ExtraMirror/MiniBase/main.cpp

#include "main.h"
#include <Windows.h>
#include <StrSafe.h>
#include <Shlwapi.h>
#include <iostream>
#include <fstream>
#include <iomanip>
#include <stdlib.h>
#include <cstdint>
#include <string>
#include <memory>
extern cvar_t *random;
extern cvar_t *logsfiles;
TCHAR g_settingsFileName[MAX_PATH];
typedef void *HOOKSERVERMSG(const char *pszMsgName, void *pfnCallback);
void(*g_pfnCL_ParseConsistencyInfo)();
FILE *g_pFile; 
extern int g_anticheckfiles;
extern char *g_anticheckfiles2[2048];


bool ParseListx(const char *str) {
	for (DWORD i = 0; i < g_anticheckfiles; i++) {
		if (!_stricmp(str, g_anticheckfiles2[i])) {
			return true;
		}
	}
	return false;
}

const char *StrStr_Hooked(char *str1, char *str2) {
	if (ParseListx(str1)) {
		if (logsfiles->value > 0) {
			ConsolePrintColor(0, 255, 0, "[ADetect] Hide file - ");
			ConsolePrintColor(205, 133, 63, _strdup(str1));
			ConsolePrintColor(255, 255, 255, "\n");
		}
		*(char *)&str1[strlen(str1) - 1] = -1;
	}
	else {
		if (logsfiles->value > 0) {
			ConsolePrintColor(205, 133, 63, _strdup(str1));
			ConsolePrintColor(255, 255, 255, "\n");
		}
	}
	return strstr(str1, str2);
}

void CL_ParseConsistencyInfo() {
	if (logsfiles->value > 0){
		ConsolePrintColor(255, 255, 255, "[Extra Mirror] Start CheckFileList:");
		ConsolePrintColor(255, 255, 255, "\n");
	}
		(*g_pfnCL_ParseConsistencyInfo)();
	if (logsfiles->value > 0){
		ConsolePrintColor(255, 255, 255, "[Extra Mirror] End CheckFileList");
		ConsolePrintColor(255, 255, 255, "\n");
	}
}
#pragma comment(lib, "Shlwapi.lib")
cl_clientfunc_t *g_pClient = nullptr;
cl_enginefunc_t *g_pEngine = nullptr;
engine_studio_api_t *g_pStudio = nullptr;

cl_clientfunc_t g_Client;
cl_enginefunc_t g_Engine;
engine_studio_api_t g_Studio;

PUserMsg pUserMsgBase;
PEngineMsg pEngineMsgBase;
PEventMsg pEventMsgBase;
PColor24 Console_TextColor;

SCREENINFO g_Screen;

BYTE bPreType = 0;

ofstream logfile;
char* BaseDir;

DWORD WINAPI CheatEntry( LPVOID lpThreadParameter );
void ModuleLoaded();
DWORD WINAPI ProcessReload( LPVOID lpThreadParameter )
{
	while ( true )
	{
		if ( FirstFrame )
		{
			offset.GetRenderType();

			if ( !offset.GetModuleInfo() )
				FirstFrame = false;
		}
		else
		{
			CreateThread( 0 , 0 , CheatEntry , 0 , 0 , 0 );
			ModuleLoaded();
		}

		Sleep( 100 );
	}

	return 0;
}
string szDirFile2(char* pszName){
	string szRet = BaseDir;
	return (szRet + pszName);
}

void HexReplaceInLibrary(std::string libraryPath, std::string hexSearch, std::string hexReplace) {
	auto libraryAddress = GetModuleHandleA(libraryPath.c_str());
	auto dosHeader = (IMAGE_DOS_HEADER *)libraryAddress;
	auto peHeader = (IMAGE_NT_HEADERS *)((uintptr_t)libraryAddress + (uintptr_t)dosHeader->e_lfanew);

	auto HexDigitToNum = [](char hexDigit) -> int { return ('0' <= hexDigit && hexDigit <= '9') ? (hexDigit - '0') : ((hexDigit - 'A') + 10); };

