Present engine Interface hook

['Device 1.329]

[CENTER][COLOR=#000000][SIZE=4]Bem, o @luizimloko postou esse método de hook para EndScene agora estou postando para present[/SIZE][/COLOR] [/CENTER] [CODE] #define DeviceGame 0x7E1940 #define PresentInterface 0x625057 DWORD retPresentInterface = (PresentInterface + 0x7); __declspec(naked) HRESULT WINAPI PresentInterfaceMidfunction() { static LPDIRECT3DDEVICE9 pDevice; __asm { MOV EAX, DWORD PTR FS : [0] PUSH EAX PUSHAD } pDevice = **(LPDIRECT3DDEVICE9 **)DeviceGame; StartFont(pDevice); if (Font) { WriteText(pDevice, 50, 60, Vermelho, "Hook Present Interface Engine"); WriteText(pDevice, 50, 75, Vermelho, "Créditos: Code_NGM, luizimloko, Shad0w"); } __asm { POPAD JMP[retPresentInterface] } } DWORD WINAPI StartRoutine(LPVOID) { while (TRUE) { if (memcmp((VOID *)PresentInterface, (VOID *)(PBYTE)"\x64\xA1\x00\x00\x00\x00", 6) == 0) { Sleep(100); MakeJMP((PBYTE)PresentInterface, (DWORD)PresentInterfaceMidfunction, 7); } Sleep(50); } return 0; }[/CODE] [CODE]00625050 . 6A FF PUSH -1 00625052 . 68 38AD6C00 PUSH Engine.006CAD38 00625057 . 64:A1 00000000 MOV EAX,DWORD PTR FS:[0] Present Interface 0062505D . 50 PUSH EAX 0062505E . 51 PUSH ECX 0062505F . A1 34787500 MOV EAX,DWORD PTR DS:[757834] 00625064 . 33C4 XOR EAX,ESP 00625066 . 50 PUSH EAX 00625067 . 8D4424 08 LEA EAX,DWORD PTR SS:[ESP+8] 0062506B . 64:A3 00000000 MOV DWORD PTR FS:[0],EAX 00625071 . B9 C41A7E00 MOV ECX,Engine.007E1AC4 00625076 . C74424 04 C41A>MOV DWORD PTR SS:[ESP+4],Engine.007E1AC4 0062507E . E8 8D00EAFF CALL Engine.004C5110 00625083 . A1 40197E00 MOV EAX,DWORD PTR DS:[7E1940] <- Device Game 00625088 . C74424 10 0000>MOV DWORD PTR SS:[ESP+10],0 00625090 . 85C0 TEST EAX,EAX 00625092 . 74 5F JE SHORT Engine.006250F3 00625094 . F64424 18 04 TEST BYTE PTR SS:[ESP+18],4 00625099 . 74 07 JE SHORT Engine.006250A2 0062509B . E8 504DFFFF CALL Engine.00619DF0 006250A0 . EB 12 JMP SHORT Engine.006250B4 006250A2 > 8B00 MOV EAX,DWORD PTR DS:[EAX] 006250A4 . 8B08 MOV ECX,DWORD PTR DS:[EAX] 006250A6 . 8B51 44 MOV EDX,DWORD PTR DS:[ECX+44] Present Engine 006250A9 . 6A 00 PUSH 0 006250AB . 6A 00 PUSH 0 006250AD . 6A 00 PUSH 0 006250AF . 6A 00 PUSH 0 [/CODE]

[luizimloko 66]

Lembro-me de usar esse método kkkkk, foi no crossfire inclusive, na época o x-trap estava escaneando em cima do Present:

 

É necessário se cadastrar para acessar o conteúdo.

• Entre
• ou
• Cadastre-se

 

ai eu tive que hookar mais em cima, mas hoje isso não funciona mais lá.

[SystemHackS 17]

bem legal irá ajuda a muitos