Post: BO1 Offsets,Addresses & Scripts Thread [1.13]
Options
07-04-2014, 11:56 AM
#1
makeabce
I defeated!
Multiplayer
Name and Stats
Name Offset: 0x02000934
Class Name Offset: 0x01c3896f (Class # 1-5) & 0x01c43cf4 (Class # 6-10)
COD Points Offset: 0x020942d1
Time Played Offset: 0x02094731
Total Wins Offset: 0x0209475d
Total Losses Offset: 0x020944dd
Prestige Offset: 0x020946dd
Rank Offset (score basically): 0x020946e5
Kills Offset: 0x02094429
Deaths Offset: 0x020942f5
Assists Offset: 0x02094291
Kill/Death Ratio In Weapons Offset: 0x02094425
Wins/Loss Ration In Career Offset: 0x02094761
Headshots Offset: 0x0209440d
Amount Spent In Contracts Offset: 0x020942dd
Contracts Purchased Offset: 0x020942e1
XP Award In Contracts Offset: 0x020942e5
Return On Investment Contracts Offset (This is also amount earned) : 0x020942d9
Games Played Offset: 0x020938b1
Wager Match Earnings Offset: 0x020944d9
Unlock All Offset: 0x02094990 (Unlock All Bytes: https://pastebin.com/MxmMrR22)
Non-Host Offsets
Super Sleight of Hand
Bytes: 0x02 for on, 0x01 for off
Offset: 0xBBC2E8
Chrome Players
Bytes: 0x38, 0xC0, 0xFF, 0xFF for On, 0xFC, 0xC0, 0xF8, 0x90 for Off
Offset: 0x131144
Wallhack
Bytes: 0x38, 0xC0, 0xF0, 0x03 for On,0xFC, 0xC0, 0xF8, 0x90 for Off
Offset: 0x131144
Rapid Fire
Bytes: 0x02 for On, 0x01 for Off
Offset: 0xBBC2EC
Redboxes
Bytes: 0x60,0x00,0x00,0x00 for both, and when off then change redboxes offset with these: 0x41, 0x86, 0x02, 0x78
Perk Check Offset: 0x001206C8
Redboxes Offset: 0x001205C0
Blackbird
Bytes: 0x40, 0x9A, 0x00, 0xC4 for On, 0x41, 0x9A, 0x00, 0xC4 for Off
Offset: 0xEBDF4
Super Steady Aim
Bytes: 0x60,0x00,0x00,0x00 for On, 0x2F, 0x80, 0x00, 0x02 for Off
Offset: 0xAB8EC
No Recoil
Bytes: 0x60,0x00,0x00,0x00 for On, 0x4B, 0xF1, 0x84, 0xCD for Off
Offset: 0x19B244
Client Offsets Interval: 0x2A38
In-Game Name
Offset: 0x139784C
Godmode Scpript
public void Godmode(uint client)
{
PS3.SetMemory((0x12ab290 + (client * 760)) + 0x194, new byte[4]);
Thread.Sleep(50);
PS3.SetMemory((0x12ab290 + (client * 760)) + 0x194, new byte[] { 15, 0xff, 0xff, 0xff });
}
mFlags
Bytes: 0x01 for noclip,0x02 for ufo
Offset: 0x13979BF
Unlimited Ammo Scpript
public void UnlimitedAmmo(uint client)
{
PS3.SetMemory((0x13950c8 + (client * 0x2a3
) + 0x388, new byte[] { 15, 0xff, 0xff, 0xff });
PS3.SetMemory((0x13950c8 + (client * 0x2a3) + 0x400, new byte[] { 15, 0xff, 0xff, 0xff });
PS3.SetMemory((0x13950c8 + (client * 0x2a3) + 0x380, new byte[] { 15, 0xff, 0xff, 0xff });
PS3.SetMemory((0x13950c8 + (client * 0x2a3) + 0x3f8, new byte[] { 15, 0xff, 0xff, 0xff });
PS3.SetMemory((0x13950c8 + (client * 0x2a3) + 0x410, new byte[] { 15, 0xff, 0xff, 0xff });
PS3.SetMemory((0x13950c8 + (client * 0x2a3) + 0x408, new byte[] { 15, 0xff, 0xff, 0xff });
}
Blackbird
Bytes: 0x01 On, 0x00 Off
Offset: 0x1397AEB
Reconplane
Bytes: 0x03 for On, 0x00 for Off
Offset: 0x1397967
Second Chance
Bytes: 0x01 for On
Offset: 0x1397AEC
Speed
Bytes: 0x40,0x40 for super, 0x3F 0x80 for default, 0x00,0x00 for freeze
Offset: 0x1397880
In-Game Camo
Bytes: 60 for gold, 10 for ice,13 for red,10 for olive,20 for nevada,0x18 for sahara
Offset: 0x013952E0
Teleport
Offset: 0x13950f0
Scripts
Aimbot (By Seb5594 & DexModderFTW & Eddie mac)
public class Aimbot
{
#region Aimbot
//All of the getting info etc.
public static uint G_Entity(uint client)
{
return 0x012ab290 + (client * 0x2F;
}
public static float[] getOrigin(uint clientNum)
{
float[] origin = new float[3];
origin[0] = Lib.ReadSingle(0x013950c8 + 0x2A38 * clientNum + 0x24);
origin[1] = Lib.ReadSingle(0x013950c8 + 0x2A38 * clientNum + 0x24 + 0x4);
origin[2] = Lib.ReadSingle(0x013950c8 + 0x2A38 * clientNum + 0x24 + 0x;
return origin;
}
public static UInt32 G_Entity(Int32 ClientIndex)
{
return 0x16B7920 + ((UInt32)ClientIndex * 0x31C);
}
public static int GetHost()
{
string str = Lib.ReadString(0x172a58;
for (int i = 0; i < 0x12; i++)
{
string str2 = Lib.ReadString((uint)(0xf1651c + (i * 0x3600)));
if (str == str2)
{
return i;
}
}
return -1;
}
public static Boolean Exists(Int32 clientIndex)
{
return Lib.ReadString(0x013978d0 + ((uint)clientIndex * 0x2A3) != "";
}
public static Boolean IsAlive(Int32 clientIndex)
{
return (Lib.ReadByte(0x0139793b + ((uint)clientIndex * 0x2A3) == 0);
}
public static Boolean isSameTeam(Int32 Owner, Int32 Victim)
{
return Lib.ReadInt32(0x01397894 + ((uint)Owner * 0x2A3) == Lib.ReadInt32(0x01397894 + ((uint)Victim * 0x2A3);
}
public static Single GetDistance3D(Single[] p1, Single[] p2)
{
float[] numArray3 = new float[] { p2[0] - p1[0], p2[1] - p1[1], p2[2] - p1[2] };
return ((numArray3[0] * numArray3[0]) + (numArray3[1] * numArray3[1])) + (numArray3[2] * numArray3[2]);
}
public static int GetNearestClientFromAttacker(int You)
{
int CIndex = -1;
double Closest = 1E+08f;
for (int i = 0; i < 12; i++)
{
if (((Exists(i) && IsAlive(i) && !isSameTeam(You, i))))