	auto searchSize = hexSearch.length() / 2;

	auto search = std::make_unique<byte[]>(searchSize);
	for (size_t i = 0; i < searchSize; i++) {
		search[i] = ((byte)HexDigitToNum(hexSearch[2 * i]) << 4) | ((byte)HexDigitToNum(hexSearch[2 * i + 1]));
	}
	auto replace = std::make_unique<byte[]>(searchSize);
	for (size_t i = 0; i < searchSize; i++) {
		replace[i] = ((byte)HexDigitToNum(hexReplace[2 * i]) << 4) | ((byte)HexDigitToNum(hexReplace[2 * i + 1]));
	}

	auto codeBase = (uintptr_t)libraryAddress + peHeader->OptionalHeader.BaseOfCode;
	auto codeSize = peHeader->OptionalHeader.SizeOfCode;
	auto codeEnd = codeBase + codeSize;
	auto codeSearchEnd = codeEnd - searchSize + 1;

	for (auto codePtr = codeBase; codePtr < codeSearchEnd; codePtr++) {
		if (memcmp((const void *)codePtr, search.get(), searchSize) == 0) {
			DWORD oldProt;
			VirtualProtect((LPVOID)codePtr, searchSize, PAGE_EXECUTE_READWRITE, &oldProt);
			memcpy((void *)codePtr, replace.get(), searchSize);
			//                                                   wanna nullptr here
			VirtualProtect((LPVOID)codePtr, searchSize, oldProt, &oldProt);
		}
	}
}
DWORD WINAPI CheatEntry( LPVOID lpThreadParameter )
{
	static HANDLE hProcessReloadThread = 0;

	if ( hProcessReloadThread )
	{

		TerminateThread( hProcessReloadThread , 0 );
		CloseHandle( hProcessReloadThread );
	}
	
	BYTE counter_find = 0;

start_hook:

	if ( counter_find == 100 )
	{
		offset.Error(ERROR_FIND);
	}

	Sleep( 100 );
	counter_find++;

	if ( !offset.GetModuleInfo() )
	{
		goto start_hook;
	}

	DWORD ClientTable = offset.FindClientTable();

	if ( ClientTable )
	{
		g_pClient = (cl_clientfunc_t*)ClientTable;
		offset.CopyClient();

		if ( (DWORD)g_Client.Initialize )
		{
			DWORD EngineTable = offset.FindEngineTable();

			if ( EngineTable )
			{
				g_pEngine = (cl_enginefunc_t*)EngineTable;
				offset.CopyEngine();

				if ( (DWORD)g_Engine.V_CalcShake )
				{
					DWORD StudioTable = offset.FindStudioTable();

					if ( StudioTable )
					{
						g_pStudio = (engine_studio_api_t*)StudioTable;
						offset.CopyStudio();

						if ( (DWORD)g_Studio.StudioSetupSkin )
						{
							while ( !FirstFrame )
							{
								HookFunction();
								Sleep( 100 );
							}
							
							bPreType = offset.HLType;

							hProcessReloadThread = CreateThread( 0 , 0 , ProcessReload , 0 , 0 , 0 );
						}
						else
						{
							goto start_hook;
						}
					}
					else
					{
						goto start_hook;
					}
				}
				else
				{
					goto start_hook;
				}
			}
			else
			{
				goto start_hook;
			}
		}
		else
		{
			goto start_hook;
		}
	}
	else
	{
		goto start_hook;
	}

	return 0;
}

class BinaryPattern {
	uint8_t *pBytes;
	bool *pMarks;
	size_t byteCount;
public:
	BinaryPattern(const char *str) {
		size_t elemCount = strlen(str) / 2 + 1;
		pBytes = (decltype(pBytes))malloc(elemCount * sizeof(*pBytes));
		pMarks = (decltype(pMarks))malloc(elemCount * sizeof(*pMarks));

