(Cod5) D3D Cham Crash

[x33x]

I am creating chams with DIP (DrawIndexPrimitive) and my game keeps crashing when I see a player.
I think its because of the Memory Pattern, but I don't know, Hope one of you people can help me.

Info:
Game : CoD5
Patch : 1.7

My Setup:

typedef HRESULT(WINAPI* DrawIndexedPrimitive_)(LPDIRECT3DDEVICE9 pDevice, D3DPRIMITIVETYPE Type, INT BaseIndex, UINT MinIndex, UINT NumVertices, UINT StartIndex, UINT primCount);
DrawIndexedPrimitive_ org_DrawIndexedPrimitive;


HRESULT WINAPI hook_DrawIndexedPrimitive(LPDIRECT3DDEVICE9 pDevice, D3DPRIMITIVETYPE Type, INT BaseIndex, UINT MinIndex, UINT NumVertices, UINT StartIndex, UINT primCount)
{
    if(GOOD_GUYS)
    {
        //blabla
    }

    if(BAD_GUYS)
    {
        //blabla
    }
    return  org_DrawIndexedPrimitive(pDevice, Type,BaseIndex, MinIndex,NumVertices,StartIndex,primCount);
}

int D3DHooks()
{
	DWORD D3DPattern,*vTable, DXBase=NULL;
	DXBase = (DWORD)LoadLibraryA("d3d9.dll");
	  
	while(!DXBase);
		{
		  D3DPattern = FindPattern(DXBase, 0x128000, (PBYTE)"\xC7\x06\x00\x00\x00\x00\x89\x86\x00\x00\x00\x00\x89\x86", "xx????xx????xx");
		}

	if(D3DPattern)
	{
		memcpy(&vTable,(void *)(D3DPattern+2),4);
		org_EndScene = (EndScene_)DetourFunction((PBYTE)vTable[42],(PBYTE)hook_EndScene);
		org_DrawIndexedPrimitive = (DrawIndexedPrimitive_)DetourFunction((PBYTE)vTable[82],(PBYTE)hook_DrawIndexedPrimitive);
	}
	return 0;
}

BOOL WINAPI DllMain (HMODULE hinstDLL, DWORD fdwReason, LPVOID lpvReserved)
{
	switch (fdwReason)
    {
		case DLL_PROCESS_ATTACH:
			    DisableThreadLibraryCalls( hinstDLL );
				{
			
				}

				main_hinstDLL = hinstDLL;
			 	ENGINE.isOn = true;	
				CreateThread(NULL, NULL, ENGINE.HooK, NULL, NULL, NULL);
				CreateThread(NULL, NULL, (LPTHREAD_START_ROUTINE)D3DHooks, NULL, NULL, NULL);

				break;
		case DLL_PROCESS_DETACH:
		    	ENGINE.isOn = false;
	    		CreateThread(NULL, NULL, ENGINE.HooK, NULL, NULL, NULL); 
				break;
    }
	return 1;
}

[(+)_]

That pattern is no longer valid. :'(

[x33x]

Then How Should I Do This?
Is There a New Memory Code? Different Method?

[(+)_]

Hook CreateDevice9. : ' )

[x33x]

I Tried Hooking it This way and The Chams Just Don't show up Now. Are They Not Be Initalized?

If I going Completely wrong then can you give me a example of how to hook CreateDevice9?

fn_Direct3DCreate9 or_Direct3DCreate9, or1_Direct3DCreate9 = NULL;;
hkIDirect3D9 *hk_Direct3D9 = NULL; 
IDirect3D9 *Handle = NULL;

IDirect3D9 *APIENTRY hk_Direct3dCreate9(UINT SDKVersion)
{
	static IDirect3D9 *HookReturn;
	HookReturn = new hkIDirect3D9;

	Handle = or1_Direct3DCreate9(SDKVersion);
	if(!Handle)
	{
		return Handle;
	}

	return HookReturn;
}

DWORD WINAPI InitalizeThread(LPVOID Parameter)
{
	HMODULE hDirect3DLib = NULL;
	while(!hDirect3DLib)
	{
		hDirect3DLib = GetModuleHandle("d3d9.dll");
		Sleep(10);
	} 

	or_Direct3DCreate9 =  (fn_Direct3DCreate9)GetProcAddress(hDirect3DLib, "Direct3DCreate9");

	or1_Direct3DCreate9 = (fn_Direct3DCreate9)DetourFunc(( BYTE* )GetProcAddress( LoadLibrary( "d3d9.dll" ), "Direct3DCreate9" ), (BYTE *)hk_Direct3dCreate9, 5);

	return 1;
}

DLL_Main.cpp

CreateThread(NULL, 0, InitalizeThread, NULL, NULL, NULL);

[(+)_]

Why not just find the offset of DrawIndexedPrimitive since it is the same for dx9 and use that : ' )

Here the offset to EndScene DX9c:

(PBYTE)LoadLibraryA( "d3d9.dll" ) + 0x1CEC7

[(+)_]

I think this is your error:

if(D3DPattern)
	{
		LPDIRECT3DDEVICE9 pDevice = NULL;
		memcpy(&pDevice,(void *)(D3DPattern+2),4);
		vTable = (PDWORD)*(PDWORD)pDevice;
		org_EndScene = (EndScene_)DetourFunction((PBYTE)vTable[42],(PBYTE)hook_EndScene);