郁金香灬老师 游戏安全 驱动 逆向调试 C/C++编程 脚本 UE4/UE5

找回密码
立即注册

QQ登录

只需一步，快速开始

搜索
热搜: 活动 交友 discuz
郁金香灬老师 游戏安全 驱动 逆向调试 C/C++编程 脚本 UE4/UE5»主页 › 游戏技术交流 › FPS游戏 › 游戏 透视上色 代码
发新帖
课程大纲和价格
官方联系方式2024在线课大纲QQ咨询
admin

34万

积分

131

好友

145

主题

游戏 透视上色 代码

发表于 2023-2-1 21:05:40 | 查看: 8106| 回复: 0



  1. #include <Windows.h>
  2. #include <d3d9.h>
  3. #include <d3dx9.h>
  4. #include <cstdio>

  6. #pragma comment (lib, "d3d9.lib")
  7. #pragma comment(lib, "d3dx9.lib")
  8. LPDIRECT3DDEVICE9 pDevice;
  9. ID3DXLine *pLine;
  10. IDirect3DTexture9 *texRed;
  11. IDirect3DTexture9 *texGreen;
  12. IDirect3DPixelShader9 *Front,
  13.                        *Back;
  14. bool shangse=true;
  15. bool Xhair=false;
  16. static LPD3DXFONT m_pFont1  = NULL;
  17. BOOL FontCreated=false;
  18. int a=10;
  19. bool WallHack=false;
  20. bool zimu=true;
  21. bool hack2=1;
  22. bool hack3=0;
  23. bool hack4=0;
  24. bool xiantiao=false;
  25. HRESULT GenerateTexture(IDirect3DDevice9 *pD3Ddev, IDirect3DTexture9 **ppD3Dtex, DWORD colour32)
  26. {
  27. if( FAILED(pD3Ddev->CreateTexture(8, 8, 1, 0, D3DFMT_A4R4G4B4, D3DPOOL_MANAGED, ppD3Dtex,NULL)) )
  28.   return E_FAIL;
  29. WORD colour16 = ((WORD)((colour32>>28)&0xF)<<12)
  30.   |(WORD)(((colour32>>20)&0xF)<<8)
  31.   |(WORD)(((colour32>>12)&0xF)<<4)
  32.   |(WORD)(((colour32>>4)&0xF)<<0);
  33. D3DLOCKED_RECT d3dlr;   
  34. (*ppD3Dtex)->LockRect(0, &d3dlr, 0, 0);
  35. WORD *pDst16 = (WORD*)d3dlr.pBits;
  36. for(int xy=0; xy < 8*8; xy++)
  37.   *pDst16++ = colour16;
  38. (*ppD3Dtex)->UnlockRect(0);
  39. return S_OK;
  40. }
  41. void InitObjects( IDirect3DDevice9 * pDevice )
  42. {
  43. if(!FontCreated){
  44. D3DXCreateFont( pDevice, 12, 0, FW_NORMAL, 1, 0, DEFAULT_CHARSET, OUT_DEVICE_PRECIS, ANTIALIASED_QUALITY, FF_DONTCARE | DEFAULT_PITCH, "Visitor TT2 (BRK)", &m_pFont1 );
  45. FontCreated=true;
  46. }
  47. }
  48. void SetLightChams(float A, float R, float G, float B, IDirect3DDevice9 *pDevice)
  49. {
  50.     D3DMATERIAL9 pMaterial;
  51.     ZeroMemory(&pMaterial, sizeof(D3DMATERIAL9));
  52. pDevice->SetRenderState(D3DRS_LIGHTING, TRUE); //Enable Lighting
  53. //Ambient
  54. pMaterial.Ambient.a     =  (A/255);
  55.     pMaterial.Ambient.r     =  (R/255);
  56.     pMaterial.Ambient.g     =  (G/255);
  57.     pMaterial.Ambient.b     =  (B/255);
  58. //Diffuse
  59. pMaterial.Diffuse.a     = (A/255);
  60.     pMaterial.Diffuse.r     = (R/255);
  61.     pMaterial.Diffuse.g     = (G/255);
  62.     pMaterial.Diffuse.b     = (B/255);
  63. //Specular
  64. pMaterial.Specular.a = (A/255);
  65. pMaterial.Specular.r = (R/255);
