Skip to content

tested by archi #4

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
TheGameEnhancer2004 merged 4 commits into from
Feb 27, 2026
Merged

tested by archi #4

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
f5a65d8
initial
mlemlody Feb 23, 2026
ed4eb87
update
mlemlody Feb 23, 2026
63b258b
fixes
mlemlody Feb 23, 2026
38c6661
Update BytePatches.h
mlemlody Feb 23, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 4 additions & 1 deletion .gitignore
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -360,4 +360,7 @@ MigrationBackup/
.ionide/

# Fody - auto-generated XML schema
FodyWeavers.xsd
FodyWeavers.xsd
tf2source
.vscode
source-sdk-2013
17 changes: 17 additions & 0 deletions TextmodeTF2/TextmodeTF2.vcxproj
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -228,10 +228,15 @@
<ClCompile Include="src\Hooks\Con_DebugLog.cpp" />
<ClCompile Include="src\Hooks\CDebugOverlay_AddBoxOverlay.cpp" />
<ClCompile Include="src\Hooks\CDebugOverlay_AddLineOverlay.cpp" />
<ClCompile Include="src\Hooks\CEngineSoundClient_EmitSoundInternal.cpp" />
<ClCompile Include="src\Hooks\IBaseClientDLL_FrameStageNotify.cpp" />
<ClCompile Include="src\Hooks\IPanel_PaintTraverse.cpp" />
<ClCompile Include="src\Hooks\CModelLoader_GetModelForName.cpp" />
<ClCompile Include="src\Hooks\CModelRender_DrawModelExecute.cpp" />
<ClCompile Include="src\Hooks\CParticleCollection_Simulate.cpp" />
<ClCompile Include="src\Hooks\CShadowMgr_RenderShadows.cpp" />
<ClCompile Include="src\Hooks\IMDLCache_ProcessDataIntoCache.cpp" />
<ClCompile Include="src\Hooks\IMDLCache_Hooks.cpp" />
<ClCompile Include="src\Hooks\CParticleSystemMgr_DrawRenderCache.cpp" />
<ClCompile Include="src\Hooks\CParticleSystemMgr_ReadParticleConfigFile.cpp" />
<ClCompile Include="src\Hooks\CStaticPropMgr_DrawStaticProps.cpp" />
Expand All @@ -241,13 +246,21 @@
<ClCompile Include="src\Hooks\IBaseFileSystem_Hooks.cpp" />
<ClCompile Include="src\Hooks\IFileSystem_Hooks.cpp" />
<ClCompile Include="src\Hooks\IMaterialSystem_Hooks.cpp" />
<ClCompile Include="src\Hooks\R_DrawDecalsAll.cpp" />
<ClCompile Include="src\Hooks\SVC_Sounds_Process.cpp" />
<ClCompile Include="src\Hooks\SVC_BSPDecal_Process.cpp" />
<ClCompile Include="src\Hooks\S_PrecacheSound.cpp" />
<ClCompile Include="src\Hooks\SVC_GameEvent_Process.cpp" />
<ClCompile Include="src\Hooks\SVC_TempEntities_Process.cpp" />
<ClCompile Include="src\Hooks\IStudioRender_Hooks.cpp" />
<ClCompile Include="src\Hooks\IVideoServices_Hooks.cpp" />
<ClCompile Include="src\SDK\SDK.cpp" />
<ClCompile Include="src\Utils\CrashLog\CrashLog.cpp" />
<ClCompile Include="src\Utils\Hooks\Hooks.cpp" />
<ClCompile Include="src\Utils\Interfaces\Interfaces.cpp" />
<ClCompile Include="src\Utils\Memory\Memory.cpp" />
<ClCompile Include="src\Utils\Signatures\Signatures.cpp" />
<ClCompile Include="src\Hooks\VPhysics.cpp" />
</ItemGroup>
<ItemGroup>
<ClInclude Include="include\MinHook\buffer.h" />
Expand All @@ -261,6 +274,8 @@
<ClInclude Include="src\BytePatches\BytePatches.h" />
<ClInclude Include="src\SDK\Definitions\Interfaces\IMaterialSystem.h" />
<ClInclude Include="src\SDK\Definitions\Interfaces\IMDLCache.h" />
<ClInclude Include="src\SDK\Definitions\Interfaces\IStudioRender.h" />
<ClInclude Include="src\SDK\Definitions\Interfaces\IVideoServices.h" />
<ClInclude Include="src\SDK\Definitions\Interfaces\Interface.h" />
<ClInclude Include="src\Core\Core.h" />
<ClInclude Include="src\SDK\Definitions\Definitions.h" />
Expand All @@ -275,6 +290,8 @@
<ClInclude Include="src\Utils\Interfaces\Interfaces.h" />
<ClInclude Include="src\Utils\Memory\Memory.h" />
<ClInclude Include="src\Utils\Signatures\Signatures.h" />
<ClInclude Include="src\Hooks\VPhysics.h" />
<ClInclude Include="src\SDK\Interfaces\IPhysics.h" />
</ItemGroup>
<Import Project="$(VCTargetsPath)\Microsoft.Cpp.targets" />
<ImportGroup Label="ExtensionTargets" />
Expand Down
39 changes: 34 additions & 5 deletions TextmodeTF2/src/BytePatches/BytePatches.cpp
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,7 @@
#include "BytePatches.h"

