Name Offset: 0x02000934
Clan Tag Offset: 0x01B137EC (by Eddie Mac)
COD Points Offset: 0x020942d1
Time Played Offset: 0x02094731
Wins Offset: 0x0209475d
Losses Offset: 0x020944dd
Prestige Offset: 0x020946dd
Rank Offset: 0x020946e5
Kills Offset: 0x02094429
Deaths Offset: 0x020942f5
Assists Offset: 0x02094291
Kill/Death Ratio In Weapons Offset: 0x02094425
Wins/Loss Ratio In Career Offset: 0x02094761
Headshots Offset: 0x0209440d
Amount Spent In Contracts Offset: 0x020942dd
Contracts Purchased Offset: 0x020942e1
XP Award In Contracts Offset: 0x020942e5
Return On Investment Contracts Offset (This is also amount earned) : 0x020942d9
Games Played Offset: 0x020938b1
Wager Match Earnings Offset: 0x020944d9
Paid Contracts Offset: 0x020942d5
Time Played Offset: 0x02094731
*Winstreak Editor: 0x0208d894
*Killstreak Editor: 0x0208d890
*Convert To Int16 NOT Int32
Unlock All Offset: 0x02094990
Unlock All Bytes: https://pastebin.com/MxmMrR22
CORE - 0x018AC549
Team Deathmatch - 0x018AC87A
Mercenary - 0x018ACAD8
Mercenary Moshpit - 0x018ACD29
Free for all -0x018AD66B
Domination - 0x018AD8D0
Ground war - 0x018ADB70
Demolition - 0x018ADF1D
Sabotage - 0x018AE166
Headquarters - 0x018AE409
Capture the flag - 0x018AE670
S& - 0x018AE897
Team Tactical - 0x018AEAC1
Express - 0x018B293A
BAREBONES - 0x018AC590
Pure - 0x018AF2B4
Classic - 0x018AF4F6
Competition - 0x018AF739
Hardcore - 0x018AC5F8
Team deathmatch - 0x018AF8D1
S& - 0x018AFB2A
free for all - 0x018AFD78
HQ - 0x018AFFED
CTF - 0x018B0267
DLC - 0x018AC658
DLC Moshpit - 0x018B20E1
DLC Hardcore - 0x018B2564
Ante up - 0x018AC6C4
Weekend Gambler - 0x018AC745
High Roller - 0x018AC7CE
Change Game Mode = 0x304DE4FE
Change Map = 0x304DC8D2
Start Match = 0x304DD560
Edit Game Options = 0x304EA26A
Begin the game. = 0x304E927C
Add controller for Split Screen = 0x304CB359
Split Screen Text At Top Of Lobby = 0x304EE777
Private Match Text At Top Of Lobby = 0x304E0D00
*Note with some of these string if you go over the default value of characters the string will glitch*
Class 1 0x0208b8f2 = 0xE7
Class 2 0x0208b915 = 0xE7
Class 3 0x0208b938 = 0xE7
Class 4 0x0208b95b = 0xE7
Class 5 0x0208b97e = 0xE7
Class 6 0x0208b9a5 = 0xCE
Class 7 0x0208b9c8 = 0xCE
Class 8 0x0208b9eb = 0xCE
Class 9 0x0208ba0e = 0xCE
Class 10 0x0208ba31 = 0xCE
*Scavenger, Slight Of Hand & Ghost
Class 1 0x0208b910 = 0x50, 0x9C, 0x79, 0xBA, 0x49, 0x00, 0x00, 0x00, 0x00 00, 0x00, 0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0xF0, 0x03, 0x00, 0x00, 0x00, 0x40 0x00, 0x00, 0x00, 0x00, 0x00
*Slight Of Hand, Marathon & Ghost
Class 1 0x0208b910 = 0x50, 0x79, 0xBA, 0xBA, 0x49, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0xF0, 0x03, 0x00, 0x00, 0x00, 0x40, 0x00, 0x00, 0x00, 0x00, 0x00
*Tactical Mask, Sleight of Hand & Marathon
Class 1 0x0208b910 = 0x30, 0x30, 0x7B, 0xBA, 0x0A, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0xF0, 0x03, 0x00, 0x00, 0x00, 0x40, 0x00, 0x00, 0x00, 0x00, 0x00
https://www.mediafire.com/download/d12b2r71n19bv1e/3_guns_class.zip
https://www.virustotal.com/en/file/ae30f86674f8b42134bdfc72a58b554b4efc8be5b88d4ff55f7e3fa395cdea97/analysis/1422820020/
If you want to inject .bin files instead go to 0x0208b910 in debugger and inject the .bin file of your choice above!
*AK47
Class 1 0x0208B8F2 = 0xC7, 0xA0, 0x01
*AK47u
Class 1 0x0208B8F2 = 0xC7, 0xC0
*AUG
Class 1 0x0208B8F2 = 0xC7, 0xB0 0x01
*COMMANDO
Class 1 0x0208B8F2 = 0xC7, 0xC0, 0x01
*CROSSBOW
Class 1 0x0208B8F2 = 0xC7, 0x80
*Dragunov
Class 1 0x0208B8F2 = 0xC7, 0xA0, 0x02
*Eienfield
Class 1 0x0208B8F2 = 0xC7, 0xD0, 0x01
*FAL
Class 1 0x0208B8F2 = 0xC7, 0xF0, 0x01
*FAMAS
Class 1 0x0208B8F2 = 0xC7, 0xE0, 0x01
*G11
Class 1 0x0208B8F2 = 0xC7, 0x00, 0x02
*Galil
Class 1 0x0208B8F2 = 0xC7, 0x10, 0x02
*HK12
Class 1 0x0208B8F2 = 0xC7, 0x50, 0x02
*HS10 Dual
Class 1 0x0208B8F2 = 0xC7, 0x30, 0x03
*HS10
Class 1 0x0208B8F2 = 0xC7, 0xF0, 0x02
*Kiparis Dual Wield
Class 1 0x0208B8F2 = 0xC7, 0x50, 0x01
*Kiparis Dual
Class 1 0x0208B8F2 = 0xC7, 0x50, 0x01
*Kiparis
Class 1 0x0208B8F2 = 0xC7, 0xD0
*L96A1
Class 1 0x0208B8F2 = 0xC7, 0xB0, 0x02
*M14
Class 1 0x0208B8F2 = 0xC7, 0x20, 0x02
*M16
Class 1 0x0208B8F2 = 0xC7, 0x30, 0x02
*M60
Class 1 0x0208B8F2 = 0xC7, 0x60, 0x02
*M1911 Dual
Class 1 0x0208B8F2 = 0xC7, 0x80
*Mac11 Dual
Class 1 0x0208B8F2 = 0xC7, 0x60, 0x01
*Mac11
Class 1 0x0208B8F2 = 0xC7, 0xE0
*Mp5k
Class 1 0x0208B8F2 = 0xC7, 0xF0
*MPL
Class 1 0x0208B8F2 = 0xC7, 0x00, 0x01
*Olympia
Class 1 0x0208B8F2 = 0xC7, 0x10, 0x03
*PM63 Dual
Class 1 0x0208B8F2 = 0xC7, 0x70, 0x01
*PM63
Class 1 0x0208B8F2 = 0xC7, 0x10, 0x01
*PSG1
Class 1 0x0208B8F2 = 0xC7, 0xC0, 0x02
*Python Dual
Class 1 0x0208B8F2 = 0xC7, 0xA0, 0x00
*RPG
Class 1 0x0208B8F2 = 0xC7, 0x60, 0x03
*RPK
Class 1 0x0208B8F2 = 0xC7, 0x70, 0x02
*Skorpion Dual
Class 1 0x0208B8F2 = 0xC7, 0x80, 0x01
*Skorpion
Class 1 0x0208B8F2 = 0xC7, 0x20, 0x01
*Spas12
Class 1 0x0208B8F2 = 0xC7, 0x20, 0x03
*Spectre
Class 1 0x0208B8F2 = 0xC7, 0x30, 0x01
*Stakeout
Class 1 0x0208B8F2 = 0xC7, 0x00, 0x03
*Strela
Class 1 0x0208B8F2 = 0xC7, 0x70
*Uzi
Class 1 0x0208B8F2 = 0xC7, 0x40, 0x01
*WA2K
Class 1 0x0208B8F2 = 0xC7, 0xD0, 0x02
*The first byte is 0xC7 for godmode as well as 3 Guns, And if you dont want godmode, change it to 0xC6*
https://www.mediafire.com/?d12b2r71n19bv1e
https://www.virustotal.com/en/file/48c6ee760e4c03ff8b41cac94518939e88243a642fd32995f557913e70160ce6/analysis/1422819357/
If you want to inject .bin files instead go to 0x0208B8F2 in debugger and inject the .bin file of your choice above!
