Game Offset Mega-Thread

looks like no need to update the offset...
still same yeah?

Code:

========================= OFFSETS =========================
>> Dumped @ Sun May 08 12:22:56 2016
[+] m_iHealth: 0xFC
[+] m_iTeamNum: 0xF0
[+] m_vVecPunch: 0x3018
[+] m_bBoneMatrix: 0x2698
[+] m_vVecVisualPunch: 0x300C
[+] m_iArmorValue: 0xA9E8
[+] m_iFlags: 0x100
[+] m_iGlowIndex: 0xA310
[+] m_fFlashDuration: 0xA2F8
[+] m_fFlashMaxAlpha: 0xA2F4
[+] m_iLifeState: 0x25B
[+] m_bIsDefusing: 0x3894

Anyone know the offset for jump?

- - - Updated - - -

Offsets:

(don't know how to do that thing with the scroll and words in a box)

Build Date : 8/5/2016 - 10:20:3

- - - - - - - - - - - -
- Tool by Y3t1y3t(uc) -
- - - - - - - - - - - -

- - - - - -
- Entitys -
- - - - - -

> LocalPlayer 0x0
> EntityList 0x0

- - - - - - -
- RadarBase -
- - - - - - -

> RadarBase 0x85CAC
> RadarPointer 0x20
> RadarHealth 0x20
> RadarName 0x24
> RadarSize 0x1EC

- - - - - -
- NetVars -
- - - - - -

> m_flNextPrimaryAttack 0x31C8
> m_hOwner 0xC7000000
> m_iState 0x227D
> m_iClip1 0xC7000000
> m_iClip2 0x227D5394
> m_hActiveWeapon 0x2EE8
> m_bSpotted 0xC8
> m_hOwnerEntity 0x7D841CB9
> m_vecOrigin 0x128
> m_iTeamNum 0xF4
> m_Local 0x2FA8
> m_vecViewOffset 0x104
> m_nTickBase 0x3410
> m_vecVelocity 0x110
> m_vecBaseVelocity 0x11C
> m_lifestate 0x3240227D
> m_fFlags 0x1144F422
> m_iHealth 0x7DA36005
> m_iFOV 0x5C7DB85
> m_flFlashMaxAlpha 0x16746422
> m_flFlashDuration 0x16746426
> m_angEyeAngles 0x20FBE81D
> m_iAccount 0x2317E81D
> m_iCrossHairID 0x227EAEE8
> m_fAccuracyPenalty 0x32BC
> m_iWeaponID 0x32D8
> m_vecPunch 0x3018

- - - - -
- Other -
- - - - -

> BoneMatrix 0x100FF314
> GlobalVars 0x610030
> EnginePointer 0x610334
> EnginePosition 0x598A60
> ViewMatrix 0x50F8000

- - - Updated - - -

I mean the address of Jump

Originally Posted by TheCookieBoyYT

Use CODE tags.

http://www.mpgh.net/forum/showthread...1#post11605778

ForceJump ( - client.dll if you want to get the offset ): 0x4F34C68
1. A8 02 BF ) + 13
2. A8 02 BF ) + 13
3. \xA8\x02\xBF ) + 13 : xxx

Originally Posted by WasserEsser

2 complicated.

Originally Posted by TheCookieBoyYT

2 complicated.

m_dwForceJump = 0x04F34C68

What WasserEsser put was code to get the offsets with pattern scanning.

Originally Posted by CyanRed3

m_dwForceJump = 0x04F34C68

What WasserEsser put was code to get the offsets with pattern scanning.

Together with the offset underlined and bold.

ForceJump ( - client.dll if you want to get the offset ): 0x4F34C68
1. A8 02 BF ) + 13
2. A8 02 BF ) + 13
3. \xA8\x02\xBF ) + 13 : xxx

Originally Posted by WasserEsser

Together with the offset underlined and bold.

ForceJump ( - client.dll if you want to get the offset ): 0x4F34C68
1. A8 02 BF ) + 13
2. A8 02 BF ) + 13
3. \xA8\x02\xBF ) + 13 : xxx

Could you make signatures for BoneMatrix(Offset: m_nForceBone + 0x1C), GetStudioModel(Vtable), and GetModelName(Vtable)?

Also, make a youtube tutorial on how to find the signatures since i don't have the time to read your tutorial.
Well, i have been starting to read it but i mean, it could be easier for other's with a utube tutorial too

Regards.

Originally Posted by viking911

Could you make signatures for BoneMatrix(Offset: m_nForceBone + 0x1C), GetStudioModel(Vtable), and GetModelName(Vtable)?

Regards.

Code:

// Every offset ( Pattern ) + Offset ] ) is in Hexadecimal!

EntityList ( - client.dll if you want to get the offset ): 0x4A9F8C4
1. E6 04 81 C6 ? ? ? ? 89 ) + 4 ]
2. E6 04 81 C6 ?? ?? ?? ?? 89 ) + 4 ]
3. E6, 04, 81, C6, 00, 00, 00, 00, 89 ) + 4 ]
4. \xE6\x04\x81\xC6\x00\x00\x00\x00\x89 ) + 4 ] : xxxx????x

NumberOfEntities( client.dll + ( EntityList - 4 ) + HighestEntityIndex ): 0x2002C
1. 8D 9E ? ? ? ? 8D 1C ) + 2 ]
2. 8D 9E ?? ?? ?? ?? 8D 1C ) + 2 ]
3. 8D, 9E, 00, 00, 00, 00, 8D, 1C ) + 2 ]
4. \x8D\x9E\x00\x00\x00\x00\x8D\x1C ) + 2 ] : xx????xx