#include "../Core/Core.h"
#include <Psapi.h>

BytePatch::BytePatch(const char* sModule, const char* sSignature, int iOffset, const char* sPatch)
{
Expand All @@ -27,15 +28,40 @@ bool BytePatch::Initialize()
if (m_bIsPatched)
return true;

m_pAddress = LPVOID(U::Memory.FindSignature(m_sModule, m_sSignature));
if (!m_pAddress)
const auto vMatches = U::Memory.FindSignatures(m_sModule, m_sSignature, 2);
if (vMatches.empty())
{
SDK::Output("BytePatches", std::format("Failed to find signature for bytepatch: {} in {}", m_sSignature, m_sModule).c_str());
U::Core.AppendFailText(std::format("BytePatch::Initialize() failed to initialize:\n {}\n {}", m_sModule, m_sSignature).c_str());
return false;
}
if (vMatches.size() != 1)
{
SDK::Output("BytePatches", std::format("Ambiguous signature for bytepatch ({} matches): {} in {}", vMatches.size(), m_sSignature, m_sModule).c_str());
U::Core.AppendFailText(std::format("BytePatch::Initialize() ambiguous signature:\n {}\n {}\n {} matches", m_sModule, m_sSignature, vMatches.size()).c_str());
return false;
}

const auto hMod = GetModuleHandleA(m_sModule);
MODULEINFO module_info;
if (!hMod || !GetModuleInformation(GetCurrentProcess(), hMod, &module_info, sizeof(MODULEINFO)))
{
SDK::Output("BytePatches", std::format("Failed to query module info for {}", m_sModule).c_str());
U::Core.AppendFailText(std::format("BytePatch::Initialize() failed module info:\n {}", m_sModule).c_str());
return false;
}

m_pAddress = LPVOID(uintptr_t(m_pAddress) + m_iOffset);
const auto uModuleBase = uintptr_t(hMod);
const auto uModuleEnd = uModuleBase + module_info.SizeOfImage;
const auto uAddress = uintptr_t(vMatches[0]) + m_iOffset;
if (uAddress < uModuleBase || uAddress + m_iSize > uModuleEnd || uAddress + m_iSize < uAddress)
{
SDK::Output("BytePatches", std::format("Refusing out-of-module bytepatch write: {:#x} ({})", uAddress, m_sModule).c_str());
U::Core.AppendFailText(std::format("BytePatch::Initialize() out-of-range write blocked:\n {}\n {}\n {:#x}", m_sModule, m_sSignature, uAddress).c_str());
return false;
}

m_pAddress = LPVOID(uAddress);