{
double Bla = GetDistance3D(getOrigin((uint)You), getOrigin((uint)i));
if (Bla < Closest)
{
CIndex = i;
Closest = Bla;
}
}
}
return CIndex;
}
//The Real Aimbot Code-----
//function to convert a vector to angles
public static Single[] vectoangles(Int32 clientIndex, Int32 secondPlayer)
{
Single[] numArray1 = getOrigin((uint)clientIndex);
Single[] numArray2 = getOrigin((uint)secondPlayer);
Single[] Angles = {(numArray2[0] - numArray1[0]), (numArray2[1] - numArray1[1]), (numArray2[2] - numArray1[2])};
Single num2;
Single num3;
Single[] numArray = new Single[3];
if ((Angles[1] == 0f) && (Angles[0] == 0f))
{
num2 = 0f;
if (Angles[2] > 0f)
num3 = 90f;
else
num3 = 270f;
}
else
{
if (Angles[0] != -1f)
num2 = (Single)((Math.Atan2((Double)Angles[1], (Double)Angles[0]) * 180.0) / 3.1415926535897931);
else if (Angles[1] > 0f)
num2 = 90f;
else
num2 = 270f;
if (num2 < 0f)
num2 += 360f;
Single num = (Single)Math.Sqrt((Double)((Angles[0] * Angles[0]) + (Angles[1] * Angles[1])));
num3 = (Single)((Math.Atan2((Double)Angles[2], (Double)num) * 180.0) / 3.1415926535897931);
if (num3 < 0f)
num3 += 360f;
}
numArray[0] = -num3;
numArray[1] = num2;
return numArray;
}
//Set Set the clients angles
public static void SetClientViewAngles(Int32 clientIndex, Int32 Victim)
{
Single[] angles = vectoangles(clientIndex, Victim);
Lib.WriteSingle(0x10040000, angles);
RPC.Call(0x2C1E38, new Object[] { Addresses.G_Entity((uint)clientIndex), 0x10040000 });
}
//Just Aimbot Threads and Bools
public static bool[] AimbotStatus = new bool[12];
public static Thread[] AimbotThread = new Thread[12];
public static bool[] UnfairAimbot = new bool[12];
//This is what starts the Aimbot
public static void StartAimbot(int clientIndex)
{
ThreadStart start = null;
if (!AimbotStatus[clientIndex])
{
Thread.Sleep(100);
AimbotStatus[clientIndex] = true;
if (start == null)
{
start = () => InitializeAimbot(clientIndex);
}
AimbotThread[clientIndex] = new Thread(start);
AimbotThread[clientIndex].IsBackground = true;
AimbotThread[clientIndex].Start();
}
else
{
AimbotStatus[clientIndex] = false;
AimbotThread[clientIndex].Abort();
}
}
//Main Aimbot Code
private static void InitializeAimbot(int client)
{
PS3.Reconnect();
while (AimbotThread[client].IsAlive)
{
int nearestPlayer = GetNearestClientFromAttacker(client);
if (nearestPlayer != client)
{
if (ButtonPress.ButtonPressed(client, 03) || ButtonPress.ButtonPressed(client, 04))
{
SetClientViewAngles(client, nearestPlayer);
}
}
}
}
#endregion
//Example:
Aimbot.StartAimbot(int client);
Cbuf_AddText
public void cBuf_AddText(int localClient,string command)
{
RPC.Call(0x00399CC8, localClient, command);
}
cl_ingame
#region inGame
public static bool Dvar_GetBool(string DVAR)
{
bool State;
uint Value = (uint)RPC.Call(0x4C7BF0, DVAR);
if (Value == 1)
State = true;
else
State = false;
return State;
}
public static Boolean cl_inGame()
{
bool es;
if (Dvar_GetBool("cl_ingame") == true)
{
es = true;
}
else
{
es = false;
}
return es;
}
#endregion
// Thanks Chris for the original Dvar_GetBool function from his mw3 script and sc58 the correct address
Unlock All
public void UnlockAll()
{
PS3.SetMemory(0x02094990, new byte[] { 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF });
}
SV_GameSendServerCommand
public void SV_GameSendServerCommand(int client, string command)
{
RPC.Call(0x003E95F0, client, 1, command);
}
G_SetModel
public void SetModel(int client, string model)
{
RPC.Call(0x003701D8, (uint)(0x012ab290 + client * 0x2F, model);
}
FPS RPC (By Jo-Milk)
private void JM_RPC()
{
PS3.SetMemory(0x00466299, new byte[] { 0x9A });//RPC OFF
PS3.SetMemory(0x4667B4, new byte[] { 0x3F, 0x80, 0x10, 0x05, 0x81, 0x9C, 0x00, 0x48, 0x2C, 0x0C, 0x00, 0x00, 0x41, 0x82, 0x00, 0x64, 0x80, 0x7C, 0x00, 0x00, 0x80, 0x9C, 0x00, 0x04, 0x80, 0xBC, 0x00, 0x08, 0x80, 0xDC, 0x00, 0x0C, 0x80, 0xFC, 0x00, 0x10, 0x81, 0x1C, 0x00, 0x14, 0x81, 0x3C, 0x00, 0x18, 0x81, 0x5C, 0x00, 0x1C, 0x81, 0x7C, 0x00, 0x20, 0xC0, 0x3C, 0x00, 0x24, 0xC0, 0x5C, 0x00, 0x28, 0xC0, 0x7C, 0x00, 0x2C, 0xC0, 0x9C, 0x00, 0x30, 0xC0, 0xBC, 0x00, 0x34, 0xC0, 0xDC, 0x00, 0x38, 0xC0, 0xFC, 0x00, 0x3C, 0xC1, 0x1C, 0x00, 0x40, 0xC1, 0x3C, 0x00, 0x44, 0x7D, 0x89, 0x03, 0xA6, 0x4E, 0x80, 0x04, 0x21, 0x38, 0x80, 0x00, 0x00, 0x90, 0x9C, 0x00, 0x48, 0x90, 0x7C, 0x00, 0x4C, 0xD0, 0x3C, 0x00, 0x50, 0x48, 0x00, 0x00, 0x40 });//RPC CODE
PS3.SetMemory(0x10050000, new byte[0x2854]);//RPC arguments
PS3.SetMemory(0x00466299, new byte[] { 0x00 });//RPC ON
}
public static Int32 Call(UInt32 address, params Object[] parameters)//this is VezahHFH MW3 Call function I used same place to store the arguments because I'm Lazy and I don't feel like making that function since I code in C++ but I might optimize this function
{
Int32 length = parameters.Length;
Int32 index = 0;
UInt32 count = 0;
UInt32 Strings = 0;
UInt32 Single = 0;
