mirror of
https://github.com/qwertyuiop3/Storm.git
synced 2024-12-22 14:47:24 +08:00
338a781f22
my plan to use constant buffering to instantize actions (as healing, reviving) turned out ill-fated: - many things are using server relative timing: rock stuns, lagcompensation and many of interactables (they're all getting delayed by 150*(1/30) seconds) - there's always undefined behaviour no matter whether i'm constantly buffering or periodically - implementing logic that prevents buffering on when you're about to get hit by rock or to use something would adjust weapon timings (they're all getting delayed by 150*(1/30) seconds) thus i've removed some of things i've worked on (as exploits, viewmodel timing correction) mostly same thing about extra commands up to 21 while exploiting (my old trick doesn't works anymore): it's either undefined behaviour or feature cuttage but on good note: - prediction got hardened against timing fluctations - prediction now respects network timing updates - speedhacking issued undefined behaviour is significantly mitigated (not completely but i'd prefer to not bloat my code over such rare cases) i'll be working on features from now, here's potential list (anything that involves guessing is very low priority): rock prediction (involves guessing, it's not lagcompensated) tongue cutter (involves guessing) tongue aimbot/triggerbot (i've actually forgot to adjust lagcompensation for it but i'm not playing versus anyway) animation cycles prediction (involves guessing, u-rates are synced already so it's just about latency adjustments now) minigun aimbot (i'd like to work on it but just one thing that it's angle is limited thus impossibility to compensate spread accurately ruins it for me) visual improvements (such as visually removing m_duckUntilOnGround)
315 lines
12 KiB
C++
Executable File
315 lines
12 KiB
C++
Executable File
#include <Windows.h>
|
|
|
|
#include <TlHelp32.h>
|
|
|
|
#include <cstdio>
|
|
|
|
#define Bits_32
|
|
|
|
#include "Byte_Manager/Byte_Manager.hpp"
|
|
|
|
#include "Redirection_Manager/Redirection_Manager.hpp"
|
|
|
|
void* Engine_Module;
|
|
|
|
#include "Extended_Interface.hpp"
|
|
|
|
void* Client_Module;
|
|
|
|
#include "Post_Network_Data_Received.hpp"
|
|
|
|
#include "Interpolate.hpp"
|
|
|
|
#include "Update_Animations.hpp"
|
|
|
|
#include <unordered_set>
|
|
|
|
#include <unordered_map>
|
|
|
|
#include "Estimate_Velocity.hpp"
|
|
|
|
#include "Spawn_Grenade.hpp"
|
|
|
|
#include "Update.hpp"
|
|
|
|
#include "Run_Command.hpp"
|
|
|
|
#include "Process_Movement.hpp"
|
|
|
|
#include "Play_Footstep_Sound.hpp"
|
|
|
|
#include <algorithm>
|
|
|
|
#include "Finish_Move.hpp"
|
|
|
|
#include "Item_Post_Frame.hpp"
|
|
|
|
#include "Perform_Trace.hpp"
|
|
|
|
#include "Perform_Shove_Trace.hpp"
|
|
|
|
#include "Read_Packets.hpp"
|
|
|
|
#include "Move.hpp"
|
|
|
|
#include "Send_Move.hpp"
|
|
|
|
#include <vector>
|
|
|
|
#include "Copy_Command.hpp"
|
|
|
|
#include "Calculate_View.hpp"
|
|
|
|
#include "Draw_Effect.hpp"
|
|
|
|
#include "Write_Texture.hpp"
|
|
|
|
#include "Paint.hpp"
|
|
|
|
#include "Get_Glow_Color.hpp"
|
|
|
|
#include "Draw_Crosshair.hpp"
|
|
|
|
__int32 __stdcall DllMain(HMODULE This_Module, unsigned __int32 Call_Reason, void* Reserved)
|
|
{
|
|
if (Call_Reason == DLL_PROCESS_DETACH)
|
|
{
|
|
__fastfail(EXIT_SUCCESS);
|
|
}
|
|
else
|
|
{
|
|
if (Call_Reason == DLL_PROCESS_ATTACH)
|
|
{
|
|
if (GetModuleHandleW(L"left4dead2.exe") == nullptr)