DWORD flNewProtect, flOldProtect;
VirtualProtect(m_pAddress, m_iSize, PAGE_EXECUTE_READWRITE, &flNewProtect);
Expand All @@ -45,7 +71,6 @@ bool BytePatch::Initialize()
Write(m_vPatch);

SDK::Output("BytePatches", std::format("Successfully patched {:#x} ('{}', '{}')!", uintptr_t(m_pAddress), m_sModule, m_sSignature).c_str());
U::Core.AppendSuccessText("BytePatches", std::format("Successfully patched {:#x} ('{}', '{}')!", uintptr_t(m_pAddress), m_sModule, m_sSignature).c_str());
return m_bIsPatched = true;
}

Expand All @@ -64,6 +89,10 @@ bool CBytePatches::Initialize(const char* cModule)
for (auto& patch : m_mPatches[cModule])
if (!patch.Initialize())
bFail = true;

if (!bFail)
SDK::Output("BytePatches", std::format("Successfully initialized all byte patches for {}!", cModule).c_str());

return !bFail;
}

Expand All @@ -72,4 +101,4 @@ void CBytePatches::Unload()
for (auto [_, vPatches] : m_mPatches)
for(auto& tPatch : vPatches)
tPatch.Unload();
}
}
98 changes: 88 additions & 10 deletions TextmodeTF2/src/BytePatches/BytePatches.h
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -41,37 +41,89 @@ class CBytePatches
// Force Con_DebugLog to run
BytePatch("engine.dll", "74 ? 48 8D 54 24 ? 48 8D 0D ? ? ? ? E8 ? ? ? ? 38 1D", 0x0, "90 90"),

// CVideoModeCommon::UpdateWindow
// Prevents crash during window update in textmode by skipping one callsite safely.
BytePatch("engine.dll", "E8 ? ? ? ? EB ? B1 ?", 0x0, "90 90 90 90 90"),

// Fixes crash in engine.dll (CVideoModeCommon::GetModeCount or similar)
BytePatch("engine.dll", "8B 44 D0 ? C3 CC", 0x0, "31 C0 C3 90 90 90"),

// S_Init
// Signature intentionally anchored through the -nosound branch to avoid multi-hit false matches.
BytePatch("engine.dll", "45 33 C0 48 8D 15 ? ? ? ? 48 8B C8 4C 8B 08 41 FF 51 18 48 85 C0 74 ? E8 ? ? ? ? 45 33 C0 48 89 05 ? ? ? ? 48 8D 15", 0x17, "90 90"),

// Hard bypass for fps_max 30 limit in sub_18020CB60 (engine.dll+0x20CC0C)
// Matches: F3 0F 10 40 54 0F 2F 05 ?? ?? ?? ?? 73 ??
// We patch the 'jnb' (73) to 'jmp' (EB) to skip the 30fps clamp
BytePatch("engine.dll", "F3 0F 10 40 54 0F 2F 05 ?? ?? ?? ?? 73 ??", 0xC, "EB"),

// SCR_UpdateScreen
BytePatch("engine.dll", "40 55 41 54 41 56 41 57 48 8D 6C 24 ? 48 81 EC 88 00 00 00 48 8B 05 ? ? ? ? 45 33 E4 4C 89 65 ? 45 8B FC", 0x0, "31 C0 C3"),

// CEngineVGui::Simulate
BytePatch("engine.dll", "41 57 48 81 EC A0 00 00 00 4C 8B F9 48 8B 0D ? ? ? ? 48 8B 01 FF 90 20 01 00 00 49 83 BF B8 00 00 00 00", 0x0, "31 C0 C3"),

// CL_DecayLights
BytePatch("engine.dll", "48 83 EC 48 0F 29 74 24 30 48 8D 0D ? ? ? ? 0F 29 7C 24 20 E8 ? ? ? ? 0F 28 F8 0F 57 F6 0F 2F FE 0F 86 ? ? ? ?", 0x0, "C3"),

