sv cheats bypass [css!]

[reverseverse]

idk cuz bored and mb someone need this
and i didn't find css section... (sorry for my english i russian btw)
tested on old css
if you want port this to new css you need update offsets and use VirtualProtectEx
and yes you can add some checks...

DWORD pID = 0;
DWORD Enginemodule = GetModuleBase("engine.dll", pID);
DWORD Clientmodule = GetModuleBase("client.dll", pID);

DWORD GetModuleBase(LPSTR lpModuleName, DWORD dwProcessId)
{
    MODULEENTRY32 lpModuleEntry = { 0 };
    HANDLE hSnapShot = CreateToolhelp32Snapshot(TH32CS_SNAPMODULE, dwProcessId);
    if (!hSnapShot)    return NULL;
    lpModuleEntry.dwSize = sizeof(lpModuleEntry);
    BOOL bModule = Module32First(hSnapShot, &lpModuleEntry);
    while (bModule)
    {
        if (!strcmp(lpModuleEntry.szModule, lpModuleName))
        {
            CloseHandle(hSnapShot);
            return (DWORD)lpModuleEntry.modBaseAddr;
        }
        bModule = Module32Next(hSnapShot, &lpModuleEntry);
    }   
    CloseHandle(hSnapShot);
    return NULL;
}   
int main()
{
   HWND hwnd = FindWindowA(0, "Counter-Strike Source");
   GetWindowThreadProcessId(hwnd, &pID);
   HANDLE hProc = OpenProcess(PROCESS_ALL_ACCESS, 0, pID);
   int sv_cheats = 0x51F774 + Enginemodule;
   int value = 1;
   WriteProcessMemory(hProc, (LPVOID)sv_cheats, &value, 4, 0);
   return 0;
}

 

[root]

easy VAC :)

DWORD dwProtect;
VirtualProtectEx(hProc, (LPVOID)sv_cheats, sizeof(int), PAGE_EXECUTE_READWRITE, &dwProtect);
WriteProcessMemory(hProc, (LPVOID)sv_cheats, &value, sizeof(int), NULL);
VirtualProtectEx(hProc, (LPVOID)sv_cheats, sizeof(int), dwProtect, NULL);

 

[otopoto]

Thanks Man!