

You can get the relative pointer to the struct - you need to shift it a bit to be fitting - by looking at the rcx register in the compare instruction some bytes above this pattern:

Maybe someone else is able to find something. I am not able to find a static pointer to this address atm, also I am now busy with work - I will try again later. Uint8_t m_iCurrentWeaponSlot //0x00EE 0 = primary weapon, 1 = secondary weapon Int32_t m_iFlags2 //0x00B0 0 = Standing, 1 = Crouching, 2 = Jumpingįloat m_flMoveForward //0x00C4 1.0 = forward, -1.0 = backwardsįloat m_flMoveSideways //0x00C8 1.0 = left, -1.0 = right Int32_t m_iFlags //0x0008 0 = Standing, 1 = Crouching, 2 = Jumping Guessed struct would be something like this:

The config files in the config path are pretty interesting.Īlso I think after the interfaces and paths, there is a array of halo settings. Pattern as Bytes: \x48\x8D\x05\x00\x00\x00\x00\x48\x89\x41\x08\x33\xF6\x48\x89\x71\x10\x48\x89Ĭlass ICSeriesBaseAlloc* m_pCSeriesBaseAlloc //0x0010Ĭlass IGameStateCompressorCallback* m_pGameStateCompressorCallback //0x0018Ĭlass IGameStateDeterministicAllocCallbacks* m_pGameStateDeterministicAllocCallbacks //0x0020Ĭlass IGameStateNonDeterministicAllocCallbacks* m_pGameStateNonDeterministicAllocCallbacks //0x0028Ĭlass IGameStateAllocRecordAllocCallbacks* m_pGameStateAllocRecordAllocCallbacks //0x0030Ĭlass IRuntimeStateAlloc* m_pRuntimeStateAlloc //0x0038 PCreateGameClient = GetProcAddress(dwEAC圆4, "CreateGameClient") _int64 (_fastcall ***v7)(_QWORD, char *) // rcxĭwEAC圆4 = LoadLibraryA(szEasyAntiCheat圆4PathDll) // "EasyAntiCheat/easyanticheat_圆4.dll" HMODULE _fastcall InitializeEACGameClient(_int64 a1, _int64 a2)