HighestEntityIndex ( client.dll + ( EntityList - 4 ) + HighestEntityIndex ): 0x20038
1. 06 89 83 ? ? ? ? 8B 75 ) + 3 ]
2. 06 89 83 ?? ?? ?? ?? 8B 75 ) + 3 ]
3. 06, 89, 83, 00, 00, 00, 00, 8B, 75 ) +  3 ]
4. \x06\x89\x83\x00\x00\x00\x00\x8B\x75 ) + 3 ] : xxx????xx

LocalPlayer ( - client.dll if you want to get the offset ): 0x4F3336C
1. FC E8 ? ? ? ? 8B 3D ) + 8 ]
2. FC E8 ?? ?? ?? ?? 8B 3D ) + 8 ]
3. FC, E8, 00, 00, 00, 00, 8B, 3D ) + 8 ]
4. \xFC\xE8\x00\x00\x00\x00\x8B\x3D ) + 8 ] : xx????xx

ClientState ( - engine.dll if you want to get the offset ): 0x610334
1. CC A1 ? ? ? ? 8D ) + 1 ]
2. CC A1 ?? ?? ?? ?? 8D ) + 1 ]
3. CC, A1, 00, 00, 00, 00, 8D ) + 1 ]
4. \xCC\xA1\x00\x00\x00\x00\x8D ) + 1 ] : xx????x

LocalPlayerIndex ( engine.dll + ClientState ] + LocalPlayerIndex ): 0x178
1. 8B 80 ? ? ? ? 40 C3 ) + 2 ]
2. 8B 80 ?? ?? ?? ?? 40 C3 ) + 2 ]
3. 8B, 80, 00, 00, 00, 00, 40, C3 ) + 2 ]
4. \x8B\x80\x00\x00\x00\x00\x40\xC3 ) + 2 ] : xx????xx

GetModelIndex ( VTable Function of IVModelInfo ): 0x26C560
1. 8B F1 85 FF 75 ? 5F ) - 8
2. 8B F1 85 FF 75 ?? 5F ) - 8
3. 8B, F1, 85, FF, 75, 00, 5F ) - 8 
4. \x8B\xF1\x85\xFF\x75\x00\x5F ) - 8 : xxxxx?x

ViewMatrix ( - client.dll if you want to get the offset ): 0x4A91464
1. E8 ? ? ? ? 8D 95 E0 ) - 1A ] + 90
2. E8 ?? ?? ?? ?? 8D 95 E0 ) - 1A ] + 90
3. E8, 00, 00, 00, 00, 8D, 95, E0 ) - 1A ] + 90
4. \xE8\x00\x00\x00\x00\x8D\x95\xE0 ) - 1A ] + 90 : x????xxx

ForceFullUpdate ( engine.dll + ClientState ] + ForceFullUpdate ): 0x16C
1. B0 FF B7 ? ? ? ? E8 ) + 3 ]
2. B0 FF B7 ?? ?? ?? ?? E8 ) + 3 ]
3. B0, FF, B7, 00, 00, 00, 00, E8 ) + 3 ]
4. \xB0\xFF\xB7\x00\x00\x00\x00\xE8 ) + 3 ] : xxx????x

ForceJump ( - client.dll if you want to get the offset ): 0x4F34C68
1. A8 02 BF ) + 13 ]
2. A8 02 BF ) + 13 ]
3. A8, 02, BF ) + 13 ]
4. \xA8\x02\xBF ) + 13 ] : xxx

ForceAttack ( - client.dll if you want to get the offset ): 0x2EDF8D0
1. A8 01 BF ) + 13 ]
2. A8 01 BF ) + 13 ]
3. A8, 01, BF ) + 13 ]
4. \xA8\x01\xBF ) + 13 ] : xxx

ForceAttack2 ( - client.dll if you want to get the offset ): 0x2EDF8AC
1. A8 80 BF ) + 9A ]
2. A8 80 BF ) + 9A ]
3. A8, 80, BF ) + 9A ]
4. \xA8\x80\xBF ) + 9A ] : xxx

ForceForward ( - client.dll if you want to get the offset ): 0x2EDF8E8
1. A8 08 BF ) + 13 ]
2. A8 08 BF ) + 13 ]
3. A8, 08, BF ) + 13 ]
4. \xA8\x08\xBF ) + 13 ] : xxx

ForceBackward ( - client.dll if you want to get the offset ): 0x2EDF8F4
1. A8 10 BF ) + 13 ]
2. A8 10 BF ) + 13 ]
3. A8, 10, BF ) + 13 ]
4. \xA8\x10\xBF ) + 13 ] : xxx

ForceLeft ( - client.dll if you want to get the offset ): 0x2EDF894
1. A8 80 BF ) + 44 ]
2. A8 80 BF ) + 44 ]
3. A8, 80, BF ) + 44 ]
4. \xA8\x80\xBF ) + 44 ] : xxx

ForceRight ( - client.dll if you want to get the offset ): 0x2EDF8A0
1. A8 80 BF ) + 79 ]
2. A8 80 BF ) + 79 ]
3. A8, 80, BF ) + 79 ]
4. \xA8\x80\xBF ) + 79 ] : xxx

bSendPackets: 0xF8797
1. 01 8B 01 8B 40 10 )
2. 01 8B 01 8B 40 10 )
3. 01, 8B, 01, 8B, 40, 10 )
4. \x01\x8B\x01\x8B\x40\x10 ) : xxxxxx

GlowObject ( - client.dll if you want to get the offset ): 0x4FB576C
1. D1 34 A1 ) + 3 ]
2. D1 34 A1 ) + 3 ]
3. D1, 34, A1 ) + 3 ]
4. \xD1\x34\xA1 ) + 3 ] : xxx

