Hooking - suggested options besides EndScene?

[flo8464]

You're hooking the dll? Not the detour to the external lib w/in wow?

Interesting idea

Thats what everyone would do?
Especially because you can simply use GetModuleHandle() and GetProcAddress() to retrieve the address.

[BoogieManTM]

Especially because you can simply use GetModuleHandle() and GetProcAddress() to retrieve the address.

You can't 'simply' use windows api routines in Mac OSX

[Tanaris4]

Hoping there is a similar function in the mach headers, I haven't looked into it @ all yet. But I imagine my inject app (obviously not created by me) will give me some good pointers.

Then I'm going to work on understanding what warden is actually doing Or create a "monitor" of sorts

[wraithZX]

dlopen/dlsym/dlclose.

[Robske]

Search for functions that reference the string 'AreaTriggerCheck', one of those (0x005831B0 on the build 3.3.3 11723) is called several times per second, even when not ingame.

Always call the original function or you'll find it very difficult to enter portals (hint)

[eLaps]

Why wouldnt you use the LD_PRELOAD method?

[Tanaris4]

LD_PRELOAD is used in injection yes? I can inject fine, I just struggled w/detouring the function (I can do it, just need to invest more time in it)

[themind]

I've detoured glFinish and it worked, I think you should try it

[eLaps]

Here is an example with LD_PRELOAD:

#include <dlfcn.h>
#include <GL/gl.h>
#include "mystuff.h"

void glClear(unsigned int _mask) {
    static void (*real_glClear)(unsigned int) = 0;
    if (!real_glClear)
        real_glClear = (void (*)(unsigned int))dlsym(RTLD_NEXT, "glClear");
    real_glClear(_mask);

    static Mystuff* p = 0;
    if (!p) p = new Mystuff;
    p->Execute();
}

and start wow with
LD_PRELOAD=~/mylib.so wine ~/apps/wow/Wow.exe

[Tanaris4]

WoW runs on OS X natively, so that doesn't apply? Maybe? Or I just change the command line?

[eLaps]

I think it works, but can't be sure.
Just try changing the cmd line

[barthen]

DYLD_INSERT_LIBRARIES was the mac equivalent of LD_PRELOAD although I can't test it right now (I formatted my hackintosh ;-P)

[Tanaris4]

Something I just thought of while I was reversing an online poker app... Why do you even need to hook a DirectX or OpenGL function? Couldn't you just spawn your own thread w/in wow and have it run every 0.1 seconds to check to see if it should do anything? Is this dumb?

[mnbvc]

for some stuff (for example running protected lua commands via dostring) you will have insufficient rights if you are calling it from your own thread

[MaiN]

Thread safety.