Admin Console Trainer [Source]

Quote:

Originally Posted by arkade

Yo, i wana share a simple example of Admin Console Trainer in S4League ;)
Only Source!

[Only registered and activated users can see links. Click Here To Register...]

dllmain.cpp

Spoiler

CCFunction.cpp

Spoiler

Code:

#include "stdafx.h"
#include "CCFunction.h"
#include <detours.h>

void __declspec(naked) hkReadCom()
{
 _asm
 { 
    mov eaxadd, eax  //Put the address contain in eax in eaxadd (DWORD var)  
    mov eax, [ebp - 0x04]
    mov ebpadd, eax //Put the address contain in eax to ebpadd (DWORD var too)
 }

 char Command[20];
 ReadProcessMemory(GetCurrentProcess(), (LPVOID)eaxadd, &Command, 20, NULL);//Just read the 20 first bytes of eaxadd and put in Command var

 //Call my func with Command to parameter
ParseCommand(Command);

 _asm
 {
    
      mov eax, [ebpadd] 
      mov [ebp - 0x04], eax    
      mov eax, [eaxadd]
   push eax
   mov ecx, [ebp - 0x04]
   call addr//Call addr (DWORD var)  
   jmp RD_COM_Back//Jump to RD_COM_Back
 }
}

_declspec(naked) void hkWriteResp()
{
        _asm mov tmpResp, offset[MyResponse]
 
            DWORD adr;
            ReadProcessMemory(GetCurrentProcess(), (LPVOID)tmpResp, &adr, sizeof(int), NULL);
 
 _asm {
                mov eax, adr
                push eax
                push TypeResp
                mov ecx, [ebp - 0x000001E8]
                jmp RW_RES_Back
 
        }
}

typedef int (__fastcall* typeCallResponse)(unsigned char, char*);

void ParseCommand(char* pCommand)
{
	DWORD old = 0;

	if(!strcmp(pCommand, "/infsp"))
	{
		if(!infsp)
		{	    
	        VirtualProtect((LPVOID)0x00492AD2, 4, PAGE_EXECUTE_READWRITE, &old);
            memcpy((void*)0x00492AD2, "\xDB\x45", 2);
            VirtualProtect((LPVOID)0x00492AD2, 4, old, NULL);	

			ChangeResponse(" {CB-255,128,0,255}Infinite Sp Activated ! ", Response::Answer);
			infsp = true;
		}
		else
		{			
			 VirtualProtect((LPVOID)0x00492AD2, 4, PAGE_EXECUTE_READWRITE, &old);
             memcpy((void*)0x00492AD2, "\xD9\x45", 2);
             VirtualProtect((LPVOID)0x00492AD2, 4, old, NULL);	

			ChangeResponse(" {CB-255,128,0,255}Infinite Sp Deactivated ! ", Response::Answer);
		    infsp = false;
		}
	}
	else if(!strcmp(pCommand,"/help"))
	{
		/*typeCallResponse writResp  = (typeCallResponse)0x00BE33B0;
	    writResp(1, " -testline1");*/
	}
	else
	{
		ChangeResponse(" {CB-255,255,255,255}Unknown Command! ", Response::Error);
	}
}

void ChangeResponse(char* pResponse, Response::ResponseType resp)
{
	MyResponse = pResponse;
	TypeResp = resp;
}


void Activate()
{
	     DWORD old = 0;
	     VirtualProtect((LPVOID)0x00BE254A, 4, PAGE_EXECUTE_READWRITE, &old);
         memcpy((void*)0x00BE254A, "\x75", 1);
         VirtualProtect((LPVOID)0x00BE254A, 4, old, NULL);
}


int __fastcall hkWriteResponse(void *typ, char* command)
{
	MessageBoxA(0, command, "", 0);
	return mWriteResponse(typ, command);
}


void LoadConsole()
{
	//Detours

	DetourFunction((PBYTE)0x00BE25B3, (PBYTE)hkReadCom);
	DetourFunction((PBYTE)0x00BE2ECA, (PBYTE)hkWriteResp);//display answer visualy
	//mWriteResponse = (tWriteResponse)DetourFunction((PBYTE)0x00BE33B0, (PBYTE)hkWriteResponse);

	Activate();
}

CCFunction.h

Spoiler

mhm, the hook is shxt!
every ac would detect it, detours is shxt you should use other hooking methods but anyways thanks for sharing..

Quote:

Originally Posted by arkade

i commented the same XDDD

really funny, fag xd.