*AK47 Secondary
Class 1 0x0208B8F2 = 0xC7, 0x90, 0x04, 0x00, 0x10, 0xB6, 0x02, 0x00, 0x00, 0x00, 0x10, 0xF0, 0x00, 0xF0, 0x03, 0x00, 0x00, 0x00, 0xC0, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00
https://www.mediafire.com/?os1d21nadcdhlz0
https://www.virustotal.com/en/file/59df2c9dbc4383b3971c45d7e2c51b2e034b89e822f9bb6696ab0a4e42f75775/analysis/
*The first byte is 0xC7 for godmode as well as 3 Guns, And if you dont want godmode, change it to 0xC6*
*You Must have Scavenger on to be able to use all 4 guns
If you want to inject .bin files instead go to 0x0208B8F2 in debugger and inject the .bin file of your choice above!
Bytes: ON = 0x02 , OFF = 0x01
Offset: 0xBBC2E8
Bytes: ON = 0x38, 0xC0, 0xFF, 0xFF, 0xFC, OFF = 0xC0, 0xF8, 0x90
Offset: 0x131144
Bytes: ON = 0x38, 0xC0, 0xF0, 0x03, OFF = 0xFC, 0xC0, 0xF8, 0x90
Offset: 0x131144
Bytes: ON = 0x02, OFF = 0x01
Offset: 0xBBC2EC
Bytes: ON = 0x60,0x00,0x00,0x00 For Both, OFF = 0x41, 0x86, 0x02, 0x78 For RedBoxes Only
Redboxes Perk Check Offset: 0x001206C8
Redboxes Offset: 0x001205C0
Bytes: ON = 0x40, 0x9A, 0x00, 0xC4, OFF = 0x41, 0x9A, 0x00, 0xC4
Offset: 0xEBDF4
Give Perk:
Bytes: ON = 0x60,0x00,0x00,0x00, OFF = 0x2F, 0x80, 0x00, 0x02
Offset: 0xAB8EC
Super Steady Aim:
Bytes: ON = 0x02, OFF = 0x01
Offset: 0xBBC2E4
Bytes: ON = 0x60,0x00,0x00,0x00 for On, OFF = 0x4B, 0xF1, 0x84, 0xCD
Offset: 0x19B244
Offset: 0x139784C
Bytes: ON = 0x05, OFF: 0x04
Offset: 0x013950df
Bytes: ON = 0x07, OFF = 0x04
Offset: 0x013950df
Bytes: NOCLIP = 0x01 , UFO = 0x02, OFF = 0x00
Offset: 0x13979BF
Byte: ON = 15, 0xff, 0xff, 0xff, OFF = 00, 0x00, 0x00, 0x00
Offset: 0x1395450
Bytes: ON = 0x01, OFF = 0x00
Offset: 0x013951a9
Bytes: ON = 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, OFF = 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00
Offset: 0x013955f3
Bytes: ON = 0x01, OFF = 0x00
Offset: 0x013977d8
Bytes: On = 0x01, OFF = 0x00
Offset: 0x01395583
Bytes: ON = 0x30, 0xC0 , 0x40, 0xC0
Offset: 0x01395648
Bytes: ON = 0xFF , 0x00
Offset: 0x01395638
Bytes: ON = 0x40, 0x00, OFF = 0x40, 0xC0
Offset: 0x01395648
Bytes: ON = 0xFF, OFF = 0x00
Offset:0x01395638
Bytes: ON = 0xFF, 0xFF, OFF =0x40, 0xC0
Offset: 0x01395648
Bytes: ON = 0xFF, OFF = 0x00
Offset:0x01395638
Bytes: ON = 0x60, OFF = 0x00
Offset: 0x01395674
Bytes: ON = 0x00, 0x00, OFF = 0x40, 0xC0
Offset: 0x01395648
Bytes: ON = 0xFF OFF = 0x00
Offset: 0x01395638
Bytes: ON = 0xFA, OFF = 0x00
Offset: 0x013950db
Bytes: ON = 0x01, OFF = 0x00
Offset: 0x1397AEB
Bytes: ON = 0x03, OFF = 0x00
Offset: 0x1397967
Bytes: ON = 0x01, OFF = 0x00
Offset: 0x1397AEC
Bytes: SUPER = 0x40,0x40, DEFAULT = 0x3F 0x80, FREEZE = 0x00,0x00
Offset: 0x1397880
Bytes:
GOLD = 60,
ICE = 10,
RED = 13,
OLIVE = 10,
NEVADA = 20,
SAHARA = 0x18,
Offset: 0x013952E0
Offset: 0x13950f0
Offset: 0x13950c8
*Add 0x288c After Client Interval And Return a new byte with the value of [4]
Then You HAVE TO Return a Reversed Array And Use BitConverter.
Offset: 0x13950c8
*Add 0x2890 After Client Interval And Return a new byte with the value of [4]
Then You HAVE TO Return a Reversed Array And Use BitConverter.
Bytes:
Friendly = 1
Enemy = 2
Spectator = 6
Free for all = 0
Offset: 0x13950c8
*Add 0x27cf After Client Interval And Return a new byte with the value of [1]
Bytes:
Game mode = Then You HAVE TO Return a Reversed Array Then Re Convert To a Char Of (0x5c) The Return a new byte with a value of [4]
Map = Then You HAVE TO Return a Reversed Array Then Re Convert To a Char Of (0x5c) The Return a new byte with a value of [6]
Host = Then You HAVE TO Return a Reversed Array Then Re Convert To a Char Of (0x5c) The Return a new byte with a value of [14]
Offset: 0xd28a19
*Return a new byte with value of 0x100 After Interval.
