?- s6 ~  i' H$ [* A2 M5 H" NWriteProcessMemory(hand1, (void*) dip, Unhook, 5, &bytes);
WriteProcessMemory(hand1, (void*) svp ,Unhook, 5, &bytes);
# q+ m1 t& v$ G( q6 {* LWriteProcessMemory(hand1, (void*) sss,Unhook, 5, &bytes);
2 E: v0 p$ z; Z' y}
. X8 d8 q6 W, q7 ]//=========================================UnHook_En d================================================= ========//

if((GetAsyncKeyState(VK_F1)&1)){xhair=!xhair;}
if((GetAsyncKeyState(VK_F2)&1)){WallHack=!WallHack ;}

2 r4 j" T6 ~/ O, E% ?' L; J& a" ]return pEndScene(pDevice);
}
  A  z# |! r7 z7 }4 X% V6 {6 S//====================================EndScene_End== ================================================== ========================//
/ }7 j" G+ n, w& P$ E& K6 s

" O4 @7 b) G: N  F3 J& C  c

' J# g; V' M0 v//=================================Dip_Start======== ================================================== ==================================//
6 l1 N( j+ q+ ~* [typedef HRESULT ( WINAPI* oDrawIndexedPrimitive ) ( LPDIRECT3DDEVICE8 pDevice, D3DPRIMITIVETYPE pType, UINT nMinIndex, UINT nNumVertices, UINT nStartIndex, UINT nPrimitiveCount );
oDrawIndexedPrimitive pDrawIndexedPrimitive;

  D; M1 }* d; L/ ]( z! JHRESULT WINAPI myDrawIndexedPrimitive(LPDIRECT3DDEVICE8 pDevice, D3DPRIMITIVETYPE pType, UINT nMinIndex, UINT nNumVertices, UINT nStartIndex, UINT nPrimitiveCount)
{
1 y4 q- t: D# o2 A
. W- U5 t' A5 ^* F3 v* a6 Y& R

: ~1 ^6 i8 r8 M
if(WallHack)
{
# j9 X( r* q* Ftexnum = (nNumVertices*100000)+nPrimitiveCount;
: g% B5 r" N/ r- d1 V, N/ [9 Pif(m_Stride==40 &&
# |2 j& M$ i  O# |; `
: j! P( ]- B1 I(texnum==7500121 )||(texnum==8500105 )||(texnum==12400168)||(texnum==37000650)||
+ F1 r; Y( s( E(texnum==18000274)||(texnum==8800105 )||(texnum==36900650)||(texnum==19600314)||
(texnum==21800306)||(texnum==7500121 )||(texnum==8500105 )||(texnum==12400168)||
(texnum==21800306)||(texnum==36900650)||(texnum==7 500121 )||(texnum==37000650)||
(texnum==18000274)||(texnum==7500121 )||(texnum==8500105 )||(texnum==38000658)||
2 G) K8 H' \  n(texnum==22100268)||(texnum==62400752)||(texnum==2 7900456)||(texnum==45700654)||
(texnum==4800040 )||(texnum==83600752)||(texnum==33400477)||(texnum ==38100666)||
(texnum==2800036 )||(texnum==62400752)||(texnum==29700492)||(texnum ==84900778)||
(texnum==27500442)||(texnum==52100658)||(texnum==6 2400752)||(texnum==33600552)||
4 ^9 S/ E9 |3 R(texnum==44100646)||(texnum==18000274)||(texnum==3 7200508)||(texnum==45700654)||
(texnum==37200508)||(texnum==52100658)||(texnum==5 2100658) &&
% X- s. m" D% u- E0 ^
4 Z$ E4 `3 ]: o/ J+ @

