The end
Пользователь
-
Автор темы
- #1
Держите вам нашумевший bomb explode/defuse. Пользуйтесь пока не пофиксили.
- //CHLClient::WriteUsercmdDeltaToBuffer index == 23
- bool __stdcall HookedWriteUsercmdDeltaToBuffer(int slot, void* buf, int from, int to, bool isnewcommand)
- {
- int* pBackupCommands = reinterpret_cast<int*>(reinterpret_cast<uintptr_t>(buf) - 0x30);
- int* pNewCommands = reinterpret_cast<int*>(reinterpret_cast<uintptr_t>(buf) - 0x2C);
- int cl_cmdbackup = 0;
- *pBackupCommands = cl_cmdbackup;
- static bool firstcmd = false;
- if (from == -1) firstcmd = true;
- if (to > g_pClientState->lastoutgoingcommand - cl_cmdbackup)
- {
- if (firstcmd) from = -1;
- firstcmd = false;
- CUserCmd nullCmd;
- CUserCmd* cmdFrom;
- CUserCmd* cmdTo;
- if (from == -1)
- {
- cmdFrom = &nullCmd;
- }
- else
- {
- cmdFrom = g_pInput->GetUserCmd(from);
- }
- if (to == -1)
- {
- cmdTo = &nullCmd;
- }
- else
- {
- cmdTo = g_pInput->GetUserCmd(to);
- }
- static auto WriteUsercmd = reinterpret_cast<void (__fastcall*)(void* buffer, CUserCmd* from, CUserCmd* to)>((uintptr_t)GetModuleHandleA("client.dll") + 0x34FA10);
- __asm
- {
- mov ecx, buf;
- mov edx, cmdTo;
- push cmdFrom;
- call WriteUsercmd;
- add esp, 4h;
- }
- }
- return true;
- }
- if (bLagExploit)
- {
- sendpacket = (sequence_number % 10) == 0;
- //use multiples of 150 because thats the size of the command-buffer
- pCmd->command_number += 3 * 150;
- g_pClientState->lastoutgoingcommand += 3 * 150;
- g_pClientState->m_NetChannel->m_nOutSequenceNr += 3 * 150;
- }
Последнее редактирование:
