[C] 纯文本查看 复制代码
/*
做透视先要下SDK 我使用的是Microsoft DirectX SDK (June 2010) 工具是:VS2010
做透视先要找到接口 CF DLL接口是CSHELL.DLL
设置好配置C++目录 include 和 lib
用GetAsyncKeyState 制作功能开关效果
本代碼 0键:显示菜单 1键:透视
进入GAME 尋找人物模型是多少号 CF是40 (iStride==40)
尋找人物模型可以使用外国人制作的 D3D9_Model_Logger
有时候透视没有效果因为GAME改掉了函数
要用OD来寻找D3D9 改变前和改变后的分别 用OD来恢复函数
*/
#include <d3d9.h> //输出头文件
#include <d3dx9.h>//输出头文件
#include <cstdio>//输出头文件
#pragma comment (lib, "d3d9.lib")//预定义的标识符
#pragma comment(lib, "d3dx9.lib")//预定义的标识符
LPDIRECT3D9 pD3d9 = NULL;//变量
LPDIRECT3DDEVICE9 pD3DDevice = NULL;//变量
DWORD dwVTable[2] = {0};//变量
UINT WallHack=1;//变量
UINT Text = 1;//变量
DWORD WINAPI dwWaitThread( LPVOID lpArgs );
typedef HRESULT(WINAPI* DIP_)(LPDIRECT3DDEVICE9 pDevice, D3DPRIMITIVETYPE Type, INT BaseVertexIndex, UINT MinIndex, UINT NumVertices, UINT StartIndex, UINT PrimitiveCount);//声明
DIP_ pDIP;
typedef HRESULT(WINAPI* CreateQuery_Pointer)(LPDIRECT3DDEVICE9 pDevice,D3DQUERYTYPE Type,IDirect3DQuery9** ppQuery);//声明
CreateQuery_Pointer pCreateQuery_Pointer;
typedef HRESULT(WINAPI* EndScene_Pointer)(LPDIRECT3DDEVICE9 pDevice);//声明
EndScene_Pointer pEndScene_Pointer;
BOOL _stdcall DrawText(LPDIRECT3DDEVICE9 pDxdevice,TCHAR* strText ,int nbuf,UINT y) //畫文本
{
if (pD3d9 && pD3DDevice)
{
RECT myrect;
myrect.top=y; //文本块的y坐标
myrect.left=20; //文本块的左坐标
myrect.right=300+myrect.left;
myrect.bottom=600+myrect.top;
D3DXFONT_DESCA lf;
ZeroMemory(&lf, sizeof(D3DXFONT_DESCA));
lf.Height = 14; //字体高度
lf.Width = 7; // 字体宽度
lf.Weight = 100;
lf.Italic = false;
lf.CharSet = DEFAULT_CHARSET;
strcpy(lf.FaceName, "楷体"); // 字型
ID3DXFont* font=NULL;
if(D3D_OK!=D3DXCreateFontIndirect(pDxdevice, &lf, &font)) //创建字体对象
return false;
font->DrawText(
NULL,
strText, // 要绘制的文本
nbuf,
&myrect,
DT_TOP | DT_LEFT, // 字符居左显示
D3DCOLOR_ARGB(255,0,255,0));
font->Release();//释放对象
}
return true;
}
void *DetourFunction(BYTE *src, const BYTE *dst, const int len) //可用include <Detour.h>
{
BYTE *jmp = (BYTE*)malloc(len+5);
DWORD dwback;
VirtualProtect(src, len, PAGE_READWRITE, &dwback);
memcpy(jmp, src, len); jmp += len;
jmp[0] = 0xE9;
*(DWORD*)(jmp+1) = (DWORD)(src+len - jmp) - 5;
src[0] = 0xE9;
*(DWORD*)(src+1) = (DWORD)(dst - src) - 5;
VirtualProtect(src, len, dwback, &dwback);
return (jmp-len);
}
HRESULT WINAPI DIP(LPDIRECT3DDEVICE9 pDevice, D3DPRIMITIVETYPE Type, INT BaseVertexIndex, UINT MinIndex,UINT NumVertices, UINT StartIndex, UINT PrimitiveCount)
{
IDirect3DVertexBuffer9* pStreamData = NULL; //变量
UINT iOffsetInBytes,iStride;
pDevice->GetStreamSource(0,&pStreamData,&iOffsetInBytes,&iStride);//用来获取stride
if (iStride==40 && WallHack ==0)
{
DWORD dwOldZEnable;//变量
pDevice->GetRenderState(D3DRS_ZENABLE,&dwOldZEnable); //取渲染状态
pDevice->SetRenderState(D3DRS_ZENABLE,D3DZB_FALSE); //设置渲染状态