  66.     pMaterial.Specular.g = (G/255);
  67.     pMaterial.Specular.b = (B/255);
  68.     pDevice->SetMaterial(&pMaterial);
  69. }
  70. void DrawFont (int X, int Y, D3DCOLOR Color, char *format, ...)
  71. {
  72. char buffer[256];
  73. va_list args;
  74. va_start (args, format);
  75. vsprintf (buffer,format, args);
  76. RECT FontRect = { X, Y, X + 120, Y + 16 };
  77. m_pFont1->DrawText( NULL, buffer, -1, &FontRect, DT_NOCLIP , Color );
  78. va_end (args);
  79. }
  80. void *DetourFunction(BYTE *src, const BYTE *dst, const int len)
  81. {
  82. BYTE *jmp = (BYTE*)malloc(len+5);
  83. DWORD dwBack;
  84. VirtualProtect(src, len, PAGE_EXECUTE_READWRITE, &dwBack);
  85. memcpy(jmp, src, len);
  86. jmp += len;
  87. jmp[0] = 0xE9;
  88. *(DWORD*)(jmp+1) = (DWORD)(src+len - jmp) - 5;
  89. src[0] = 0xE9;
  90. *(DWORD*)(src+1) = (DWORD)(dst - src) - 5;
  91. for (int i=5; i<len; i++)  src=0x90;
  92. VirtualProtect(src, len, dwBack, &dwBack);
  93. return (jmp-len);
  94. }
  95.     void FillRGB( int x, int y, int w, int h, D3DCOLOR color, IDirect3DDevice9* pDevice )
  96. {
  97. D3DRECT rec = { x, y, x + w, y + h };
  98. pDevice->Clear( 1, &rec, D3DCLEAR_TARGET, color, 0, 0 );
  99. }
  100. HRESULT CreateMyShader(IDirect3DPixelShader9 **pShader, IDirect3DDevice9 *Device, float red, float green, float blue, float alpha )
  101. {
  102.     ID3DXBuffer *MyBuffer = NULL;
  103.     char MyShader[ 256 ];
  104.     sprintf( MyShader, "ps.1.1\ndef c0, %f, %f, %f, %f\nmov r0,c0", red/255, green/255, blue/255, alpha/255 );
  105.     D3DXAssembleShader( MyShader, sizeof( MyShader ), NULL, NULL, 0, &MyBuffer , NULL );
  106.     if( FAILED( Device->CreatePixelShader((const DWORD*)MyBuffer ->GetBufferPointer(), pShader)) )return E_FAIL;
  107.     return S_OK;
  108. }
  109. DWORD WINAPI dwWaitThread( LPVOID lpArgs );
  110. typedef HRESULT(WINAPI* DrawIndexedPrimitive_)(LPDIRECT3DDEVICE9 pDevice, D3DPRIMITIVETYPE Type, INT BaseVertexIndex, UINT MinIndex, UINT NumVertices, UINT StartIndex, UINT PrimitiveCount);
  111. DrawIndexedPrimitive_ pDrawIndexedPrimitive;
  112. typedef HRESULT ( WINAPI *EndScene_)( IDirect3DDevice9 * pDevice );
  113. EndScene_ pEndScene;
  114. typedef HRESULT ( WINAPI *CreateQuery_)(LPDIRECT3DDEVICE9 pDevice, D3DQUERYTYPE Type,IDirect3DQuery9** ppQuery);
  115. CreateQuery_ pCreateQuery;
  116. HRESULT WINAPI hkCreateQuery(LPDIRECT3DDEVICE9 pDevice, D3DQUERYTYPE Type,IDirect3DQuery9** ppQuery)
  117. {
  118.     if( Type == D3DQUERYTYPE_OCCLUSION )
  119.     {
  120.         Type = D3DQUERYTYPE_TIMESTAMP;
  121.     }

