Game Offset Mega-Thread

- - - Updated - - -

Code:

 DWORD gpStart = mem.FindPatternArr(modClient.dwBase, modClient.dwSize, "xx????x????xxx????xx????xx", 27, 0x8D, 0x8F, 0, 0, 0, 0, 0xA1, 0, 0, 0, 0, 0xC7, 0x4, 0x2, 0, 0, 0, 0, 0x89, 0x35, 0x0, 0x0, 0x0, 0x0, 0x8B, 0x51);
	DwGlow = mem.Read<DWORD>(gpStart + 7) - modClient.dwBase;

Can someone give me a working version of this ?

Originally Posted by bishesh1997

- - - Updated - - -

Code:

 DWORD gpStart = mem.FindPatternArr(modClient.dwBase, modClient.dwSize, "xx????x????xxx????xx????xx", 27, 0x8D, 0x8F, 0, 0, 0, 0, 0xA1, 0, 0, 0, 0, 0xC7, 0x4, 0x2, 0, 0, 0, 0, 0x89, 0x35, 0x0, 0x0, 0x0, 0x0, 0x8B, 0x51);
	DwGlow = mem.Read<DWORD>(gpStart + 7) - modClient.dwBase;

Can someone give me a working version of this ?

Code:

"A1 ? ? ? ? A8 01 75 4B" +1

It's crashing after 1-2 min of injecting
Any idea why ?

can someone give me please forcejump signature/patern? thanks.

edit: got that

dwGlowObjectManager pls ?

Here is some of the new offsets if anyone needs them from the update today

Code:

dwClientState = 0x59E21C
m_dwEntityList = 0x4A85414
m_dwGlowObject = 0x4FA23C8
m_dwForceJump = 0x4F1C3A4
m_dwForceAttack = 0x2EC77C0
m_dwPlayerResource = 0x2EC5B2C
m_dwGlobalVars = 0xA64140
m_dwBoneMatrix = 0x2698
m_dwLocalPlayer = 0xAA8FBC
m_dwViewAngles = 0x4D0C
m_nDeltaTick = 0x16C
m_nTickBase = 0x3424
m_hActiveWeapon = 0x2EE8
m_iCrossHairID = 0xB2B4
m_dwIndex = 0x64
m_iHealth = 0xFC
m_iTeamNum = 0xF0
m_iClip1 = 0x3204
m_iShotsFired = 0xA2C0
m_bDormant = 0xE9
m_fFlags = 0x100
m_bSpottedByMask = 0x97C
m_dwInGame = 0x100
m_lifeState = 0x25B

27.05.2017

Code:

constexpr ::std::ptrdiff_t m_ArmorValue = 0xB248;
constexpr ::std::ptrdiff_t m_Collision = 0x318;
constexpr ::std::ptrdiff_t m_CollisionGroup = 0x470;
constexpr ::std::ptrdiff_t m_Local = 0x2FAC;
constexpr ::std::ptrdiff_t m_MoveType = 0x258;
constexpr ::std::ptrdiff_t m_OriginalOwnerXuidHigh = 0x316C;
constexpr ::std::ptrdiff_t m_OriginalOwnerXuidLow = 0x3168;
constexpr ::std::ptrdiff_t m_aimPunchAngle = 0x301C;
constexpr ::std::ptrdiff_t m_aimPunchAngleVel = 0x3028;
constexpr ::std::ptrdiff_t m_bGunGameImmunity = 0x38B0;
constexpr ::std::ptrdiff_t m_bHasDefuser = 0xB258;
constexpr ::std::ptrdiff_t m_bHasHelmet = 0xB23C;
constexpr ::std::ptrdiff_t m_bInReload = 0x3245;
constexpr ::std::ptrdiff_t m_bIsDefusing = 0x38A4;
constexpr ::std::ptrdiff_t m_bIsScoped = 0x389C;
constexpr ::std::ptrdiff_t m_bSpotted = 0x939;
constexpr ::std::ptrdiff_t m_bSpottedByMask = 0x97C;
constexpr ::std::ptrdiff_t m_dwBoneMatrix = 0x2698;
constexpr ::std::ptrdiff_t m_fAccuracyPenalty = 0x32C0;
constexpr ::std::ptrdiff_t m_fFlags = 0x100;
constexpr ::std::ptrdiff_t m_flFallbackWear = 0x3178;
constexpr ::std::ptrdiff_t m_flFlashDuration = 0xA308;
constexpr ::std::ptrdiff_t m_flFlashMaxAlpha = 0xA304;
constexpr ::std::ptrdiff_t m_flNextPrimaryAttack = 0x31D8;
constexpr ::std::ptrdiff_t m_hActiveWeapon = 0x2EE8;
constexpr ::std::ptrdiff_t m_hMyWeapons = 0x2DE8;
constexpr ::std::ptrdiff_t m_hObserverTarget = 0x3380;
constexpr ::std::ptrdiff_t m_hOwner = 0x29BC;
constexpr ::std::ptrdiff_t m_hOwnerEntity = 0x148;
constexpr ::std::ptrdiff_t m_iAccountID = 0x2FA8;
constexpr ::std::ptrdiff_t m_iClip1 = 0x3204;
constexpr ::std::ptrdiff_t m_iCompetitiveRanking = 0x1A44;
constexpr ::std::ptrdiff_t m_iCompetitiveWins = 0x1B48;
constexpr ::std::ptrdiff_t m_iCrosshairId = 0xB2B4;
constexpr ::std::ptrdiff_t m_iEntityQuality = 0x2F8C;
constexpr ::std::ptrdiff_t m_iFOVStart = 0x31D8;
constexpr ::std::ptrdiff_t m_iGlowIndex = 0xA320;
constexpr ::std::ptrdiff_t m_iHealth = 0xFC;
constexpr ::std::ptrdiff_t m_iItemDefinitionIndex = 0x2F88;
constexpr ::std::ptrdiff_t m_iItemIDHigh = 0x2FA0;
constexpr ::std::ptrdiff_t m_iObserverMode = 0x336C;
constexpr ::std::ptrdiff_t m_iShotsFired = 0xA2C0;
constexpr ::std::ptrdiff_t m_iState = 0x31F8;
constexpr ::std::ptrdiff_t m_iTeamNum = 0xF0;
constexpr ::std::ptrdiff_t m_lifeState = 0x25B;
constexpr ::std::ptrdiff_t m_nFallbackPaintKit = 0x3170;
constexpr ::std::ptrdiff_t m_nFallbackSeed = 0x3174;
constexpr ::std::ptrdiff_t m_nFallbackStatTrak = 0x317C;
constexpr ::std::ptrdiff_t m_nForceBone = 0x267C;
constexpr ::std::ptrdiff_t m_nTickBase = 0x3424;
constexpr ::std::ptrdiff_t m_rgflCoordinateFrame = 0x440;
constexpr ::std::ptrdiff_t m_szCustomName = 0x301C;
constexpr ::std::ptrdiff_t m_szLastPlaceName = 0x35A8;
constexpr ::std::ptrdiff_t m_vecOrigin = 0x134;
constexpr ::std::ptrdiff_t m_vecVelocity = 0x110;
constexpr ::std::ptrdiff_t m_vecViewOffset = 0x104;
constexpr ::std::ptrdiff_t m_viewPunchAngle = 0x3010;
} // namespace netvars
namespace signatures {
constexpr ::std::ptrdiff_t dwClientState = 0x59E21C;
constexpr ::std::ptrdiff_t dwClientState_GetLocalPlayer = 0x178;
constexpr ::std::ptrdiff_t dwClientState_Map = 0x284;
constexpr ::std::ptrdiff_t dwClientState_MapDirectory = 0x180;
constexpr ::std::ptrdiff_t dwClientState_MaxPlayer = 0x308;
constexpr ::std::ptrdiff_t dwClientState_PlayerInfo = 0x523C;
constexpr ::std::ptrdiff_t dwClientState_State = 0x100;
constexpr ::std::ptrdiff_t dwClientState_ViewAngles = 0x4D0C;
constexpr ::std::ptrdiff_t dwEntityList = 0x4A85414;
constexpr ::std::ptrdiff_t dwForceAttack = 0x2EC77C0;
constexpr ::std::ptrdiff_t dwForceAttack2 = 0x2EC77CC;
constexpr ::std::ptrdiff_t dwForceBackward = 0x2EC77D8;
constexpr ::std::ptrdiff_t dwForceForward = 0x2EC77CC;
constexpr ::std::ptrdiff_t dwForceJump = 0x4F1C3A4;
constexpr ::std::ptrdiff_t dwForceLeft = 0x2EC7814;
constexpr ::std::ptrdiff_t dwForceRight = 0x2EC7820;
constexpr ::std::ptrdiff_t dwGameDir = 0x63C7D0;
constexpr ::std::ptrdiff_t dwGameRulesProxy = 0x4F86CCC;
constexpr ::std::ptrdiff_t dwGetAllClasses = 0x4F86D9C;
constexpr ::std::ptrdiff_t dwGlobalVars = 0x59DF20;
constexpr ::std::ptrdiff_t dwGlowObjectManager = 0x4FA23C8;
constexpr ::std::ptrdiff_t dwInput = 0x4ED0038;
constexpr ::std::ptrdiff_t dwInterfaceLinkList = 0x6E53C4;
constexpr ::std::ptrdiff_t dwLocalPlayer = 0xAA8FBC;
constexpr ::std::ptrdiff_t dwMouseEnable = 0xAAE820;
constexpr ::std::ptrdiff_t dwMouseEnablePtr = 0xAAE7F0;
constexpr ::std::ptrdiff_t dwPlayerResource = 0x2EC5B2C;
constexpr ::std::ptrdiff_t dwRadarBase = 0x4EBA10C;
constexpr ::std::ptrdiff_t dwSensitivity = 0xAAE6BC;
constexpr ::std::ptrdiff_t dwSensitivityPtr = 0xAAE690;
constexpr ::std::ptrdiff_t dwViewMatrix = 0x4A76E84;
constexpr ::std::ptrdiff_t dwWeaponTable = 0x4ECC5D0;
constexpr ::std::ptrdiff_t dwWeaponTableIndex = 0x3270;
constexpr ::std::ptrdiff_t dwYawPtr = 0xAAE480;
constexpr ::std::ptrdiff_t dwZoomSensitivityRatioPtr = 0xAB34E8;
constexpr ::std::ptrdiff_t dwbSendPackets = 0xCC84A;
constexpr ::std::ptrdiff_t dwppDirect3DDevice9 = 0x9CF40;
constexpr ::std::ptrdiff_t dwSetClanTag = 0x87190;
constexpr ::std::ptrdiff_t m_pStudioHdr = 0x293C;

appsystemfactory offset?

Updated 28/05 ?

Can someone post pls the Clientcmd pattern and the current offseT?

What i doing wrong?

DWORD start = FindPatternArray(csgo.getEngine(), csgo.getEngineSize(), "xxxxx????xx????xxx????x????xx", 0x55, 0x8B, 0xEC, 0x8B, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xF9, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0C, 0xA1, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0xEB, 0x05, 0x8B, 0x01, 0xFF, 0x50, 0x34, 0x50, 0xA1);
DWORD offset = readDWORD(start - csgo.getEngine());
ClientCMD = offset;

Hook* clientmode = new Hook((PDWORD*)(*(DWORD*)((DWORD)GetModuleHandle("c lient") + 0x4F1C83C)));

Does anyone have clientmode address or sig for it. Mine seems to be wrong from manual searching.

Originally Posted by reroute

Hook* clientmode = new Hook((PDWORD*)(*(DWORD*)((DWORD)GetModuleHandle("c lient") + 0x4F1C83C)));

Does anyone have clientmode address or sig for it. Mine seems to be wrong from manual searching.

Do not use this to get ClientMode.
Use CreateInterface from client to get IBaseClientDLL.

Code:

class IBaseClientDLL {...};

IBaseClientDLL* client = CreateInterface("VClient018", nullptr);

IClientMode* clientmode = **(IClientMode***)((*(DWORD**)client)[10] + 0x5);

- - - Updated - - -

Originally Posted by Dude3_0

appsystemfactory offset?

Inject a DLL and find it with CreateInterface. Then subtract whatever pointer you get from the client base address.

new offsets pls ? (glow objet)

Code:

 DWORD lpStart = mem.FindPatternArr(modClient.dwBase, modClient.dwSize, "xxx????xx????xxxxx?", 19, 0x8D, 0x34, 0x85, 0x0, 0x0, 0x0, 0x0, 0x89, 0x15, 0x0, 0x0, 0x0, 0x0, 0x8B, 0x41, 0x8, 0x8B, 0x48, 0x0);
    DWORD lpP1 = mem.Read<DWORD>(lpStart + 3);
    BYTE lpP2 = mem.Read<BYTE>(lpStart + 18);
    DwLocalPlayer = (lpP1 + lpP2) - modClient.dwBase;

    DWORD elStart = mem.FindPatternArr(modClient.dwBase, modClient.dwSize, "x????xx?xxx", 11, 0x5, 0x0, 0x0, 0x0, 0x0, 0xC1, 0xE9, 0x0, 0x39, 0x48, 0x4);
    DWORD elP1 = mem.Read<DWORD>(elStart + 1);
    BYTE elP2 = mem.Read<BYTE>(elStart + 7);
    DwEntityList = (elP1 + elP2) - modClient.dwBase;

	DWORD epStart = mem.FindPatternArr(modEngine.dwBase, modEngine.dwSize, "xxxxxxxx????xxxxxxxxxx????xxxx????xxx", 37, 0xF3, 0x0F, 0x5C, 0xC1, 0xF3, 0x0F, 0x10, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0F, 0x2F, 0xD0, 0x76, 0x04, 0xF3, 0x0F, 0x58, 0xC1, 0xA1, 0x0, 0x0, 0x0, 0x0, 0xF3, 0x0F, 0x11, 0x80, 0x0, 0x0, 0x0, 0x0, 0xD9, 0x46, 0x04);
	DwEnginePointer = mem.Read<DWORD>(epStart + 22) - modEngine.dwBase;
	DwViewAngle = mem.Read<DWORD>(epStart + 30);

	DWORD gpStart = mem.FindPatternArr(modClient.dwBase, modClient.dwSize, "x????xxxx", 9, 0xa1, 0x0, 0x0, 0x0, 0x0, 0xa8, 0x01, 0x75, 0x4b);
	DwGlow = mem.Read<DWORD>(gpStart + 7) - modClient.dwBase;

Updated values pls

Game Offset Mega-Thread

Post a Reply

Similar Threads

Tags for this Thread