// _Host_RunFrame -> _Host_RunFrame_Render callsite
BytePatch("engine.dll", "45 84 E4 0F 84 ? ? ? ? E8 ? ? ? ? 48 8B 05 ? ? ? ? 4C 8D 25 ? ? ? ? 4C 89 7D ? 48 8D 15", 0x9, "90 90 90 90 90"),

// _Host_RunFrame_Sound callsite
BytePatch("engine.dll", "83 3D ? ? ? ? 06 F2 0F 11 05 ? ? ? ? 75 09 48 8D 0D ? ? ? ? EB 02 33 C9 E8 ? ? ? ? FF 15 ? ? ? ? F2 0F 10 0D", 0x1C, "90 90 90 90 90"),

// _Host_RunFrame_Client voice gate callsite
BytePatch("engine.dll", "F3 0F 10 05 ? ? ? ? E8 ? ? ? ? E8 ? ? ? ? 84 C0 0F 84 ? ? ? ? 0F 57 C0 C6 44 24 ? 01", 0xD, "31 C0 90 90 90"),

// _Host_RunFrame_Input -> ClientDLL_ProcessInput callsite
BytePatch("engine.dll", "FF 15 ? ? ? ? F2 0F 11 05 ? ? ? ? E8 ? ? ? ? FF 15 ? ? ? ? F2 0F 11 05 ? ? ? ? E8 ? ? ? ?", 0xE, "90 90 90 90 90"),

// _Host_RunFrame non-threaded path -> CL_RunPrediction(PREDICTION_NORMAL)
BytePatch("engine.dll", "48 8B 01 FF 50 18 B9 01 00 00 00 E8 ? ? ? ? E8 ? ? ? ? F3 0F 10 05 ? ? ? ? E8 ? ? ? ? 48 85 F6 74 ? 45 33 C9", 0xB, "90 90 90 90 90"),

// _Host_RunFrame threaded path -> CL_RunPrediction(PREDICTION_NORMAL)
BytePatch("engine.dll", "B9 01 00 00 00 F3 0F 10 05 ? ? ? ? F3 0F 5E 05 ? ? ? ? F3 0F 11 05 ? ? ? ? E8 ? ? ? ? E8 ? ? ? ? 48 8D 0D ? ? ? ? C6 05", 0x1D, "90 90 90 90 90"),

// _Host_RunFrame non-threaded path -> CL_ExtraMouseUpdate
BytePatch("engine.dll", "F3 0F 10 05 ? ? ? ? E8 ? ? ? ? 48 85 F6 74 ? 45 33 C9 44 89 7C 24 20 45 33 C0 48 8B D3 48 8B CE FF 96 A8 00 00 00", 0x8, "90 90 90 90 90"),

// _Host_RunFrame threaded path -> CL_ExtraMouseUpdate
BytePatch("engine.dll", "E8 ? ? ? ? F3 0F 11 05 ? ? ? ? E8 ? ? ? ? F2 0F 10 05 ? ? ? ? 66 0F 5A C0 44 89 35 ? ? ? ? 89 35 ? ? ? ? F3 0F 11 05", 0xD, "90 90 90 90 90"),

// _Host_RunFrame fallback sleep path
BytePatch("engine.dll", "48 8B 05 ? ? ? ? 8B 48 58 E8 ? ? ? ? 8B 0D ? ? ? ? 85 C9 74 05 E8 ? ? ? ? E8", 0xF, "B9 01 00 00 00 90"),

// _Host_RunFrame tick loop -> toolframework->Think callsite
BytePatch("engine.dll", "40 38 3D ? ? ? ? 75 08 0F B6 CB E8 ? ? ? ? 48 8B 0D ? ? ? ? 0F B6 D3 48 8B 01 FF 90 D8 00 00 00 F2 0F 10 0D ? ? ? ?", 0x1E, "90 90 90 90 90 90"),