UInt32 Array = 0;
while (index < length)
{
if (parameters[index] is Int32)
{
WriteInt32(0x10050000 + (count * 4), (Int32)parameters[index]);
count++;
}
else if (parameters[index] is UInt32)
{
WriteUInt32(0x10050000 + (count * 4), (UInt32)parameters[index]);
count++;
}
else if (parameters[index] is Int16)
{
WriteInt16(0x10050000 + (count * 4), (Int16)parameters[index]);
count++;
}
else if (parameters[index] is UInt16)
{
WriteUInt16(0x10050000 + (count * 4), (UInt16)parameters[index]);
count++;
}
else if (parameters[index] is Byte)
{
WriteByte(0x10050000 + (count * 4), (Byte)parameters[index]);
count++;
} //Should work now 
let me try
else
{
UInt32 pointer;
if (parameters[index] is String)
{
pointer = 0x10052000 + (Strings * 0x400);
WriteString(pointer, Convert.ToString(parameters[index]));
WriteUInt32(0x10050000 + (count * 4), pointer);
count++;
Strings++;
}
else if (parameters[index] is Single)
{
WriteSingle(0x10050024 + (Single * 4), (Single)parameters[index]);
Single++;
}
else if (parameters[index] is Single[])
{
Single[] Args = (Single[])parameters[index];
pointer = 0x10051000 + Array * 4;
WriteSingle(pointer, Args);
WriteUInt32(0x10050000 + count * 4, pointer);
count++;
Array += (UInt32)Args.Length;
}
}
index++;
}
WriteUInt32(0x10050048, address);
Thread.Sleep(20);
return ReadInt32(0x1005004c);
//or you could return a float pointer if the function that is called return one just check at the offset 0x10050050
}
RPC (By SC58 And Choco )
using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Threading.Tasks;
namespace BOIMPRPC
{
public class PS3
{
static uint processID;
private static uint GetProcessID()
{
uint[] ProcessIDs;
PS3_TMAPI.GetProcessList(0, out ProcessIDs);
return ProcessIDs[0];
}
public static void SetMemory(uint address, byte[] memory)
{
PS3_TMAPI.ProcessSetMemory(0, PS3_TMAPI.UnitType.PPU, processID, 0, address, memory);
}
public static byte[] GetMemory(uint address, int length)
{
byte[] bytes = new byte[length];
PS3_TMAPI.ProcessGetMemory(0, PS3_TMAPI.UnitType.PPU, processID, 0, address, ref bytes);
return bytes;
}
public static int Init()
{
processID = GetProcessID();
return RPC.Init();
}
}
public class RPC
{
static uint function_address;
public static int Init()
{
function_address = Get_func_address();
if (function_address == 0) return -1;
Enable_RPC();
return 0;
}
public static uint Get_func_address()
{
for (uint i = 0x7A21D4; i < 0x1000000; i += 4)
{
byte[] bytes = PS3.GetMemory(i, ;
if (((bytes[0] == 0x4B) && (bytes[1] == 0xFF) && (bytes[2] == 0xBE) && (bytes[3] == 0x05) && (bytes[4] == 0x4B) && (bytes[5] == 0xFF) && (bytes[6] == 0xFC) && (bytes[7] == 0x9))
{
return i + 0xC;
}
}
return 0;
}
public static void Enable_RPC()
{
PS3.SetMemory(function_address, new byte[] { 0x4E, 0x80, 0x00, 0x20 });
System.Threading.Thread.Sleep(20);
byte[] func = new byte[] { 0x7C, 0x08, 0x02, 0xA6, 0xF8, 0x01, 0x00, 0x80, 0x3C, 0x60, 0x10, 0x05, 0x81, 0x83, 0x00, 0x4C, 0x2C, 0x0C, 0x00, 0x00, 0x41, 0x82, 0x00, 0x64, 0x80, 0x83, 0x00, 0x04, 0x80, 0xA3, 0x00, 0x08, 0x80, 0xC3, 0x00, 0x0C, 0x80, 0xE3, 0x00, 0x10, 0x81, 0x03, 0x00, 0x14, 0x81, 0x23, 0x00, 0x18, 0x81, 0x43, 0x00, 0x1C, 0x81, 0x63, 0x00, 0x20, 0xC0, 0x23, 0x00, 0x24, 0xC0, 0x43, 0x00, 0x28, 0xC0, 0x63, 0x00, 0x2C, 0xC0, 0x83, 0x00, 0x30, 0xC0, 0xA3, 0x00, 0x34, 0xC0, 0xC3, 0x00, 0x38, 0xC0, 0xE3, 0x00, 0x3C, 0xC1, 0x03, 0x00, 0x40, 0xC1, 0x23, 0x00, 0x48, 0x80, 0x63, 0x00, 0x00, 0x7D, 0x89, 0x03, 0xA6, 0x4E, 0x80, 0x04, 0x21, 0x3C, 0x80, 0x10, 0x05, 0x38, 0xA0, 0x00, 0x00, 0x90, 0xA4, 0x00, 0x4C, 0x80, 0x64, 0x00, 0x50, 0xE8, 0x01, 0x00, 0x80, 0x7C, 0x08, 0x03, 0xA6, 0x38, 0x21, 0x00, 0x70, 0x4E, 0x80, 0x00, 0x20, 0x60, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x60, 0x00, 0x00, 0x00 };
PS3.SetMemory(function_address + 0x4, func);
PS3.SetMemory(0x10050000, new byte[0x2854]);
PS3.SetMemory(function_address, new byte[] { 0xF8, 0x21, 0xFF, 0x91 });
}
public static int Call(uint func_address, params object[] parameters)
{
int num_params = parameters.Length;
uint num_floats = 0;
for (uint i = 0; i < num_params; i++)
{
if (parameters[i] is int)
{
byte[] val = BitConverter.GetBytes((int)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, val);
}
else if (parameters[i] is uint)
{
byte[] val = BitConverter.GetBytes((uint)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, val);
}
else if (parameters[i] is string)
{
byte[] str = Encoding.UTF8.GetBytes(Convert.ToString(parameters[i]) + "\0");
PS3.SetMemory(0x10050054 + i * 0x400, str);
uint addr = 0x10050054 + i * 0x400;
byte[] address = BitConverter.GetBytes(addr);
Array.Reverse(address);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, address);
}
else if (parameters[i] is float)
{
num_floats++;
byte[] val = BitConverter.GetBytes((float)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050024 + ((num_floats - 1) * 0x4), val);