8 y4 l9 ^4 b' `1 G(nNumVertices == 100 && nPrimitiveCount == 121) || //Foot
$ j, o: F; x: C. R7 h(nNumVertices == 105 && nPrimitiveCount == 168) || //Right Arm
& M  \3 H8 O9 f: ]. }(nNumVertices == 132 && nPrimitiveCount == 180) || //Hand
(nNumVertices == 159 && nPrimitiveCount == 200) || //Left Arm
(nNumVertices == 338 && nPrimitiveCount == 534) || //Underbody thanks japennese guy =)
//(nNumVertices == 448 && nPrimitiveCount == 776) || //Head
2 m, T9 h0 K0 g(nNumVertices == 804 && nPrimitiveCount == 1016) || //Body //SRG Option item
; ^! V! ^, g+ S3 q# p1 E$ `(nNumVertices == 109 && nPrimitiveCount == 110) || //Bulletproof Vest
& l  [5 H- V' o9 P1 ^: {0 y) t9 ^(nNumVertices == 336 && nPrimitiveCount == 532)) //Battle Pants

2 W! ?( u" B& b7 ^{
* w$ N7 q6 x5 E% NpDevice->SetRenderState(D3DRS_ZENABLE, D3DZB_FALSE);
4 \$ \0 l' X; G/ I3 OpDevice->SetRenderState(D3DRS_ZFUNC,D3DCMP_NEVER);
3 L/ S) ^  i+ ZpDevice->SetTexture(0,Orange);
//pDevice->SetRenderState(D3DRS_FILLMODE, D3DFILL_WIREFRAME );
/ D6 |+ ~1 x9 ^1 Z& z+ a. o
% s. X" ?7 ?* v2 j8 [$ EpDrawIndexedPrimitive(pDevice, pType, nMinIndex, nNumVertices, nStartIndex, nPrimitiveCount);

//pDevice->SetRenderState(D3DRS_FILLMODE, D3DFILL_SOLID );
" l* [+ D4 x( O( X2 t# _2 hpDevice->SetRenderState(D3DRS_ZENABLE, D3DZB_TRUE);
  i# |, s$ ]7 p; m1 A* XpDevice->SetRenderState(D3DRS_ZFUNC,D3DCMP_LESSEQUAL);
/ M/ h7 X" U! o" @  B7 o$ MpDevice->SetTexture(0,Pink);
}
5 s  W: t$ o9 i$ [
3 R% k9 T; x4 ?5 s  H5 U& Gif(m_Stride==40 && texnum== 21300174)
{
pDevice->SetRenderState(D3DRS_ZENABLE, D3DZB_FALSE);
pDevice->SetRenderState(D3DRS_ZFUNC,D3DCMP_NEVER);
pDevice->SetTexture(0,Green);//GreenNade
pDrawIndexedPrimitive(pDevice, pType, nMinIndex, nNumVertices, nStartIndex, nPrimitiveCount);
pDevice->SetRenderState(D3DRS_ZENABLE, D3DZB_TRUE);
+ S3 w- {3 N7 c4 \& npDevice->SetRenderState(D3DRS_ZFUNC,D3DCMP_LESSEQUAL);
9 }: O% D, R, R$ E- JpDevice->SetTexture(0,Purple);
: M. U, k8 A* N# ^8 q; y}

3 i" l% }& `9 q; x( A
# c: K, [9 z8 q% S0 T0 fif(nNumVertices == 158 && nPrimitiveCount == 131)
{
2 s5 e- r3 v) s" `5 spDevice->SetRenderState(D3DRS_ZENABLE, D3DZB_FALSE);
pDevice->SetRenderState(D3DRS_ZFUNC,D3DCMP_NEVER);
; c4 i/ b/ `4 F! T$ e, m- N8 npDevice->SetTexture(0,Red);//GreenNade
; x$ f3 m" v. D! p/ y8 ]pDrawIndexedPrimitive(pDevice, pType, nMinIndex, nNumVertices, nStartIndex, nPrimitiveCount);
, i- i- G4 B6 N* EpDevice->SetRenderState(D3DRS_ZENABLE, D3DZB_TRUE);
pDevice->SetRenderState(D3DRS_ZFUNC,D3DCMP_LESSEQUAL);
pDevice->SetTexture(0,Yellow);
6 K5 ?5 T; r0 n7 H# y* y}