|
|
{
|
|
void* Snapshot = CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, 0);
|
|
|
|
PROCESSENTRY32W Snapshot_Entry;
|
|
|
|
Snapshot_Entry.dwSize = sizeof(Snapshot_Entry);
|
|
|
|
Traverse_Snapshot_Label:
|
|
{
|
|
if (Process32NextW(Snapshot, &Snapshot_Entry) == 0)
|
|
{
|
|
return 1;
|
|
}
|
|
|
|
if (wcscmp(Snapshot_Entry.szExeFile, L"left4dead2.exe") != 0)
|
|
{
|
|
goto Traverse_Snapshot_Label;
|
|
}
|
|
}
|
|
|
|
void* Process = OpenProcess(PROCESS_ALL_ACCESS, 0, Snapshot_Entry.th32ProcessID);
|
|
|
|
void* Remote_Path = VirtualAllocEx(Process, nullptr, 1, MEM_COMMIT | MEM_RESERVE, PAGE_READWRITE);
|
|
|
|
wchar_t Local_Path[MAX_PATH];
|
|
|
|
GetModuleFileNameW(This_Module, Local_Path, sizeof(Local_Path));
|
|
|
|
WriteProcessMemory(Process, Remote_Path, Local_Path, sizeof(Local_Path), nullptr);
|
|
|
|
WaitForSingleObject(CreateRemoteThread(Process, nullptr, 0, (LPTHREAD_START_ROUTINE)LoadLibraryW, Remote_Path, 0, nullptr), INFINITE);
|
|
|
|
VirtualFreeEx(Process, Remote_Path, 0, MEM_RELEASE);
|
|
}
|
|
else
|
|
{
|
|
Byte_Manager::Set_Bytes(1, (void*)((unsigned __int32)LoadLibraryW(L"vaudio_speex.dll") + 9440), 1, 195);
|
|
|
|
AllocConsole();
|
|
|
|
SetConsoleTitleW(L"Storm");
|
|
|
|
_wfreopen(L"CONOUT$", L"w", stdout);
|
|
|
|
SetConsoleOutputCP(65001);
|
|
|
|
HANDLE Standard_Output_Handle = GetStdHandle(STD_OUTPUT_HANDLE);
|
|
|
|
CONSOLE_FONT_INFOEX Console_Font_Information;
|
|
|
|
Console_Font_Information.cbSize = sizeof(CONSOLE_FONT_INFOEX);
|
|
|
|
Console_Font_Information.nFont = 0;
|
|
|
|
Console_Font_Information.dwFontSize.X = 0;
|
|
|
|
Console_Font_Information.dwFontSize.Y = 12;
|
|
|
|
Console_Font_Information.FontFamily = FF_DONTCARE;
|
|
|
|
Console_Font_Information.FontWeight = FW_NORMAL;
|
|
|
|
wcscpy(Console_Font_Information.FaceName, L"Terminal");
|
|
|
|
SetCurrentConsoleFontEx(Standard_Output_Handle, 0, &Console_Font_Information);
|
|
|
|
CONSOLE_CURSOR_INFO Console_Cursor_Information;
|
|
|
|
Console_Cursor_Information.bVisible = 0;
|
|
|
|
Console_Cursor_Information.dwSize = sizeof(Console_Cursor_Information);
|
|
|
|
SetConsoleTextAttribute(Standard_Output_Handle, FOREGROUND_BLUE | FOREGROUND_GREEN | FOREGROUND_RED | FOREGROUND_INTENSITY | BACKGROUND_BLUE);
|
|
|
|
SetConsoleCursorInfo(Standard_Output_Handle, &Console_Cursor_Information);
|
|
|
|
CONSOLE_SCREEN_BUFFER_INFO Console_Screen_Buffer_Information;
|
|
|
|
GetConsoleScreenBufferInfo(Standard_Output_Handle, &Console_Screen_Buffer_Information);
|
|
|
|
COORD Top_Left =
|
|
{
|
|
0,
|
|
|
|
0
|
|
};
|
|
|
|
DWORD Characters_Written_Count;
|
|
|
|
FillConsoleOutputAttribute(Standard_Output_Handle, FOREGROUND_BLUE | FOREGROUND_GREEN | FOREGROUND_RED | FOREGROUND_INTENSITY | BACKGROUND_BLUE, Console_Screen_Buffer_Information.dwSize.X * Console_Screen_Buffer_Information.dwSize.Y, Top_Left, &Characters_Written_Count);
|
|
|
|
Engine_Module = GetModuleHandleW(L"engine.dll");
|
|
|
|
_putws(L"[ + ] Extend Interface");
|
|
{
|
|
Implement_Extended_Interface();
|
|
}
|
|
|
|
Client_Module = GetModuleHandleW(L"client.dll");
|
|
|
|
_putws(L"[ + ] Events");
|
|
{
|
|
Redirection_Manager::Redirect_Function(Original_Post_Network_Data_Received_Caller, 0, (void*)((unsigned __int32)Client_Module + 1555264), 1, (void*)Redirected_Post_Network_Data_Received);
|
|
|
|
Byte_Manager::Set_Bytes(1, (void*)((unsigned __int32)Client_Module + 316816), 1, 195);
|
|
|
|