// evil cathook's plan b implementation

// Mod_LoadLighting
// nulls out lighting data loading for maps
BytePatch("engine.dll", "40 53 48 83 EC 20 48 8B D9 48 63 09 85 C9 75 18", 0x0, "C3"),
BytePatch("engine.dll", "40 53 48 83 EC 20 48 8B D9 48 63 09 85 C9 75 18 48 8B 05 ? ? ? ? 48 C7 80 20 01 00 00 00 00 00 00", 0x0, "31 C0 C3"),

// Sprite_LoadModel
// nulls out sprite model loading
BytePatch("engine.dll", "48 89 5C 24 08 48 89 74 24 18 57 41 56 41 57 48", 0x0, "C3"),
BytePatch("engine.dll", "48 89 5C 24 08 48 89 74 24 18 57 41 56 41 57 48 81 EC 50 01 00 00 83 4A 10 01 33 DB 48 8B 0D ? ? ? ? 48 8B FA", 0x0, "C3"),

// Mod_LoadWorldlights
// nulls out world light loading
BytePatch("engine.dll", "48 89 5C 24 08 48 89 6C 24 10 48 89 74 24 18 57", 0x0, "C3"),
BytePatch("engine.dll", "40 56 41 56 41 57 48 83 EC 50 4C 8B 05 ? ? ? ? 33 F6 44 0F B6 FA 4C 8B F1 49 89 B0 38 01 00 00 48 63 01 85 C0 75 18", 0x0, "31 C0 C3"),

// Mod_LoadTexinfo
// forces mat_loadtextures 0 logic to skip material loading
BytePatch("engine.dll", "0F 84 ? ? ? ? 48 63 7E 44", 0x0, "90 E9"),
BytePatch("engine.dll", "0F 84 ? ? ? ? 48 63 7E 44 85 FF 0F 88 ? ? ? ? 48 63 44 24 48", 0x0, "90 E9"),
}},
{"materialsystem",
{
// CMaterialSystem::Init
// Returns 1 (INIT_OK) to prevent material system initialization but allow engine to continue anywyay
BytePatch("materialsystem.dll", "40 53 48 83 EC 20 48 8B D9 48 8B 0D ? ? ? ? 48 8B 01 FF 90 ? ? ? ? 48 8B 0D", 0x0, "B8 01 00 00 00 C3"),
BytePatch("materialsystem.dll", "40 53 48 81 EC 70 01 00 00 48 83 3D ? ? ? ? ? 48 8B D9 74 ? 80 79 08 00 74", 0x0, "B8 01 00 00 00 C3"),

// CMaterialSystem::BeginFrame
// bye bye frame rendering!
BytePatch("materialsystem.dll", "48 8B 0D ? ? ? ? 48 8B 01 48 FF A0 ? ? ? ? CC", 0x0, "C3"),
BytePatch("materialsystem.dll", "40 57 48 81 EC C0 00 00 00 0F 29 B4 24 ? ? ? ? 48 8B F9 0F 28 F1 FF 15 ? ? ? ? 84 C0 0F 84", 0x0, "C3"),

// CMaterialSystem::FindMaterial
// returns NULL for every material lookup
BytePatch("materialsystem.dll", "48 8B F9 48 8B CA 49 8B D8 FF 10 4C 8B C0 48 8D 15 ? ? ? ? 48 8D 4C 24 20", 0x0, "31 C0 C3"),
}},
{"client",
{
Expand All @@ -86,6 +138,15 @@ class CBytePatches
// CViewRender::Render
BytePatch("client.dll", "48 89 50 ? 55 57 41 56", 0x0, "31 C0 C3"),

// CHLClient::HudUpdate -> GetClientVoiceMgr()->Frame(frametime)
BytePatch("client.dll", "E8 ? ? ? ? 48 8B C8 0F 28 CE E8 ? ? ? ? 0F B6 D3 48 8D 0D ? ? ? ? E8 ? ? ? ?", 0xB, "90 90 90 90 90"),

