Tutorial WorldToScreenMatrix Source Engine

Hexui Undetected CSGO Cheats Sinkicheat PUBG Cheat

brinkz

Coder
Meme Tier VIP
Sep 3, 2012
209
1,688
12
Hey guys,

So I'm going to show you how to find the WorldToScreenMatrix for Source Engine Games. The example I'm giving is in CS:S
Start off by getting the Pointer to VEngineClient by searching VEngineClient0 as a string in client.dll (depending on the game, you may have to search in the engine.dll).


Now open Reclass and follow these steps:





4 = Add 1024 Bytes to that vtable

Now in CS:S Index 36 Is WorldToScreenMatrix and 37 WorldToViewMatrix. To find it in your game just look for functions that look exactly like this or use Mac bins + IDA.


(Reclass doesn't detect the Function end)

Now go to the function in olly:


Use CE to determinate EDX, follow the function and by reversing it, we get to know:


So what does this mean for us?
Means:
C++:
DWORD dwRender = Read( ECX + 0xDC );
VMatrix flMatrix = Read( dwRender + 0x2D4 );
You just need to find a pointer for ECX then, but you can do that fast.
 
Last edited:

squeenie

Hacker
Meme Tier VIP
Dank Tier Donator
Mar 6, 2013
677
5,478
37
Thanks a lot for posting this man. While I didn't get VEngineClient by following this tutorial something clicked while reading it and I got it now, which is probably better. Thanks again!
 

brinkz

Coder
Meme Tier VIP
Sep 3, 2012
209
1,688
12
No problem guys, i may post some more src engine specific stuff in the feature.
 

brinkz

Coder
Meme Tier VIP
Sep 3, 2012
209
1,688
12
Using Cheat Engine Pointer Scan e.g. or you could simply directly find a pointer for CRender ;)
 

cskimmo69

Newbie
Full Member
Nobleman
Jul 7, 2013
36
318
0
Using Cheat Engine Pointer Scan e.g. or you could simply directly find a pointer for CRender ;)
Where is CRender? i cant find nothing with olly? What should i pointer scan if doing cheat engine?
 

cskimmo69

Newbie
Full Member
Nobleman
Jul 7, 2013
36
318
0
On my Screenshot:
mov ecx, dword ptr [52F2F7C0h]
I was thinking about that because there were mov ecx but i wasnt sure because i thought it should be shorther like 08 or something but thanks im gonna try if this works
 

cskimmo69

Newbie
Full Member
Nobleman
Jul 7, 2013
36
318
0
What do you mean with "ECX + E8 in EAX. This is 2" i get 1 as result in CE
 
Attention! Before you post:

Read the How to Ask Questions Guide
99% of questions are answered in the Beginner's Guide, do it before asking a question.

No Hack Requests. Post in the correct section.  Search the forum first. Read the rules.

How to make a good post:

  • Fill out the form correctly
  • Tell us the game name & coding language
  • Post everything we need to know to help you
  • Ask specific questions, be descriptive
  • Post errors, line numbers & screenshots
  • Post code snippets using code tags
  • If it's a large project, zip it up and attach it

If you do not comply, your post may be deleted.  We want to help, please make a good post and we will do our best to help you.

Community Mods