WE11NGTON D3D9 BASE DIP

[V I]

#include <windows.h>
#include <d3d9.h>
#include <d3dx9.h>

#pragma comment(lib, "d3d9.lib")
#pragma comment(lib, "d3dx9.lib")

DWORD DIPD3D9, retDIPD3D9;

__declspec( naked ) HRESULT WINAPI DIPMidfunction( )
{
	static LPDIRECT3DDEVICE9 pDevice;

	__asm
	{
		MOV EDI, EDI
		PUSH EBP
		MOV EBP, ESP
		MOV EAX, DWORD PTR SS:[EBP + 0x8]
		MOV DWORD PTR DS:[pDevice], EAX
	}

	pDevice->SetRenderState( D3DRS_ZENABLE, D3DZB_FALSE );
	
	__asm
	{
		POP EBP
		JMP retDIPD3D9
	}
}

VOID *DetourCreate( BYTE *src, CONST BYTE *dst, CONST INT len )
{
	BYTE *jmp =( BYTE * ) malloc( len + 5 );
	DWORD dwBack;

	VirtualProtect( src, len, PAGE_READWRITE, &dwBack );
	memcpy( jmp, src, len );    
	jmp += len;
	jmp[0] = 0xE9;
	*( DWORD * )( jmp + 1 ) = ( DWORD )( src + len - jmp ) - 5;

	src[0] = 0xE9;
	*( DWORD * )( src + 1 ) = ( DWORD )( dst - src ) - 5;
	for( INT i = 5; i < len; i++ )
		src[i] = 0x90;
	VirtualProtect( src, len, dwBack, &dwBack );

	return ( jmp - len );
}

BOOL bCompare( CONST BYTE *pData, CONST BYTE *bMask, CONST CHAR *szMask )
{
	for( ; *szMask; ++szMask, ++pData, ++bMask )
		if( *szMask == 'x' && *pData != *bMask )   
		return false;
	
	return ( *szMask ) == NULL;
}

DWORD FindPattern(DWORD dwAddress,DWORD dwLen,BYTE *bMask,char * szMask)
{
	for( DWORD i = 0; i < dwLen; i++ )
		if( bCompare( ( BYTE * )( dwAddress + i ), bMask, szMask ) )  
		return ( DWORD )( dwAddress + i );
	
	return 0;
}

DWORD WINAPI StartRoutine( LPVOID )
{
    while( TRUE )
    {
		DWORD hD3D = ( DWORD )LoadLibrary( "d3d9.dll" );

		if( !DIPD3D9 )
		{
			// Windows XP
			DIPD3D9 = FindPattern( hD3D,
				0x128000,
				( PBYTE )"\x8B\xFF\x55\x8B\xEC\x5D\xE9\x00\x00\x00\x00\xCC\xCC\xCC\xCC\xCC\x8B\xFF\x55\x8B\xEC\x51",
				"xxxxxxx????xxxxxxxxxxx" );
			if( DIPD3D9 )
			{
				retDIPD3D9 = DIPD3D9 + 0x6;
				DetourCreate( ( PBYTE )DIPD3D9, ( PBYTE )DIPMidfunction, 5 );
			}
		}

		if( !DIPD3D9 )
		{
			// Windows 7
			DIPD3D9 = FindPattern( hD3D,
				0x128000,
				( PBYTE )"\xC3\x90\x90\x90\x90\x90\x8B\xFF\x55\x8B\xEC\x5D\xEB\x05\x90\x90\x90\x90\x90\x8B\xFF\x55\x8B\xEC\x6A\xFF",
				"xxxxxxxxxxxxxxxxxxxxxxxxxx" );
			if( DIPD3D9 )
			{
				retDIPD3D9 = ( DIPD3D9 + 0x6 ) + 0x6;
				DetourCreate( ( PBYTE )( DIPD3D9 + 0x6 ), ( PBYTE )DIPMidfunction, 5 );
			}
		}
    	}
 
    	return 0;
}

BOOL WINAPI DllMain( HMODULE hDll, DWORD dwReason, LPVOID lpReserved )
{ 
	if( dwReason == DLL_PROCESS_ATTACH )
	{
		DisableThreadLibraryCalls( hDll );
		MessageBox( 0, "WE11ington", "HOOK DIP", 0 );
        	CreateThread( 0, 0, (LPTHREAD_START_ROUTINE)StartRoutine, 0, 0, 0 );		
	}

	return TRUE;
}

i take no credits , the credits is in dll main

/ 812034128421 hack in cf section soon

---------- Post added at 02:01 PM ---------- Previous post was at 01:58 PM ----------

Screen shot in-game tested ( 1 / 7 / 2013 )



---------- Post added at 02:05 PM ---------- Previous post was at 02:01 PM ----------

LEEEEEEEEEECH WAR STARTED WITH KAREEM( pro vip coder ) AND RULLEZ LMAO
for noobs all credits go to : WE11NGTON i already said that

[[H]aaBX]

LEEEEEEEEEECH WAR STARTED WITH KAREEM( pro vip coder ) AND RULLEZ LMAO

hahaha
there are much more

[V I]

FREE PASTEBIN LINKS

[C++] Crossfire - Hook DIP - D3D9.DLL [ WE11ington ] - Pastebin.com
CROSSFIRE BASE - Pastebin.com
D3D9 DIP - Pastebin.com
D3d9.dll drawindexedprimitive hook cross fire - Pastebin.com

[bandi12]

@MC567 go to sleep and get lost , you are just puted on the mpgh's black list .......... Next time give atleast credit's when you stoll somebody's work.

I am right now sending a complaint againt's you so have fun stoling other's stuff

[3D]

Iam Sure you steal it From any where
such as what u do before 2 weeks
Noob Stealer

[dicky88smd]

will not take a long time before its patched again, why u post this ?

[3D]

It's we11 base and i gave him all credits , bandi is mad for no reason

Big stealer lollllllllllllllllllllllllllllllllllllllllllllllll llllllllllllllllllls
https://www.mpgh.net/forum/242-crossf...ld-base-d.html

[[H]aaBX]

Are you kidding meh ?
He gave Credits to the We11ngton so don't cry

[lolman963]

Can you explain me what is Zombie OPK in ur signature?

Nothing

[bandi12]

@Scynix if you wanna know my hack will still work bk i don't use this hook , i am mad bk of stealing

[[MPGH]Dave84311]

Wellington is a ****** XD

[lolman963]

What tha hell its awesome
You do it?

Nothing

_________
@lolman963 : Zombie OPK virtually teleports all zombies in front of you and you can kill them.

[dakr54]

Wellington is a ****** XD

how so? i don't really like all the hostility here.. but i assume you're joking

[|Zeus|]

[I]

#include <windows.h>
#include <d3d9.h>
#include <d3dx9.h>

#pragma comment(lib, "d3d9.lib")
#pragma comment(lib, "d3dx9.lib")

DWORD DIPD3D9, retDIPD3D9;

__declspec( naked ) HRESULT WINAPI DIPMidfunction( )
{
	static LPDIRECT3DDEVICE9 pDevice;

	__asm
	{
		MOV EDI, EDI
		PUSH EBP
		MOV EBP, ESP
		MOV EAX, DWORD PTR SS:[EBP + 0x8]
		MOV DWORD PTR DS:[pDevice], EAX
	}

	pDevice->SetRenderState( D3DRS_ZENABLE, D3DZB_FALSE );
	
	__asm
	{
		POP EBP
		JMP retDIPD3D9
	}
}

VOID *DetourCreate( BYTE *src, CONST BYTE *dst, CONST INT len )
{
	BYTE *jmp =( BYTE * ) malloc( len + 5 );
	DWORD dwBack;