Bytes:
Friendly = 1
Enemy = 2
Spectator = 6
Free For All = 0
Offset: 0x13950c8
*Add 0x27cf After Client Interval And Return a new byte with the value of [1]
Byte: ON = 0x49, 0x00, 0x00, OFF = 0x42, 0x9C, 0x00
Offset: 0x008CF430
Bytes: ON = 0x40, OFF = 0x41
Offset: 0x81B64
Bytes: 0x60, 0x00, 0x00, 0x00
Offset: 0x4C8EC4
Bytes: 0x60, 0x00, 0x00, 0x00
Offset: 0x4C8ED0
Bytes: 0x3B, 0x20, 0x00, 0x00
Offset: 0x4C8ED4
public class Aimbot
{
#region Aimbot
//All of the getting info etc.
public static uint G_Entity(uint client)
{
return 0x012ab290 + (client * 0x2F;
}
public static float[] getOrigin(uint clientNum)
{
float[] origin = new float[3];
origin[0] = Lib.ReadSingle(0x013950c8 + 0x2A38 * clientNum + 0x24);
origin[1] = Lib.ReadSingle(0x013950c8 + 0x2A38 * clientNum + 0x24 + 0x4);
origin[2] = Lib.ReadSingle(0x013950c8 + 0x2A38 * clientNum + 0x24 + 0x;
return origin;
}
public static UInt32 G_Entity(Int32 ClientIndex)
{
return 0x16B7920 + ((UInt32)ClientIndex * 0x31C);
}
public static int GetHost()
{
string str = Lib.ReadString(0x172a58;
for (int i = 0; i < 0x12; i++)
{
string str2 = Lib.ReadString((uint)(0xf1651c + (i * 0x3600)));
if (str == str2)
{
return i;
}
}
return -1;
}
public static Boolean Exists(Int32 clientIndex)
{
return Lib.ReadString(0x013978d0 + ((uint)clientIndex * 0x2A3) != "";
}
public static Boolean IsAlive(Int32 clientIndex)
{
return (Lib.ReadByte(0x0139793b + ((uint)clientIndex * 0x2A3) == 0);
}
public static Boolean isSameTeam(Int32 Owner, Int32 Victim)
{
return Lib.ReadInt32(0x01397894 + ((uint)Owner * 0x2A3) == Lib.ReadInt32(0x01397894 + ((uint)Victim * 0x2A3);
}
public static Single GetDistance3D(Single[] p1, Single[] p2)
{
float[] numArray3 = new float[] { p2[0] - p1[0], p2[1] - p1[1], p2[2] - p1[2] };
return ((numArray3[0] * numArray3[0]) + (numArray3[1] * numArray3[1])) + (numArray3[2] * numArray3[2]);
}
public static int GetNearestClientFromAttacker(int You)
{
int CIndex = -1;
double Closest = 1E+08f;
for (int i = 0; i < 12; i++)
{
if (((Exists(i) && IsAlive(i) && !isSameTeam(You, i))))
{
double Bla = GetDistance3D(getOrigin((uint)You), getOrigin((uint)i));
if (Bla < Closest)
{
CIndex = i;
Closest = Bla;
}
}
}
return CIndex;
}
//The Real Aimbot Code-----
//function to convert a vector to angles
public static Single[] vectoangles(Int32 clientIndex, Int32 secondPlayer)
{
Single[] numArray1 = getOrigin((uint)clientIndex);
Single[] numArray2 = getOrigin((uint)secondPlayer);
Single[] Angles = {(numArray2[0] - numArray1[0]), (numArray2[1] - numArray1[1]), (numArray2[2] - numArray1[2])};
Single num2;
Single num3;
Single[] numArray = new Single[3];
if ((Angles[1] == 0f) && (Angles[0] == 0f))
{
num2 = 0f;
if (Angles[2] > 0f)
num3 = 90f;
else
num3 = 270f;
}
else
{
if (Angles[0] != -1f)
num2 = (Single)((Math.Atan2((Double)Angles[1], (Double)Angles[0]) * 180.0) / 3.1415926535897931);
else if (Angles[1] > 0f)
num2 = 90f;
else
num2 = 270f;
if (num2 < 0f)
num2 += 360f;
Single num = (Single)Math.Sqrt((Double)((Angles[0] * Angles[0]) + (Angles[1] * Angles[1])));
num3 = (Single)((Math.Atan2((Double)Angles[2], (Double)num) * 180.0) / 3.1415926535897931);
if (num3 < 0f)
num3 += 360f;
}
numArray[0] = -num3;
numArray[1] = num2;
return numArray;
}
//Set Set the clients angles
public static void SetClientViewAngles(Int32 clientIndex, Int32 Victim)
{
Single[] angles = vectoangles(clientIndex, Victim);
Lib.WriteSingle(0x10040000, angles);
RPC.Call(0x2C1E38, new Object[] { Addresses.G_Entity((uint)clientIndex), 0x10040000 });
}
//Just Aimbot Threads and Bools
public static bool[] AimbotStatus = new bool[12];
public static Thread[] AimbotThread = new Thread[12];
public static bool[] UnfairAimbot = new bool[12];
//This is what starts the Aimbot
public static void StartAimbot(int clientIndex)
{
ThreadStart start = null;
if (!AimbotStatus[clientIndex])
{
Thread.Sleep(100);
AimbotStatus[clientIndex] = true;
if (start == null)
{
start = () => InitializeAimbot(clientIndex);
}
AimbotThread[clientIndex] = new Thread(start);
AimbotThread[clientIndex].IsBackground = true;
AimbotThread[clientIndex].Start();
}
else
{
AimbotStatus[clientIndex] = false;
AimbotThread[clientIndex].Abort();
}
}
//Main Aimbot Code
private static void InitializeAimbot(int client)
{
PS3.Reconnect();
while (AimbotThread[client].IsAlive)
{
int nearestPlayer = GetNearestClientFromAttacker(client);
if (nearestPlayer != client)
{
if (ButtonPress.ButtonPressed(client, 03) || ButtonPress.ButtonPressed(client, 04))
{
SetClientViewAngles(client, nearestPlayer);
}
}
}
}
#endregion
//Example:
Aimbot.StartAimbot(int client);
public void cBuf_AddText(int localClient,string command)
{
RPC.Call(0x00399CC8, localClient, command);
}
public void SV_GameSendServerCommand(int client, string command)
{
RPC.Call(0x003E95F0, client, 1, command);
}
public void SetModel(int client, string model)
{
RPC.Call(0x003701D8, (uint)(0x012ab290 + client * 0x2F, model);
}
public static UInt32 function_address = 0x7A21E0;
public static void Enable_RPC()
{
PS3.SetMemory(function_address, new byte[] { 0x4e, 0x80, 0, 0x20 });
System.Threading.Thread.Sleep(20);
byte[] memory = new byte[] {
0x7c, 8, 2, 0xa6, 0xf8, 1, 0, 0x80, 60, 0x60, 0x10, 5, 0x81, 0x83, 0, 0x4c,
0x2c, 12, 0, 0, 0x41, 130, 0, 100, 0x80, 0x83, 0, 4, 0x80, 0xa3, 0, 8,
0x80, 0xc3, 0, 12, 0x80, 0xe3, 0, 0x10, 0x81, 3, 0, 20, 0x81, 0x23, 0, 0x18,