if (nNumVertices == 171 && nPrimitiveCount == 143)
{

6 B4 n/ W" F# k0 p1 lpDevice->SetRenderState(D3DRS_ZENABLE, D3DZB_FALSE);
pDevice->SetRenderState(D3DRS_ZFUNC,D3DCMP_NEVER);
: C  A% S( a5 [$ r9 \) P7 lpDevice->SetTexture(0,Red);//GreenNade
9 I  J9 u! \$ ]pDrawIndexedPrimitive(pDevice, pType, nMinIndex, nNumVertices, nStartIndex, nPrimitiveCount);
% f* p* j' Q, IpDevice->SetRenderState(D3DRS_ZENABLE, D3DZB_TRUE);
7 l3 k% _( f4 Y4 x+ y0 xpDevice->SetRenderState(D3DRS_ZFUNC,D3DCMP_LESSEQUAL);
pDevice->SetTexture(0,Yellow);
7 b- W! Z2 e' }3 A}


0 ~+ m9 d: [; R, k1 r# T. j1 ~
if(m_Stride==40 &&//face,mask etc...
(texnum==36700612) ||
4 [6 ?8 T  l/ D0 Z5 J(texnum==9600172 ) ||
$ f5 o6 ?7 D2 A8 ]0 q(texnum==14200236) ||
- ^; k0 O& f, g+ H(texnum==37800552) ||
(texnum==28100486) ||
. F" q9 `/ }- x& K* T(texnum==35500568) ||
; Z3 j! Y* m. R% H$ E' D* ]) ]8 s9 P7 Y(texnum==2200024 ) ||
(texnum==16200243) ||
- e8 z. ~/ T7 ]4 M* z(texnum==31900466) ||
(texnum==19300342) ||
- Y- B  t$ A  a(texnum==36200604) ||
, U; B" m( G: w5 u/ y8 S2 l0 D(texnum==21300290) ||
' S3 y$ ~/ E" w1 m  ~3 Z* X(texnum==35700558) ||
(texnum==22100396) ||
(texnum==36100604) ||
, ?- o% j/ G  a5 B(texnum==27100464) ||
: ], W5 s8 M6 G/ x9 `, Q4 c(texnum==11400180) ||
(texnum==34900580) ||
(texnum==13200212) ||
(texnum==34700538) ||
# ^/ T0 Y9 U: s9 H+ Q(texnum==19500352)&&
(nNumVertices == 448 && nPrimitiveCount == 776))

{
pDevice->SetTexture(0,Blue);
}

! @% ~4 L( g6 e$ l
+ k) r& t% T5 v/ _- w* A! Y{
pDevice->SetRenderState(D3DRS_FOGENABLE,false);
}
- U/ z3 j- i! ]
0 O3 q2 ]1 y4 f2 r6 U5 P' Q) K. u) k) b& E/*Logger
: L+ N. E$ R3 P$ Aif(m_Stride==40){
4 {7 Q" Z8 i5 `5 O# j& Z

