My No Flash address (Counter Strike: Source)

[selig]

Okay, I am still new to CSS, so bare with me. My no flash address is BYTE Flash[5] = {0xE9, 0x85, 0x05, 0x00, 0x00};, but it does not work (s.i.c.) I followed this tutorial by KNACKER, and it does not work. I've double checked the address and its correct.

WriteProcessMemory(Process,(void*)(0x13FD03BD),&Flash, sizeof(Flash),&Buffer);

kol tuv,

S

EDIT: While I'm in Olly and I press F9 while in game the no flash works, but when I use it in my little console app, it does not. I've also tried it in my DX9 hack, and no luck...hmmm..

[aVitamin]

Re: My No Flash address (Counter Strike: Source)

since cs:s has been switched to orange box engine, the base address of some modules diffear every startup of the game. have a look at GetModuleBaseEx function to obtain the module base by its name from there u can add the RVA aka offset to the address to be patched.

[selig]

Re: My No Flash address (Counter Strike: Source)

Ahhh thanks dude. I'll give it a try. Btw if I do this in a DX hook (for example) will it be VAC detected? I remember someone saying it was....

kol tuv,

Selig

[mencore]

Re: My No Flash address (Counter Strike: Source)

EDIT: Ok, i'll show you what aVitamin means since i'm bored:

When you attach Olly to HL2.exe and you have list of Executable Modules, notice client base address, this time it's 181E0000 when i start CSS, it will be different next time, and next time and next time. So what can you do? Relative offset.

DWORD dwModuleBase = (DWORD)GetModuleHandle("client.dll"); <- This will give you the base address that Olly shows too

ok then search for All Referenced Text Strings and for "flashbang" as in KN4CK3RS tutorial and go to the address that removes flasheffect for you always.

Open Windows calculator and divide that address from the client base address, for me the address was 183903BD so cough up Windows Calculator, set it to hex
and:

address - 181E0000 = ??????

so final code for this would be:

DWORD dwModuleBase = (DWORD)GetModuleHandle("client.dll");
DWORD dwOffset = dwModuleBase + 0x??????;
WriteProcessMemory(Process,(void*)dwOffset,&Flash, sizeof(Flash),&Buffer);

[selig]

Re: My No Flash address (Counter Strike: Source)

Ahh thanks! I'll give it a try. Much different than the CoDs o:

[furiify]

Re: My No Flash address (Counter Strike: Source)

EDIT: Ok, i'll show you what aVitamin means since i'm bored:

When you attach Olly to HL2.exe and you have list of Executable Modules, notice client base address, this time it's 181E0000 when i start CSS, it will be different next time, and next time and next time. So what can you do? Relative offset.

DWORD dwModuleBase = (DWORD)GetModuleHandle("client.dll"); <- This will give you the base address that Olly shows too

ok then search for All Referenced Text Strings and for "flashbang" as in KN4CK3RS tutorial and go to the address that removes flasheffect for you always.

Open Windows calculator and divide that address from the client base address, for me the address was 183903BD so cough up Windows Calculator, set it to hex
and:

address - 181E0000 = ??????

so final code for this would be:

DWORD dwModuleBase = (DWORD)GetModuleHandle("client.dll");
DWORD dwOffset = dwModuleBase + 0x??????;
WriteProcessMemory(Process,(void*)dwOffset,&Flash, sizeof(Flash),&Buffer);

thank you man.. may i ask, does vac detect this?