}
}
byte[] fadd = BitConverter.GetBytes(func_address);
Array.Reverse(fadd);
PS3.SetMemory(0x1005004C, fadd);
System.Threading.Thread.Sleep(20);
byte[] ret = PS3.GetMemory(0x10050050, 4);
Array.Reverse(ret);
return BitConverter.ToInt32(ret, 0);
}
Buttons
Buttons Monitoring (by seb5594)
public class Buttons
{
public static UInt32
X = 2104320,
O = 512,
Square = 67108864,
Triangle = 8,
L3 = 1074003968,
R3 = 536870912,
L2 = 72704,
R2 = 131072,
L1 = 1048704,
R1 = 2147483648,
Crouch = 4194304,
Prone = 8388608,
StartButton = 4;
}
public Boolean ButtonPressed(Int32 clientIndex, UInt32 Button)
{
if (BO1TMAPI.PS3.Extension.ReadUInt32((UInt32)G_Client(clientIndex) + 0x271 == Button)
return true;
else return false;
}
public Int32 G_Client(Int32 clientIndex)
{
return (Int32)0x13950C8 + 0x2A38 * clientIndex;
}
public UInt32 ReadUInt32(uint offset)
{
Byte[] YoLo = GetMemory(offset, 4);
Array.Reverse(YoLo, 0, 4);
return BitConverter.ToUInt32(YoLo, 0);
}
public byte[] GetMemory(uint address, int length)
{
byte[] buffer = new byte[length];
BO1TMAPI.PS3.GetMemory(address, buffer);
return buffer;
}
//Example how to use:
if(ButtonPressed(0,Buttons.L1))
{
// Mods/functions here
}
Local Client Buttons Monitoring (by xPAQz )
private static UInt32 LocalButtons = 0xd19800;
public enum Buttons
{
DpadUp = 0x1FF,
DpadDown = 0x20F,
DpadRight = 0x21F,
DpadLeft = -0xC47E5F,
R3 = 0x1CF,
Square = 0xEF,
Cross = 0xCF,
LeftCursorUp = 0x27F,
LeftCursorLeft = 0x29F,
LeftCursorRight = 0x2AF,
LeftCursorDown = 0x28F,
R2 = 0x1EF,
L2 = 0x1DF,
Select = 0x1AF,
Start = 0x19F
}
public static Boolean ButtonPressed(Buttons Button)
{
return Convert.ToBoolean(PS3.Extension.ReadByte(LocalButtons + (UInt32)Button) == 1);
}
FPS (By SC58 )
0x00466298 - Turn on/off FPS
40 00 - ON
40 9A - OFF
0x0091C860 - Text For Menu
0x0091BF38 - Text Position
0x0091BF34 - Text Size
Unlock All Trophys (by SC58 )
public void TrophyUnlocks_MP()
{
string[] Achievements = new string[75];
Achievements[0] = "8 SP_WIN_CUBA";
Achievements[1] = "8 SP_WIN_VORKUTA";
Achievements[2] = "8 SP_WIN_PENTAGON";
Achievements[3] = "8 SP_WIN_FLASHPOINT";
Achievements[4] = "8 SP_WIN_KHE_SANH";
Achievements[5] = "8 SP_WIN_HUE_CITY";
Achievements[6] = "8 SP_WIN_KOWLOON";
Achievements[7] = "8 SP_WIN_RIVER";
Achievements[8] = "8 SP_WIN_FULLAHEAD";
Achievements[9] = "8 SP_WIN_INTERROGATION_ESCAPE";
Achievements[10] = "8 SP_WIN_UNDERWATERBASE";
Achievements[11] = "8 SP_VWIN_FLASHPOINT";
Achievements[12] = "8 SP_VWIN_HUE_CITY";
Achievements[13] = "8 SP_VWIN_RIVER";
Achievements[14] = "8 SP_VWIN_FULLAHEAD";
Achievements[15] = "8 SP_VWIN_UNDERWATERBASE";
Achievements[16] = "8 SP_LVL_CUBA_CASTRO_ONESHOT";
Achievements[17] = "8 SP_LVL_VORKUTA_VEHICULAR";
Achievements[18] = "8 SP_LVL_VORKUTA_SLINGSHOT";
Achievements[19] = "8 SP_LVL_KHESANH_MISSILES";
Achievements[20] = "8 SP_LVL_HUECITY_AIRSUPPORT";
Achievements[21] = "8 SP_LVL_HUECITY_DRAGON";
Achievements[22] = "8 SP_LVL_CREEK1_DESTROY_MG";
Achievements[23] = "8 SP_LVL_CREEK1_KNIFING";
Achievements[24] = "8 SP_LVL_KOWLOON_DUAL";
Achievements[25] = "8 SP_LVL_RIVER_TARGETS";
Achievements[26] = "8 SP_LVL_WMD_RSO";
Achievements[27] = "8 SP_LVL_WMD_RELAY";
Achievements[28] = "8 SP_LVL_POW_HIND";
Achievements[29] = "8 SP_LVL_POW_FLAMETHROWER";
Achievements[30] = "8 SP_LVL_FULLAHEAD_2MIN";
Achievements[31] = "8 SP_LVL_REBIRTH_MONKEYS";
Achievements[32] = "8 SP_LVL_REBIRTH_NOLEAKS";
Achievements[33] = "8 SP_LVL_UNDERWATERBASE_MINI";
Achievements[34] = "8 SP_LVL_FRONTEND_CHAIR";
Achievements[35] = "8 SP_LVL_FRONTEND_ZORK";
Achievements[36] = "8 SP_GEN_MASTER";
Achievements[37] = "8 SP_GEN_FRAGMASTER";
Achievements[38] = "8 SP_GEN_ROUGH_ECO";
Achievements[39] = "8 SP_GEN_CROSSBOW";
Achievements[40] = "8 SP_GEN_FOUNDFILMS";
Achievements[41] = "8 SP_ZOM_COLLECTOR";
Achievements[42] = "8 SP_ZOM_NODAMAGE";
Achievements[43] = "8 SP_ZOM_TRAPS";
Achievements[44] = "8 SP_ZOM_SILVERBACK";
Achievements[45] = "8 SP_ZOM_CHICKENS";
Achievements[46] = "8 SP_ZOM_FLAMINGBULL";
Achievements[47] = "8 MP_FILM_CREATED";
Achievements[48] = "8 MP_WAGER_MATCH";
Achievements[49] = "8 MP_PLAY";
Achievements[50] = "8 DLC1_ZOM_OLDTIMER";
Achievements[51] = "8 DLC1_ZOM_HARDWAY";
Achievements[52] = "8 DLC1_ZOM_PISTOLERO";
Achievements[53] = "8 DLC1_ZOM_BIGBADDABOOM";
Achievements[54] = "8 DLC1_ZOM_NOLEGS";
Achievements[55] = "8 DLC2_ZOM_PROTECTEQUIP";
Achievements[56] = "8 DLC2_ZOM_LUNARLANDERS";
Achievements[57] = "8 DLC2_ZOM_FIREMONKEY";
Achievements[58] = "8 DLC2_ZOM_BLACKHOLE";
Achievements[59] = "8 DLC2_ZOM_PACKAPUNCH";
Achievements[60] = "8 DLC3_ZOM_STUNTMAN";
Achievements[61] = "8 DLC3_ZOM_SHOOTING_ON_LOCATION";
Achievements[62] = "8 DLC3_ZOM_QUIET_ON_THE_SET";
Achievements[63] = "8 DLC4_ZOM_TEMPLE_SIDEQUEST";
Achievements[64] = "8 DLC5_ZOM_CRYOGENIC_PARTY";
Achievements[65] = "8 DLC5_ZOM_BIG_BANG_THEORY";