  123.     return pCreateQuery( pDevice, Type, ppQuery );
  124. }
  125. HRESULT WINAPI hkEndScene( IDirect3DDevice9 * pDevice )
  126. {
  127. //HWND hwnd1;
  128. //hwnd1=FindWindow (TEXT("透视程序"),TEXT("透视程序"));
  129. //if(hwnd1==0)
  130. //{
  131. // MessageBox( NULL, "透视EXE程序不存在,调用注意走路掉进下水道!", "", MB_ICONERROR | MB_ICONSTOP );
  132. // ExitProcess(0);
  133. //}
  134.     if (shangse)
  135.     {
  136.   GenerateTexture(pDevice, &texRed,D3DCOLOR_ARGB(255,255,0,0));//上色背景 红
  137.   GenerateTexture(pDevice, &texGreen,D3DCOLOR_ARGB(255,0,255,0));//上色背景 绿
  138.         shangse=false;
  139.     }
  140. //CreateMyShader( &Front, pDevice,    255,     0,   0,   255 );
  141.     //CreateMyShader( &Back,  pDevice,    255,   255,   0,   255 );
  142.     InitObjects( pDevice );
  143. DrawFont ( 3, 10, D3DCOLOR_ARGB(255,238,17,216), "逆战 透视程序" );//238,17,216
  144. // ..........
  145. if(zimu)
  146. {
  147. //DrawFont ( 5, 30, D3DCOLOR_ARGB(255,0,255,0), "" );
  148. DrawFont ( 5, 50, D3DCOLOR_ARGB(255,0,255,0), "1键 完美准星" );
  149. DrawFont ( 5, 70, D3DCOLOR_ARGB(255,0,255,0), "2键 人物透视" );
  150. DrawFont ( 5, 90, D3DCOLOR_ARGB(255,0,255,0), "3键 人物上色" );
  151. DrawFont ( 5, 110, D3DCOLOR_ARGB(255,0,255,0), "透视程序 " );
  152. //DrawFont ( 5, 90, D3DCOLOR_ARGB(255,0,255,0), "4 人物线条" );
  153. DrawFont ( 5, 130, D3DCOLOR_ARGB(255,0,255,0), "END键开启/关闭提示菜单" );
  154. }
  155. //游戏字幕
  156. if (Xhair)
  157. {
  158.    //准星
  159.    D3DVIEWPORT9 gViewPort;
  160. pDevice->GetViewport(&gViewPort);
  161. float ScreenCenterX = ( float )gViewPort.Width / 2;
  162. float ScreenCenterY = ( float )gViewPort.Height / 2;
  163. FillRGB(ScreenCenterX-20, ScreenCenterY, 40, 1,D3DCOLOR_ARGB(255,71,65,64),pDevice);//Purple
  164. FillRGB(ScreenCenterX, ScreenCenterY-20, 1, 40,D3DCOLOR_ARGB(255,71,65,64),pDevice);
  165. FillRGB(ScreenCenterX-17, ScreenCenterY, 34, 1,D3DCOLOR_ARGB(255,0,0,255),pDevice);//Blue
  166. FillRGB(ScreenCenterX, ScreenCenterY-17, 1, 34,D3DCOLOR_ARGB(255,0,0,255),pDevice);
  167. FillRGB(ScreenCenterX-14, ScreenCenterY, 28, 1,D3DCOLOR_ARGB(255,255,240,0),pDevice);//Cyan
  168. FillRGB(ScreenCenterX, ScreenCenterY-14, 1, 28,D3DCOLOR_ARGB(255,255,240,0),pDevice);
  169. FillRGB(ScreenCenterX-11, ScreenCenterY, 22, 1,D3DCOLOR_ARGB(255,0,255,0),pDevice);//Green
  170. FillRGB(ScreenCenterX, ScreenCenterY-11, 1, 22,D3DCOLOR_ARGB(255,0,255,0),pDevice);
  171. FillRGB(ScreenCenterX-9, ScreenCenterY, 18, 1,D3DCOLOR_ARGB(255,255,255,0),pDevice);//Yellow
  172. FillRGB(ScreenCenterX, ScreenCenterY-9, 1, 18,D3DCOLOR_ARGB(255,255,255,0),pDevice);
  173. FillRGB(ScreenCenterX-6, ScreenCenterY, 12, 1,D3DCOLOR_ARGB(255,198,255,0),pDevice);//Orange
  174. FillRGB(ScreenCenterX, ScreenCenterY-6, 1, 12,D3DCOLOR_ARGB(255,198,255,0),pDevice);
  175. FillRGB(ScreenCenterX-3, ScreenCenterY, 6, 1,D3DCOLOR_ARGB(255,255,0,0),pDevice);//Red
  176. FillRGB(ScreenCenterX, ScreenCenterY-3, 1, 6,D3DCOLOR_ARGB(255,255,0,0),pDevice);
  177. }
  178.     return ( *pEndScene )( pDevice );
  179. }
  180. HRESULT WINAPI nDrawIndexedPrimitive(LPDIRECT3DDEVICE9 pDevice, D3DPRIMITIVETYPE Type, INT BaseVertexIndex, UINT MinIndex,UINT NumVertices, UINT StartIndex, UINT PrimitiveCount)
  181. {
  182. IDirect3DVertexBuffer9* pStreamData = NULL;
  183. UINT iOffsetInBytes,iStride;