	VirtualProtect( src, len, PAGE_READWRITE, &dwBack );
	memcpy( jmp, src, len );    
	jmp += len;
	jmp[0] = 0xE9;
	*( DWORD * )( jmp + 1 ) = ( DWORD )( src + len - jmp ) - 5;

	src[0] = 0xE9;
	*( DWORD * )( src + 1 ) = ( DWORD )( dst - src ) - 5;
	for( INT i = 5; i < len; i++ )
		src = 0x90;
	VirtualProtect( src, len, dwBack, &dwBack );

	return ( jmp - len );
}

BOOL bCompare( CONST BYTE *pData, CONST BYTE *bMask, CONST CHAR *szMask )
{
	for( ; *szMask; ++szMask, ++pData, ++bMask )
		if( *szMask == 'x' && *pData != *bMask )   
		return false;
	
	return ( *szMask ) == NULL;
}

DWORD FindPattern(DWORD dwAddress,DWORD dwLen,BYTE *bMask,char * szMask)
{
	for( DWORD i = 0; i < dwLen; i++ )
		if( bCompare( ( BYTE * )( dwAddress + i ), bMask, szMask ) )  
		return ( DWORD )( dwAddress + i );
	
	return 0;
}

DWORD WINAPI StartRoutine( LPVOID )
{
    while( TRUE )
    {
		DWORD hD3D = ( DWORD )LoadLibrary( "d3d9.dll" );

		if( !DIPD3D9 )
		{
			// Windows XP
			DIPD3D9 = FindPattern( hD3D,
				0x128000,
				( PBYTE )"\x8B\xFF\x55\x8B\xEC\x5D\xE9\x00\x00\x00\x00\xCC\xCC\xCC\xCC\xCC\x8B\xFF\x55\x8B\xEC\x51",
				"xxxxxxx????xxxxxxxxxxx" );
			if( DIPD3D9 )
			{
				retDIPD3D9 = DIPD3D9 + 0x6;
				DetourCreate( ( PBYTE )DIPD3D9, ( PBYTE )DIPMidfunction, 5 );
			}
		}

		if( !DIPD3D9 )
		{
			// Windows 7
			DIPD3D9 = FindPattern( hD3D,
				0x128000,
				( PBYTE )"\xC3\x90\x90\x90\x90\x90\x8B\xFF\x55\x8B\xEC\x5D\xEB\x05\x90\x90\x90\x90\x90\x8B\xFF\x55\x8B\xEC\x6A\xFF",
				"xxxxxxxxxxxxxxxxxxxxxxxxxx" );
			if( DIPD3D9 )
			{
				retDIPD3D9 = ( DIPD3D9 + 0x6 ) + 0x6;
				DetourCreate( ( PBYTE )( DIPD3D9 + 0x6 ), ( PBYTE )DIPMidfunction, 5 );
			}
		}
    	}
 
    	return 0;
}

BOOL WINAPI DllMain( HMODULE hDll, DWORD dwReason, LPVOID lpReserved )
{ 
	if( dwReason == DLL_PROCESS_ATTACH )
	{
		DisableThreadLibraryCalls( hDll );
		MessageBox( 0, "WE11ington", "HOOK DIP", 0 );
        	CreateThread( 0, 0, (LPTHREAD_START_ROUTINE)StartRoutine, 0, 0, 0 );		
	}

	return TRUE;
}

i take no credits , the credits is in dll main

/ 812034128421 hack in cf section soon

---------- Post added at 02:01 PM ---------- Previous post was at 01:58 PM ----------

Screen shot in-game tested ( 1 / 7 / 2013 )



---------- Post added at 02:05 PM ---------- Previous post was at 02:01 PM ----------

LEEEEEEEEEECH WAR STARTED WITH KAREEM( pro vip coder ) AND RULLEZ LMAO
for noobs all credits go to : WE11NGTON i already said that

Good .

[remzkee0903]

Nc.. We11ingTon is a silent master coder. Thanks for making it to public.. I will used this for educational purpose only.