Achievements[66] = "8 DLC5_ZOM_GROUND_CONTROL";
Achievements[67] = "8 DLC5_ZOM_ONE_SMALL_HACK";
Achievements[68] = "8 DLC5_ZOM_ONE_GIANT_LEAP";
Achievements[69] = "8 DLC5_ZOM_PERKS_IN_SPACE";
Achievements[70] = "8 DLC5_ZOM_FULLY_ARMED";
Achievements[71] = "8 DLC4_ZOM_ZOMB_DISPOSAL";
Achievements[72] = "8 DLC4_ZOM_MONKEY_SEE_MONKEY_DONT";
Achievements[73] = "8 DLC4_ZOM_BLINDED_BY_THE_FRIGHT";
Achievements[74] = "8 DLC4_ZOM_SMALL_CONSOLATION";
byte[] FT111 = new byte[] { 0x41 };
byte[] FT11 = new byte[] { 0x40 };
byte[] RPCON1 = new byte[] { 0x38, 0x60, 0xFF, 0xFF, 0x38, 0x80, 0x00, 0x00, 0x3C, 0xA0, 0x02, 0x00, 0x30, 0xA5, 0x50, 0x00, 0x4B, 0xF8, 0x2E, 0x2D, 0x4B, 0xFF, 0xFB, 0x78 };
byte[] RPCOFF1 = new byte[] { 0x82, 0xB9, 0x00, 0x00, 0x3C, 0xE0, 0x00, 0xD7, 0x3D, 0x80, 0x00, 0x92, 0x56, 0xA4, 0x38, 0x30, 0x56, 0xBB, 0x18, 0x38, 0x3B, 0x87, 0x9D, 0x04 };
for (int i = 0; i < 75; i++)
{
PS3.SetMemory(0x2005000, Encoding.ASCII.GetBytes(Achievements + "\0"));
PS3.SetMemory(0x466298, FT111);
PS3.SetMemory(0x4667B4, RPCON1);
System.Threading.Thread.Sleep(15);
PS3.SetMemory(0x466298, FT11);
PS3.SetMemory(0x4667B4, RPCOFF1);
}
}
Addresses (by SC58 )
0x003E95F0 - sv_gamesendservercommand(int clientNum, svscmd_type type, const char *text)
0x00370638 - G_LocalizedStringIndex(const char *string)
0x004C4FF0 - Dvar_GetBool(const char *dvarName)
0x00399CC8 - CBUF_AddText(int localClientNum, const char *text)
0x003F62A8 - Sv_SendClientSnapshot(client_s *client)
0x002D85E0 - Player_Die(unsigned int *self, unsigned int *inflictor, unsigned int *attacker, int damage, int meansOfDeath, int iWeapon, const float *vDir, unsigned int hitLoc, int psTimeOffset)
0x0007B720 - BG_GetPerkIndexForName(char *perkName)
0x00377208 - G_GivePlayerWeapon(playerState_s *pPS, int iWeaponIndex, char altModelIndex)
0x002D2D98 - G_InitializeAmmo(gentity_s *pSelf, int weaponIndex, char weaponModel, int hadWeapon)
0x00356BE0 - G_CallSpawnEntity(gentity_s *ent)
0x0036FFA0 - G_ModelIndex(const char *name)
0x00370238 - HudElem_Alloc(int clientNum, int teamNum)
0x003DFD90 - Sv_KickClient(client_s *cl, char *playerName, int maxPlayerNameLen)
0x003376C8 - SP_script_model(gentity_s *pSelf)
0x012ab290 - g_entity
0x003705D0 - G_MaterialIndex(const char *name)
0x003701D8 - G_SetModel(gentity_s *ent, const char *modelName)
0x00373488 - G_Spawn(void)
0x011F2738 - G_Hudelem
0x00375548 - G_GetWeaponIndexForName(const char *name)
0x0037FE50 - G_SpawnTurret(gentity_s *self, const char *weaponinfoname)
0x003EED08 - Sv_AddServerCommand
0x003E5200 - Sv_SendClientGameState(Client_s *)
0x002D4BA0 - G_Say(gentity_s *ent, gentity_s *target, int mode, const char *chatText)
0x002CA520 - PlayerCmd_SayAll
0x002CA608 - PlayerCmd_SayTeam
0x003E0848 - Sv_FastRestart_f
0x003E0660 - Sv_Maprestart(int fast_restart)
0x003E7528 - Sv_Addtestclient(void)
0x00310470 - GScr_AddTestClient
0x003E47B8 - SV_ClientCommand(client_s *cl, msg_t *msg)
0x003E1B60 - SV_ExecuteClientCommand(client_s *cl, const char *s, int clientOK)
0x0039B6C0 - SV_Cmd_TokenizeString(const char *text_in)
0x002D6140 - ClientCommand(int clientNum)
0x003996E8 - SV_Cmd_EndTokenizedString(void)
0x000C0A98 - BG_GetWeaponDef(unsigned int weaponIndex)
0x00356DF0 - G_Callspawn
0x00357500 - G_SpawnEntitiesFromString(void)
0x003EAD98 - SV_SetConfigstring(int index, const char *val)
0x005CF9B0 - Scr_GetVector(unsigned int index, float *vectorValue)
0x4C7370 - Dvar_GetString
Zombies
Name And Motd
Lobby Name Offset: 0x01C33DB0
Message of the day Offset: 0x01c8004c
Client Offsets Interval: 0x1d30
In-Game Name
Offset: 0x011008B8
Godmode
Bytes: 0x08,0x88,0x08,0x88 for On, 0x00,0x00,0x00,0x64 for Off
Offset: 0x01100840
Dead Ops Arcade Godmode
Offset: 0x010FED8F
Unlimited Ammo
Bytes: 15,0xff,0xff,0xff for On
Offset 1: 0x010FF138
Offset 2: 0x010FF148
Offset 3: 0x010FF160
Offset 4: 0x010FF140
Offset 5: 0x010FF168
Offset 6: 0x010FF150
mFlags
Bytes: 0x01 for noclip,0x02 for ufo, 0x04 for frozen
Offset: 0x0110098F
Weapons
Primary Weapon: 0x010fef6f
Secondary Weapon: 0x010fef9f
Dead Ops Arcade Weapon
Bytes: FlameThrower- 0A ShotGun- 0E RayGun- 0B RegularGun- 0C MiniGun- 0D GranadeLuancher- 0F
Offset: 0x010FEF57
Modes
Bytes: 0x01 for notarget, 0x02 for spectator,0x00 for default
Offset: 0x0110079B
In-Game Stats
Score/Money Offset: 0x0110090C
Kills Offset: 0x01100910
Headshots Offset: 0x01100930
Revives Offset: 0x0110092C
Downs Offset: 0x01100928
Speed
Bytes: 0x40, 0x74 for super,0x00, 0x00 for freeze,0x3f, 0x80 for default
Offset: 0x01100854
Scripts
SV_GameSendServerCommand
public void SV_GameSendServerCommand(int client, string command)
{
RPC.Call(0x003C33A8, client, 1, command);
}
Round Skip
First add timer then a button,
add this to the button:
Cbuf_AddText(0,"set timescale 10");
timer1.Start();
Then this to the timer and set the interval 200/500 otherwise the game can crash.
