| View previous topic :: View next topic |
| Author |
Message |
DeviantGeek Newbie cheater
Reputation: 0
Joined: 30 Apr 2006 Posts: 20 Location: 127.0.0.1
|
Posted: Thu Aug 21, 2008 9:28 am Post subject: [help][c++]microsoft detours |
|
|
| im detouring a function in a game and im using microsoft detours to do it. my detour works fine. however, at the login screen when you hit login, the game does a check on itself to make sure nothing has been tampered with. so i wait till the game state changes to character select then i detour everything. when i log out to maybe say to change accounts, at the login screen i remove the detour (DetourRemove) so the game will think nothing has happened to itself and let me log in. then comes my problem. DetourFunctionWithEmptyTrampoline fails when i try to Re-detour my function. i checked the code in memory to see if something was preventing it from doing the detour again and cant seem to figure out why its not working. is there something that doesnt allow a function to be detoured again after its already been detoured once before?
|
|
| Back to top |
|
 |
pkedpker Master Cheater
Reputation: 1
Joined: 11 Oct 2006 Posts: 412
|
Posted: Thu Aug 21, 2008 1:19 pm Post subject: |
|
|
make your own detours inline asm{} dont use microsoft detours they are detected most likely.. plus i dont understand them lol but yah.. inline is much easier i believe after you learn how to use it.
u have to pick from stdcall (no sharing) fastcall (sharing instance) almost same like thiscall and if your detour requires to set esp to number of paramaters then its _cdcdel
_________________
|
|
| Back to top |
|
 |
Fuzz Grandmaster Cheater
Reputation: 0
Joined: 12 Nov 2006 Posts: 531
|
Posted: Thu Aug 21, 2008 5:20 pm Post subject: |
|
|
| pkedpker wrote: | make your own detours inline asm{} dont use microsoft detours they are detected most likely.. plus i dont understand them lol but yah.. inline is much easier i believe after you learn how to use it.
|
If you don't understand about what hes asking, don't reply trying to help?
|
|
| Back to top |
|
 |
pkedpker Master Cheater
Reputation: 1
Joined: 11 Oct 2006 Posts: 412
|
Posted: Thu Aug 21, 2008 5:33 pm Post subject: |
|
|
bro i used microsoft detours like a 5 months ago when i knew nothing.
from what i understand they strap in a whole lib file to whatever you inject so if the gameguard scans memory for parts of that lib file some kind of pattern then of course its detected.
Your reply you posted Fuzz is less meaningful and more ignorantthen mines. Unlike me im trying to point him in a different direction like using VirtualProtect + memcpy + inline to do detours for less detectability
_________________
|
|
| Back to top |
|
 |
GMZorita Grandmaster Cheater Supreme
Reputation: 0
Joined: 21 Mar 2007 Posts: 1361
|
Posted: Thu Aug 21, 2008 5:46 pm Post subject: |
|
|
| Fuzz wrote: | | pkedpker wrote: | make your own detours inline asm{} dont use microsoft detours they are detected most likely.. plus i dont understand them lol but yah.. inline is much easier i believe after you learn how to use it.
|
If you don't understand about what hes asking, don't reply trying to help? |
Actually his reply was helpful..
He told him to try another way (Which is way better IMO).
_________________
Gone |
|
| Back to top |
|
 |
sponge I'm a spammer
Reputation: 1
Joined: 07 Nov 2006 Posts: 6009
|
Posted: Thu Aug 21, 2008 7:27 pm Post subject: |
|
|
before you give advice pkedpker, learn some english; its hardly legible and to someone that is requesting help, it will only confuse them more.
_________________
|
|
| Back to top |
|
 |
DeviantGeek Newbie cheater
Reputation: 0
Joined: 30 Apr 2006 Posts: 20 Location: 127.0.0.1
|
Posted: Thu Aug 21, 2008 7:55 pm Post subject: |
|
|
| yea i was kinda heading towards my own detours, but meh, im lazy and dont wanna figure out the basics of doing it by hand lol and i never checked if detours actually loaded a library for itself. pretty sure its all done with inline functions etc in the header they give you. but i only scanned the thing for something and didnt really look at it closely
|
|
| Back to top |
|
 |
atom0s Moderator
Reputation: 205
Joined: 25 Jan 2006 Posts: 8588 Location: 127.0.0.1
|
Posted: Sat Aug 23, 2008 6:19 am Post subject: |
|
|
| DeviantGeek wrote: | | yea i was kinda heading towards my own detours, but meh, im lazy and dont wanna figure out the basics of doing it by hand lol and i never checked if detours actually loaded a library for itself. pretty sure its all done with inline functions etc in the header they give you. but i only scanned the thing for something and didnt really look at it closely |
Instead of detouring, try patching the IAT. You can remove and replace the pointers on the fly really easily and shouldn't run into issues with reapplying a patch. (Depends on how the game works with API if it will be successful in the long run.)
_________________
- Retired. |
|
| Back to top |
|
 |
rapion124 Grandmaster Cheater Supreme
Reputation: 0
Joined: 25 Mar 2007 Posts: 1095
|
Posted: Sat Aug 23, 2008 6:55 am Post subject: |
|
|
| Wiccaan wrote: |
Instead of detouring, try patching the IAT. You can remove and replace the pointers on the fly really easily and shouldn't run into issues with reapplying a patch. (Depends on how the game works with API if it will be successful in the long run.) |
He said it's a game function. It's not a Win32 API. Most games I play don't export their functions for anyone to call.
|
|
| Back to top |
|
 |
atom0s Moderator
Reputation: 205
Joined: 25 Jan 2006 Posts: 8588 Location: 127.0.0.1
|
Posted: Sat Aug 23, 2008 7:16 am Post subject: |
|
|
| rapion124 wrote: | | Wiccaan wrote: |
Instead of detouring, try patching the IAT. You can remove and replace the pointers on the fly really easily and shouldn't run into issues with reapplying a patch. (Depends on how the game works with API if it will be successful in the long run.) |
He said it's a game function. It's not a Win32 API. Most games I play don't export their functions for anyone to call. |
Bah whoops lol, saw Detours and figured API.
_________________
- Retired. |
|
| Back to top |
|
 |
Nukus How do I cheat?
Reputation: 0
Joined: 07 Sep 2009 Posts: 2
|
Posted: Mon Sep 07, 2009 8:50 am Post subject: |
|
|
| I prefer more BoxedApp SDK ( boxedapp[dot]com ) then Detours.
|
|
| Back to top |
|
 |
|