l1m3w1r3 (08-03-2016)
Imma Split this up into two parts because they relate to each other. im trying to get the ClientCMD offset for csgo so i can use it for writing console commands externally. Im using the public Source for Yetti's Dumper to accomplish this.
Part 1.
this is the code i added into the dumper to make it "work"
that is supposed to be the correct sig for the ClientCMD offset (cant remember where i found it, UC probably)Code:DumpPatternOffset( "Extra", "ClientCMD", "engine.dll", "55 8B EC A1 ? ? ? ? 81 EC ? ? ? ? 80 B8", Remote::SignatureType_t::READ | Remote::SignatureType_t::SUBTRACT, 0x1, 0x0, ss );
anyways, as of 8/2/2016 it returns 0xA7E4EC8B. VS also doesn't give errors or warnings if anyone was gonna ask.
Part 2.
so this part is simple, i need a way to execute a console command externally.
This is what i have (this should theoretically work with the correct offset, which according to the sig above is 0xA7E4EC8B) in my code ClientCMD = 0xA7E4EC8B
any help would be greatly appreciatedCode:WPM(ClientDLL + ClientCMD, "say L33T H4CKS");
l1m3w1r3 (08-03-2016)
bad.
use this:
ClientCMD("say L33T H4CKS")Code:void ClientCMD(const char* command) { LPVOID addr = ( LPVOID )Offsets->m_ClientCMD; LPVOID vCommand = ( LPVOID )VirtualAllocEx( mem->GetHandle, NULL, strlen( command ) + 1, MEM_RESERVE | MEM_COMMIT, PAGE_READWRITE ); WriteProcessMemory( mem->GetHandle, vCommand, command, strlen( command ), NULL ); HANDLE hThread = CreateRemoteThread( mem->GetHandle, NULL, NULL, ( LPTHREAD_START_ROUTINE )addr, vCommand, NULL, NULL ); WaitForSingleObject( hThread, INFINITE ); VirtualFreeEx( mem->GetHandle, vCommand, strlen( command ) + 1, MEM_RELEASE ); }
Last edited by maxtvm; 08-03-2016 at 01:05 AM.
Not sure if this will help.
its work
Code:void COffsets::updateClientCMD() { m_ClientCMD = mem->FindPatternArr(modEngine.dwBase, modEngine.dwSize, "xxxx????xx????xx", 16, 0x55 ,0x8B ,0xEC ,0xA1 ,0x0 ,0x0 ,0x0 ,0x0 ,0x81 ,0xEC ,0x0 ,0x0 ,0x0 ,0x0 ,0x80 ,0xB8); }
Update:
Valve today fix ClientCMD, mb need find new sign...
Last edited by maxtvm; 08-04-2016 at 02:29 AM.
they changed VEngineClient013 -> VEngineClient014 if u ment that.
ExecuteClientCMD sig for function in post #2
Code:m_ClientCMD = mem->FindPatternArr(modEngine.dwBase, modEngine.dwSize, "xxxxxxxxxxxxx????xx", 19, 0x55, 0x8B, 0xEC, 0x8B, 0x55, 0x08, 0x33, 0xC9, 0x6A, 0x00, 0x6A, 0x00, 0xE8, 0x00, 0x00, 0x00, 0x00, 0x83, 0xC4);
Been over a week since last update/bump, assuming solved.
/Closed.