while(GetAsyncKeyState(VK_NUMPAD1)&1) arrc--; //Used as manual index for adding textures to delarray
while(GetAsyncKeyState(VK_NUMPAD3)&1) arrc++;
9 ~, B" i' X' J) hbool alrdy=false;
bool inarr=false;
+ t8 I/ g. h& c0 G1 o. A
: ~/ t2 y. i. @if(texarray[arrc]==texnum)
if(delarray==texarray[arrc])
alrdy=true;
; @5 P  d$ g8 X2 E  A1 e6 b9 Ffor(int i=0;i<dcount;i++) //sees if said texture is in delarray
if(delarray==texnum)
inarr=true;
9 N. p* j' ~' ]7 Pif(texarray[arrc]==texnum || inarr){ //If true, color model differently
+ a: L, Y, E5 p9 N; U0 n) q2 J' b  K  tLPDIRECT3DTEXTURE8 texCol;
DWORD dwOldZEnable = D3DZB_TRUE;
( L$ q6 |9 z9 j. C$ `9 t8 NpDevice->SetTexture(0, NULL);
pDevice->GetRenderState(D3DRS_ZENABLE, &dwOldZEnable);
pDevice->SetRenderState(D3DRS_ZENABLE, D3DZB_FALSE);
if(alrdy) //Different colors for selected models that are already being logged (For removal from array)
texCol=Blue;
else
. v  l5 `. T! O4 j4 I$ Y+ atexCol=Red;
% g$ Y( k$ s4 }) q0 G3 WpDevice->SetTexture(0, texCol);
pDrawIndexedPrimitive(pDevice, pType, nMinIndex, nNumVertices, nStartIndex, nPrimitiveCount);
pDevice->SetRenderState(D3DRS_ZENABLE, dwOldZEnable);

8 n' r2 F6 @+ [}
+ u, j- |. x. Q! C}
  z0 H9 z7 |/ I& z# hif(GetAsyncKeyState(VK_F5)&1) add_log("Logged tesx: %i", texarray[arrc]); //F5 will print currently selected texnum to logfile
if(GetAsyncKeyState(VK_F6)&1) { //For adding/removing textures to array
" d, U) R. g3 vbool inarr=true;
for(int k=0;k<dcount;k++){
2 ?( K  a- M  X0 b, g4 {& t& }if(delarray[k]==texarray[arrc])
4 W2 G2 X8 ?; _" y1 w( w6 A{
inarr=false;//Found selected texture to already exist
8 `6 {3 m3 ]7 |& R& ^" U/ K; e( Sdelarray[k]=0;//Delete texture
break;//Cancel loop
}
}
9 ]2 ^4 I* v  m0 W  m4 cif(inarr==true)
9 c( c* U3 D9 e# d7 V( Y{
delarray[dcount]=texarray[arrc];//Add texture
dcount++;
}
0 g- S- f# _, g9 y+ e) _}
if(GetAsyncKeyState(VK_F7)&1){
8 x# k' c) ]( L' ]: e! u* \int total=1;
5 U& \; t6 O4 Q4 oadd_log("omfg values?!? {");
for(int x=0;x<dcount;x++)//Loops through all recorded variables and prints them in a nice array based format
6 x$ H" n3 ^& O1 N( a/ V. p3 oif(delarray[x]){
add_log("%i,",delarray[x]); //add_log2==add_log but without endl
" Z/ I- j7 K9 Q: m+ e$ `total++;
}
, X! B/ N0 @5 w' Q+ ?+ oadd_log("}; %i variables in array",total);
1 i1 [, D; g0 L3 V8 w}
bool found = false; //THIS PART CREDITS TO KRYPTEC
for(int y=0; y<arraycounter; y++) //THIS IS HIS LOGGING FUNCTION
{
0 R+ f6 O1 E, \, z: B& L, Mif(texnum==texarray[y])found=true; //I JUST CREATED AN INTERFACE FOR IT
3 |; d, p& P2 l5 o# ]# u}
& G. D4 }7 s$ hif(!found && arraycounter < 1000)
{
texarray[arraycounter]=texnum;
arraycounter++;
}*/
1 a8 x  r$ J, J8 b+ I7 S- E) F
) B/ |0 I) u+ ~3 ]
}
7 v/ G: L  R3 b2 w! B8 f" X" ]return pDrawIndexedPrimitive(pDevice, pType, nMinIndex, nNumVertices, nStartIndex, nPrimitiveCount);
}
' F/ k7 n& w4 m+ V( O//=====================================Dip_End====== ================================================== ===================//
" H3 Y' B- Z9 R9 a8 P2 `
6 b6 @1 N; @" m5 m% Z
//=====================================Sss_Start==== ================================================== ====================//
typedef HRESULT ( WINAPI* oSetStreamSource ) ( LPDIRECT3DDEVICE8 pDevice, UINT nStreamNumber, LPDIRECT3DVERTEXBUFFER8 pStreamData, UINT nStride );
6 Z3 N1 V2 U4 y9 t9 L$ e; xoSetStreamSource pSetStreamSource;