0x81, 0x43, 0, 0x1c, 0x81, 0x63, 0, 0x20, 0xc0, 0x23, 0, 0x24, 0xc0, 0x43, 0, 40,
0xc0, 0x63, 0, 0x2c, 0xc0, 0x83, 0, 0x30, 0xc0, 0xa3, 0, 0x34, 0xc0, 0xc3, 0, 0x38,
0xc0, 0xe3, 0, 60, 0xc1, 3, 0, 0x40, 0xc1, 0x23, 0, 0x48, 0x80, 0x63, 0, 0,
0x7d, 0x89, 3, 0xa6, 0x4e, 0x80, 4, 0x21, 60, 0x80, 0x10, 5, 0x38, 160, 0, 0,
0x90, 0xa4, 0, 0x4c, 0x90, 100, 0, 80, 0xe8, 1, 0, 0x80, 0x7c, 8, 3, 0xa6,
0x38, 0x21, 0, 0x70, 0x4e, 0x80, 0, 0x20
};
PS3.SetMemory(function_address + 4, memory);
PS3.SetMemory(0x10050000, new byte[0x2854]);
PS3.SetMemory(function_address, new byte[] { 0xf8, 0x21, 0xff, 0x91 });
}
public static void Disable_RPC()
{
PS3.SetMemory(function_address, new byte[] { 0x4e, 0x80, 0, 0x20 });
}
public static uint Call(uint func_address, params object[] parameters)
{
int length = parameters.Length;
uint num2 = 0;
for (uint i = 0; i < length; i++)
{
if (parameters[i] is int)
{
byte[] array = BitConverter.GetBytes((int)parameters[i]);
Array.Reverse(array);
PS3.SetMemory(0x10050000 + ((i + num2) * 4), array);
}
else if (parameters[i] is uint)
{
byte[] buffer2 = BitConverter.GetBytes((uint)parameters[i]);
Array.Reverse(buffer2);
PS3.SetMemory(0x10050000 + ((i + num2) * 4), buffer2);
}
else if (parameters[i] is string)
{
byte[] buffer3 = Encoding.UTF8.GetBytes(Convert.ToString(parameters[i]) + "\0");
PS3.SetMemory(0x10050054 + (i * 0x400), buffer3);
uint num4 = 0x10050054 + (i * 0x400);
byte[] buffer4 = BitConverter.GetBytes(num4);
Array.Reverse(buffer4);
PS3.SetMemory(0x10050000 + ((i + num2) * 4), buffer4);
}
else if (parameters[i] is float)
{
num2++;
byte[] buffer5 = BitConverter.GetBytes((float)parameters[i]);
Array.Reverse(buffer5);
PS3.SetMemory(0x10050024 + ((num2 - 1) * 4), buffer5);
}
}
byte[] bytes = BitConverter.GetBytes(func_address);
Array.Reverse(bytes);
PS3.SetMemory(0x1005004c, bytes);
System.Threading.Thread.Sleep(20);
byte[] memory = new byte[4];
PS3.GetMemory(0x10050050, memory);
Array.Reverse(memory);
return BitConverter.ToUInt32(memory, 0);
public class Buttons
{
public static UInt32
X = 2104320,
O = 512,
Square = 67108864,
Triangle = 8,
L3 = 1074003968,
R3 = 536870912,
L2 = 72704,
R2 = 131072,
L1 = 1048704,
R1 = 2147483648,
Crouch = 4194304,
Prone = 8388608,
StartButton = 4;
}
public Boolean ButtonPressed(Int32 clientIndex, UInt32 Button)
{
if (BO1TMAPI.PS3.Extension.ReadUInt32((UInt32)G_Client(clientIndex) + 0x271 == Button)
return true;
else return false;
}
//Example how to use:
if(ButtonPressed(0,Buttons.L1))
{
// Mods/functions here
}
private static UInt32 LocalButtons = 0xd19800;
public enum Buttons
{
DpadUp = 0x1FF,
DpadDown = 0x20F,
DpadRight = 0x21F,
DpadLeft = -0xC47E5F,
R3 = 0x1CF,
Square = 0xEF,
Cross = 0xCF,
LeftCursorUp = 0x27F,
LeftCursorLeft = 0x29F,
LeftCursorRight = 0x2AF,
LeftCursorDown = 0x28F,
R2 = 0x1EF,
L2 = 0x1DF,
Select = 0x1AF,
Start = 0x19F
}
public static Boolean ButtonPressed(Buttons Button)
{
return Convert.ToBoolean(PS3.Extension.ReadByte(LocalButtons + (UInt32)Button) == 1);
}
0x00466298 - Turn on/off FPS
40 00 - ON
40 9A - OFF
0x0091C860 - Text For Menu
0x0091BF38 - Text Position
0x0091BF34 - Text Size
public void TrophyUnlocks_MP()
{
string[] Achievements = new string[75];
Achievements[0] = "8 SP_WIN_CUBA";
Achievements[1] = "8 SP_WIN_VORKUTA";
Achievements[2] = "8 SP_WIN_PENTAGON";
Achievements[3] = "8 SP_WIN_FLASHPOINT";
Achievements[4] = "8 SP_WIN_KHE_SANH";
Achievements[5] = "8 SP_WIN_HUE_CITY";
Achievements[6] = "8 SP_WIN_KOWLOON";
Achievements[7] = "8 SP_WIN_RIVER";
Achievements[8] = "8 SP_WIN_FULLAHEAD";
Achievements[9] = "8 SP_WIN_INTERROGATION_ESCAPE";
Achievements[10] = "8 SP_WIN_UNDERWATERBASE";
Achievements[11] = "8 SP_VWIN_FLASHPOINT";
Achievements[12] = "8 SP_VWIN_HUE_CITY";
Achievements[13] = "8 SP_VWIN_RIVER";
Achievements[14] = "8 SP_VWIN_FULLAHEAD";
Achievements[15] = "8 SP_VWIN_UNDERWATERBASE";
Achievements[16] = "8 SP_LVL_CUBA_CASTRO_ONESHOT";
Achievements[17] = "8 SP_LVL_VORKUTA_VEHICULAR";
Achievements[18] = "8 SP_LVL_VORKUTA_SLINGSHOT";
Achievements[19] = "8 SP_LVL_KHESANH_MISSILES";
Achievements[20] = "8 SP_LVL_HUECITY_AIRSUPPORT";
Achievements[21] = "8 SP_LVL_HUECITY_DRAGON";
Achievements[22] = "8 SP_LVL_CREEK1_DESTROY_MG";
Achievements[23] = "8 SP_LVL_CREEK1_KNIFING";
Achievements[24] = "8 SP_LVL_KOWLOON_DUAL";
Achievements[25] = "8 SP_LVL_RIVER_TARGETS";
Achievements[26] = "8 SP_LVL_WMD_RSO";
Achievements[27] = "8 SP_LVL_WMD_RELAY";
Achievements[28] = "8 SP_LVL_POW_HIND";
Achievements[29] = "8 SP_LVL_POW_FLAMETHROWER";
Achievements[30] = "8 SP_LVL_FULLAHEAD_2MIN";
Achievements[31] = "8 SP_LVL_REBIRTH_MONKEYS";
Achievements[32] = "8 SP_LVL_REBIRTH_NOLEAKS";
Achievements[33] = "8 SP_LVL_UNDERWATERBASE_MINI";
Achievements[34] = "8 SP_LVL_FRONTEND_CHAIR";
Achievements[35] = "8 SP_LVL_FRONTEND_ZORK";
Achievements[36] = "8 SP_GEN_MASTER";
Achievements[37] = "8 SP_GEN_FRAGMASTER";
Achievements[38] = "8 SP_GEN_ROUGH_ECO";
Achievements[39] = "8 SP_GEN_CROSSBOW";
Achievements[40] = "8 SP_GEN_FOUNDFILMS";
Achievements[41] = "8 SP_ZOM_COLLECTOR";
Achievements[42] = "8 SP_ZOM_NODAMAGE";
Achievements[43] = "8 SP_ZOM_TRAPS";
Achievements[44] = "8 SP_ZOM_SILVERBACK";
Achievements[45] = "8 SP_ZOM_CHICKENS";
Achievements[46] = "8 SP_ZOM_FLAMINGBULL";
Achievements[47] = "8 MP_FILM_CREATED";
Achievements[48] = "8 MP_WAGER_MATCH";
Achievements[49] = "8 MP_PLAY";
Achievements[50] = "8 DLC1_ZOM_OLDTIMER";
Achievements[51] = "8 DLC1_ZOM_HARDWAY";
