DIP Midfunction Hook (Hackshield)

[TastyCookieez]

Hey Guys, I'm fairly new to this forum, and I hope I'm posting in the right section, but I need help. I'm coding hacks for a game called "Combat Arms" which uses a memory protection software called "Hackshield". I've got a D3D menu set Up, and it is currently hooking to the EndScene function in Combat Arms, and it draws my menu, but it is being detected once I go in game. Is there anyway someone could explain to me as to how I can create my own hook? (the endscene function hook was C+P because I have no idea how to make my own Hooks/Detours), which is the reason why I came to this site (so that I could see if anyone knows how to do this, and hopefully could teach me? ). Any help would be appreciated!

Thanks,
TastyCookieez

 

[Tragic]

Hey Guys, I'm fairly new to this forum, and I hope I'm posting in the right section, but I need help. I'm coding hacks for a game called "Combat Arms" which uses a memory protection software called "Hackshield". I've got a D3D menu set Up, and it is currently hooking to the EndScene function in Combat Arms, and it draws my menu, but it is being detected once I go in game. Is there anyway someone could explain to me as to how I can create my own hook? (the endscene function hook was C+P because I have no idea how to make my own Hooks/Detours), which is the reason why I came to this site (so that I could see if anyone knows how to do this, and hopefully could teach me? ). Any help would be appreciated!

Thanks,
TastyCookieez

This is what i have found out from others over the years about hackshield is that it will often look at the names of functions and such. It will search for things like hack's, cham's, aimbot stuff like that. I havn't tried to hack CA recently but im sure it still searches for the same crap so my best advice is to use an encryptor or create some sort of encryption in your hack so that it will throw off the memory search.

 

[TastyCookieez]

Thanks for the reply! All my strings are encrypted, and I pack the DLL to Reduce the detection as much as I can. I don't think encrypting it would mess up the memory search. I'm looking into a DIP(Draw Indexed Primitive) mid-function hook, but It seems To be detected! I'm using a VTable if that helps.

 

[Departure]

Try hooking a different function, End Scene and Draw Index Primitive are prime candidates for hack-shield to monitor for changes. Personally I hook "Present" for combat Arms and do all my drawing from there, and yes ofcause encrypting the string helps for other detections, but in your case its EndScene and DIP getting detected, yes a mid function could over come the DIP detection...

 

[konsowa]

Hey Cookies did the encryption and packing work, i mean did it get detected or not coz i'm making my own base and it draws the menu but once i try joining a game it just exits.

 

[BlackPitchPL]

do you have menu on when you join the game. Had same problem when i was start game and menu was open game was just crash so i had to always close it before join the game

 

[konsowa]

Yea thats it but when i close it then turn it back on for a few mins it exits

 

[TastyCookieez]

thanks to everyone who replied. YES Encryption and packing of the DLL did make a drastic decrease in detection.

I am now hooking the Present function, and it works, but I crash half way through the game. (Yes, all of my addresses are updated). is there any way that i could prevent the game from crashing :S ( its the hacks because without hacks, i dont crash )

 

[konsowa]

bypass the hackshield

 

[TastyCookieez]

could you be a bit more specific on how i could do that?

 

[konsowa]

I believe there was a bypass released on mpqh a few weeks ago..otherwise u wana reverse ehsvc.dll

Hint: dump the dll

 

[TastyCookieez]

Thank you sir. I will look on mpqh, but i dont remember seeing anything, and i already have the dumped file. Thanks for the hint tho

 

[Departure]

thanks to everyone who replied. YES Encryption and packing of the DLL did make a drastic decrease in detection.

I am now hooking the Present function, and it works, but I crash half way through the game. (Yes, all of my addresses are updated). is there any way that i could prevent the game from crashing :S ( its the hacks because without hacks, i dont crash )

Sounds like memory leakage or Detection from not restoring original bytes for hack, If you tell me what hacks you are implementing we can determine what the problem is. you must replace the original bytes before entering a new game...