2 N* ?& ^  J6 V4 U$ N8 s0 H: J1 \HRESULT WINAPI mySetStreamSource(LPDIRECT3DDEVICE8 pDevice, UINT nStreamNumber, LPDIRECT3DVERTEXBUFFER8 pStreamData, UINT nStride)
( `# ?; F( Z: R3 U{
if(nStreamNumber==0)
m_Stride = nStride;

% \+ _" m  T7 Jreturn pSetStreamSource(pDevice, nStreamNumber, pStreamData, nStride);
' v# t/ I& P8 N, k}
1 p( N1 w. x8 S5 o# k$ d+ T* j//====================================Sss_End======= ================================================== ===================//

//====================================Svp_Start===== ================================================== ===================//
9 ?8 f! g' \* m( _6 ftypedef HRESULT (WINAPI* oSetViewport)(LPDIRECT3DDEVICE8 pDevice,CONST D3DVIEWPORT8* pViewport);
oSetViewport pSetViewport;
* F5 ~1 o3 V7 [" V! l6 g
4 A0 k; e$ a! z& hHRESULT WINAPI mySetViewport(LPDIRECT3DDEVICE8 pDevice,CONST D3DVIEWPORT8* pViewport)
* \! R- Z( b& K  F{
+ _3 O! w% ?, K5 O4 j$ T2 dScreenCenterX = ( float )pViewport->Width / 2;
& v0 S" d2 ^7 [5 kScreenCenterY = ( float )pViewport->Height / 2;
9 ~, Y) Q) b5 n4 V* _
8 s9 G5 f2 K- Creturn pSetViewport(pDevice,pViewport);
}
//===================================Svp_End======== ================================================== ===================//
* z: g$ ]' y  f( l' ?3 H
typedef HRESULT ( WINAPI* oBeginScene ) ( LPDIRECT3DDEVICE8 pDevice );
oBeginScene pBeginScene;

HRESULT WINAPI myBeginScene(LPDIRECT3DDEVICE8 pDevice)
2 u( K) A3 d' ?2 m# Q- t" [{
, l: W# N0 G. R. z2 m5 p8 ?( W" L$ Wif((GetAsyncKeyState(VK_F6)&1))
{
pEndScene = (oEndScene)DetourFunction((PBYTE)dwEndScene, (PBYTE)myEndScene);
pDrawIndexedPrimitive = (oDrawIndexedPrimitive)DetourFunction((PBYTE)dwDra wIndexedPrimitive, (PBYTE)myDrawIndexedPrimitive);
/ }& M8 l; D6 L8 K/ y4 FpSetStreamSource = (oSetStreamSource)DetourFunction((PBYTE)dwSetStrea mSource, (PBYTE)mySetStreamSource);
' I; S9 u8 w. [pSetViewport=(oSetViewport)DetourFunction((PBYTE)d wSetViewport,(PBYTE)mySetViewport);
3 T/ Y# L: r+ n0 G+ K2 |4 b6 Z}
3 E- L( O4 w2 Q
' ]7 i. Y; y* i" X# o2 E4 ireturn pBeginScene(pDevice);
}
* Q7 ]/ N9 ]$ e4 J: s