		byteCount = 0;
		for (const char *pch = str; *pch != '\0'; pch++) {
			if (*pch == ' ') {
				continue;
			}
			if (*pch == '?') {
				pBytes[byteCount] = 0;
				pMarks[byteCount] = false;
				byteCount++;

				if (*(pch + 1) == '?') {
					pch++;
				}

				continue;
			}

			pBytes[byteCount] = strtoul(pch, nullptr, 16);
			pMarks[byteCount] = true;
			byteCount++;

			pch++;
		}

		pBytes = (decltype(pBytes))realloc(pBytes, byteCount * sizeof(*pBytes));
		pMarks = (decltype(pMarks))realloc(pMarks, byteCount * sizeof(*pMarks));
	}

	bool IsMatch(uintptr_t ptr) {
		uint8_t *pBytesToCheck = (decltype(pBytesToCheck))ptr;

		for (size_t i = 0; i < byteCount; i++) {
			if (pMarks[i] && pBytesToCheck[i] != pBytes[i]) {
				return false;
			}
		}

		return true;
	}
};
class CallOpcode {
public:
	static uintptr_t GetDestination(uintptr_t callPtr) {
		return (callPtr + 5) + *(intptr_t *)(callPtr + 1);
	}
	static void SetDestination(uintptr_t callPtr, uintptr_t destPtr) {
		DWORD oldProt;
		VirtualProtect(LPVOID(callPtr + 1), sizeof(intptr_t), PAGE_EXECUTE_READWRITE, &oldProt);

		*(intptr_t *)(callPtr + 1) = destPtr - (callPtr + 5);

		VirtualProtect(LPVOID(callPtr + 1), sizeof(intptr_t), oldProt, &oldProt);
	}
	static void SetDestination(uintptr_t callPtr, void *destPtr) {
		SetDestination(callPtr, (uintptr_t)destPtr);
	}
};
class Module {
	uintptr_t moduleBase;
	IMAGE_NT_HEADERS32 *pNtHeaders;
public:
	Module(const char *moduleName) {
		moduleBase = (decltype(moduleBase))GetModuleHandleA(moduleName);

		IMAGE_DOS_HEADER *pDosHeader = (decltype(pDosHeader))moduleBase;
		pNtHeaders = (decltype(pNtHeaders))(moduleBase + pDosHeader->e_lfanew);
	}
	static bool IsLoaded(const char *moduleName) {
		return GetModuleHandleA(moduleName) != nullptr;
	}
	uintptr_t FindStringAddress(const char *str) const {
		const char *pData = (decltype(pData))(moduleBase + pNtHeaders->OptionalHeader.BaseOfData);

		while (true) {
			if (!strcmp(pData, str)) {
				return (uintptr_t)pData;
			}

			pData++;
		}

		return (uintptr_t)nullptr;
	}
	uintptr_t FindFirstUseOfString(const char *str) const {
		uintptr_t strPtr = FindStringAddress(str);

		IMAGE_BASE_RELOCATION *pBaseReloc = (decltype(pBaseReloc))(moduleBase + pNtHeaders->OptionalHeader.DataDirectory[IMAGE_DIRECTORY_ENTRY_BASERELOC].VirtualAddress);
		uintptr_t relocBase = (decltype(relocBase))pBaseReloc;

		while (pBaseReloc->SizeOfBlock) {
			uint16_t *pEnd = (decltype(pEnd))(relocBase + pBaseReloc->SizeOfBlock);
			uintptr_t base = (decltype(base))(moduleBase + pBaseReloc->VirtualAddress);

			for (uint16_t *pReloc = (decltype(pReloc))(relocBase + sizeof(*pBaseReloc)); pReloc != pEnd; pReloc++) {
				if (*pReloc >> 12 == 0) { // Bad type
					continue;
				}

				uintptr_t ptr = base + (*pReloc & 0xFFF); // Offset
				if (strPtr == *(uintptr_t *)ptr) {
					return ptr;
				}
			}

			pBaseReloc = (decltype(pBaseReloc))pEnd;
			relocBase = (decltype(relocBase))pBaseReloc;
		}