  184. pDevice->GetStreamSource(0,&pStreamData,&iOffsetInBytes,&iStride);
  185. //  if (GetAsyncKeyState (VK_F6)&1)
  186. // {
  187. //  a++;
  188. // }
  189. //  if (GetAsyncKeyState (VK_F7)&1)
  190. //{
  191. // a--;
  192. // }
  193. DWORD dwOldZEnable = D3DZB_TRUE;
  194. if (hack2)
  195. {
  196.   if(iStride==32)
  197.   {
  198.    pDevice->SetRenderState(D3DRS_ZENABLE,false);
  199.    pDevice->SetRenderState(D3DRS_ZENABLE,true);
  200.                    DWORD dwOldZEnable;
  201.                 pDevice->GetRenderState(D3DRS_ZENABLE,&dwOldZEnable);
  202.                 pDevice->SetRenderState(D3DRS_ZENABLE,D3DZB_FALSE);
  203.                 pDevice->SetRenderState(D3DRS_ZFUNC,D3DCMP_NEVER);
  204.                 pDevice->SetRenderState(D3DRS_CULLMODE, D3DCULL_NONE);
  205.                 pDrawIndexedPrimitive(pDevice, Type, BaseVertexIndex, MinIndex, NumVertices, StartIndex, PrimitiveCount);
  206.                 pDevice->SetRenderState(D3DRS_ZENABLE,dwOldZEnable);
  207.                 pDevice->SetRenderState(D3DRS_ZFUNC,D3DCMP_LESSEQUAL);
  208.     pDrawIndexedPrimitive(pDevice, Type, BaseVertexIndex, MinIndex, NumVertices, StartIndex, PrimitiveCount);
  209.   }
  210. }
  211.      if (hack3)
  212. {
  213.   if(iStride==32)
  214.   {
  215.       DWORD dwOldZEnable;
  216.               pDevice->SetTexture(0,NULL);
  217.               pDevice->SetPixelShader( Front );
  218.      pDevice->SetTexture( 0, texGreen);
  219.               pDevice->GetRenderState(D3DRS_ZENABLE,&dwOldZEnable);
  220.               pDevice->SetRenderState(D3DRS_ZENABLE,D3DZB_FALSE);
  221.               pDevice->SetRenderState(D3DRS_ZFUNC,D3DCMP_NEVER);
  222.               pDrawIndexedPrimitive(pDevice, Type, BaseVertexIndex, MinIndex, NumVertices, StartIndex, PrimitiveCount);        
  223.               pDevice->SetRenderState(D3DRS_ZENABLE,dwOldZEnable);
  224.               pDevice->SetRenderState(D3DRS_ZFUNC,D3DCMP_LESSEQUAL);
  225.      pDevice->SetTexture( 0, texRed);
  226.               pDevice->SetPixelShader( Back );
  227.      pDevice->SetRenderState(D3DRS_ZENABLE,false);
  228.      SetLightChams(255,60,73,196, pDevice);
  229.      pDevice->SetTexture( 0, texGreen);
  230.      pDrawIndexedPrimitive(pDevice, Type, BaseVertexIndex, MinIndex, NumVertices, StartIndex, PrimitiveCount);
  231.      pDevice->SetRenderState(D3DRS_ZENABLE,true);
  232.      pDevice->SetTexture( 0, texRed);
  233.      SetLightChams(255,255,0,255, pDevice);
  234.   }
  235.   }
  236.         if (hack4)
  237.     {
  238.   if (iStride==32)
  239.   {
  240.         pDevice->SetRenderState( D3DRS_FILLMODE, D3DFILL_WIREFRAME );
  241.   pDrawIndexedPrimitive(pDevice, Type, BaseVertexIndex, MinIndex, NumVertices, StartIndex, PrimitiveCount);
  242.         pDevice->SetRenderState( D3DRS_FILLMODE, D3DFILL_WIREFRAME );
  243.   }
  244.   
  245.     }
  246. return pDrawIndexedPrimitive(pDevice, Type, BaseVertexIndex, MinIndex, NumVertices, StartIndex, PrimitiveCount);
  247. }
  248. void InitDevice( DWORD * dwVTable )
  249. {
  250. LPDIRECT3D9 pD3d9 = NULL;
  251. LPDIRECT3DDEVICE9 pD3DDevice = NULL;
  252. pD3d9 = Direct3DCreate9( D3D_SDK_VERSION );
  253. if ( pD3d9 == NULL )
  254. {
  255.   MessageBox( NULL, "[ERROR] Direct3DCreate9 Failed", "Fatal Error", MB_ICONERROR | MB_ICONSTOP );
  256.   return;
  257. }

