Tutorial How to find CCSGOAnimState offset

  • Downloading from our site will require you to have a paid membership. Upgrade to a Premium Membership today!

    Dont forget read our Rules! Also anyone caught Sharing this content will be banned. By using this site you are agreeing to our rules so read them. Saying I did not know is simply not an excuse! You have been warned.

Radio

    Status
    Not open for further replies.

    ven0m

    Administrator
    Staff member
    Administrator
    Moderator
    Platinum
    xenForo 2.x.x
    xenForo 1.x.x
    Contributor
    vBulletin All Access Pass
    The Chest
    Verified
    Ultra Platinum VIP
    Platinum VIP
    Gold VIP
    Silver VIP
    Premium
    Member
    Jul 17, 2005
    20,497
    7,735
    321
    localhost
    Code:
    1. string search "animset_version" in client.dll
    2. go to to any of those subs (those are the same)
    3. xref the sub (should only have 1)
    4. Now you're in CCSGOAnimState::Update
    5. Jump to xref and choose the first one. Its a void type.
    
    .text:1038F170 C_CSPlayer__Spawn proc near             ; DATA XREF: .rdata:10AFCC04↓o
    .text:1038F170
    .text:1038F170 var_4           = dword ptr -4
    .text:1038F170
    .text:1038F170                 push    ebp
    .text:1038F171                 mov     ebp, esp
    .text:1038F173                 and     esp, 0FFFFFFF8h
    .text:1038F176                 push    ecx
    .text:1038F177                 mov     eax, off_10C908D8
    .text:1038F17C                 push    esi
    .text:1038F17D                 mov     esi, ecx
    .text:1038F17F                 mov     eax, [eax+10h]
    .text:1038F182                 mov     [esi+0A350h], eax
    .text:1038F188                 call    C_BasePlayer__Spawn
    .text:1038F18D                 cmp     byte ptr [esi+3AA4h], 0
    .text:1038F194                 jz      short loc_1038F1DE
    .text:1038F196                 mov     ecx, [esi+3900h]
    .text:1038F19C                 test    ecx, ecx
    .text:1038F19E                 jz      short loc_1038F1DE
    .text:1038F1A0                 call    CCSGOPlayerAnimState__Reset
    .text:1038F1A5                 mov     eax, [esi]
    .text:1038F1A7                 mov     ecx, esi
    .text:1038F1A9                 mov     eax, [eax+294h]
    .text:1038F1AF                 call    eax
    .text:1038F1B1                 mov     ecx, esi
    .text:1038F1B3                 movss   xmm0, dword ptr [eax]
    .text:1038F1B7                 mov     eax, [esi]
    .text:1038F1B9                 movss   [esp+8+var_4], xmm0
    .text:1038F1BF                 mov     eax, [eax+294h]
    .text:1038F1C5                 call    eax
    .text:1038F1C7                 movss   xmm2, [esp+8+var_4]
    .text:1038F1CD                 push    ecx
    .text:1038F1CE                 mov     ecx, [esi+3900h] <---- theres your offset
    .text:1038F1D4                 movss   xmm1, dword ptr [eax+4]
    .text:1038F1D9                 call    CCSGOPlayerAnimState__Update
    .text:1038F1DE
    .text:1038F1DE loc_1038F1DE:                           ; CODE XREF: C_CSPlayer__Spawn+24↑j
    .text:1038F1DE                                         ; C_CSPlayer__Spawn+2E↑j
    .text:1038F1DE                 xorps   xmm0, xmm0
    .text:1038F1E1                 mov     dword ptr [esi+0A3ACh], 0
    .text:1038F1EB                 movups  xmmword ptr [esi+0BBBCh], xmm0
    .text:1038F1F2                 pop     esi
    .text:1038F1F3                 mov     esp, ebp
    .text:1038F1F5                 pop     ebp
    .text:1038F1F6                 retn
    .text:1038F1F6 C_CSPlayer__Spawn endp
     
    • Like
    Reactions: unique
    Status
    Not open for further replies.