// CHLClient::HudUpdate -> vgui::GetAnimationController()->UpdateAnimations(engine->Time())
BytePatch("client.dll", "48 8B 0D ? ? ? ? 48 8B 01 FF 50 70 0F 28 F0 E8 ? ? ? ? 48 8B C8 0F 28 CE E8 ? ? ? ? 48 8B 05 ? ? ? ?", 0x1B, "90 90 90 90 90"),

// CHLClient::HudUpdate -> C_BaseTempEntity::CheckDynamicTempEnts
BytePatch("client.dll", "48 8B 0D ? ? ? ? 48 8D 15 ? ? ? ? 4C 8B C0 FF 13 E8 ? ? ? ? 48 8B 0D ? ? ? ? 48 8B 01 FF 90 D8 00 00 00", 0x13, "90 90 90 90 90"),

// This fixes the datacache.dll crash
BytePatch("client.dll", "4D 85 F6 0F 84 ? ? ? ? 49 8B CE E8 ? ? ? ? 83 F8", 0x0, "83 F6 00"),

Expand Down Expand Up @@ -137,13 +198,30 @@ class CBytePatches

// Fixes crash
BytePatch("client.dll", "45 85 C0 78 3E 4C 8B 11 45 3B 82 E8 00 00 00 7D 32", 0x0, "4C 8B 11 4D 85 D2 74 3B 45 3B 82 E8 00 00 00 73 32"),

// Fixes crash in client.dll+0x57cc59v
BytePatch("client.dll", "8B 89 ? ? ? ? 85 C9 0F 84 ? ? ? ? 41 BF ? ? ? ?", 0x0, "31 C9 90 90 90 90"),

// Fixes crash in CHudTextMessage (make index guard unconditional across all 3 duplicated blocks)
BytePatch("client.dll", "83 E8 01 78 13 48 63 C8 0F B6 04 39 3C 0A 74 04 3C 0D 75 04 44 88 3C 39 41 B8 00 02 00 00 48 8D 95 40 0B 00 00", 0x3, "EB"),
BytePatch("client.dll", "83 E8 01 78 13 48 63 C8 0F B6 04 39 3C 0A 74 04 3C 0D 75 04 44 88 3C 39 41 B8 00 02 00 00 48 8D 95 40 0D 00 00", 0x3, "EB"),
BytePatch("client.dll", "83 E8 01 78 13 48 63 C8 0F B6 04 39 3C 0A 74 04 3C 0D 75 04 44 88 3C 39 41 B8 00 02 00 00 48 8D 95 40 0F 00 00", 0x3, "EB"),
}},
{"datacache",
{
// CDataCacheSection::Unlock CRASHFIX!
BytePatch("datacache.dll", "48 89 5C 24 18 48 89 7C 24 20 41 56 48 83 EC 20 F6 81 E0 00 00 00 04", 0x41, "90 90 90 90 90"),

// Fixes crash in datacache.dll+0xf2b3 (likely FindMDL or similar)
BytePatch("datacache.dll", "4E 8B 44 C0 10 4D 85 C0 0F 84 80 00 00 00", 0x0, "45 31 C0 90 90 4D 85 C0 0F 84 80 00 00 00"),
}},
{"gameui",
{
BytePatch("GameUI.dll", "80 79 08 00 75 03 32 C0 C3 48 8B 49 10 48 8B 01 48 FF A0 10 01 00 00", 0x0, "32 C0 C3"),

BytePatch("GameUI.dll", "48 8B 49 10 48 8B 01 48 FF A0 10 01 00 00", 0x4, "32 C0 C3 90 90 90 90 90 90 90"),
}}
};
};

ADD_FEATURE_CUSTOM(CBytePatches, BytePatches, U);
ADD_FEATURE_CUSTOM(CBytePatches, BytePatches, U);
Loading