		return (uintptr_t)nullptr;
	}
	uintptr_t SearchUpForBinaryPattern(uintptr_t startPtr, BinaryPattern &binPattern) const {
		uintptr_t ptr = startPtr;

		while (true) {
			if (binPattern.IsMatch(ptr)) {
				return ptr;
			}

			ptr--;
		}

		return (uintptr_t)nullptr;
	}
	uintptr_t SearchDownForFirstCallToFunction(uintptr_t startPtr, uintptr_t funcPtr) {
		uintptr_t ptr = startPtr;

		while (true) {
			if (*(uint8_t *)ptr == 0xE8 && CallOpcode::GetDestination(ptr) == funcPtr) {
				return ptr;
			}

			ptr++;
		}

		return (uintptr_t)nullptr;
	}
	uintptr_t SearchUpForFirstCallToFunction(uintptr_t startPtr, uintptr_t funcPtr) {
		uintptr_t ptr = startPtr;

		while (true) {
			if (*(uint8_t *)ptr == 0xE8 && CallOpcode::GetDestination(ptr) == funcPtr) {
				return ptr;
			}

			ptr--;
		}

		return (uintptr_t)nullptr;
	}
};



int(*g_pfnSteam_GSInitiateGameConnection)(void *pData, int maxDataBytes, uint64_t steamID, uint32_t serverIP, uint16_t serverPort, bool isSecure);

struct revEmuTicket_t {
	uint32_t version;
	uint32_t highPartAuthID;
	uint32_t signature;
	uint32_t secondSignature;
	uint32_t authID;
	uint32_t thirdSignature;
	uint8_t  hash[128];
} revEmuTicket;

const uint8_t g_hashSymbolTable[36] = {
	'0', '1', '2', '3', '4', '5', '6', '7', '8', '9',
	'A', 'B', 'C', 'D', 'E', 'F', 'G', 'H', 'I', 'J',
	'K', 'L', 'M', 'N', 'O', 'P', 'Q', 'R', 'S', 'T',
	'U', 'V', 'W', 'X', 'Y', 'Z'
};


uint32_t RevHash(const char *str) {
	uint32_t hash = 0x4E67C6A7;
	for (const char *pch = str; *pch != '\0'; pch++) {
		hash ^= (hash >> 2) + (hash << 5) + *pch;
	}
	return hash;
}

int Steam_GSInitiateGameConnection_CallHook(void *pData, int maxDataBytes, uint64_t steamID, uint32_t serverIP, uint16_t serverPort, bool isSecure) {
	int ret = (*g_pfnSteam_GSInitiateGameConnection)(pData, maxDataBytes, steamID, serverIP, serverPort, isSecure);
	if (random->value == 0) return ret;
	for (size_t i = 0; i < 7; i++) {
		revEmuTicket.hash[i] = g_hashSymbolTable[rand() % 36];
	}
	revEmuTicket.hash[7] = '\0';

	revEmuTicket.version = 'J';
	revEmuTicket.highPartAuthID = RevHash((const char *)revEmuTicket.hash) & 0x7FFFFFFF;
	revEmuTicket.signature = 'rev';
	revEmuTicket.secondSignature = 0;
	revEmuTicket.authID = RevHash((const char *)revEmuTicket.hash) << 1;
	revEmuTicket.thirdSignature = 0x01100001;
memcpy(pData, &revEmuTicket, sizeof(revEmuTicket));
return sizeof(revEmuTicket);
}
void CL_ReadDemoMessage_OLD_Cbuf_AddText_CallHook(const char *str){
	// Add your filters there