Cbuf_AddText(0,"ai axis delete");
Cbuf_AddText
public void Cbuf_AddText(int localClient,string command)
{
RPC.Call(0x00395BA8,localClient,command);
}
SetModel
public void SetModel(int client, string model)
{
RPC.Call(0x00305940, (uint)(0xFA805C + client * 0x34C), model);
}
Aim Assist (By me)
public void Give_AimAssist(int client)
{
SV_SendServerCommand(client, "v aim_lockon_region_height 480");
SV_SendServerCommand(client, "v aim_lockon_region_width 640");
SV_SendServerCommand(client, "v aim_lockon_enabled 1");
Thread.Sleep(10);
SV_SendServerCommand(client, "v aim_lockon_strength 1");
SV_SendServerCommand(client, "v aim_lockon_deflection 0");
SV_SendServerCommand(client, "v aim_autoaim_enabled 1");
Thread.Sleep(10);
SV_SendServerCommand(client, "v aim_autoaim_region_height 480");
SV_SendServerCommand(client, "v aim_autoaim_region_width 640");
SV_SendServerCommand(client, "v aim_slowdown_yaw_scale_ads 0");
Thread.Sleep(10);
SV_SendServerCommand(client, "v aim_slowdown_yaw_scale 0");
SV_SendServerCommand(client, "v aim_slowdown_pitch_scale 0");
SV_SendServerCommand(client, "v aim_slowdown_pitch_scale_ads 0");
Thread.Sleep(10);
SV_SendServerCommand(client, "v aim_slowdown_region_height 0");
SV_SendServerCommand(client, "v aim_slowdown_region_width 0");
SV_SendServerCommand(client, "v aim_slowdown_enabled 1");
Thread.Sleep(10);
SV_SendServerCommand(client, "v aim_aimAssistRangeScale 2");
SV_SendServerCommand(client, "v aim_autoAimRangeScale 2");
}
FPS (by SC58 )
0x00407554 - Turn on/off FPS
40 00 - ON
40 9A - OFF
0x00827950 - Text Position
0x0082794c - Text Size
0x008283a8 - Text For Menu
All Clients Buttons Monitoring (By AlmightySo )
public static class Buttonz
{
public static Int32
L1 = 1048704,
L2 = 72704,
L3 = 1074003968,
R1 = -2147483648,
R2 = 131072,
R3 = 536870912,
Square = 67108864,
Cross = 2104320,
Crouch = 4194304,
Prone = 8388608,
Triangle = 8;
}
public static bool ButtonPressed(int client, int Button)
{
if (Convert.ToInt32(Debug.ReadInt32(0x11007E8 + ((uint)client * 0x104)) == Button)
return true;
else return false;
}
Local Clients Buttons Monitoring (by SC58 )
Offset for Client 0: 0x00B4EB60
Interval: 4392
Jetpack (by AlmightySo )
public uint findPS(int client)
{
return 0x10FEDB0 + ((uint)client * 0x104;
}
public void JetPack(int client)
{
float jH = Debug.ReadFloat(findPS(client));
jH += 70;
PS3.Extension.WriteFloat(findPS(client), jH);
}
//Use JetPack(); in a timer with button handling.
Addresses (by SC58 )
0x00304BA0 - G_LocalizedStringIndex(const char *string)
0x00304B38 - G_MaterialIndex(const char *name)
0x00452280 - Dvar_GetBool(const char *dvarName)
0x003C33A8 - SV_GameSendServerCommand(int clientNum, svscmd_type type, const char *text)
0x00395BA8 - CBUF_AddText(int localClientNum, const char *text)
0x00309E30 - G_GetWeaponIndexForName(const char *name)
0x00305940 - SetModel(gentity_s *ent, const char *modelName)
0x00305650 - G_ModelIndex(const char *name)
0x00EE7BF2 - G_Hudelem
0x000A4968 - BG_GetWeaponDef(unsigned int weaponIndex)
0x002FD098 - G_Callspawn
0x002FD9C8 - G_SpawnEntitiesFromString(void)
0x00073A88 - BG_GetPerkIndexForName(const char *perkName)
0x004BE508 - SV_ExecuteClientCommand(client_s *cl, const char *s, int clientOK)
0x003066E0 - G_Spawn(void)
0x002DDFF8 - SP_script_model(gentity_s *pSelf)
Useful Dvars (You can use these even when not host using cbuf_addtext)
noclip - you can fly
ufo - you can also fly with this
god - godmode (unlimited health..)
notarget - zombies can't see you
give <item here> - you can give weapons/perks
give all - gives you all weapons
take all - takes all your stuff
cg_thirdPerson - thirdperson (values: 1 or 0)
cg_fov - field of view (any value between 1-200)
ai axis delete - kills all zombies
cg_drawfps - fps in the corner (values: 1 or 0)
dropweapon - drops your current weapon
Non-Host Offsets
No Recoil
Bytes: ON 0x60, 0x00, 0x00, 0x00 ,OFF 0x4B, 0xF3, 0xFF, 0x89
Offset: 0x15A320
Super Steady Aim
Bytes: ON 2F 80 00 00, OFF 2F 80 00 02
Offset: 0x91014
Credits
SC58
AlmightySo
Choco
Jo-Milk
Seb5594
primetime43
xPAQz
DexModderFTW
Eddie Mac
iNDMx - Here is also his good thread: You must login or register to view this content.
Anera
Me =D
I will update the thread soon!
Last edited by
makeabce ; 04-25-2016 at 03:56 PM.
