Вопрос Fatality Present & Reset offsets

[spidergng]

Hello guys, i would like to ask anyone if they got these 2 offsets for Present and Reset hook.

 constexpr uint64_t hook_present = 0x32811d6fe369fdcd; //t.me/anonteam1337
        constexpr uint64_t hook_reset = 0x870f7d4cd2ff4781; //t.me/anonteam1337

I have tried to find these but i couldnt, so instead of using these offsets, i used signatures that i got from airflow like this:

 make_hook_direct( present, sig( "gameoverlayrenderer.dll", "FF 15 ? ? ? ? 8B F0 85 FF" ) + 0x2 );
        make_hook_direct(reset, sig("gameoverlayrenderer.dll", "C7 45 ? ? ? ? ? FF 15 ? ? 8B D8") + 0x9);

but its still crashing, anyone got new offset or signatures for these 2?
Thank you for your answer,
<3

 

[WatermelonCat]

Hello guys, i would like to ask anyone if they got these 2 offsets for Present and Reset hook.

 constexpr uint64_t hook_present = 0x32811d6fe369fdcd; //t.me/anonteam1337
make_hook_direct( present, sig( "gameoverlayrenderer.dll", "FF 15 ? ? ? ? 8B F0 85 FF" ) + 0x2 );
        make_hook_direct(reset, sig("gameoverlayrenderer.dll", "C7 45 ? ? ? ? ? FF 15 ? ? 8B D8") + 0x9);

but its still crashing, anyone got new offset or signatures for these 2?
Thank you for your answer,
<3

Пожалуйста, авторизуйтесь для просмотра ссылки.

55 8B EC 83 EC ? 53 8B 5D ? 56 8B 35 -- present
E8 ? ? ? ? A1 ? ? ? ? 57 53 C7 45 -- reset

#define ToRVA(address, size) ((uint8_t*)((uint64_t)(address) + [I](int32_t[/I])((uint64_t)(address) + ((size) - sizeof(int32_t))) + (size)))

auto addr = Memory::PatternScan("GameOverlayRenderer.dll", "E8 ? ? ? ? A1 ? ? ? ? 57 53 C7 45");
auto rAddr = ToRVA(addr, 5);

 

[d3adhuqe]

Hello guys, i would like to ask anyone if they got these 2 offsets for Present and Reset hook.

 constexpr uint64_t hook_present = 0x32811d6fe369fdcd; //t.me/anonteam1337
        constexpr uint64_t hook_reset = 0x870f7d4cd2ff4781; //t.me/anonteam1337

I have tried to find these but i couldnt, so instead of using these offsets, i used signatures that i got from airflow like this:

 make_hook_direct( present, sig( "gameoverlayrenderer.dll", "FF 15 ? ? ? ? 8B F0 85 FF" ) + 0x2 );
        make_hook_direct(reset, sig("gameoverlayrenderer.dll", "C7 45 ? ? ? ? ? FF 15 ? ? 8B D8") + 0x9);

but its still crashing, anyone got new offset or signatures for these 2?
Thank you for your answer,
<3

make_hook_direct(present, sig("gameoverlayrenderer.dll", "55 8B EC 83 EC 4C 53"));
        make_hook_direct(reset, sig("gameoverlayrenderer.dll", "55 8B EC 6A FF 68 ?? ?? ?? ?? 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 30 53 8B 5D 08 56 57 8B 3D ?? ?? ?? ?? 33 F6 89 5D 08 85 FF 74 0F 6A FF 57 FF 15 ?? ?? ?? ?? 8B 3D ?? ?? ?? ?? 8D 45 08 B9 ?? ?? ?? ?? 50 8D 45 E8 50 E8 ?? ?? ?? ?? 8B 45 F0 8B 0D ?? ?? ?? ?? 80 78 0D 00 75 05 3B 58 10 73 02 8B C1 3B C1 74 03 8B 70 14 85 FF 74 07 57 FF 15 ?? ?? ?? ?? 85 F6 74 11 8B CE E8 ?? ?? ?? ?? B9 ?? ?? ?? ?? E8 ?? ?? ?? ?? 8B 03 8D 4D D8 51 53 FF 50 ?? 8B 7D 0C 8D 4D C4 57 6A 00 FF 75 E0 E8 ?? ?? ?? ?? A1"));

 

[spidergng]

Пожалуйста, авторизуйтесь для просмотра ссылки.

55 8B EC 83 EC ? 53 8B 5D ? 56 8B 35 -- present
E8 ? ? ? ? A1 ? ? ? ? 57 53 C7 45 -- reset

