Quote Originally Posted by iDarkness View Post
LtClient + 0x208...

Code:
#include <Windows.h>

#define LTClient 0x377F1D68 //MOV ECX,DWORD PTR DS:[377F1D68]
bool WhiteWalls = false;

void __cdecl PushToConsole(char* szVal ) {
	DWORD dwCShell = (DWORD)GetModuleHandleA("CShell.dll");
	if( dwCShell != NULL )
	{

		DWORD *LTClient2 = ( DWORD* )( (dwCShell + LTClient) );
		void* CONoff = ( void* )*( DWORD* )( *LTClient2 + 0x208 );
		_asm
		{
			push szVal;
			call CONoff;
			add esp, 4;
		}
	}
}


void HackThread (void)
{
	for(;;) 
	{
	__asm pushad;
	if(GetAsyncKeyState(VK_F9)&1) {
			WhiteWalls = !WhiteWalls;
		}
if  (WhiteWalls) {
			PushToConsole("DrawFlat 0");
		}
		else {
			PushToConsole("DrawFlat 1");
		}

	__asm popad;
   }
}



BOOL WINAPI DllMain ( HMODULE hDll, DWORD dwReason, LPVOID lpReserved )
{
	DisableThreadLibraryCalls(hDll);
	if ( dwReason == DLL_PROCESS_ATTACH )
	{
      Beep(1000,500);
	  CreateThread(NULL,NULL,(LPTHREAD_START_ROUTINE)HackThread,NULL,NULL,NULL);
	}
	return TRUE;
}