Reason: added fps rpc to mp scripts
The following 31 users say thank you to makeabce for this useful post:
-JM-, A Friend, APOCALYP, Azus, bmob10189, Chris, Father Luckeyy, hackeveryone, Hunter926, iNDMx, Insult, iTzzTrojan, kainer wainer, LizzoOo, Mango_Knife, MODZ4FUN420, Mogren, NickBeHaxing, Obris, gopro_2027, puffindaherb, ShutTheCrunchUp, Swaqq, SyTry, TheGreenPlanet, TreyarchTragedy, xPAQz, xSuperLᴏbbies, XxBlud23xX
09-13-2019, 01:08 AM
#94
RetroModder
Rookie
2019 B01 Offset Collection,
-----------------------
Local Offsets - Tested
-----------------------
******************
ZOMBIES OFFSETS
******************
Steady Aim : 0x091014
TYPE: HEX
SIZE: 4
ON: 2F800000
OFF: 2F800002
No Recoil: 0x015A320
TYPE: HEX
SIZE: 4
ON: 60000000
OFF: 4BF3FF89
In-Game Name: 0x11008B8
TYPE: TEXT
GOD Mode: 0x01100840
TYPE: HEX
SIZE: 4
ON: 08880888
OFF: 00000064
Dead Ops Arcade: GOD Mode: 0x10FED8F
TYPE: HEX
SiZE: 4
ON: 08880888
OFF: 00000064
WeaponSlots:
TYPE: HEX
SIZE: 1
Primary Weapon: 0x10fef6f
Secondary Weapon: 0x10fef9f
RayGun Bullets: 0B
Dead Ops Arcade Weapon: 0x10FEF57
TYPE: HEX
SIZE: 1
FlameThrower: 0A
ShotGun: 0E
RayGun: 0B
RegularGun: 0C
MiniGun: 0D
GranadeLuancher: 0F
Friendly Zombies: 0x110079B
TYPE: HEX
SIZE: 1
ON: 01
OFF: 00
Spectator: 0x110079B
TYPE: HEX
SIZE: 1
ON: 02
OFF: 00
Super Speed: 0x1100854
TYPE: HEX
SIZE: 2
ON: 4074
OFF: 3F80
Unlimited Money ( Score ) : 0x0110090C
TYPE: HEX
SIZE: 1
ON: 10
OFF: 00
*******************
MULTIPLAYER OFFSETS
*******************
Clan Tag Line : 0x01B137EC
TYPE: TEXT
Name Line : 0x02000A14
TYPE: TEXT
See Players Through Walls: 0x0131144
TYPE: HEX
SIZE: 4
ON: 38C0F003
OFF : FCC0F890
Chrome Players: 0x0131144
TYPE: HEX
SIZE: 4
ON: 38C0FFFF
OFF: FCC0F890
VSAT: 0x00EBDF4
TYPE: HEX
SIZE: 4
ON: 409A00C4
OFF: 419A00C4
Super Sleight of Hand: 0x0BBC2E8
TYPE: HEX
SIZE: 1
ON: 02
OFF: 01
Super Rapid Fire: 0x0BBC2EC
TYPE: HEX
SIZE: 1
ON: 02
OFF: 01
Red Boxes: 0x001205C0
TYPE: HEX
SIZE: 4
ON: 60000000
OFF: 41860278
BlackBird (Always On Map): 0x00EBDF4
TYPE: HEX
SIZE: 4
ON : 409A00C4
OF : 419A00C4
Super Steady Aim - Needs Perk: 0x00AB8EC
TYPE: HEX
SIZE: 4
ON: 60000000
OFF: 2F800002
No Recoil: 0x019B244
TYPE: HEX
SIZE 4
ON: 60000000
OFF: 4BF184CD
Position (Move Player): 0x13950f0
TYPE: HEX
SIZE: 4
Super Speed (Use In-Game): 0x1397880
TYPE: HEX
SIZE: 2
ON: 4040
OFF: 3F80
Flying Man (Unbound) : 0x013979BF
TYPE: HEX
SIZE: 1
ON: 01
OFF: 00
Flying Man (Bound) : 0x013979BF
TYPE: HEX
SIZE: 1
ON: 02
OFF: 00
Second Chance : 0x1397AEC
TYPE: HEX
SIZE: 1
ON: 01
OFF: 00
****************
ONLINE OFFSETS
****************
------------------------------------------
EXTRACTED FROM "ULTIMATE BLACK OPS 1 TOOL"
Untested Offsets for Online vs Local
------------------------------------------
***********************
MULTIPLAYER EXTRACTS
***********************
Name,
0x2000934 62 6F 00
Tag,
0x1B137EC 43 6C 61 6E 00
No Recoil,
0x19B244 60 00 00 00
Wall Hack,
0x131144 38 C0 FF FF
Super Steady Aim,
0xBBC2E4 02
0xAB8EC 60 00 00 00
Super Rapid Fire,
0xBBC2EC 02
Change Map,
0x304DC8D2 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 49 6E 70 75 74 20 53 74 72 69 6E 67 20 48 65 72 65 20 00
Change Game Mode,
0x304DE4FE 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 49 6E 70 75 74 20 53 74 72 69 6E 67 20 48 65 72 65 20 00
Start Match,
0x304DD560 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 49 6E 70 75 74 20 53 74 72 69 6E 67 20 48 65 72 65 20 00
Edit Game Options,
0x304EA26A 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 49 6E 70 75 74 20 53 74 72 69 6E 67 20 48 65 72 65 20 00
Begin the Game,
0x304E927C 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 49 6E 70 75 74 20 53 74 72 69 6E 67 20 48 65 72 65 20 00
Add Split Screen Controller,
0x304CB359 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 49 6E 70 75 74 20 53 74 72 69 6E 67 20 48 65 72 65 20 00
Split Screen Text At Top,
0x304EE777 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 49 6E 70 75 74 20 53 74 72 69 6E 67 20 48 65 72 65 20 00
Private Match Text At Top,
0x304E0D00 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 49 6E 70 75 74 20 53 74 72 69 6E 67 20 48 65 72 65 20 00
Firing Range Map Text,
0x304E270E 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 49 6E 70 75 74 20 53 74 72 69 6E 67 20 48 65 72 65 20 00
NukeTown Map Text,
0x304E21B8 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 49 6E 70 75 74 20 53 74 72 69 6E 67 20 48 65 72 65 20 00
Move Party to new Host,
0x304E90BB 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 49 6E 70 75 74 20 53 74 72 69 6E 67 20 48 65 72 65 20 00
Super Sleight Of Hand on Perk 2,
0xBBC2E8 02
Disable Cheat Protection,
0x4C8ED4 3B 20 00 00
0x4C8EC4 60 00 00 00
0x4C8ED0 60 00 00 00
God Mode Class 1,
0x208B8F2 C7
**********************
ZOMBIES EXTRACTS
**********************
************
* Player 1 *
************
100 Kills,
0x1100910 31 30 30 00
Hacked Name - In Game,
0x11008B8 48 61 63 6B 65 64 00
Weapon Set Ray Gun,
x2 RayGun
0x10FEF6F 48
Ray Gun
0x10FEF6F 44
************
* Player 2 *
************
100 Kills,
0x1102640 31 30 30 00
Hacked Name - In Game,
0x11025E8 48 61 63 6B 65 64 00
Weapon Set Ray Gun,
x2 RayGun,
0x1100C9F 48
RayGun,
0x1100C9F 44
************
* Player 3 *
************
100 Kills,
0x1104370 31 30 30 00
Hacked Name - In Game,
0x1104318 48 61 63 6B 65 64 00
Weapon Set Ray Gun,
x2 Ray Gun,
0x11029CF 48
Ray gun,
0x11029CF 44
************
* Player 4 *
************
100 Kills,
0x11060A0 31 30 30 00
Hacked Name,
0x1106048 48 61 63 6B 65 64 00
Weapon Set Ray Gun,
x2 Ray Gun,
0x11046FF 48
Ray Gun,
0x11046FF 44
*************
* LOBY MODS *
*************
Super Jump,
0x7E3498 49 00 00
No Fall Damage,
0x79038 40
All credits go to the people that found these offsets, i only found about 3 new ones.
Worthy Mentions, Ultimate BlackOps RTM Tool by NICK hack or Hackbe Nick ..
NGU posts, Other online resources..
NetCheat for helping me find a few changed offsets .
