Great job! thanks for posting the source.
If you could answer few questions about the source that would be great
1. What are those 5's in the DetourFunction (like (BYTE*)malloc(len+5))? and what the returned adress is?
2. How does it run parallel to the game? I didn't see a thread or anything.. I thought that the DetourFunction copies the code to an empty block in IW5MP's memory and than runs it from there but i'm not sure cause the code is too hard to understand.
and last, not so important, but which version of iw5mp those adresses are?
If you could answer me, that would be great!