【原创】过豆客平台亮人作弊器文件附带源代码

【原创】过豆客平台亮人作弊器文件附带源代码

利用调试寄存器和硬件断点实现透视，通过变通，发现可以利用opengl的调用函数有很多。本文就是利用了CS里面glVertex3f这个函数。通过HOOK这个函数达到亮人的目的~
#define _WIN32_WINNT 0x0500
#include
#include
#include
#pragma comment ( lib , "Opengl32.lib" )
DWORD msgshow = 0;
void __declspec(naked) WINAPI real_glVertex3f(GLfloat x,  GLfloat y,  GLfloat z) //真正OpenGL..glVertex3f代码(WindowsXP SP2)
{
_asm{
   mov     eax, dword ptr fs:[0x18];
   jmp     dword ptr [eax+0x94C];
}
}
void WINAPI hook_glVertex3f (GLfloat x,  GLfloat y,  GLfloat z)
{
  glColor3f(1.0f, 1.0f, 1.0f);
          
  real_glVertex3f(x, y, z);
        
}
LONG WINAPI VectoredHandler( struct _EXCEPTION_POINTERS* ExceptionInfo )
{

if (ExceptionInfo->ExceptionRecord->ExceptionCode == EXCEPTION_SINGLE_STEP )
{
  ExceptionInfo->ContextRecord->Eip = (DWORD)hook_glVertex3f;
  return EXCEPTION_CONTINUE_EXECUTION;
}
return EXCEPTION_CONTINUE_SEARCH;
}
void HookGl()
{
THREADENTRY32 te32;
CONTEXT ctx={0};
PVOID pglBegin = GetProcAddress( LoadLibrary( "opengl32.dll" ) , "glVertex3f" );
if ( !pglBegin )
{
  return;
}
HANDLE  hThreadSnap = CreateToolhelp32Snapshot( TH32CS_SNAPTHREAD, 0 );
if ( hThreadSnap )
{
  te32.dwSize = sizeof(THREADENTRY32 );
  if( Thread32First( hThreadSnap, &te32 ) )
  {
   do
   {
    if ( te32.th32OwnerProcessID == GetCurrentProcessId() && te32.th32ThreadID != GetCurrentThreadId() )
    {
     HANDLE hThread = OpenThread( THREAD_SUSPEND_RESUME | THREAD_SET_CONTEXT , 0 , te32.th32ThreadID );
     if ( hThread )
     {
      ZeroMemory( &ctx , sizeof(ctx) );
      SuspendThread( hThread );
      GetThreadContext ( hThread ,  &ctx );
      ctx.ContextFlags = CONTEXT_i486 | CONTEXT_DEBUG_REGISTERS ;
      ctx.Dr0 = (DWORD) pglBegin;
      ctx.Dr7 = (DWORD) 1;
      SetThreadContext( hThread , &ctx) ;
      ResumeThread( hThread );
      CloseHandle( hThread );
     }
    }
    
   }while( Thread32Next(hThreadSnap, &te32 ) );
  
  }
  CloseHandle( hThreadSnap );
}
}
BOOL APIENTRY DllMain( HMODULE hModule,
                       DWORD  ul_reason_for_call,
                       LPVOID lpReserved
      )
{
switch ( ul_reason_for_call )
{
  case DLL_PROCESS_ATTACH:
   AddVectoredExceptionHandler ( 1 , VectoredHandler );
   HookGl();
  break;
}
return true;
}
在 VS 2005下编译成功，不会编译的朋友可以到附件里面去下！
在豆客平台启动CS游戏后找任意一款注入工具注入后可以达到亮人的效果。

什么是特殊用户啊 是不是买了特殊用户就能用作弊器了？

特殊用户就是VIP会员