% H# q$ T: G: @& D1 m$ z- gBOOL WINAPI DllMain ( HMODULE hModule, DWORD dwReason, LPVOID lpReserved )
/ N0 v* g" L$ v& X# N{
DisableThreadLibraryCalls(hModule);

if ( dwReason == DLL_PROCESS_ATTACH )
{
8 Z4 q' E' k6 L9 ]  y; e
//=========Log==========================//
GetModuleFileName(hModule, dlldir, 512);
# y& n, ~  r) O' Rfor(int i = strlen(dlldir); i > 0; i--) { if(dlldir == '\\') { dlldir[i+1] = 0; break; } }
; @2 `" f( J; F; g! bofile.open(GetDirectoryFile("log.txt"), ios::app);
//=========Log=========================//

. u% P* T6 S9 T0 TpBeginScene = (oBeginScene)DetourFunction((PBYTE)dwBeginScene, (PBYTE)myBeginScene);
6 o6 P! O7 j, _' B0 L; o9 XpEndScene = (oEndScene)DetourFunction((PBYTE)dwEndScene, (PBYTE)myEndScene);
pDrawIndexedPrimitive = (oDrawIndexedPrimitive)DetourFunction((PBYTE)dwDra wIndexedPrimitive, (PBYTE)myDrawIndexedPrimitive);
pSetStreamSource = (oSetStreamSource)DetourFunction((PBYTE)dwSetStrea mSource, (PBYTE)mySetStreamSource);
pSetViewport=(oSetViewport)DetourFunction((PBYTE)d wSetViewport,(PBYTE)mySetViewport);
& C9 F3 H. r9 N" W9 N
}
0 ^0 J( w  x7 Xreturn TRUE;
6 Z" g" I( d4 D7 H- l}


+ i( a. q" C6 L$ e7 j9 y6 ULog.h (The header File):
" p8 L  r1 |5 V: I. r& n% w
: E6 n0 G/ P4 u& e: j& k#define WIN32_LEAN_AND_MEAN

  U$ O: F' l- [! S- _4 ]#ifndef _MAIN_H
#define _MAIN_H

% {% E! e, j0 |# {7 L  W, g7 ychar *GetDirectoryFile(char *filename);
void __cdecl add_log (const char * fmt, ...);
#endif

6 t: Q: E9 A" y3 ], {Now after you have built your wallhack you will be able 2 find it in :
C:\Users\Your Name\Documents\Visual Studio 2008\Projects\Wallhack\debug (something like that)
# Z) u6 i% M# v* W9 q# v
Now I will show you how to make your wallhack undetected:
  w" L/ j% x3 K1. Download D3d hooks
2. Open the file that says "create device code made by me.h"
3. You will need to make another header file in your project and then put name it create device and paste that code it.
4. Your wallhack is now undetected.
" Y3 e# V& n9 K/ M+ D- p: k
Credits:
1. ME FOR THE TUTURIAL
) P3 h- ?# a0 b& b2. THE1FEAR FOR THE VIDEO ON HOW TO COMPILE THE SOURCE CODE
/ z, p3 Z) @: S% p3 D# i5 c6 k3. FATBOY88 FOR THE SOURCE CODE
, d; m# r5 V; Z# d2 T4. THE INDIRECTX I JUST FOUND :P

Attachments:
D3d_hooks: http://www.mediafire.com/?qzz0gwdjvj5
IndirectX: http://www.mediafire.com/?gimzgmeny11
) g  e0 Z2 Z' T6 F7 E4 UMicrosoft Visual C++ 2008: http://www.mediafire.com/?vmyjjnk1qj5
) o" E4 ?! n5 n2 z. V% SSEARCH THE LAST ONE UP
# w. D3 B( l) z) b: m: u* ~__________________

<---------- WALLHACKED

XYZ

想请教一下，这个代理研究是什么概念？

shane007

把对DirectX 相关的函数调用都转发到我们自己的函数上，这就叫代理。
主要用来对付众多的图片字库游戏。同时要结合图像识别技术来运用。
这是我想出来的新技术，一旦研究出来，就可以实现不少图片字库游戏的汉化，这个技术有一定的通用性。
有个帖子，简单的说了一下，以后还会有大量资料放出来的。
https://www.chinaavg.com/read.php?tid=17190