search

lguilhermee / Discord-DX11-Overlay-Hook

Discord Hooking
MIT License
223 stars 48 forks source link

Discord overlay pattern has changed #7

Closed SonnyLikesCode closed 3 years ago

SonnyLikesCode commented 3 years ago

DiscordHook64.dll Pattern has changed and https://github.com/lguilhermee/Discord-DX11-Overlay-Hook/ no longer works how am I able to reverse engine the new pattern?

SonnyLikesCode commented 3 years ago

I was able to get them here are they if anyone wants them Module : DiscordHook64.dll Present Scene -> 56 57 53 48 83 EC 30 44 89 C6 CreateHook -> E8 ? ? ? ? 85 C0 74 0C 48 8B 16 EnableHook -> 41 56 56 57 53 48 83 EC 28 49 89 CE BF ? ? ? ? 31 C0 F0 0F B1 3D ? ? ? ? 74 2E 31 DB 48 8B 35 ? ? ? ? 66 2E 0F 1F 84 00 ? ? ? ? 31 C9 48 83 FB 1F 0F 97 C1 FF D6 48 83 C3 01 31 C0 F0 0F B1 3D ? ? ? ? 75 E5 48 83 3D ? ? ? ? ? 74 40 4D 85 F6 74 42 8B 15 ? ? ? ? B8 ? ? ? ? 48 85 D2 74 70 48 8B 0D ? ? ? ? 48 83 C1 20 48 F7 DA 31 DB 66 0F 1F 44 00 ? 4C 39 71 E0 74 4A 48 83 C1 38 48 83 C3 FF 48 39 DA 75 ED EB 45 B8 ? ? ? ? EB 3E 83 3D ? ? ? ? ? 74 33 B9 ? ? ? ? 31 C0 31 D2 66 90 48 8B 1D ? ? ? ? 80 24 0B FB EnableHookQue -> E8 ? ? ? ? 85 C0 74 60 GetAsyncKeyState -> 56 48 83 EC 20 89 CE

ArtixSoftware commented 3 years ago

What about, SetCursorPos, GetCursorPos, and SetCursor? I would be appreciated to know how you reversed engineered these patterns as I'm still learning.

Xiloe commented 3 years ago

What about, SetCursorPos, GetCursorPos, and SetCursor? I would be appreciated to know how you reversed engineered these patterns as I'm still learning.

Using IDA

GetCursor: 8A 05 ? ? ? ? 84 C0 74 08 GetCursorPos: 56 48 83 EC 20 48 89 CE FF 15 ? ? ? ? 8A 15 ? ? ? ? SetCursor: 56 57 48 83 EC 28 48 89 CE 8A 05 ? ? ? ? 48 8B 15 ? ? ? ? SetCursorPos: 8A 05 ? ? ? ? 84 C0 74 12 ShowCursor: 8A 05 ? ? ? ? 84 C0 74 1A

Here you go.