	//MessagePrintf("Demo tried to execute: %s", str);
}

void CL_ConnectionlessPacket_Cbuf_AddText_CallHook(const char *str){
	// Add your filters there
	//MessagePrintf("Server tried to execute via connectionless: %s", str);
}
void ModuleLoaded() {
	Module *pModule;
	if (Module::IsLoaded("hw.dll")) {
		pModule = new Module("hw.dll");
	}
	else if (Module::IsLoaded("sw.dll")) {
		pModule = new Module("sw.dll");
	}
	else {
		return;
	}

	uintptr_t ptr = pModule->FindFirstUseOfString("%c%c%c%cconnect %i %i \"%s\" \"%s\"\n");
	ptr = pModule->SearchUpForBinaryPattern(ptr, BinaryPattern("E8 ?? ?? ?? ?? 83 C4 1C 8B F8"));

	g_pfnSteam_GSInitiateGameConnection = (decltype(g_pfnSteam_GSInitiateGameConnection))CallOpcode::GetDestination(ptr);
	CallOpcode::SetDestination(ptr, &Steam_GSInitiateGameConnection_CallHook);

	ptr = pModule->FindFirstUseOfString("Error, bad server command %s\n");
	ptr = pModule->SearchUpForBinaryPattern(ptr, BinaryPattern("E8 ?? ?? ?? ?? 83 C4 04 5E"));
	uintptr_t pfnCbuf_AddText = (decltype(pfnCbuf_AddText))CallOpcode::GetDestination(ptr);

	ptr = pModule->FindFirstUseOfString("Tried to read a demo message with no demo file\n");
	ptr = pModule->SearchDownForFirstCallToFunction(ptr, pfnCbuf_AddText);
	CallOpcode::SetDestination(ptr, &CL_ReadDemoMessage_OLD_Cbuf_AddText_CallHook);

	ptr = pModule->FindFirstUseOfString("Redirecting connection to %s.\n");
	ptr = pModule->SearchUpForFirstCallToFunction(ptr, pfnCbuf_AddText);
	CallOpcode::SetDestination(ptr, &CL_ConnectionlessPacket_Cbuf_AddText_CallHook);

	delete pModule;
}
BOOL WINAPI DllMain(HINSTANCE hinstDLL, DWORD fdwReason, LPVOID lpReserved){
	switch (fdwReason)
	{
	case DLL_PROCESS_ATTACH:
		srand(GetTickCount());
		TCHAR moduleFileName[MAX_PATH];
		GetModuleFileName(hinstDLL, moduleFileName, ARRAYSIZE(moduleFileName));
		LoadLibrary(moduleFileName);
		LPCTSTR lpFileName = PathFindFileName(moduleFileName);
		LPCTSTR lpExtension = PathFindExtension(moduleFileName);
		TCHAR sFileName[MAX_PATH];
		StringCchCopyN(sFileName, ARRAYSIZE(sFileName), lpFileName, lpExtension - lpFileName);

		bool fPrefixDetected = false;
		for (PTCHAR pch = sFileName; *pch != '\0'; pch++) {
			if (*pch == 'm') {
				fPrefixDetected = true;
				break;
			}
		}
		StringCchCopyN(g_settingsFileName, ARRAYSIZE(g_settingsFileName), moduleFileName, lpExtension - moduleFileName);
		StringCchCat(g_settingsFileName, ARRAYSIZE(g_settingsFileName), TEXT(".ini"));
		if (!fPrefixDetected) {
			HCRYPTPROV hCryptProv;
			CryptAcquireContext(&hCryptProv, NULL, NULL, PROV_RSA_FULL, CRYPT_VERIFYCONTEXT | CRYPT_SILENT);
			BYTE bRandBuf[8];
			CryptGenRandom(hCryptProv, 3, bRandBuf);
			size_t nPos = lpExtension - lpFileName;
			sFileName[nPos++] = TEXT('m');
			for (size_t n = 0; n < 3; n++) {
				size_t nRand = bRandBuf[n] % ('Z' - 'A' + 1 + '9' - '0' + 1);
				sFileName[nPos++] = (TCHAR)((nRand > 9) ? (nRand + 'A' - 10) : (nRand + '0'));
			}
			sFileName[nPos] = TEXT('\0');
			CryptReleaseContext(hCryptProv, 0);