Achievements[52] = "8 DLC1_ZOM_PISTOLERO";
Achievements[53] = "8 DLC1_ZOM_BIGBADDABOOM";
Achievements[54] = "8 DLC1_ZOM_NOLEGS";
Achievements[55] = "8 DLC2_ZOM_PROTECTEQUIP";
Achievements[56] = "8 DLC2_ZOM_LUNARLANDERS";
Achievements[57] = "8 DLC2_ZOM_FIREMONKEY";
Achievements[58] = "8 DLC2_ZOM_BLACKHOLE";
Achievements[59] = "8 DLC2_ZOM_PACKAPUNCH";
Achievements[60] = "8 DLC3_ZOM_STUNTMAN";
Achievements[61] = "8 DLC3_ZOM_SHOOTING_ON_LOCATION";
Achievements[62] = "8 DLC3_ZOM_QUIET_ON_THE_SET";
Achievements[63] = "8 DLC4_ZOM_TEMPLE_SIDEQUEST";
Achievements[64] = "8 DLC5_ZOM_CRYOGENIC_PARTY";
Achievements[65] = "8 DLC5_ZOM_BIG_BANG_THEORY";
Achievements[66] = "8 DLC5_ZOM_GROUND_CONTROL";
Achievements[67] = "8 DLC5_ZOM_ONE_SMALL_HACK";
Achievements[68] = "8 DLC5_ZOM_ONE_GIANT_LEAP";
Achievements[69] = "8 DLC5_ZOM_PERKS_IN_SPACE";
Achievements[70] = "8 DLC5_ZOM_FULLY_ARMED";
Achievements[71] = "8 DLC4_ZOM_ZOMB_DISPOSAL";
Achievements[72] = "8 DLC4_ZOM_MONKEY_SEE_MONKEY_DONT";
Achievements[73] = "8 DLC4_ZOM_BLINDED_BY_THE_FRIGHT";
Achievements[74] = "8 DLC4_ZOM_SMALL_CONSOLATION";
byte[] FT111 = new byte[] { 0x41 };
byte[] FT11 = new byte[] { 0x40 };
byte[] RPCON1 = new byte[] { 0x38, 0x60, 0xFF, 0xFF, 0x38, 0x80, 0x00, 0x00, 0x3C, 0xA0, 0x02, 0x00, 0x30, 0xA5, 0x50, 0x00, 0x4B, 0xF8, 0x2E, 0x2D, 0x4B,
0xFF, 0xFB, 0x78 };
byte[] RPCOFF1 = new byte[] { 0x82, 0xB9, 0x00, 0x00, 0x3C, 0xE0, 0x00, 0xD7, 0x3D, 0x80, 0x00, 0x92, 0x56, 0xA4, 0x38, 0x30, 0x56, 0xBB, 0x18, 0x38, 0x3B,
0x87, 0x9D, 0x04 };
for (int i = 0; i < 75; i++)
{
PS3.SetMemory(0x2005000, Encoding.ASCII.GetBytes(Achievements + "\0"));
PS3.SetMemory(0x466298, FT111);
PS3.SetMemory(0x4667B4, RPCON1);
System.Threading.Thread.Sleep(15);
PS3.SetMemory(0x466298, FT11);
PS3.SetMemory(0x4667B4, RPCOFF1);
}
}
public class HElems
{
public static UInt32
x = 0x0,
y = 0x4,
z = 0x8,
fontScale = 0xC,
color = 0x10,
sort = 0x38,
glowColor = 0x3C,
targetEntNum = 0x70,//all client offset jo-milk
label = 0x48,
width = 0x4A,
height = 0x4C,
text = 0x56,
type = 0x64,
font = 0x65,
materialIndex = 0x68,
ui3dWindow = 0x6D;
}
public UInt32 SetShader(uint Element, Int32 clientIndex, SByte Material, Int16 Width, Int16 Height, Single X, Single Y, Byte R = 255, Byte G = 255, Byte B = 255, Byte A = 255, float Sort = 0)
{
WriteSByte(Element + HElems.type, ;
WriteInt16(Element + HElems.width, Width);
WriteInt16(Element + HElems.height, Height);
WriteFloat(Element + HElems.x, X);
WriteFloat(Element + HElems.y, Y);
WriteFloat(Element + HElems.sort, Sort);
WriteInt32(Element + HElems.targetEntNum, clientIndex);
WriteSByte(Element + HElems.materialIndex, Material);
WriteBytes(Element + HElems.color, new Byte[] { R, G, B, A });
WriteBytes(Element + HElems.ui3dWindow, new Byte[] { 0xFF });
return Element;
}
public UInt32 SetText(uint Element, Int32 clientIndex, String Text, Single X, Single Y, Single FontScale, Byte Font, float Sort = 0, Byte R = 255, Byte G = 255, Byte B = 255, Byte A = 255, Byte GlowR = 0, Byte GlowG = 0, Byte GlowB = 0, Byte GlowA = 0)
{
WriteSByte(Element + HElems.type, 1); // Mod Menu Font // Max Number 7
WriteInt32(Element + HElems.targetEntNum, clientIndex);
WriteInt16(Element + HElems.text, G_LocalizedStringIndex(Text));
WriteFloat(Element + HElems.x, X);
WriteFloat(Element + HElems.y, Y);
WriteFloat(Element + HElems.sort, Sort);
WriteFloat(Element + HElems.fontScale, FontScale);
WriteBytes(Element + HElems.font, new Byte[] { Font });
WriteBytes(Element + HElems.color, new Byte[] { R, G, B, A });
WriteBytes(Element + HElems.glowColor, new Byte[] { GlowR, GlowG, GlowB, GlowA });
WriteBytes(Element + HElems.ui3dWindow, new Byte[] { 0xFF });
return Element;
}
private void ChangeText(uint elem, string Text)
{
WriteInt16(elem + HElems.text, G_LocalizedStringIndex(Text));
}
public static UInt32 HudElem_Alloc()
{
for (Int32 i = 0; i < 1024; i++)
{
UInt32 address = (0x11F26D4 + ((UInt32)i * 0x7C));
Byte[] Buffer = GetMemory(address, 4);
if (Buffer[0] == 0x00)
{
PS3.SetMemory(address + HElems.type, new Byte[0x7C]);
return address;
}
}
return 0;
}
private Byte[] ResetPowerPC = new Byte[] { 0x82, 0xB9, 0x00, 0x00, 0x3C, 0xE0, 0x00, 0xD7, 0x3D, 0x80, 0x00, 0x92, 0x56, 0xA4, 0x38, 0x30, 0x56, 0xBB, 0x18, 0x38, 0x3B, 0x87, 0x9D, 0x04, 0x7D, 0x3B, 0x20, 0x50 };
private Byte[] WritePowerPC_StringIndex = new Byte[] { 0x3C, 0x60, 0x02, 0x00, 0x30, 0x63, 0x00, 0x00, 0x4B, 0xF0, 0x9E, 0x7D, 0x3C, 0x80, 0x02, 0x00, 0x90, 0x64, 0x50, 0x00, 0x4B, 0xFF, 0xFB, 0x78, 0x4B, 0xFD, 0x80, 0x61 };
private Byte[] WritePowerPC_SVCommand = new Byte[] { 0x3C, 0x60, 0x02, 0x00, 0x80, 0x63, 0x00, 0x00, 0x38, 0x80, 0x00, 0x00, 0x3C, 0xA0, 0x02, 0x00, 0x30, 0xA5, 0x50, 0x00, 0x4B, 0xF8, 0x2E, 0x29, 0x4B, 0xFF, 0xFB, 0x74 };
public Int16 G_LocalizedStringIndex(String text)
{
WriteBytes(0x2000000, Encoding.ASCII.GetBytes(text + "\0"));
WriteBytes(0x4667B4, WritePowerPC_StringIndex);
WriteBytes(0x466298, new Byte[] { 0x41 });
System.Threading.Thread.Sleep(15);
WriteBytes(0x466298, new Byte[] { 0x40 });
//WriteBytes(0x4667B4, ResetPowerPC);
Byte[] index = GetMemory(0x2005000, 4);
return BitConverter.ToInt16(ReverseBytes(index), 0);
}
Offset: 0x13952a2
Valkyrie Rockets byte:
https://pastebin.com/SnQ2bF0B
Grim Reaper byte:
https://pastebin.com/ja1nMsCq
Death Machine byte:
https://pastebin.com/yrQbUdU7
*Make sure you make and if statement with a check if its "mp_russianbase"!