GlobalVars ( - client.dll if you want to get the offset ): 0xA7839C
1. 8B 0D ? ? ? ? 0F 28 D1 ) + 2 ]
2. 8B 0D ?? ?? ?? ?? 0F 28 D1 ) + 2 ]
3. 8B, 0D, 00, 00, 00, 00, 0F, 28, D1 ) + 2 ]
4. \x8B\x0D\x00\x00\x00\x00\x0F\x28\xD1 ) + 2 ] : xx????xxx

CInput ( - client.dll if you want to get the offset ): 0x4EEA340
1. 24 E8 ? ? ? ? FF D7 ) - 8 ]
2. 24 E8 ?? ?? ?? ?? FF D7 ) - 8 ]
3. 24, E8, 00, 00, 00, 00, FF, D7 ) - 8 ]
4. \x24\xE8\x00\x00\x00\x00\xFF\xD7 ) - 8 ] : xx????xx

Sensitivity ( - client.dll if you want to get the offset ): 0xA89CE4
1. 45 0C 9F F6 C4 44 7A ) + 1A ]
2. 45 0C 9F F6 C4 44 7A ) + 1A ]
3. 45, 0C, 9F, F6, C4, 44, 7A ) + 1A ]
4. \x45\x0C\x9F\xF6\xC4\x44\x7A ) + 1A ] : xxxxxxx

PlayerResources ( - client.dll if you want to get the offset ): 0x2EDD8F4
1. 8B 04 88 03 F0 ) + 2C ]
2. 8B 04 88 03 F0 ) + 2C ]
3. 8B, 04, 88, 03, F0 ) + 2C ]
4. \x8B\x04\x88\x03\xF0 ) + 2C ] : xxxxx

RadarBase ( - client.dll if you want to get the offset ): 0x4ED462C
1. 6A 00 FF 90 98 00 ) + 13 ]
2. 6A 00 FF 90 98 00 ) + 13 ]
3. 6A, 00, FF, 90, 98, 00 ) + 13 ]
4. \x6A\x00\xFF\x90\x98\x00 ) + 13 ] : xxxxxx

BoneMatrix: 0x2698
1. 3C B0 FF 75 ) + 7 ]
2. 3C B0 FF 75 ) + 7 ]
3. 3C, B0, FF, 75 ) + 7 ]
4. \x3C\xB0\xFF\x75 ) + 7 ] : xxxx

GetModelName ( VTable Function of IVModelInfo ) : 0x25B930
1. 5D C2 04 00 83 C0 ) - F
2. 5D C2 04 00 83 C0 ) - F
3. 5D, C2, 04, 00, 83, C0 ) - F
4. \x5D\xC2\x04\x00\x83\xC0 ) - F : xxxxxx

GetStudioModel ( VTable Function of IVModelInfo ) : 0x25BB30
1. 04 00 8B 80 3C ) - 13
2. 04 00 8B 80 3C ) - 13
3. 04, 00, 8B, 80, 3C ) - 13
4. \x04\x00\x8B\x80\x3C ) - 13 : xxxxx

BoneMatrix, GetModelName and GetStudioModel are added.

Originally Posted by WasserEsser

Code:

// Every offset ( Pattern ) + Offset ] ) is in Hexadecimal! EntityList ( - client.dll if you want to get the offset ): 0x4A9F8C4 1. E6 04 81 C6 ? ? ? ? 89 ) + 4 ] 2. E6 04 81 C6 ?? ?? ?? ?? 89 ) + 4 ] 3. E6, 04, 81, C6, 00, 00, 00, 00, 89 ) + 4 ] 4. \xE6\x04\x81\xC6\x00\x00\x00\x00\x89 ) + 4 ] : xxxx????x NumberOfEntities( client.dll + ( EntityList - 4 ) + HighestEntityIndex ): 0x2002C 1. 8D 9E ? ? ? ? 8D 1C ) + 2 ] 2. 8D 9E ?? ?? ?? ?? 8D 1C ) + 2 ] 3. 8D, 9E, 00, 00, 00, 00, 8D, 1C ) + 2 ] 4. \x8D\x9E\x00\x00\x00\x00\x8D\x1C ) + 2 ] : xx????xx HighestEntityIndex ( client.dll + ( EntityList - 4 ) + HighestEntityIndex ): 0x20038 1. 06 89 83 ? ? ? ? 8B 75 ) + 3 ] 2. 06 89 83 ?? ?? ?? ?? 8B 75 ) + 3 ] 3. 06, 89, 83, 00, 00, 00, 00, 8B, 75 ) + 3 ] 4. \x06\x89\x83\x00\x00\x00\x00\x8B\x75 ) + 3 ] : xxx????xx LocalPlayer ( - client.dll if you want to get the offset ): 0x4F3336C 1. FC E8 ? ? ? ? 8B 3D ) + 8 ] 2. FC E8 ?? ?? ?? ?? 8B 3D ) + 8 ] 3. FC, E8, 00, 00, 00, 00, 8B, 3D ) + 8 ] 4. \xFC\xE8\x00\x00\x00\x00\x8B\x3D ) + 8 ] : xx????xx ClientState ( - engine.dll if you want to get the offset ): 0x610334 1. CC A1 ? ? ? ? 8D ) + 1 ] 2. CC A1 ?? ?? ?? ?? 8D ) + 1 ] 3. CC, A1, 00, 00, 00, 00, 8D ) + 1 ] 4. \xCC\xA1\x00\x00\x00\x00\x8D ) + 1 ] : xx????x LocalPlayerIndex ( engine.dll + ClientState ] + LocalPlayerIndex ): 0x178 1. 8B 80 ? ? ? ? 40 C3 ) + 2 ] 2. 8B 80 ?? ?? ?? ?? 40 C3 ) + 2 ] 3. 8B, 80, 00, 00, 00, 00, 40, C3 ) + 2 ] 4. \x8B\x80\x00\x00\x00\x00\x40\xC3 ) + 2 ] : xx????xx GetModelIndex ( VTable Function of IVModelInfo ): 0x26C560 1. 8B F1 85 FF 75 ? 5F ) - 8 2. 8B F1 85 FF 75 ?? 5F ) - 8 3. 8B, F1, 85, FF, 75, 00, 5F ) - 8 4. \x8B\xF1\x85\xFF\x75\x00\x5F ) - 8 : xxxxx?x ViewMatrix ( - client.dll if you want to get the offset ): 0x4A91464 1. E8 ? ? ? ? 8D 95 E0 ) - 1A ] + 90 2. E8 ?? ?? ?? ?? 8D 95 E0 ) - 1A ] + 90 3. E8, 00, 00, 00, 00, 8D, 95, E0 ) - 1A ] + 90 4. \xE8\x00\x00\x00\x00\x8D\x95\xE0 ) - 1A ] + 90 : x????xxx ForceFullUpdate ( engine.dll + ClientState ] + ForceFullUpdate ): 0x16C 1. B0 FF B7 ? ? ? ? E8 ) + 3 ] 2. B0 FF B7 ?? ?? ?? ?? E8 ) + 3 ] 3. B0, FF, B7, 00, 00, 00, 00, E8 ) + 3 ] 4. \xB0\xFF\xB7\x00\x00\x00\x00\xE8 ) + 3 ] : xxx????x ForceJump ( - client.dll if you want to get the offset ): 0x4F34C68 1. A8 02 BF ) + 13 ] 2. A8 02 BF ) + 13 ] 3. A8, 02, BF ) + 13 ] 4. \xA8\x02\xBF ) + 13 ] : xxx ForceAttack ( - client.dll if you want to get the offset ): 0x2EDF8D0 1. A8 01 BF ) + 13 ] 2. A8 01 BF ) + 13 ] 3. A8, 01, BF ) + 13 ] 4. \xA8\x01\xBF ) + 13 ] : xxx ForceAttack2 ( - client.dll if you want to get the offset ): 0x2EDF8AC 1. A8 80 BF ) + 9A ] 2. A8 80 BF ) + 9A ] 3. A8, 80, BF ) + 9A ] 4. \xA8\x80\xBF ) + 9A ] : xxx ForceForward ( - client.dll if you want to get the offset ): 0x2EDF8E8 1. A8 08 BF ) + 13 ] 2. A8 08 BF ) + 13 ] 3. A8, 08, BF ) + 13 ] 4. \xA8\x08\xBF ) + 13 ] : xxx ForceBackward ( - client.dll if you want to get the offset ): 0x2EDF8F4 1. A8 10 BF ) + 13 ] 2. A8 10 BF ) + 13 ] 3. A8, 10, BF ) + 13 ] 4. \xA8\x10\xBF ) + 13 ] : xxx ForceLeft ( - client.dll if you want to get the offset ): 0x2EDF894 1. A8 80 BF ) + 44 ] 2. A8 80 BF ) + 44 ] 3. A8, 80, BF ) + 44 ] 4. \xA8\x80\xBF ) + 44 ] : xxx ForceRight ( - client.dll if you want to get the offset ): 0x2EDF8A0 1. A8 80 BF ) + 79 ] 2. A8 80 BF ) + 79 ] 3. A8, 80, BF ) + 79 ] 4. \xA8\x80\xBF ) + 79 ] : xxx bSendPackets: 0xF8797 1. 01 8B 01 8B 40 10 ) 2. 01 8B 01 8B 40 10 ) 3. 01, 8B, 01, 8B, 40, 10 ) 4. \x01\x8B\x01\x8B\x40\x10 ) : xxxxxx GlowObject ( - client.dll if you want to get the offset ): 0x4FB576C 1. D1 34 A1 ) + 3 ] 2. D1 34 A1 ) + 3 ] 3. D1, 34, A1 ) + 3 ] 4. \xD1\x34\xA1 ) + 3 ] : xxx GlobalVars ( - client.dll if you want to get the offset ): 0xA7839C 1. 8B 0D ? ? ? ? 0F 28 D1 ) + 2 ] 2. 8B 0D ?? ?? ?? ?? 0F 28 D1 ) + 2 ] 3. 8B, 0D, 00, 00, 00, 00, 0F, 28, D1 ) + 2 ] 4. \x8B\x0D\x00\x00\x00\x00\x0F\x28\xD1 ) + 2 ] : xx????xxx CInput ( - client.dll if you want to get the offset ): 0x4EEA340 1. 24 E8 ? ? ? ? FF D7 ) - 8 ] 2. 24 E8 ?? ?? ?? ?? FF D7 ) - 8 ] 3. 24, E8, 00, 00, 00, 00, FF, D7 ) - 8 ] 4. \x24\xE8\x00\x00\x00\x00\xFF\xD7 ) - 8 ] : xx????xx Sensitivity ( - client.dll if you want to get the offset ): 0xA89CE4 1. 45 0C 9F F6 C4 44 7A ) + 1A ] 2. 45 0C 9F F6 C4 44 7A ) + 1A ] 3. 45, 0C, 9F, F6, C4, 44, 7A ) + 1A ] 4. \x45\x0C\x9F\xF6\xC4\x44\x7A ) + 1A ] : xxxxxxx PlayerResources ( - client.dll if you want to get the offset ): 0x2EDD8F4 1. 8B 04 88 03 F0 ) + 2C ] 2. 8B 04 88 03 F0 ) + 2C ] 3. 8B, 04, 88, 03, F0 ) + 2C ] 4. \x8B\x04\x88\x03\xF0 ) + 2C ] : xxxxx RadarBase ( - client.dll if you want to get the offset ): 0x4ED462C 1. 6A 00 FF 90 98 00 ) + 13 ] 2. 6A 00 FF 90 98 00 ) + 13 ] 3. 6A, 00, FF, 90, 98, 00 ) + 13 ] 4. \x6A\x00\xFF\x90\x98\x00 ) + 13 ] : xxxxxx BoneMatrix: 0x2698 1. 3C B0 FF 75 ) + 7 ] 2. 3C B0 FF 75 ) + 7 ] 3. 3C, B0, FF, 75 ) + 7 ] 4. \x3C\xB0\xFF\x75 ) + 7 ] : xxxx GetModelName ( VTable Function of IVModelInfo ) : 0x25B930 1. 5D C2 04 00 83 C0 ) - F 2. 5D C2 04 00 83 C0 ) - F 3. 5D, C2, 04, 00, 83, C0 ) - F 4. \x5D\xC2\x04\x00\x83\xC0 ) - F : xxxxxx GetStudioModel ( VTable Function of IVModelInfo ) : 0x25BB30 1. 04 00 8B 80 3C ) - 13 2. 04 00 8B 80 3C ) - 13 3. 04, 00, 8B, 80, 3C ) - 13 4. \x04\x00\x8B\x80\x3C ) - 13 : xxxxx

BoneMatrix, GetModelName and GetStudioModel are added.

@WasserEsser, You should add signatures for ItemIDHigh, ItemIDLow, OriginalOwnerXuidLow, OriginalOwnerXuidHigh, FallbackStatTrak, iEntityQuality, FallbackPaintKit, flFallbackWear. I know alot of people use these around this forum for their skinchangers etc.

Originally Posted by WasserEsser

snip~

good god...
Alright then... hmm, could you add:

ExecuteClientCmd (Engine VTable)
VClient017 Interface <- Client Interface
VEngineClient Interface <- Engine Interface
IsTakingScreenShot (Engine VTable : 92)
IsInGame and IsConnected (Engine VTable : i believe it's 26 & 27)

Originally Posted by viking911

Sorry for the late response.

I provided a pattern for IsTakingScreenshot; though it just returns the variable, which i also made a pattern for. Rather check the boolean

IsInGame function pattern could be unreliable if valve decides to change the size of the previous function. The same can happen to the pattern of the IsTakingScreenshot function. They are both very small and simple, meaning their pattern is just not unique. IsInGame just checks for *( ClientState + SignOnState ) == 6 while IsConnected checks for >= 2. Just read ClientState + SignOnState and check for 6 yourself. It's enough if you only check it for == 6, most people also check for >= 2 ( IsConnected ), which is redundant if they check for IsInGame.

Code:

// Every offset ( Pattern ) + Offset ] ) is in Hexadecimal!

EntityList ( - client.dll if you want to get the offset ): 0x4A9F8C4
1. E6 04 81 C6 ? ? ? ? 89 ) + 4 ]
2. E6 04 81 C6 ?? ?? ?? ?? 89 ) + 4 ]
3. 0xE6, 0x04, 0x81, 0xC6, 0x00, 0x00, 0x00, 0x00, 0x89 ) + 4 ]
4. \xE6\x04\x81\xC6\x00\x00\x00\x00\x89 ) + 4 ] : xxxx????x

NumberOfEntities( client.dll + ( EntityList - 4 ) + HighestEntityIndex ): 0x2002C
1. 8D 9E ? ? ? ? 8D 1C ) + 2 ]
2. 8D 9E ?? ?? ?? ?? 8D 1C ) + 2 ]
3. 0x8D, 0x9E, 0x00, 0x00, 0x00, 0x00, 0x8D, 0x1C ) + 2 ]
4. \x8D\x9E\x00\x00\x00\x00\x8D\x1C ) + 2 ] : xx????xx

HighestEntityIndex ( client.dll + ( EntityList - 4 ) + HighestEntityIndex ): 0x20038
1. 06 89 83 ? ? ? ? 8B 75 ) + 3 ]
2. 06 89 83 ?? ?? ?? ?? 8B 75 ) + 3 ]
3. 0x06, 0x89, 0x83, 0x00, 0x00, 0x00, 0x00, 0x8B, 0x75 ) +  3 ]
4. \x06\x89\x83\x00\x00\x00\x00\x8B\x75 ) + 3 ] : xxx????xx

LocalPlayer ( - client.dll if you want to get the offset ): 0x4F3336C
1. FC E8 ? ? ? ? 8B 3D ) + 8 ]
2. FC E8 ?? ?? ?? ?? 8B 3D ) + 8 ]
3. 0xFC, 0xE8, 0x00, 0x00, 0x00, 0x00, 0x8B, 0x3D ) + 8 ]
4. \xFC\xE8\x00\x00\x00\x00\x8B\x3D ) + 8 ] : xx????xx

ClientState ( - engine.dll if you want to get the offset ): 0x610334
1. CC A1 ? ? ? ? 8D ) + 1 ]
2. CC A1 ?? ?? ?? ?? 8D ) + 1 ]
3. 0xCC, 0xA1, 0x00, 0x00, 0x00, 0x00, 0x8D ) + 1 ]
4. \xCC\xA1\x00\x00\x00\x00\x8D ) + 1 ] : xx????x

LocalPlayerIndex ( engine.dll + ClientState ] + LocalPlayerIndex ): 0x178
1. 8B 80 ? ? ? ? 40 C3 ) + 2 ]
2. 8B 80 ?? ?? ?? ?? 40 C3 ) + 2 ]
3. 0x8B, 0x80, 0x00, 0x00, 0x00, 0x00, 0x40, 0xC3 ) + 2 ]
4. \x8B\x80\x00\x00\x00\x00\x40\xC3 ) + 2 ] : xx????xx

GetModelIndex ( VTable Function of IVModelInfo ): 0x26C560
1. 8B F1 85 FF 75 ? 5F ) - 8
2. 8B F1 85 FF 75 ?? 5F ) - 8
3. 0x8B, 0xF1, 0x85, 0xFF, 0x75, 0x00, 0x5F ) - 8
4. \x8B\xF1\x85\xFF\x75\x00\x5F ) - 8 : xxxxx?x

ViewMatrix ( - client.dll if you want to get the offset ): 0x4A91464
1. E8 ? ? ? ? 8D 95 E0 ) - 1A ] + 90
2. E8 ?? ?? ?? ?? 8D 95 E0 ) - 1A ] + 90
3. 0xE8, 0x00, 0x00, 0x00, 0x00, 0x8D, 0x95, 0xE0 ) - 1A ] + 90
4. \xE8\x00\x00\x00\x00\x8D\x95\xE0 ) - 1A ] + 90 : x????xxx

ForceFullUpdate ( engine.dll + ClientState ] + ForceFullUpdate ): 0x16C
1. B0 FF B7 ? ? ? ? E8 ) + 3 ]
2. B0 FF B7 ?? ?? ?? ?? E8 ) + 3 ]
3. 0xB0, 0xFF, 0xB7, 0x00, 0x00, 0x00, 0x00, 0xE8 ) + 3 ]
4. \xB0\xFF\xB7\x00\x00\x00\x00\xE8 ) + 3 ] : xxx????x

ForceJump ( - client.dll if you want to get the offset ): 0x4F34C68
1. A8 02 BF ) + 13 ]
2. A8 02 BF ) + 13 ]
3. 0xA8, 0x02, 0xBF ) + 13 ]
4. \xA8\x02\xBF ) + 13 ] : xxx

ForceAttack ( - client.dll if you want to get the offset ): 0x2EDF8D0
1. A8 01 BF ) + 13 ]
2. A8 01 BF ) + 13 ]
3. 0xA8, 0x01, 0xBF ) + 13 ]
4. \xA8\x01\xBF ) + 13 ] : xxx

ForceAttack2 ( - client.dll if you want to get the offset ): 0x2EDF8AC
1. A8 80 BF ) + 9A ]
2. A8 80 BF ) + 9A ]
3. 0xA8, 0x80, 0xBF ) + 9A ]
4. \xA8\x80\xBF ) + 9A ] : xxx

ForceForward ( - client.dll if you want to get the offset ): 0x2EDF8E8
1. A8 08 BF ) + 13 ]
2. A8 08 BF ) + 13 ]
3. 0xA8, 0x08, 0xBF ) + 13 ]
4. \xA8\x08\xBF ) + 13 ] : xxx

ForceBackward ( - client.dll if you want to get the offset ): 0x2EDF8F4
1. A8 10 BF ) + 13 ]
2. A8 10 BF ) + 13 ]
3. 0xA8, 0x10, 0xBF ) + 13 ]
4. \xA8\x10\xBF ) + 13 ] : xxx

ForceLeft ( - client.dll if you want to get the offset ): 0x2EDF894
1. A8 80 BF ) + 44 ]
2. A8 80 BF ) + 44 ]
3. 0xA8, 0x80, 0xBF ) + 44 ]
4. \xA8\x80\xBF ) + 44 ] : xxx

ForceRight ( - client.dll if you want to get the offset ): 0x2EDF8A0
1. A8 80 BF ) + 79 ]
2. A8 80 BF ) + 79 ]
3. 0xA8, 0x80, 0xBF ) + 79 ]
4. \xA8\x80\xBF ) + 79 ] : xxx

ForceReload ( - client.dll if you want to get the offset ) : 0x4F34C98
1. A8 80 BF ) + C5 ]
2. A8 80 BF ) + C5 ]
3. 0xA8, 0x80, 0xBF ) + C5 ]
4. \xA8\x80\xBF ) + C5 ] : xxx

bSendPackets: 0xF8797
1. 01 8B 01 8B 40 10 )
2. 01 8B 01 8B 40 10 )
3. 0x01, 0x8B, 0x01, 0x8B, 0x40, 0x10 )
4. \x01\x8B\x01\x8B\x40\x10 ) : xxxxxx

GlowObject ( - client.dll if you want to get the offset ): 0x4FB576C
1. D1 34 A1 ) + 3 ]
2. D1 34 A1 ) + 3 ]
3. 0xD1, 0x34, 0xA1 ) + 3 ]
4. \xD1\x34\xA1 ) + 3 ] : xxx

GlobalVars ( - client.dll if you want to get the offset ): 0xA7839C
1. 8B 0D ? ? ? ? 0F 28 D1 ) + 2 ]
2. 8B 0D ?? ?? ?? ?? 0F 28 D1 ) + 2 ]
3. 0x8B, 0x0D, 0x00, 0x00, 0x00, 0x00, 0x0F, 0x28, 0xD1 ) + 2 ]
4. \x8B\x0D\x00\x00\x00\x00\x0F\x28\xD1 ) + 2 ] : xx????xxx

CInput ( - client.dll if you want to get the offset ): 0x4EEA340
1. 24 E8 ? ? ? ? FF D7 ) - 8 ]
2. 24 E8 ?? ?? ?? ?? FF D7 ) - 8 ]
3. 0x24, 0xE8, 0x00, 0x00, 0x00, 0x00, 0xFF, 0xD7 ) - 8 ]
4. \x24\xE8\x00\x00\x00\x00\xFF\xD7 ) - 8 ] : xx????xx

Sensitivity ( - client.dll if you want to get the offset ): 0xA89CE4
1. 45 0C 9F F6 C4 44 7A ) + 1A ]
2. 45 0C 9F F6 C4 44 7A ) + 1A ]
3. 0x45, 0x0C, 0x9F, 0xF6, 0xC4, 0x44, 0x7A ) + 1A ]
4. \x45\x0C\x9F\xF6\xC4\x44\x7A ) + 1A ] : xxxxxxx

PlayerResources ( - client.dll if you want to get the offset ): 0x2EDD8F4
1. 8B 04 88 03 F0 ) + 2C ]
2. 8B 04 88 03 F0 ) + 2C ]
3. 0x8B, 0x04, 0x88, 0x03, 0xF0 ) + 2C ]
4. \x8B\x04\x88\x03\xF0 ) + 2C ] : xxxxx

RadarBase ( - client.dll if you want to get the offset ): 0x4ED462C
1. 6A 00 FF 90 98 00 ) + 13 ]
2. 6A 00 FF 90 98 00 ) + 13 ]
3. 0x6A, 0x00, 0xFF, 0x90, 0x98, 0x00 ) + 13 ]
4. \x6A\x00\xFF\x90\x98\x00 ) + 13 ] : xxxxxx

BoneMatrix: 0x2698
1. 3C B0 FF 75 ) + 7 ]
2. 3C B0 FF 75 ) + 7 ]
3. 0x3C, 0xB0, 0xFF, 0x75 ) + 7 ]
4. \x3C\xB0\xFF\x75 ) + 7 ] : xxxx

GetModelName ( VTable Function of IVModelInfo ) : 0x25B930
1. 5D C2 04 00 83 C0 ) - F
2. 5D C2 04 00 83 C0 ) - F
3. 0x5D, 0xC2, 0x04, 0x00, 0x83, 0xC0 ) - F
4. \x5D\xC2\x04\x00\x83\xC0 ) - F : xxxxxx

GetStudioModel ( VTable Function of IVModelInfo ) : 0x25BB30
1. 04 00 8B 80 3C ) - 13
2. 04 00 8B 80 3C ) - 13
3. 0x04, 0x00, 0x8B, 0x80, 0x3C ) - 13
4. \x04\x00\x8B\x80\x3C ) - 13 : xxxxx

ExecuteClientCmd ( VTable Function of IVEngineClient ) : 0xD3F9E
1. C4 08 E8 ? ? ? ? 5D ) - 1E
2. C4 08 E8 ?? ?? ?? ?? 5D ) - 1E
3. 0xC4, 0x08, 0xE8, 0x00, 0x00, 0x00, 0x00, 0x5D ) - 1E
4. \xC4\x08\xE8\x00\x00\x00\x00\x5D ) - 1E : xxx????x

IsTakingScreenshot ( VTable Function of IVEngineClient ) : 0xD52C0
1. C1 F3 0F 11 45 F8 D9 45 F8 8B ) + 16
2. C1 F3 0F 11 45 F8 D9 45 F8 8B ) + 16
3. 0xC1, 0xF3, 0x0F, 0x11, 0x45, 0xF8, 0xD9, 0x45, 0xF8, 0x8B ) + 16
4. \xC1\xF3\x0F\x11\x45\xF8\xD9\x45\xF8\x8B ) + 16 : xxxxxxxxxx

IsTakingScreenshot ( Variable ) : 0x894925
1. 3D ? ? ? ? 00 74 ? 8B 11 ) + 1 ]
2. 3D ?? ?? ?? ?? 00 74 ?? 8B 11 ) + 1 ]
3. 0x3D, 0x00, 0x00, 0x00, 0x00, 0x00, 0x74, 0x00, 0x8B, 0x11 ) + 1 ]
4. \x3D\x00\x00\x00\x00\x00\x74\x00\x8B\x11 ) + 1 ]

IsInGame ( VTable Function of IVEngineClient ) : 0xD45A0
1. CC 8B 0D ? ? ? ? 33 C0 83 B9 ? ? ? ? 06 ) + 1 ]
2. CC 8B 0D ?? ?? ?? ?? 33 C0 83 B9 ?? ?? ?? ?? 06 ) + 1 ]
3. 0xCC, 0x8B, 0x0D, 0x00, 0x00, 0x00, 0x00, 0x33, 0xC0, 0x83, 0xB9, 0x00, 0x00, 0x00, 0x00, 0x06 ) + 1 ]
4. \xCC\x8B\x0D\x00\x00\x00\x00\x33\xC0\x83\xB9\x00\x00\x00\x00\x06 ) + 1 ] : xxx????xxxx????x

SignOnState ( engine.dll + ClientState ] + SignOnState ) : 0x100
1. CC 8B 0D ? ? ? ? 33 C0 83 B9 ? ? ? ? 06 ) + B ]
2. CC 8B 0D ?? ?? ?? ?? 33 C0 83 B9 ?? ?? ?? ?? 06 ) + B ]
3. 0xCC, 0x8B, 0x0D, 0x00, 0x00, 0x00, 0x00, 0x33, 0xC0, 0x83, 0xB9, 0x00, 0x00, 0x00, 0x00, 0x06 ) + B ]
4. \xCC\x8B\x0D\x00\x00\x00\x00\x33\xC0\x83\xB9\x00\x00\x00\x00\x06 ) + B ] : xxx????xxxx????x

ClientClassHead ( Ptr returned by CHLClient::GetAllClasses; - client.dll if you want to get the offset ) : 0x2EDD9EC
1. 74 ? 8B 55 F4 8B 5D ) - 32 ]
2. 74 ?? 8B 55 F4 8B 5D ) - 32 ]
3. 0x74, 0x00, 0x8B, 0x55, 0xF4, 0x8B, 0x5D ) - 32 ]
4. \x74\x00\x8B\x55\xF4\x8B\x5D ) - 32 ] : x?xxxxx

@rwby I will see if i can find a reliable pattern for those, however, those netvars are kind of tricky. I'll see what i can do.

DT_WeaponCSBase -> m_fAccuracyPenalty: _________ 0x000032B0
DT_BaseAnimating -> m_nForceBone: ______________ 0x0000267C
DT_BaseCombatWeapon -> m_iState: _______________ 0x000031E8
DT_BaseCombatWeapon -> m_iClip1: _______________ 0x000031F4
DT_BaseCombatWeapon -> m_flNextPrimaryAttack: __ 0x000031C8
DT_BaseCombatWeapon -> m_bCanReload: ___________ 0x00003235
DT_BaseCombatWeapon -> m_iPrimaryAmmoType: _____ 0x000031EC
DT_BaseCombatWeapon -> m_iWeaponID: ____________ 0x000032DC
DT_WeaponCSBaseGun -> m_zoomLevel: _____________ 0x00003330
DT_BaseEntity -> m_bSpotted: ___________________ 0x00000939
DT_BaseEntity -> m_bSpottedByMask: _____________ 0x0000097C
DT_BaseEntity -> m_hOwnerEntity: _______________ 0x00000148
DT_BaseEntity -> m_vecOrigin: __________________ 0x00000134
DT_BaseEntity -> m_iTeamNum: ___________________ 0x000000F0
DT_CSPlayer -> m_flFlashMaxAlpha: ______________ 0x0000A2F4
DT_CSPlayer -> m_flFlashDuration: ______________ 0x0000A2F8
DT_CSPlayer -> m_iGlowIndex: ___________________ 0x0000A310
DT_CSPlayer -> m_angEyeAngles: _________________ 0x0000A9EC
DT_CSPlayer -> m_iAccount: _____________________ 0x0000A9DC
DT_CSPlayer -> m_ArmorValue: ___________________ 0x0000A9E8
DT_CSPlayer -> m_bGunGameImmunity: _____________ 0x000038A0
DT_CSPlayer -> m_iShotsFired: __________________ 0x0000A2B0
DT_CSPlayerResource -> CSPlayerResource: _______ 0x02EDD8F4
DT_CSPlayerResource -> m_iCompetitiveRanking: __ 0x00001A44
DT_CSPlayerResource -> m_iCompetitiveWins: _____ 0x00001B48
DT_CSPlayerResource -> m_iKills: _______________ 0x00000BE8
DT_CSPlayerResource -> m_iAssists: _____________ 0x00000CEC
DT_CSPlayerResource -> m_iDeaths: ______________ 0x00000DF0
DT_CSPlayerResource -> m_iPing: ________________ 0x00000AE4
DT_CSPlayerResource -> m_iScore: _______________ 0x00001940
DT_CSPlayerResource -> m_szClan: _______________ 0x00004120
DT_BasePlayer -> m_lifeState: __________________ 0x0000025B
DT_BasePlayer -> m_fFlags: _____________________ 0x00000100
DT_BasePlayer -> m_iHealth: ____________________ 0x000000FC
DT_BasePlayer -> m_hLastWeapon: ________________ 0x000032EC
DT_BasePlayer -> m_hMyWeapons: _________________ 0x00002DE8
DT_BasePlayer -> m_hActiveWeapon: ______________ 0x00002EE8
DT_BasePlayer -> m_Local: ______________________ 0x00002FA8
DT_BasePlayer -> m_vecViewOffset[0]: ___________ 0x00000104
DT_BasePlayer -> m_nTickBase: __________________ 0x00003410
DT_BasePlayer -> m_vecVelocity[0]: _____________ 0x00000110
DT_BasePlayer -> m_szLastPlaceName: ____________ 0x00003594
DT_Local -> m_vecPunch: ________________________ 0x00003018
DT_Local -> m_iCrossHairID: ____________________ 0x0000AA44
BaseEntity -> m_bDormant: ______________________ 0x000000E9
BaseEntity -> m_dwModel: _______________________ 0x0000006C
BaseEntity -> m_dwIndex: _______________________ 0x00000064
BaseEntity -> m_dwBoneMatrix: __________________ 0x00002698
BaseEntity -> m_bMoveType: _____________________ 0x00000258
ClientState -> m_dwClientState: ________________ 0x00610334
ClientState -> m_dwLocalPlayerIndex: ___________ 0x00000178
ClientState -> m_dwInGame: _____________________ 0x00000100
ClientState -> m_dwMaxPlayer: __________________ 0x00000308
ClientState -> m_dwMapDirectory: _______________ 0x00000180
ClientState -> m_dwMapname: ____________________ 0x00000284
ClientState -> m_dwPlayerInfo: _________________ 0x0000523C
ClientState -> m_dwViewAngles: _________________ 0x00004D0C
EngineRender -> m_dwViewMatrix: ________________ 0x04A91464
EngineRender -> m_dwEnginePosition: ____________ 0x006BEB3C
RadarBase -> m_dwRadarBase: ____________________ 0x04ED462C
RadarBase -> m_dwRadarBasePointer: _____________ 0x00000050
LocalPlayer -> m_dwLocalPlayer: ________________ 0x00A844DC
EntityList -> m_dwEntityList: __________________ 0x04A9F8D4
WeaponTable -> m_dwWeaponTable: ________________ 0x04EE6A3C
WeaponTable -> m_dwWeaponTableIndex: ___________ 0x00003260
Extra -> m_dwInput: ____________________________ 0x04EEA340
Extra -> m_dwGlobalVars: _______________________ 0x00529194
Extra -> m_dwGlowObject: _______________________ 0x04FB576C
Extra -> m_dwForceJump: ________________________ 0x04F34C68
Extra -> m_dwForceAttack: ______________________ 0x02EDF8D0
Extra -> m_dwSensitivity: ______________________ 0x00A89CE4
Extra -> m_dwMouseEnable: ______________________ 0x00A89D40

Icrosshairid aa44 or a958?

Originally Posted by denisy2014

Icrosshairid aa44 or a958?

It's 0xAA44.

Game Offset Mega-Thread

Post a Reply

Similar Threads

Tags for this Thread