pDIP(pDevice, Type, BaseVertexIndex, MinIndex, NumVertices, StartIndex, PrimitiveCount);
pDevice->SetRenderState(D3DRS_ZENABLE,dwOldZEnable); //设置渲染状态
}
pStreamData->Release();
return pDIP(pDevice, Type, BaseVertexIndex, MinIndex, NumVertices, StartIndex, PrimitiveCount);
}
HRESULT WINAPI CreateQuery_Detour(LPDIRECT3DDEVICE9 pDevice,D3DQUERYTYPE Type,IDirect3DQuery9** ppQuery)
{
if (Type == D3DQUERYTYPE_OCCLUSION)
Type=D3DQUERYTYPE_EVENT;
return pCreateQuery_Pointer(pDevice,Type,ppQuery);
}
HRESULT WINAPI EndScene_Detour(LPDIRECT3DDEVICE9 pDevice)
{
char strdraw[]="0键:显示菜单\n1键:全屏透视";// 变量文本
if (Text ==0)
{
DrawText(pDevice,strdraw,sizeof strdraw-1,10); //畫文本
}
return pEndScene_Pointer(pDevice);
}
void InitDevice( DWORD * dwVTable )//初始化
{
pD3d9 = Direct3DCreate9( D3D_SDK_VERSION );//指向接口
if ( pD3d9 == NULL )
{
MessageBox( NULL, "[ERROR] Direct3DCreate9 失败", " Error", MB_ICONERROR | MB_ICONSTOP );
return;
}
D3DPRESENT_PARAMETERS pPresentParms;
ZeroMemory( &pPresentParms, sizeof( pPresentParms ));
pPresentParms.Windowed = TRUE;
pPresentParms.BackBufferFormat = D3DFMT_UNKNOWN;
pPresentParms.SwapEffect = D3DSWAPEFFECT_DISCARD;
if ( FAILED ( pD3d9->CreateDevice ( D3DADAPTER_DEFAULT, D3DDEVTYPE_HAL, GetDesktopWindow(), D3DCREATE_SOFTWARE_VERTEXPROCESSING, &pPresentParms, &pD3DDevice )))
{
MessageBox( NULL, "[ERROR] CreateDevice Failed", "Fatal Error", MB_ICONERROR | MB_ICONSTOP );
return;
}
DWORD * dwTable = ( DWORD* ) pD3DDevice;
dwTable = ( DWORD* ) dwTable[0];
dwVTable[2] = dwTable[42]; //EndScene
dwVTable[0] = dwTable[82];//DrawIndexedPrimitive
dwVTable[1] = dwTable[118]; //CreateQuery
}
BOOL WINAPI DllMain ( HMODULE hDll, DWORD dwReason, LPVOID lpReserved )
{
DisableThreadLibraryCalls(hDll);
if ( dwReason == DLL_PROCESS_ATTACH )
{
CreateThread(NULL, NULL, (LPTHREAD_START_ROUTINE)dwWaitThread, NULL, NULL, NULL);
}
return TRUE;
}
DWORD WINAPI dwWaitThread( LPVOID lpArgs )
{
DWORD dwD3d9 = NULL;
while ( !dwD3d9 )
{
Sleep( 500 );
dwD3d9 = ( DWORD ) LoadLibrary( "CSHELL.DLL" ); // 接口
}
InitDevice( dwVTable );
pEndScene_Pointer=(EndScene_Pointer) DetourFunction(( PBYTE ) dwVTable[2], ( PBYTE ) &EndScene_Detour,5);
pDIP=(DIP_) DetourFunction(( PBYTE ) dwVTable[0], ( PBYTE ) &DIP,5);
pCreateQuery_Pointer=(CreateQuery_Pointer) DetourFunction(( PBYTE ) dwVTable[1], ( PBYTE ) &CreateQuery_Detour,5);
for (;;Sleep (200))
{
if (GetKeyState(VK_NUMLOCK)!=0)
{
if (GetAsyncKeyState (VK_NUMPAD1)!=0) //透视
{
if (WallHack ==1)
{
WallHack=0; //开启
MessageBeep (64);
}
else
{
WallHack=1;//关闭
MessageBeep (0);
}
}
if (GetAsyncKeyState (VK_NUMPAD0)!=0)
{
if (Text == 1)
{
Text = 0;//开启
MessageBeep(64);
}
else
{
Text = 1;//关闭
MessageBeep(0);//关闭
}
}
}
}
return FALSE;
}
吾爱游客
发表于 2013-12-23 19:06
发表于 2013-12-24 15:28
吾爱游客
发表于 2013-12-26 20:25