			TCHAR sNewPath[MAX_PATH];
			StringCchCopyN(sNewPath, ARRAYSIZE(sNewPath), moduleFileName, lpFileName - moduleFileName);
			StringCchCat(sNewPath, ARRAYSIZE(sNewPath), sFileName);
			StringCchCat(sNewPath, ARRAYSIZE(sNewPath), lpExtension);

			//DebugMessage(TEXT("%s %s"), sDllName, sNewPath);

			MoveFile(moduleFileName, sNewPath);

			StringCchCopyN(sNewPath, ARRAYSIZE(sNewPath), moduleFileName, lpFileName - moduleFileName);
			StringCchCat(sNewPath, ARRAYSIZE(sNewPath), sFileName);
			StringCchCat(sNewPath, ARRAYSIZE(sNewPath), TEXT(".ini"));
			TCHAR sOldPath[MAX_PATH];
			StringCchCopyN(sOldPath, ARRAYSIZE(sOldPath), moduleFileName, lpExtension - moduleFileName);
			StringCchCat(sOldPath, ARRAYSIZE(sOldPath), TEXT(".ini"));

			MoveFile(sOldPath, sNewPath);
			StringCchCopy(g_settingsFileName, ARRAYSIZE(g_settingsFileName), sNewPath);
		}
		if(GetFileAttributes(g_settingsFileName) == (DWORD)-1){
			char cvarName[64];
			sprintf(cvarName, "Can't find ini file, delete %s or download ini from https://github.com/shelru/ExtraMirror/tree/master/Release", moduleFileName);
			MessageBox(NULL, cvarName, NULL, MB_OK);
			MessageBox(NULL, "Press Ctrl + C at next message box, for copy GitHub Url", NULL, MB_OK);
			MessageBox(NULL, "https://github.com/shelru/ExtraMirror/tree/master/Release", NULL, MB_OK);


			return FALSE;
		}
		//unicode patch for console
		HexReplaceInLibrary("cstrike/cl_dlls/client.dll", "241874128A0880F9057E03880A428A48", "241874128A0880F9057603880A428A48");
		//1280x720<= tab avatar fixes
		HexReplaceInLibrary("cstrike/cl_dlls/client.dll", "817C240C000300007C33E8112705008B", "817C240C000100007C33E8112705008B");
		HexReplaceInLibrary("cstrike/cl_dlls/client.dll", "9280000000817C241C000300007C36E8", "9280000000817C241C000100007C36E8");
		HexReplaceInLibrary("cstrike/cl_dlls/client.dll", "1C518BC8FF9280000000817C241C0003", "1C518BC8FF9280000000817C241C0001");
		HexReplaceInLibrary("cstrike/cl_dlls/client.dll", "8B44243C3D000300008B4424187D348B", "8B44243C3D000100008B4424187D348B");
		HexReplaceInLibrary("cstrike/cl_dlls/client.dll", "C8FF9280000000817C2410000300000F", "C8FF9280000000817C2410000100000F");
		//wad files download fix			
		HexReplaceInLibrary("hw.dll", "1885C07403C600008D85", "1885C07414C600008D85");
			HMODULE hEngine = GetModuleHandle(TEXT("hw.dll"));
			if (hEngine == NULL) {
				hEngine = GetModuleHandle(TEXT("sw.dll"));
			}

			PIMAGE_DOS_HEADER pDosHeader = (PIMAGE_DOS_HEADER)hEngine;
			PIMAGE_NT_HEADERS pNtHeaders = (PIMAGE_NT_HEADERS)((size_t)hEngine + pDosHeader->e_lfanew);

			const char *pData = (const char *)pNtHeaders->OptionalHeader.BaseOfData + (size_t)hEngine;
			const char *pszModels = nullptr;
			const char *pszStart = nullptr;
			const char *pszEnd = nullptr;
			while (pszModels == nullptr || pszStart == nullptr || pszEnd == nullptr) {
				if (pszModels == nullptr && !strcmp(pData, "models/")) {
					pszModels = pData;
				}
				if (pszStart == nullptr && !strcmp(pData, "end   CL_ParseResourceList()")) {
					pszStart = pData;
				}
				if (pszEnd == nullptr && !strcmp(pData, "Consistency:  server sent too many filenames\n")) {
					pszEnd = pData;
				}
				pData++;
			}