Byte_Manager::Set_Bytes(1, (void*)((unsigned __int32)Engine_Module + 521741), 1, 235);
|
|
}
|
|
|
|
_putws(L"[ + ] Interpolation");
|
|
{
|
|
Redirection_Manager::Redirect_Function(Original_Interpolate_Caller, 0, (void*)((unsigned __int32)Client_Module + 214256), 1, (void*)Redirected_Interpolate);
|
|
}
|
|
|
|
_putws(L"[ + ] Animations");
|
|
{
|
|
Redirection_Manager::Redirect_Function(1, (void*)((unsigned __int32)Client_Module + 205296), (void*)Redirected_Update_Animations);
|
|
|
|
Redirection_Manager::Redirect_Function(Original_Estimate_Velocity_Caller, 0, (void*)((unsigned __int32)Client_Module + 311856), 1, (void*)Redirected_Estimate_Velocity);
|
|
|
|
unsigned __int8 Maintain_Sequence_Transitions_Bytes[3] = { 194, 24, 0 };
|
|
|
|
Byte_Manager::Copy_Bytes(1, (void*)((unsigned __int32)Client_Module + 245232), sizeof(Maintain_Sequence_Transitions_Bytes), Maintain_Sequence_Transitions_Bytes);
|
|
|
|
Byte_Manager::Set_Bytes(1, (void*)((unsigned __int32)Client_Module + 3244278), 1, 15);
|
|
}
|
|
|
|
_putws(L"[ + ] Prediction");
|
|
{
|
|
auto Add_Prediction_Fields = [](Prediction_Descriptor_Structure* Descriptor, Prediction_Field_Structure* Fields, __int32 Size) -> void
|
|
{
|
|
Prediction_Descriptor_Structure* Original_Descriptor = (Prediction_Descriptor_Structure*)malloc(sizeof(Prediction_Descriptor_Structure));
|
|
|
|
Byte_Manager::Copy_Bytes(0, Original_Descriptor, sizeof(Prediction_Descriptor_Structure), Descriptor);
|
|
|
|
Descriptor->Fields = Fields;
|
|
|
|
Descriptor->Size = Size;
|
|
|
|
Descriptor->Parent = Original_Descriptor;
|
|
};
|
|
|
|
static Prediction_Field_Structure Player_Fields = { 5, (char*)(*(unsigned __int32*)((unsigned __int32)GetModuleHandleW(L"vphysics.dll") + 1701868) + 2226), 16, 1, { }, sizeof(__int32) };
|
|
|
|
Add_Prediction_Fields((Prediction_Descriptor_Structure*)((unsigned __int32)Client_Module + 7236480), &Player_Fields, sizeof(Player_Fields) / sizeof(Prediction_Field_Structure));
|
|
|
|
static Prediction_Field_Structure Weapon_Fields = { 1, (char*)"m_fMaxSpread", 3340, 1, { }, sizeof(float) };
|
|
|
|
Add_Prediction_Fields((Prediction_Descriptor_Structure*)((unsigned __int32)Client_Module + 7290836), &Weapon_Fields, sizeof(Weapon_Fields) / sizeof(Prediction_Field_Structure));
|
|
|
|
Redirection_Manager::Redirect_Function(Original_Spawn_Grenade_Caller, 2, (void*)((unsigned __int32)Client_Module + 2227424), 1, (void*)Redirected_Spawn_Grenade);
|
|
|
|
Redirection_Manager::Redirect_Function(Original_Update_Caller, 0, (void*)((unsigned __int32)Client_Module + 1554304), 1, (void*)Redirected_Update);
|
|
|
|
Byte_Manager::Set_Bytes(1, (void*)((unsigned __int32)Client_Module + 1554528), 1, 235);
|
|
|
|
Byte_Manager::Set_Bytes(1, (void*)((unsigned __int32)Client_Module + 1557776), 1, 235);
|
|
|
|
Redirection_Manager::Redirect_Function(Original_Run_Command_Caller, 0, (void*)((unsigned __int32)Client_Module + 1553504), 1, (void*)Redirected_Run_Command);
|
|
|
|
Redirection_Manager::Redirect_Function(Original_Process_Movement_Caller, 2, (void*)((unsigned __int32)Client_Module + 2590832), 1, (void*)Redirected_Process_Movement);
|
|
|
|
Redirection_Manager::Redirect_Function(Original_Play_Footstep_Sound_Caller, 0, (void*)((unsigned __int32)Client_Module + 978464), 1, (void*)Redirected_Play_Footstep_Sound);
|
|
|
|
Redirection_Manager::Redirect_Function(Original_Finish_Move_Caller, 2, (void*)((unsigned __int32)Client_Module + 1553264), 1, (void*)Redirected_Finish_Move);
|
|
|
|
