Cheat Engine

oib111 · Posted: Thu Jul 30, 2009 12:42 am Post subject: Developing Chams

I was wondering how chams works. I'm guessing you'd have to take control of the IDirect3D9, IDirect3DDevice9, and IDirect3DTexture9 interfaces. But I'm a bit confused as to how you would know when a player is being modeled, when they're behind a wall, and how you let calls to functions you don't care about be handled by the game and other calls be handled by you if you took control over the entire device?

manc · Posted: Thu Jul 30, 2009 1:17 am Post subject:

Slightly related, aimbot info
http://theoklibrary.org/showthread.php?t=386
sorry Confused

smartz993 · Posted: Thu Jul 30, 2009 1:34 am Post subject:

lol chams.

Basically, you're hooking DrawIndexedPrimitive which is used to draw the player models, and before actually drawing..you set your ZBuffer to disabled (or enabled to false), which gives your model no z-axis, hence why you can see it through any other layer that has depth.

The actual chams part is the SetTexture(0,color); part.

oib111 · Posted: Thu Jul 30, 2009 1:39 am Post subject:

I knew someone would lol at chams. Also, wouldn't a game use mesh's for player models? And wouldn't hooking DrawIndexedPrimitive require taking control of the IDirect3DDevice9 interface. And how would I know if it's trying to draw a player model and not something else?

smartz993 · Posted: Thu Jul 30, 2009 1:52 am Post subject:

oib111 · Posted: Thu Jul 30, 2009 1:56 am Post subject:

It seems a hell of a lot easier to use meshes. And, unless someone already figured out the stride, I'm going to need to do some reverse engineering aren't I?

smartz993 · Posted: Thu Jul 30, 2009 2:01 am Post subject:

That, or you can just make a logger.

oib111 · Posted: Thu Jul 30, 2009 2:09 am Post subject:

I don't know what that is but I want to say it's a program that logs the stride for each model being rendered?

smartz993 · Posted: Thu Jul 30, 2009 2:33 am Post subject:

There is a program like that (but it's only for unprotected games).

But you can write your own logger. (actually there are public little scripts for them)

oib111 · Posted: Thu Jul 30, 2009 11:52 am Post subject:

Ok. But I'd have to figure out which stride corresponds to the player models. And I just realized, if I hooked DrawIndexedPrimitive, which is what the game is using to draw the player model, and I replaced it with some code for chams, I'd have no way of calling the real DrawIndexedPrimitive Confused

smartz993 · Posted: Thu Jul 30, 2009 1:47 pm Post subject:

Hook-hop-nig.

(It's actually called a trampoline)

oib111 · Posted: Thu Jul 30, 2009 2:15 pm Post subject:

You mean skipping the first five bytes? Something like:

smartz993 · Posted: Thu Jul 30, 2009 3:05 pm Post subject:

Nope that's fine.

tombana · Posted: Thu Jul 30, 2009 3:29 pm Post subject:

oib111 · Posted: Thu Jul 30, 2009 3:59 pm Post subject:

So something like this: