PART 1: The main offsets
------------------------
Credits: Suxx (I think)
Tutorial: By Ice & Rob
In client.cpp, find this code (the offsets may look different, but it doesnt matter)
CODE
struct cl_enginefuncs_s gEngfuncs;
struct cl_enginefuncs_s gHookedEngfuncs;
struct efx_api_s gHookEfxApi;
engine_studio_api_t IEngineStudio;
engine_studio_api_t* pIEngineStudio=0;
cl_enginefuncs_s *pEngfuncs = (cl_enginefuncs_s*) 0x01EB72D8;
playermove_s *ppmove = (playermove_s*) 0x02D5FE20;
engine_studio_api_s *pstudio = (engine_studio_api_s*) 0x01ED3520;
Comment all that out so it will look like this:
CODE
/*
struct cl_enginefuncs_s gEngfuncs;
struct cl_enginefuncs_s gHookedEngfuncs;
struct efx_api_s gHookEfxApi;
engine_studio_api_t IEngineStudio;
engine_studio_api_t* pIEngineStudio=0;
cl_enginefuncs_s *pEngfuncs = (cl_enginefuncs_s*) 0x01EB72D8;
playermove_s *ppmove = (playermove_s*) 0x02D5FE20;
engine_studio_api_s *pstudio = (engine_studio_api_s*) 0x01ED3520;
*/
Now.. Under what you commented out (or above) add this:
CODE
struct cl_enginefuncs_s gEngfuncs;
struct cl_enginefuncs_s gHookedEngfuncs;
struct efx_api_s gHookEfxApi;
engine_studio_api_t IEngineStudio;
engine_studio_api_t* pIEngineStudio=0;
cl_enginefuncs_s* pEngfuncs;
engine_studio_api_s* pstudio;
playermove_s *ppmove;
Now, search for: (Offsets may be different..)
CODE
DWORD* slots = (DWORD*)0x01EB74E8;
Delete
CODE
= (DWORD*)0x01EB74E8
So that it will look like this:
CODE
DWORD* slots;
Do a search for
CODE
void OnlyHook(LARGE_INTEGER *lp, bool force = true)
Above this function, add:
CODE
DWORD FindPattern(char *pattern, int len, DWORD dwStart, DWORD dwLen)
{
char *m = (char *)dwStart;
for(; (DWORD)m < (dwStart + dwLen); m++)
if(!memcmp(m, pattern, len))
return (DWORD)m;
return NULL;
}
Within OnlyHook, add this as the first statements to be executed:
CODE
char engine_sig[] = "\x89\x74\x24\x5C\x89\x74\x24\x60\x89\x74\x24\x64\x89\x74\x24\x68\x89\x74\x24\x6C\x89\x74\x24\x70\x89\x74\x24\x74\x89\x74\x24\x78\x89\x74\x24\x7C\0";
DWORD dwEngine = FindPattern(engine_sig, strlen(engine_sig), 0x01D60000, 0x01000000);
DWORD Slots_sig = (*(DWORD*)(dwEngine - 0x74));
DWORD* slots = (DWORD*)Slots_sig;
static bool NotPatched = true;
if (NotPatched)
{
int a;
for(a=0x01D00000;a<0x01D0FFFF;a++)
{
if(*(PBYTE)(a) == 0x68 && *(PBYTE)(a + 0x05) == 0xE8 &&
*(PBYTE)(a + 0x0A) == 0x6A && *(PBYTE)(a + 0x0B) == 0x07 &&
*(PBYTE)(a + 0x0C) == 0x68 && *(PBYTE)(a + 0x11) == 0xFF &&
*(PBYTE)(a + 0x12) == 0x15 && *(PBYTE)(a + 0x17) == 0x68)
{
pEngfuncs = (cl_enginefunc_t*)*(DWORD*)(a+0x0D);
break;
}
}
int b;
for(b=0x01D00000;b<0x01D0FFFF;b++)
{
if(*(PBYTE)(b) == 0xE8 && *(PBYTE)(b + 0x05) == 0x6A &&
*(PBYTE)(b + 0x06) == 0x07 && *(PBYTE)(b + 0x07) == 0x68 &&
*(PBYTE)(b + 0x0C) == 0xFF && *(PBYTE)(b + 0x0D) == 0x15 &&
*(PBYTE)(b + 0x12) == 0x68 && *(PBYTE)(b + 0x1C) == 0x81)
{
ppmove = (playermove_s*)*(DWORD*)(b+0x13);
break;
}
}
int c;
for(c=0x01D00000;c<0x01D0FFFF;c++)
{
if(*(PBYTE)(c) == 0x68 && *(PBYTE)(c + 0x05) == 0x68 &&
*(PBYTE)(c + 0x0A) == 0x6A && *(PBYTE)(c + 0x0B) == 0x01 &&
*(PBYTE)(c + 0x0C) == 0xFF && *(PBYTE)(c + 0x0D) == 0xD0 &&
*(PBYTE)(c + 0x0E) == 0x83 && *(PBYTE)(c + 0x27) == 0xC3)
{
pstudio = (engine_studio_api_s*)*(DWORD*)(c+0x01);
break;
}
}
gConsole.setcolortag( 'b', 25, 50,250);
gConsole.setcolortag( 'r',165, 42, 42);
gConsole.setcolortag( 'g', 82,139,139);
gConsole.setcolortag( 'w',240,255,255);
gConsole.setcolortag( 'y', -10,-10,-10);
gConsole.echo("&s[ TrinitY Blo0d ] [ B7o0dy Ra1N ]");
NotPatched = false;
OGCmessage( "Auto-Updating Offsets");
OGCmessage( "EngineStudio Applied At: 0x%X",pstudio);
OGCmessage( "EngineFunctions Applied At: 0x%X",pEngfuncs);
OGCmessage( "PlayerMove Applied At: 0x%X",ppmove);
}
Part 2: The Sound Offsets
-------------------------
Credits: Unknown (Came from somewhere on Game-Deception)
Tutorial: Robert
Open up your main.cpp -- Once you have done so, search for this function: (It varies)
CODE
detour_S_DynamicSound
Above this function add this
CODE
bool bDataCompare(const BYTE* pData, const BYTE* bMask, const char* szMask)
{
for(;*szMask;++szMask,++pData,++bMask)
if(*szMask=='x' && *pData!=*bMask )
return false;
return (*szMask) == NULL;
}
DWORD dwFindPattern(DWORD dwAddress,DWORD dwLen,BYTE *bMask,char * szMask)
{
for(DWORD i=0; i < dwLen; i++)
if( bDataCompare( (BYTE*)( dwAddress+i ),bMask,szMask) )
return (DWORD)(dwAddress+i);
return 0;
}
Now that you have added this, in detour_S_DynamicSound, find this (Offset may be different):
CODE
BYTE* offs = (BYTE*)0x01D96920;
Replace this with:
CODE
BYTE* offs = (BYTE*) SOUND_ADDR;
Above this line, add this:
CODE
DWORD SOUND_ADDR = dwFindPattern(0x1D90000,0x30000,(BYTE*)"\x83\xEC\x48\xA1\x00\x00\x00\x00","xxxx???");
Now, this part is optional. You can have it show the sound offset in console. If so, follow me..
find:
CODE
sound patch applied successfully
Replace that whole line with:
CODE
OGCmessage( "&gsound patch applied successfully: 0x%X",SOUND_ADDR);
--------------------------------------
Now you can enjoy playing cs without
ever having to update the offsets
everytime steam decides to update
Enjoy -Rob