0x003E95F0 - sv_gamesendservercommand(int clientNum, svscmd_type type, const char *text)
0x00370638 - G_LocalizedStringIndex(const char *string)
0x004C4FF0 - Dvar_GetBool(const char *dvarName)
0x00399CC8 - CBUF_AddText(int localClientNum, const char *text)
0x003F62A8 - Sv_SendClientSnapshot(client_s *client)
0x002D85E0 - Player_Die(unsigned int *self, unsigned int *inflictor, unsigned int *attacker, int damage, int meansOfDeath, int iWeapon, const float *vDir, unsigned int
hitLoc, int psTimeOffset)
0x0007B720 - BG_GetPerkIndexForName(char *perkName)
0x00377208 - G_GivePlayerWeapon(playerState_s *pPS, int iWeaponIndex, char altModelIndex)
0x002D2D98 - G_InitializeAmmo(gentity_s *pSelf, int weaponIndex, char weaponModel, int hadWeapon)
0x00356BE0 - G_CallSpawnEntity(gentity_s *ent)
0x0036FFA0 - G_ModelIndex(const char *name)
0x00370238 - HudElem_Alloc(int clientNum, int teamNum)
0x003DFD90 - Sv_KickClient(client_s *cl, char *playerName, int maxPlayerNameLen)
0x003376C8 - SP_script_model(gentity_s *pSelf)
0x012ab290 - g_entity
0x003705D0 - G_MaterialIndex(const char *name)
0x003701D8 - G_SetModel(gentity_s *ent, const char *modelName)
0x00373488 - G_Spawn(void)
0x011F2738 - G_Hudelem
0x00375548 - G_GetWeaponIndexForName(const char *name)
0x0037FE50 - G_SpawnTurret(gentity_s *self, const char *weaponinfoname)
0x003EED08 - Sv_AddServerCommand
0x003E5200 - Sv_SendClientGameState(Client_s *)
0x002D4BA0 - G_Say(gentity_s *ent, gentity_s *target, int mode, const char *chatText)
0x002CA520 - PlayerCmd_SayAll
0x002CA608 - PlayerCmd_SayTeam
0x003E0848 - Sv_FastRestart_f
0x003E0660 - Sv_Maprestart(int fast_restart)
0x003E7528 - Sv_Addtestclient(void)
0x00310470 - GScr_AddTestClient
0x003E47B8 - SV_ClientCommand(client_s *cl, msg_t *msg)
0x003E1B60 - SV_ExecuteClientCommand(client_s *cl, const char *s, int clientOK)
0x0039B6C0 - SV_Cmd_TokenizeString(const char *text_in)
0x002D6140 - ClientCommand(int clientNum)
0x003996E8 - SV_Cmd_EndTokenizedString(void)
0x000C0A98 - BG_GetWeaponDef(unsigned int weaponIndex)
0x00356DF0 - G_Callspawn
0x00357500 - G_SpawnEntitiesFromString(void)
0x003EAD98 - SV_SetConfigstring(int index, const char *val)
0x005CF9B0 - Scr_GetVector(unsigned int index, float *vectorValue)
0x169529C - Client_s
0x651C8 - Client_s clientIndex
level_locals_t : 0x1213800 (by MegaMister)
Level_Time: level_locals_t + 0x74C (by MegaMister)
precache shader : 0x1213800 + 0x3C (by MegaMister)
statsetbyname RANK 50
statsetbyname RANKXP 1262499
updategamerprofile
uploadstats
statsetbyname PLEVEL 15
updategamerprofile
uploadstats
* Change 15 to prestige you want
cg_tracerLength 500
cg_tracerWidth 8
cg_tracerSpeed 150
cg_tracerScrewRadius 5
lowAmmoWarningColor1 1 .5 0 1
lowAmmoWarningColor2 0 1 0 1
lowAmmoWarningColor3 1 .5 0 1
lowAmmoWarningNoAmmoColor1 1 0 0 1
lowAmmoWarningNoAmmoColor2 1 .4 0 1
lowAmmoWarningNoReloadColor1 0 0 1 1
lowAmmoWarningNoReloadColor2 0 1 0 1
aim_lockon_region_height 480
aim_lockon_region_width 640
aim_lockon_enabled 1
aim_lockon_strength 1
aim_lockon_deflection 0
aim_autoaim_enabled 1
aim_autoaim_region_height 480
aim_autoaim_region_width 640
aim_slowdown_yaw_scale_ads 0
aim_slowdown_yaw_scale 0
aim_slowdown_pitch_scale 0
aim_slowdown_pitch_scale_ads 0
aim_slowdown_region_height 0
aim_slowdown_region_width 0
aim_slowdown_enabled 1
aim_aimAssistRangeScale 2
aim_autoAimRangeScale 2
g_TeamName_Allies ^1NickBeHaxing
g_TeamName_Axis ^2Mod Tool
g_TeamIcon_Allies rank_presige16
g_TeamIcon_Axis rank_prestige15
scr_tdm_timelimit 99999
scr_dm_timelimit 99999
scr_dom_timelimit 99999
scr_sab_timelimit 99999
scr_dem_timelimit 99999
scr_ctf_timelimit 99999
scr_sd_timelimit 99999
scr_twar_timelimit 99999
scr_koth_timelimit 99999
scr_dom_score_kill 500
scr_dom_score_death 500
scr_dom_score_suicide 500
scr_dom_score_headshot 500
scr_dom_score_capture 500
scr_dom_score_teamkill 500
scr_dom_score_assist 500
scr_dm_score_kill 500
scr_dm_score_death 500
scr_dm_score_suicide 500
scr_dm_score_headshot 500
scr_dm_score_teamkill 500
scr_dm_score_assist 500
party_host 1
onlinegame 1
onlinegameandhost 1
onlineunrankedgameandhost 0
migration_msgtimeout 0
migration_timeBetween 999999
migration_msgtimeout 0
migration_timeBetween 999999
party_minplayers 1
party_matchedPlayerCount 0
party_connectTimeout 1000
party_connectTimeout 1
say "^1hello" - Say Message Lobby
phys_gravity 99 - Floating Bodies
cg_overheadRankSize 3 - Big Rank
cg_overheadIconSize 3 - Big Icon
cg_overheadNamesSize 3 - Big Names
cg_drawfps 1 - Toggle FPS
drawLagometer 1 - Toggles Non-Host Lag-o-meter
cg_fov 90 - Change Field Of View
cg_thirdperson 1 - Change Point Of View
r_flameFX_enable 1 - Flame Vision
bg_gravity 800 - Change Gravity
timescale 2 - Change Gamespeed
Name Offset: 0x02000934
Clan Tag Offset: 0x01B137EC (by Eddie Mac)
COD Points Offset: 0x020942d1
Time Played Offset: 0x02094731
Wins Offset: 0x0209475d
Losses Offset: 0x020944dd
Prestige Offset: 0x020946dd
Rank Offset: 0x020946e5
Kills Offset: 0x02094429
Deaths Offset: 0x020942f5
Assists Offset: 0x02094291
Kill/Death Ratio In Weapons Offset: 0x02094425
Wins/Loss Ratio In Career Offset: 0x02094761
Headshots Offset: 0x0209440d
Amount Spent In Contracts Offset: 0x020942dd
Contracts Purchased Offset: 0x020942e1
XP Award In Contracts Offset: 0x020942e5
Return On Investment Contracts Offset (This is also amount earned) : 0x020942d9
Games Played Offset: 0x020938b1
Wager Match Earnings Offset: 0x020944d9
Paid Contracts Offset: 0x020942d5
Time Played Offset: 0x02094731
*Winstreak Editor: 0x0208d894
*Killstreak Editor: 0x0208d890
*Winstreak And Killstreak Offset Buggy*:
Unlock All Offset: 0x02094990
Unlock All Bytes: [url=https://pastebin.com/MxmMrR22]Black Ops 1 Unlock All Bytes - Pastebin.com[/url]
CORE - 0x018AC549
Team Deathmatch - 0x018AC87A
Mercenary - 0x018ACAD8
Mercenary Moshpit - 0x018ACD29
Free for all -0x018AD66B
Domination - 0x018AD8D0
Ground war - 0x018ADB70
Demolition - 0x018ADF1D
Sabotage - 0x018AE166
Headquarters - 0x018AE409
Capture the flag - 0x018AE670
S& - 0x018AE897
Team Tactical - 0x018AEAC1
Express - 0x018B293A
BAREBONES - 0x018AC590
Pure - 0x018AF2B4
Classic - 0x018AF4F6
Competition - 0x018AF739
Hardcore - 0x018AC5F8
Team deathmatch - 0x018AF8D1
S& - 0x018AFB2A
free for all - 0x018AFD78
HQ - 0x018AFFED
CTF - 0x018B0267
DLC - 0x018AC658
DLC Moshpit - 0x018B20E1
DLC Hardcore - 0x018B2564
Ante up - 0x018AC6C4
Weekend Gambler - 0x018AC745
High Roller - 0x018AC7CE
Change Game Mode = 0x304DE4FE
Change Map = 0x304DC8D2
Start Match = 0x304DD560
Edit Game Options = 0x304EA26A
Begin the game. = 0x304E927C
Add controller for Split Screen = 0x304CB359
Split Screen Text At Top Of Lobby = 0x304EE777
Private Match Text At Top Of Lobby = 0x304E0D00
*Note with some of these string if you go over the default value of characters the string will glitch*
Class 1 0x0208b8f2 = E7
Class 2 0x0208b915 = E7
Class 3 0x0208b938 = E7
Class 4 0x0208b95b = E7
Class 5 0x0208b97e = E7
Class 6 0x0208b9a5 = CE
Class 7 0x0208b9c8 = CE
Class 8 0x0208b9eb = CE
Class 9 0x0208ba0e = CE
Class 10 0x0208ba31 =CE
Bytes: ON = 0x02 , OFF = 0x01
Offset: 0xBBC2E8
Bytes: ON = 0x38, 0xC0, 0xFF, 0xFF, 0xFC, OFF = 0xC0, 0xF8, 0x90
Offset: 0x131144
Bytes: ON = 0x38, 0xC0, 0xF0, 0x03, OFF = 0xFC, 0xC0, 0xF8, 0x90
Offset: 0x131144
Bytes: ON = 0x02, OFF = 0x01
Offset: 0xBBC2EC
Bytes: ON = 0x60,0x00,0x00,0x00 For Both, OFF = 0x41, 0x86, 0x02, 0x78 For RedBoxes Only
Redboxes Perk Check Offset: 0x001206C8
Redboxes Offset: 0x001205C0
Bytes: ON = 0x40, 0x9A, 0x00, 0xC4, OFF = 0x41, 0x9A, 0x00, 0xC4
Offset: 0xEBDF4
Give Perk:
Bytes: ON = 0x60,0x00,0x00,0x00, OFF = 0x2F, 0x80, 0x00, 0x02
Offset: 0xAB8EC
Super Steady Aim:
Bytes: ON = 0x02, OFF = 0x01
Offset: 0xBBC2E4
Bytes: ON = 0x60,0x00,0x00,0x00 for On, OFF = 0x4B, 0xF1, 0x84, 0xCD
Offset: 0x19B244
Offset: 0x139784C
Bytes: ON = 0x05, OFF: 0x04
Offset: 0x013950df
Bytes: ON = 0x07, OFF = 0x04
Offset: 0x013950df
Bytes: NOCLIP = 0x01 , UFO = 0x02, OFF = 0x00
Offset: 0x13979BF
Byte: ON = 15, 0xff, 0xff, 0xff, OFF = 00, 0x00, 0x00, 0x00
Offset: 0x13950c8
*Add 0x388 After Client Interval
Bytes: ON = 0x01, OFF = 0x00
Offset: 0x013951a9
Bytes: ON = 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, OFF = 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00
Offset: 0x013955f3
Bytes: ON = 0x01, OFF = 0x00
Offset: 0x013977d8
ON: 0x01
OFF: 0x00
Bytes: On = 0x01, OFF = 0x00
Offset: 0x01395583
Bytes: ON = 0x30, 0xC0 , 0x40, 0xC0
Offset: 0x01395648
Bytes: ON = 0xFF , 0x00
Offset: 0x01395638
Bytes: ON = 0x40, 0x00, OFF = 0x40, 0xC0
Offset: 0x01395648
Bytes: ON = 0xFF, OFF = 0x00
Offset:0x01395638
Bytes: ON = 0xFF, 0xFF, OFF =0x40, 0xC0
Offset: 0x01395648
Bytes: ON = 0xFF, OFF = 0x00
Offset:0x01395638
Bytes: ON = 0x00, 0x00, OFF = 0x40, 0xC0
Offset: 0x01395648
Bytes: ON = 0xFF OFF = 0x00
Offset: 0x01395638
Bytes: ON = 0xFA, OFF = 0x00
Offset: 0x013950db
Bytes: ON = 0x01, OFF = 0x00
Offset: 0x1397AEB
Bytes: ON = 0x03, OFF = 0x00
Offset: 0x1397967
Bytes: ON = 0x01, OFF = 0x00
Offset: 0x1397AEC
Bytes: SUPER = 0x40,0x40, DEFAULT = 0x3F 0x80, FREEZE = 0x00,0x00
Offset: 0x1397880
Bytes:
GOLD = 60,
ICE = 10,
RED = 13,
OLIVE = 10,
NEVADA = 20,
SAHARA = 0x18,
Offset: 0x013952E0
Offset: 0x13950f0
Get Client Kills (By Anera)
[Code]
Offset: 0x13950c8
*Add 0x288c After Client Interval And Return a new byte with the value of [4]
Then You HAVE TO Return a Reversed Array And Use BitConverter.
