[C# DLL] iHook, EndScene ASM Injection!

[DarkLinux]

Directx should not change depending on your operating system. It will change if your using a different version of Directx. -_- You must be doing something wrong lols. My hook works on windows 7 and windows 8. Would love to see a screen shot to see the differences

[eracer]

Windows 7 EndScene d3d9.dll ver 6.1.7601.17514



Windows 8 EndScene d3d9.dll ver 6.2.9200.16384

[-Ryuk-]

06/11/2012 : iHook's code is now available at: https://dl.dropbox.com/u/7923805/MMOwned/iHook.rar

[Edder]

Thank you Ryuk, awesome. +rep

[hb123220]

iHook won't work on windows 8 the way it is currently because the endscene functions that are hooked/detoured are different on windows 8.

Win 7 EndScene looks like (5 bytes)
----------------------------------------
mov edi, edi
push ebp
mov ebp, esp

Win 8 EndScene looks like this (7 bytes)
------------------------------------
push 14
mov eax, d3d9.dll+149A0C

I ended up writing my own version of iHook that uses BeaEngine to disassemble the functions so it can work on both win7 and win8 so I know iHook could do something similar but that would be up to Ryuk since it is closed source.

thx,eracer. Now i understand why my bot doesn't work on Windows 8,, where should i hook EndScene on Win8 ..

[_Mike]

thx,eracer. Now i understand why my bot doesn't work on Windows 8,, where should i hook EndScene on Win8 ..

Eracer already told you what to do. Use BeaEngine and a JIT assembler.
Or just take the easy road and overwrite the vtable entry.

[TOM_RUS]

Or just take the easy road and overwrite the vtable entry.

Isn't it the best way? Easier, faster, no ASM required etc...

[Master674]

Isn't it the best way? Easier, faster, no ASM required etc...

The best way is to create a dummy device, get your pointers and destroy it.
That way it will work for all games and any os.

[TOM_RUS]

The best way is to create a dummy device, get your pointers and destroy it.
That way it will work for all games and any os.

And hooking device vtable won't work for all games and any os?

[Master674]

And hooking device vtable won't work for all games and any os?

Why not? Thats what I said. I'm getting the VMT pointers and hook on that function, doesn't matter at all if you overwrite the vmt pointer itself and store the previous value or if you let your detour interface generate a trampoline... ?!

[_Mike]

Isn't it the best way? Easier, faster, no ASM required etc...

Depends on what your goals are; Maybe the person I quoted might learn something new by making a dynamic hooking library
But yes, personally I always use vtable hooking whenever possible.

The best way is to create a dummy device, get your pointers and destroy it.
That way it will work for all games and any os.

I remember Cypher saying something about it having issues in some specific games. Your creation parameters has to exactly match the game's device or something like that.

[Kristina520]

Updated Addresses, See First Post!

[siriuz]

Sample project isn't working for me

used offsets:

        public static uint Direct3D9__Device = 0xB18ADC;
        public static uint Direct3D9__Device__OffsetA = 0x2808;
        public static uint Direct3D9__Device__OffsetB = 0xA8;
        public static uint ClntObjMgrGetActivePlayerObjAddress = 0x33E0;
        public static uint Lua_DoStringAddress = 0x75AC0;
        public static uint Lua_GetLocalizedTextAddress = 0x4AB6A0;

GetEndscene() returns 0 so it crashes at Hook.Apply()

Both wow.exe and the example app are running with admin rights

Any clues?

[ccKep]

Any clues?

Sure your game isn't running in DX11 mode?

[siriuz]

Ahh damm it doesn't work with DX11? Thats a pity :-/

But thx 4 letting me know anyway.