  259. D3DPRESENT_PARAMETERS pPresentParms;
  260. ZeroMemory( &pPresentParms, sizeof( pPresentParms ));

  262. pPresentParms.Windowed = TRUE;
  263. pPresentParms.BackBufferFormat = D3DFMT_UNKNOWN;
  264. pPresentParms.SwapEffect = D3DSWAPEFFECT_DISCARD;

  266. if ( FAILED ( pD3d9->CreateDevice ( D3DADAPTER_DEFAULT, D3DDEVTYPE_HAL, GetDesktopWindow(), D3DCREATE_SOFTWARE_VERTEXPROCESSING, &pPresentParms, &pD3DDevice )))
  267. {
  268.   MessageBox( NULL, "[ERROR] CreateDevice Failed", "Fatal Error", MB_ICONERROR | MB_ICONSTOP );
  269.   return;
  270. }

  272. DWORD * dwTable = ( DWORD* ) pD3DDevice;
  273. dwTable = ( DWORD* ) dwTable[0];

  275. dwVTable[0] = dwTable[82];
  276.     dwVTable[1] = dwTable[42];
  277.     dwVTable[2] = dwTable[118];
  278. }
  279. BOOL APIENTRY DllMain( HMODULE hModule, DWORD dwReason, LPVOID lpReserved )
  280. {
  281. if ( dwReason == DLL_PROCESS_ATTACH )
  282. {
  283.   //if ()
  284.   //{
  285.    //MessageBox( NULL, "没检测到透视综合社区EXE进程,DLL与EXE对接失败.!", "系统提示:", MB_ICONERROR | MB_ICONSTOP );
  286.    //exit(0);//未检测到透视EXE数据验证.
  287.   //}
  288.   CreateThread( NULL, NULL, &dwWaitThread, NULL, NULL, NULL );
  289. }
  290.     return TRUE;
  291. }
  292. DWORD WINAPI dwWaitThread( LPVOID lpArgs )
  293. {
  294. DWORD dwD3d9 = NULL;
  295. while ( !dwD3d9 )
  296. {
  297.   Sleep(1);
  298.   dwD3d9 = ( DWORD ) GetModuleHandle( "D3d9.dll" );
  299. }
  300. DWORD dwVTable[2] = {0};
  301. InitDevice( dwVTable );
  302. pDrawIndexedPrimitive=(DrawIndexedPrimitive_) DetourFunction(( PBYTE ) dwVTable[0], ( PBYTE ) &nDrawIndexedPrimitive,12);
  303.        pEndScene=(EndScene_) DetourFunction(( PBYTE ) dwVTable[1], ( PBYTE ) &hkEndScene,5);
  304.        pCreateQuery=(CreateQuery_)DetourFunction(( PBYTE ) dwVTable[2], ( PBYTE ) &hkCreateQuery,5);
  305.     Xhair= !Xhair;
  306.   for (;;Sleep (1))
  307. {
  308.   if (GetAsyncKeyState (VK_NUMPAD1)&1)
  309.   {
  310.    Xhair= !Xhair;//准星
  311.   }
  312.   if (GetAsyncKeyState (VK_NUMPAD2)&1)     
  313.   {
  314.    hack2 = !hack2;//人物透视
  315.   }
  316.   if (GetAsyncKeyState (VK_NUMPAD3)&1)
  317.   {
  318.             hack3 = !hack3;//人物上色
  319.   }
  320.   if (GetAsyncKeyState (VK_NUMPAD4)&1)
  321.   {
  322.    MessageBox( NULL, "[ERROR]此功能暂不开放.", "透视提示:", MB_ICONERROR | MB_ICONSTOP );
  323.    //hack4 = !hack4;//人物线条
  324.   }
  325.   if (GetAsyncKeyState (VK_END)&1)
  326.   {
  327.    zimu = !zimu;//字幕
  328.   }
  329. }
  330. return FALSE;
  331. }
复制代码


游戏安全课程 学员办理咨询联系QQ150330575 手机 139 9636 2600  免费课程 在 www.bilibili.com 搜 郁金香灬老师
返回列表
高级模式
B Color Image Link Quote Code Smilies
您需要登录后才可以回帖 登录 | 立即注册

QQ咨询

QQ|Archiver|手机版|小黑屋|郁金香游戏技术

GMT+8, 2024-11-23 01:34 , Processed in 0.088287 second(s), 22 queries .

Powered by Discuz! X3.5

© 2001-2023 Discuz! Team.

快速回复 返回顶部 返回列表