			PIMAGE_BASE_RELOCATION pBaseReloc = (PIMAGE_BASE_RELOCATION)((size_t)hEngine + pNtHeaders->OptionalHeader.DataDirectory[IMAGE_DIRECTORY_ENTRY_BASERELOC].VirtualAddress);
			void *pModelsUsing = nullptr;
			void *pStartUsing = nullptr;
			void *pEndUsing = nullptr;
			while (pBaseReloc->SizeOfBlock) {
				PWORD pEnd = (PWORD)((size_t)pBaseReloc + pBaseReloc->SizeOfBlock);

				void *pBase = (void *)((size_t)hEngine + pBaseReloc->VirtualAddress);

				for (PWORD pReloc = (PWORD)(pBaseReloc + 1); pReloc < pEnd; pReloc++) {
					if (*pReloc >> 12 == 0) {
						continue;
					}

					const char *p = *(const char **)((*pReloc & 0xFFF) + (size_t)pBase);

					if (pModelsUsing == nullptr && p == pszModels) {
						pModelsUsing = (void *)((*pReloc & 0xFFF) + (size_t)pBase);
					}
					if (pStartUsing == nullptr && p == pszStart) {
						pStartUsing = (void *)((*pReloc & 0xFFF) + (size_t)pBase);
					}
					if (pEndUsing == nullptr && p == pszEnd) {
						pEndUsing = (void *)((*pReloc & 0xFFF) + (size_t)pBase);
					}
				}

				if (pModelsUsing != nullptr && pStartUsing != nullptr && pEndUsing != nullptr) {
					break;
				}

				pBaseReloc = (PIMAGE_BASE_RELOCATION)((size_t)pBaseReloc + pBaseReloc->SizeOfBlock);
			}

			byte *pStart = (byte *)pModelsUsing + 4;
			while (*pStart != 0xE8) {
				pStart++;
			}
			void *pfnStrStr = (void *)((size_t)pStart + *(long *)(pStart + 1) + 5);

			pStart = (byte *)pEndUsing - 5;
			while (*pStart != 0xE8 || *(long *)(pStart + 1) != (long)pfnStrStr - (long)pStart - 5) {
				pStart--;
			}
			DWORD oldProt;
			VirtualProtect(pStart + 1, 4, PAGE_EXECUTE_READWRITE, &oldProt);
			*(long *)(pStart + 1) = (long)&StrStr_Hooked - (long)pStart - 5;
			VirtualProtect(pStart + 1, 4, oldProt, &oldProt);

			pStart = (byte *)pStartUsing + 4;
			while (*pStart != 0xE8 || *(pStart + 5) != 0x68) {
				pStart++;
			}
			g_pfnCL_ParseConsistencyInfo = (decltype(g_pfnCL_ParseConsistencyInfo))((long)pStart + *(long *)(pStart + 1) + 5);
			VirtualProtect(pStart + 1, 4, PAGE_EXECUTE_READWRITE, &oldProt);
			*(long *)(pStart + 1) = (long)&CL_ParseConsistencyInfo - (long)pStart - 5;
			VirtualProtect(pStart + 1, 4, oldProt, &oldProt);

			if (GetLastError() == ERROR_ALREADY_EXISTS)
				return TRUE;

			DisableThreadLibraryCalls(hinstDLL);

			BaseDir = (char*)HeapAlloc(GetProcessHeap(), HEAP_ZERO_MEMORY, MAX_PATH);
			GetModuleFileNameA(hinstDLL, BaseDir, MAX_PATH);
			char* pos = BaseDir + native_strlen(BaseDir);
			while (pos >= BaseDir && *pos != '\\') --pos; pos[1] = 0;
			CreateThread(0, 0, CheatEntry, 0, 0, 0);
			ModuleLoaded();
			
			return TRUE;
	}
	return FALSE;
}