Combat Arms Hook Engine.exe DrawIndexPrimitive,Present,Endscene,Reset,

On lunes, 22 de noviembre de 2010 0 comentarios

Combat Arms Hook Engine.exe DrawIndexPrimitive,Present,Endscene,Reset,

Hey people i have found it on some site of Tooling
thanks to King7
sorry if you think it's spam but i wont be leccher sorry so if you think is spam remove REALLY SORRY *.*
real post it -> contact me if you want real Post position

Combat Arms EU - Undetect Hook


Engine.EXE - direct3D9 hook

Credits To King7


Code:
// That is how engine.exe call D3D9 function
EndScene :

00573552    51              push    ecx
00573553    8B55 E0         mov     edx, dword ptr [ebp-20]
00573556    8B02            mov     eax, dword ptr [edx]
00573558    8B08            mov     ecx, dword ptr [eax]
0057355A    8B91 A8000000   mov     edx, dword ptr [ecx+A8]
00573560    FFD2            call    edx

DIP :

006A2FA8    8B02            mov     eax, dword ptr [edx]
006A2FAA    8B08            mov     ecx, dword ptr [eax]
006A2FAC    8B91 48010000   mov     edx, dword ptr [ecx+148]
006A2FB2    FFD2            call    edx

RESET :

00570E5E    8B08            mov     ecx, dword ptr [eax]
00570E60    8B51 40         mov     edx, dword ptr [ecx+40]
00570E63    FFD2            call    edx


PRESENT :

0065B326    8B08            mov     ecx, dword ptr [eax]
0065B328    8B51 44         mov     edx, dword ptr [ecx+44]
0065B32B    FFD2            call    edx 
How i can use it ?
little example here



Code:

Combat Arms Device :
#define ADDR_DEVICE 0x909EF8

DWORD PresentHook = 0x65B326;
DWORD p_Preset  = PresentHook + 0x2;

__declspec( naked ) void HkPresent( )
{
    _asm
    {
        MOV ECX, DWORD PTR DS:[EAX]
        MOV EDX, DWORD PTR DS:[ECX+0x44]    // 0x44 = DECI 68;   68 / 4 = 17; 17 = Present VTable
        PUSHAD                                
    }



    _asm
    {
        POPAD                                
        JMP[ p_Preset ]                // Return Back To MOV EDX, DWORD PTR DS:[ECX+0x44]
    }
}
Have been found addy and making Function
Every Credit goes to King7

0 comentarios:

Publicar un comentario