-----------------------
Local Offsets - Tested
-----------------------
******************
ZOMBIES OFFSETS
******************
Steady Aim : 0x091014
TYPE: HEX
SIZE: 4
ON: 2F800000
OFF: 2F800002
No Recoil: 0x015A320
TYPE: HEX
SIZE: 4
ON: 60000000
OFF: 4BF3FF89
In-Game Name: 0x11008B8
TYPE: TEXT
GOD Mode: 0x01100840
TYPE: HEX
SIZE: 4
ON: 08880888
OFF: 00000064
Dead Ops Arcade: GOD Mode: 0x10FED8F
TYPE: HEX
SiZE: 4
ON: 08880888
OFF: 00000064
WeaponSlots:
TYPE: HEX
SIZE: 1
Primary Weapon: 0x10fef6f
Secondary Weapon: 0x10fef9f
RayGun Bullets: 0B
Dead Ops Arcade Weapon: 0x10FEF57
TYPE: HEX
SIZE: 1
FlameThrower: 0A
ShotGun: 0E
RayGun: 0B
RegularGun: 0C
MiniGun: 0D
GranadeLuancher: 0F
Friendly Zombies: 0x110079B
TYPE: HEX
SIZE: 1
ON: 01
OFF: 00
Spectator: 0x110079B
TYPE: HEX
SIZE: 1
ON: 02
OFF: 00
Super Speed: 0x1100854
TYPE: HEX
SIZE: 2
ON: 4074
OFF: 3F80
Unlimited Money ( Score ) : 0x0110090C
TYPE: HEX
SIZE: 1
ON: 10
OFF: 00
*******************
MULTIPLAYER OFFSETS
*******************
Clan Tag Line : 0x01B137EC
TYPE: TEXT
Name Line : 0x02000A14
TYPE: TEXT
See Players Through Walls: 0x0131144
TYPE: HEX
SIZE: 4
ON: 38C0F003
OFF : FCC0F890
Chrome Players: 0x0131144
TYPE: HEX
SIZE: 4
ON: 38C0FFFF
OFF: FCC0F890
VSAT: 0x00EBDF4
TYPE: HEX
SIZE: 4
ON: 409A00C4
OFF: 419A00C4
Super Sleight of Hand: 0x0BBC2E8
TYPE: HEX
SIZE: 1
ON: 02
OFF: 01
Super Rapid Fire: 0x0BBC2EC
TYPE: HEX
SIZE: 1
ON: 02
OFF: 01
Red Boxes: 0x001205C0
TYPE: HEX
SIZE: 4
ON: 60000000
OFF: 41860278
BlackBird (Always On Map): 0x00EBDF4
TYPE: HEX
SIZE: 4
ON : 409A00C4
OF : 419A00C4
Super Steady Aim - Needs Perk: 0x00AB8EC
TYPE: HEX
SIZE: 4
ON: 60000000
OFF: 2F800002
No Recoil: 0x019B244
TYPE: HEX
SIZE 4
ON: 60000000
OFF: 4BF184CD
Position (Move Player): 0x13950f0
TYPE: HEX
SIZE: 4
Super Speed (Use In-Game): 0x1397880
TYPE: HEX
SIZE: 2
ON: 4040
OFF: 3F80
Flying Man (Unbound) : 0x013979BF
TYPE: HEX
SIZE: 1
ON: 01
OFF: 00
Flying Man (Bound) : 0x013979BF
TYPE: HEX
SIZE: 1
ON: 02
OFF: 00
Second Chance : 0x1397AEC
TYPE: HEX
SIZE: 1
ON: 01
OFF: 00
****************
ONLINE OFFSETS
****************
------------------------------------------
EXTRACTED FROM "ULTIMATE BLACK OPS 1 TOOL"
Untested Offsets for Online vs Local
------------------------------------------
***********************
MULTIPLAYER EXTRACTS
***********************
Name,
0x2000934 62 6F 00
Tag,
0x1B137EC 43 6C 61 6E 00
No Recoil,
0x19B244 60 00 00 00
Wall Hack,
0x131144 38 C0 FF FF
Super Steady Aim,
0xBBC2E4 02
0xAB8EC 60 00 00 00
Super Rapid Fire,
0xBBC2EC 02
Change Map,
0x304DC8D2 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 49 6E 70 75 74 20 53 74 72 69 6E 67 20 48 65 72 65 20 00
Change Game Mode,
0x304DE4FE 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 49 6E 70 75 74 20 53 74 72 69 6E 67 20 48 65 72 65 20 00
Start Match,
0x304DD560 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 49 6E 70 75 74 20 53 74 72 69 6E 67 20 48 65 72 65 20 00
Edit Game Options,
0x304EA26A 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 49 6E 70 75 74 20 53 74 72 69 6E 67 20 48 65 72 65 20 00
Begin the Game,
0x304E927C 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 49 6E 70 75 74 20 53 74 72 69 6E 67 20 48 65 72 65 20 00
Add Split Screen Controller,
0x304CB359 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 49 6E 70 75 74 20 53 74 72 69 6E 67 20 48 65 72 65 20 00
Split Screen Text At Top,
0x304EE777 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 49 6E 70 75 74 20 53 74 72 69 6E 67 20 48 65 72 65 20 00
Private Match Text At Top,
0x304E0D00 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 49 6E 70 75 74 20 53 74 72 69 6E 67 20 48 65 72 65 20 00
Firing Range Map Text,
0x304E270E 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 49 6E 70 75 74 20 53 74 72 69 6E 67 20 48 65 72 65 20 00
NukeTown Map Text,
0x304E21B8 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 49 6E 70 75 74 20 53 74 72 69 6E 67 20 48 65 72 65 20 00
Move Party to new Host,
0x304E90BB 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 49 6E 70 75 74 20 53 74 72 69 6E 67 20 48 65 72 65 20 00
Super Sleight Of Hand on Perk 2,
0xBBC2E8 02
Disable Cheat Protection,
0x4C8ED4 3B 20 00 00
0x4C8EC4 60 00 00 00
0x4C8ED0 60 00 00 00
God Mode Class 1,
0x208B8F2 C7
**********************
ZOMBIES EXTRACTS
**********************
************
* Player 1 *
************
100 Kills,
0x1100910 31 30 30 00
Hacked Name - In Game,
0x11008B8 48 61 63 6B 65 64 00
Weapon Set Ray Gun,
x2 RayGun
0x10FEF6F 48
Ray Gun
0x10FEF6F 44
************
* Player 2 *
************
100 Kills,
0x1102640 31 30 30 00
Hacked Name - In Game,
0x11025E8 48 61 63 6B 65 64 00
Weapon Set Ray Gun,
x2 RayGun,
0x1100C9F 48
RayGun,
0x1100C9F 44
************
* Player 3 *
************
100 Kills,
0x1104370 31 30 30 00
Hacked Name - In Game,
0x1104318 48 61 63 6B 65 64 00
Weapon Set Ray Gun,
x2 Ray Gun,
0x11029CF 48
Ray gun,
0x11029CF 44
************
* Player 4 *
************
100 Kills,
0x11060A0 31 30 30 00
Hacked Name,
0x1106048 48 61 63 6B 65 64 00
Weapon Set Ray Gun,
x2 Ray Gun,
0x11046FF 48
Ray Gun,
0x11046FF 44
*************
* LOBY MODS *
*************
Super Jump,
0x7E3498 49 00 00
No Fall Damage,
0x79038 40
All credits go to the people that found these offsets, i only found about 3 new ones.
Worthy Mentions, Ultimate BlackOps RTM Tool by NICK hack or Hackbe Nick ..
NGU posts, Other online resources..
NetCheat for helping me find a few changed offsets .
12-04-2019, 06:53 AM
#95
Aussie-RTM
Rookie
anyone got a Models list / gun list?
Last edited by
Aussie-RTM ; 12-04-2019 at 05:48 PM.
Copyright © 2024, NextGenUpdate.
All Rights Reserved.