Redirection_Manager::Redirect_Function(Original_Item_Post_Frame_Caller, 3, (void*)((unsigned __int32)Client_Module + 2542896), 1, (void*)Redirected_Item_Post_Frame);
|
|
|
|
*(__int32*)((unsigned __int32)Original_Item_Post_Frame_Caller + 5) = (__int32)((unsigned __int32)Client_Module + 2438551) - (__int32)Original_Item_Post_Frame_Caller;
|
|
|
|
Redirection_Manager::Redirect_Function(Original_Perform_Trace_Caller, 0, (void*)((unsigned __int32)Client_Module + 3093744), 1, (void*)Redirected_Perform_Trace);
|
|
|
|
Original_Perform_Shove_Trace_Caller = (void*)((unsigned __int32)Client_Module + 3221111);
|
|
|
|
Redirection_Manager::Redirect_Function(1, (void*)((unsigned __int32)Client_Module + 3221102), (void*)Redirected_Perform_Shove_Trace);
|
|
}
|
|
|
|
_putws(L"[ + ] Network");
|
|
{
|
|
Redirection_Manager::Redirect_Function(Original_Read_Packets_Caller, 0, (void*)((unsigned __int32)Engine_Module + 499264), 1, (void*)Redirected_Read_Packets);
|
|
|
|
Redirection_Manager::Redirect_Function(Original_Move_Caller, 3, (void*)((unsigned __int32)Engine_Module + 512288), 1, (void*)Redirected_Move);
|
|
|
|
Redirection_Manager::Redirect_Function(1, (void*)((unsigned __int32)Engine_Module + 511680), (void*)Redirected_Send_Move);
|
|
}
|
|
|
|
_putws(L"[ + ] Input");
|
|
{
|
|
Byte_Manager::Set_Bytes(1, (void*)((unsigned __int32)Client_Module + 1250629), 3, 144);
|
|
|
|
Byte_Manager::Set_Bytes(1, (void*)((unsigned __int32)Client_Module + 417204), 1, 235);
|
|
|
|
Redirection_Manager::Redirect_Function(Original_Copy_Command_Caller, 0, (void*)((unsigned __int32)Client_Module + 1094624), 1, (void*)Redirected_Copy_Command);
|
|
}
|
|
|
|
_putws(L"[ + ] Effects");
|
|
{
|
|
Redirection_Manager::Redirect_Function(Original_Calculate_View_Caller, 0, (void*)((unsigned __int32)Client_Module + 132944), 1, (void*)Redirected_Calculate_View);
|
|
|
|
Byte_Manager::Set_Bytes(1, (void*)((unsigned __int32)Client_Module + 133424), 1, 235);
|
|
|
|
Byte_Manager::Set_Bytes(1, (void*)((unsigned __int32)Client_Module + 2881566), 1, 246);
|
|
|
|
Redirection_Manager::Redirect_Function(Original_Draw_Effect_Caller, 0, (void*)((unsigned __int32)Client_Module + 1425888), 1, (void*)Redirected_Draw_Effect);
|
|
|
|
Byte_Manager::Set_Bytes(1, (void*)((unsigned __int32)Client_Module + 1868237), 1, 52);
|
|
|
|
Byte_Manager::Set_Bytes(1, (void*)((unsigned __int32)Client_Module + 2655546), 1, 216);
|
|
|
|
*(void**)((unsigned __int32)Client_Module + 8115120) = (void*)((unsigned __int32)Client_Module + 955708);
|
|
}
|
|
|
|
_putws(L"[ + ] Paint");
|
|
{
|
|
Redirection_Manager::Redirect_Function(Original_Write_Texture_Caller, 0, (void*)((unsigned __int32)GetModuleHandleW(L"vguimatsurface.dll") + 100560), 1, (void*)Redirected_Write_Texture);
|
|
|
|
Redirection_Manager::Redirect_Function(1, (void*)((unsigned __int32)Client_Module + 2913504), (void*)Redirected_Paint);
|
|
|
|
Redirection_Manager::Redirect_Function(Original_Get_Glow_Color_Caller, 1, (void*)((unsigned __int32)Client_Module + 2455600), 1, (void*)Redirected_Get_Glow_Color);
|
|
|
|
Redirection_Manager::Redirect_Function(1, (void*)((unsigned __int32)Client_Module + 2301184), (void*)Redirected_Draw_Crosshair);
|
|
|
|
Byte_Manager::Set_Bytes(1, (void*)((unsigned __int32)Client_Module + 2930985), 1, 235);
|
|
|
|
Redirection_Manager::Redirect_Function(1, (void*)((unsigned __int32)Client_Module + 3118720), (void*)Redirected_Draw_Crosshair);
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
return 1;
|
|
} |