cs 透视初步尝试
cs 透视初步尝试
受hellotong兄的Direct3D透视教程的启发，
http://bbs.pediy.com/showthread.php?t=126933
自己也想弄弄，平常偶尔打打CS，于是拿它开刀了
先看了下网上资料，发现D3D游戏和普通windows程序结构没什么两样
包括创建窗口和消息处理循环，只不过处理WM_PAINT消息时用到d3d的渲染函数
先用OD载入cstrike.exe ,为了方便调试，设置为窗口化运行,视频模式选择为D3D
一开始查找DrawIndexedPrimitive，SetRenderState，发现并没有直接调用的地方，于是想它们要用到lpdevice参数，那就从Direct3DCreate,Direct3DCreateDvice着手吧，可是加载cstrike.exe后直接bp Direct3DCreate不行，程序一开始并没有加载D3D的DLL文件， 是在进入游戏时才加载的，于是在进入游戏前，在OD选项里--“调试设置”--“事件”--中断于新模块，呵呵，中断了两次，按F9，第三次终于发现了我们的d3dim.dll文件，bp Direct3DCreate可以用了，不过跟了一下没什么收获，查看d3dim.dll模块，结果也让人失望，
在d3dim.dll里搜索所有参考字串，结果发现了不少好东西，真是柳暗花明又一村啊
6DCA9D32 PUSH D3DIM.6DCA1B88 ASCII "d:\xpclient\multimedia\directx\dxg\d3d\dx6\d3dim\vertbuf.cpp(722):"
6DCA9D3B PUSH D3DIM.6DCA1B5C ASCII "Direct3DVertexBuffer::ProcessVertices"
6DCA9EE7 PUSH D3DIM.6DCA1BF8 ASCII "d:\xpclient\multimedia\directx\dxg\d3d\dx6\d3dim\vertbuf.cpp(813):"
6DCA9EEC PUSH D3DIM.6DCA1BCC ASCII "IDirect3DDevice3::DrawIndexedPrimitiveVB"
6DCAA0B9 PUSH D3DIM.6DCA1C60 ASCII "d:\xpclient\multimedia\directx\dxg\d3d\dx6\d3dim\vertbuf.cpp(988):"
6DCAA0BE PUSH D3DIM.6DCA1C3C ASCII "Direct3DDevice3::DrawPrimitiveVB"
................
6DCAD137 PUSH D3DIM.6DCA2138 ASCII "d:\xpclient\multimedia\directx\dxg\d3d\dx6\d3dim\texman.cpp(255):"
6DCAD13C PUSH D3DIM.6DCA2114 ASCII "TextureCacheManager::allocNode"
6DCB1741 PUSH D3DIM.6DCA23E0 ASCII "d:\xpclient\multimedia\directx\dxg\d3d\dx6\d3dim\devstate.cpp(159):"
6DCB1746 MOV EBX,D3DIM.6DCA23BC ASCII "Direct3DDevice::SetRenderState"
6DCB1773 PUSH D3DIM.6DCA2378 ASCII "d:\xpclient\multimedia\directx\dxg\d3d\dx6\d3dim\devstate.cpp(202):"
6DCB18F4 PUSH D3DIM.6DCA2448 ASCII "d:\xpclient\multimedia\directx\dxg\d3d\dx6\d3dim\devstate.cpp(317):"
6DCB18F9 PUSH D3DIM.6DCA2424 ASCII "Direct3DDevice::GetRenderState"
6DCB199E PUSH D3DIM.6DCA24B8 ASCII "d:\xpclient\multimedia\directx\dxg\d3d\dx6\d3dim\devstate.cpp(356):"
6DCB19A3 PUSH D3DIM.6DCA249C ASCII "Direct3DDevice::GetTexture"
6DCB1A3F PUSH D3DIM.6DCA2528 ASCII "d:\xpclient\multimedia\directx\dxg\d3d\dx6\d3dim\devstate.cpp(398):"
6DCB1A44 PUSH D3DIM.6DCA250C ASCII "Direct3DDevice::SetTexture"
6DCB1B11 PUSH D3DIM.6DCA2598 ASCII "d:\xpclient\multimedia\directx\dxg\d3d\dx6\d3dim\devstate.cpp(502):"
6DCB1B16 PUSH D3DIM.6DCA256C ASCII "Direct3DDevice::GetTextureStageState"
6DCB1C9B PUSH D3DIM.6DCA2620 ASCII "d:\xpclient\multimedia\directx\dxg\d3d\dx6\d3dim\devstate.cpp(664):"
6DCB1CA0 PUSH D3DIM.6DCA25FC ASCII "Direct3DDevice::SetLightState"
6DCB1D03 PUSH D3DIM.6DCA2688 ASCII "d:\xpclient\multimedia\directx\dxg\d3d\dx6\d3dim\devstate.cpp(686):"
6DCB1D08 PUSH D3DIM.6DCA2664 ASCII "Direct3DDevice::GetLightState"
.......
经过分别在上面函数名称下断，发现在游戏里不停调用的只有如下几个函数
IDirect3DDevice3::DrawIndexedPrimitiveVB、SetRenderState、SetTexture、SetTransform、GetTransform、MultiplyTransform、CDirect3DDeviceIDP2::FlushStates
经过反复观察这几个函数中断的顺序和名称含义，个人猜测DrawIndexedPrimitiveVB是最终实施绘画的函数，而SetRenderState、SetTexture用来在绘画前设置物件的渲染状态和纹理贴图，只在SetRenderState下断（6DCB1746)，通过堆栈回溯，发现返回地址为cstrike.xxxxxxxx,中断几次观察返回地址的代码均为如下结构
注意：上传附件及图片大小不得大于30M。
⚠️ 版权声明：
本博客所有内容（含教程、源码、工具）仅供个人技术学习与研究交流使用，严禁商用、倒卖、二次分发及非法用途。
未经作者书面授权，任何组织或个人不得转载、复制或用于其他平台，违者将追究相关责任。
参与讨论
登录后可查看全部回复并参与讨论。