#define ToRVA(address, size) ((uint8_t*)((uint64_t)(address) + [I](int32_t[/I])((uint64_t)(address) + ((size) - sizeof(int32_t))) + (size)))

auto addr = Memory::PatternScan("GameOverlayRenderer.dll", "E8 ? ? ? ? A1 ? ? ? ? 57 53 C7 45");
auto rAddr = ToRVA(addr, 5);

make_hook_direct(present, sig("gameoverlayrenderer.dll", "55 8B EC 83 EC 4C 53"));
        make_hook_direct(reset, sig("gameoverlayrenderer.dll", "55 8B EC 6A FF 68 ?? ?? ?? ?? 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 30 53 8B 5D 08 56 57 8B 3D ?? ?? ?? ?? 33 F6 89 5D 08 85 FF 74 0F 6A FF 57 FF 15 ?? ?? ?? ?? 8B 3D ?? ?? ?? ?? 8D 45 08 B9 ?? ?? ?? ?? 50 8D 45 E8 50 E8 ?? ?? ?? ?? 8B 45 F0 8B 0D ?? ?? ?? ?? 80 78 0D 00 75 05 3B 58 10 73 02 8B C1 3B C1 74 03 8B 70 14 85 FF 74 07 57 FF 15 ?? ?? ?? ?? 85 F6 74 11 8B CE E8 ?? ?? ?? ?? B9 ?? ?? ?? ?? E8 ?? ?? ?? ?? 8B 03 8D 4D D8 51 53 FF 50 ?? 8B 7D 0C 8D 4D C4 57 6A 00 FF 75 E0 E8 ?? ?? ?? ?? A1"));

thank you so much guys, another question do you have new offset for length_disasm too?

        return reinterpret_cast< bool( * )( uint8_t*, uint32_t*, uint32_t* ) >( make_offset_direct( xorstr_( "gameoverlayrenderer.dll" ), sig_length_disasm_game ) )( op, &size, &code ) ? size : 0xFFFF;

this was the default value:

    constexpr uint64_t sig_length_disasm_game = 0xe79c6f02dfdc75e1;
        sig_length_disasm_game = 0xe79c6f025ec7b1c4,

so i changed it to this:

    constexpr uint64_t sig_length_disasm_game = 0x777d0 ^ 0xfc01c181da864751 ^ 2166136261;
        sig_length_disasm_game = 0xfc01c181da864751,

but its still crashing. help would be appreciated, thank you for your help!

 

[d3adhuqe]

thank you so much guys, another question do you have new offset for length_disasm too?

        return reinterpret_cast< bool( * )( uint8_t*, uint32_t*, uint32_t* ) >( make_offset_direct( xorstr_( "gameoverlayrenderer.dll" ), sig_length_disasm_game ) )( op, &size, &code ) ? size : 0xFFFF;

this was the default value:

    constexpr uint64_t sig_length_disasm_game = 0xe79c6f02dfdc75e1;
        sig_length_disasm_game = 0xe79c6f025ec7b1c4,

so i changed it to this:

    constexpr uint64_t sig_length_disasm_game = 0x777d0 ^ 0xfc01c181da864751 ^ 2166136261;
        sig_length_disasm_game = 0xfc01c181da864751,

but its still crashing. help would be appreciated, thank you for your help!

насчет hybridhook, хук система вообще не работает, если использовать сигнатуру

если помощь нужна, можешь написать

 

[d3adhuqe]

thank you so much guys, another question do you have new offset for length_disasm too?

        return reinterpret_cast< bool( * )( uint8_t*, uint32_t*, uint32_t* ) >( make_offset_direct( xorstr_( "gameoverlayrenderer.dll" ), sig_length_disasm_game ) )( op, &size, &code ) ? size : 0xFFFF;

this was the default value:

    constexpr uint64_t sig_length_disasm_game = 0xe79c6f02dfdc75e1;
        sig_length_disasm_game = 0xe79c6f025ec7b1c4,

so i changed it to this:

    constexpr uint64_t sig_length_disasm_game = 0x777d0 ^ 0xfc01c181da864751 ^ 2166136261;
        sig_length_disasm_game = 0xfc01c181da864751,

but its still crashing. help would be appreciated, thank you for your help!

еще ты можешь делать так

#define make_offset_simple(modulename, offset) []() -> uintptr_t { \
    static uintptr_t module_base = (uintptr_t)GetModuleHandleA(modulename); \
    return module_base + static_cast<uintptr_t>(offset); \
}()

использование

const auto ctor = make_offset_simple("engine.dll", ctor_);
const auto host = make_offset_simple("engine.dll", host_);

 

[spidergng]

насчет hybridhook, хук система вообще не работает, если использовать сигнатуру

если помощь нужна, можешь написать

i would be really happy if you would help me! do you have discord or something?

 

[d3adhuqe]

i would be really happy if you would help me! do you have discord or something?

ok, callbaby7839

 

[BFG9k]

Честно говоря, не очень понимаю, зачем вам оффсеты или сигнатуры на эти две функции, если их можно хукнуть, имея д3д9 девайс по индексам 16 и 17, если мне не изменяет память

 

[d3adhuqe]

Честно говоря, не очень понимаю, зачем вам оффсеты или сигнатуры на эти две функции, если их можно хукнуть, имея д3д9 девайс по индексам 16 и 17, если мне не изменяет память

P.S - возможно, я применяю сюда опыт с CSS, в CSGO возможно он будет не особо уместен, уже лет 5 не занимаюсь читами именно на CSGO, поправьте меня, если что

конечно, но найти ебаную сигнатуру пресент хука, так же и ресета они вообще в gameoverleyrender.dll рядом 5 секунд.

про length_dis_game даже гайд пацан делал

могу сделать тред в котором расскажу про все фиксы и как это сделать на сурс фаталити, но это никому не нужно, что значит не имеет смысла.