Offset: 0x13950c8
*Add 0x2890 After Client Interval And Return a new byte with the value of [4]
Then You HAVE TO Return a Reversed Array And Use BitConverter.
Bytes:
Friendly = 1
Enemy = 2
Spectator = 6
Free for all = 0
Offset: 0x13950c8
*Add 0x27cf After Client Interval And Return a new byte with the value of [1]
Bytes:
Game mode = Then You HAVE TO Return a Reversed Array Then Re Convert To a Char Of (0x5c) The Return a new byte with a value of [4]
Map = Then You HAVE TO Return a Reversed Array Then Re Convert To a Char Of (0x5c) The Return a new byte with a value of [6]
Host = Then You HAVE TO Return a Reversed Array Then Re Convert To a Char Of (0x5c) The Return a new byte with a value of [14]
Offset: 0xd28a19
*Return a new byte with value of 0x100 After Interval.
Bytes:
Friendly = 1
Enemy = 2
Spectator = 6
Free For All = 0
Offset: 0x13950c8
*Add 0x27cf After Client Interval And Return a new byte with the value of [1]
Byte: ON = 0x49, 0x00, 0x00, OFF = 0x42, 0x9C, 0x00
Offset: 0x008CF430
Bytes: ON = 0x40, OFF = 0x41
Offset: 0x81B64
Bytes: 0x60, 0x00, 0x00, 0x00
Offset: 0x4C8EC4
Bytes: 0x60, 0x00, 0x00, 0x00
Offset: 0x4C8ED0
Bytes: 0x3B, 0x20, 0x00, 0x00
Offset: 0x4C8ED4
public class Aimbot
{
#region Aimbot
//All of the getting info etc.
public static uint G_Entity(uint client)
{
return 0x012ab290 + (client * 0x2F;
}
public static float[] getOrigin(uint clientNum)
{
float[] origin = new float[3];
origin[0] = Lib.ReadSingle(0x013950c8 + 0x2A38 * clientNum + 0x24);
origin[1] = Lib.ReadSingle(0x013950c8 + 0x2A38 * clientNum + 0x24 + 0x4);
origin[2] = Lib.ReadSingle(0x013950c8 + 0x2A38 * clientNum + 0x24 + 0x;
return origin;
}
public static UInt32 G_Entity(Int32 ClientIndex)
{
return 0x16B7920 + ((UInt32)ClientIndex * 0x31C);
}
public static int GetHost()
{
string str = Lib.ReadString(0x172a58;
for (int i = 0; i < 0x12; i++)
{
string str2 = Lib.ReadString((uint)(0xf1651c + (i * 0x3600)));
if (str == str2)
{
return i;
}
}
return -1;
}
public static Boolean Exists(Int32 clientIndex)
{
return Lib.ReadString(0x013978d0 + ((uint)clientIndex * 0x2A3) != "";
}
public static Boolean IsAlive(Int32 clientIndex)
{
return (Lib.ReadByte(0x0139793b + ((uint)clientIndex * 0x2A3) == 0);
}
public static Boolean isSameTeam(Int32 Owner, Int32 Victim)
{
return Lib.ReadInt32(0x01397894 + ((uint)Owner * 0x2A3) == Lib.ReadInt32(0x01397894 + ((uint)Victim * 0x2A3);
}
public static Single GetDistance3D(Single[] p1, Single[] p2)
{
float[] numArray3 = new float[] { p2[0] - p1[0], p2[1] - p1[1], p2[2] - p1[2] };
return ((numArray3[0] * numArray3[0]) + (numArray3[1] * numArray3[1])) + (numArray3[2] * numArray3[2]);
}
public static int GetNearestClientFromAttacker(int You)
{
int CIndex = -1;
double Closest = 1E+08f;
for (int i = 0; i < 12; i++)
{
if (((Exists(i) && IsAlive(i) && !isSameTeam(You, i))))
{
double Bla = GetDistance3D(getOrigin((uint)You), getOrigin((uint)i));
if (Bla < Closest)
{
CIndex = i;
Closest = Bla;
}
}
}
return CIndex;
}
//The Real Aimbot Code-----
//function to convert a vector to angles
public static Single[] vectoangles(Int32 clientIndex, Int32 secondPlayer)
{
Single[] numArray1 = getOrigin((uint)clientIndex);
Single[] numArray2 = getOrigin((uint)secondPlayer);
Single[] Angles = {(numArray2[0] - numArray1[0]), (numArray2[1] - numArray1[1]), (numArray2[2] - numArray1[2])};
Single num2;
Single num3;
Single[] numArray = new Single[3];
if ((Angles[1] == 0f) && (Angles[0] == 0f))
{
num2 = 0f;
if (Angles[2] > 0f)
num3 = 90f;
else
num3 = 270f;
}
else
{
if (Angles[0] != -1f)
num2 = (Single)((Math.Atan2((Double)Angles[1], (Double)Angles[0]) * 180.0) / 3.1415926535897931);
else if (Angles[1] > 0f)
num2 = 90f;
else
num2 = 270f;
if (num2 < 0f)
num2 += 360f;
Single num = (Single)Math.Sqrt((Double)((Angles[0] * Angles[0]) + (Angles[1] * Angles[1])));
num3 = (Single)((Math.Atan2((Double)Angles[2], (Double)num) * 180.0) / 3.1415926535897931);
if (num3 < 0f)
num3 += 360f;
}
numArray[0] = -num3;
numArray[1] = num2;
return numArray;
}
//Set Set the clients angles
public static void SetClientViewAngles(Int32 clientIndex, Int32 Victim)
{
Single[] angles = vectoangles(clientIndex, Victim);
Lib.WriteSingle(0x10040000, angles);
RPC.Call(0x2C1E38, new Object[] { Addresses.G_Entity((uint)clientIndex), 0x10040000 });
}
//Just Aimbot Threads and Bools
public static bool[] AimbotStatus = new bool[12];
public static Thread[] AimbotThread = new Thread[12];
public static bool[] UnfairAimbot = new bool[12];
//This is what starts the Aimbot
public static void StartAimbot(int clientIndex)
{
ThreadStart start = null;
if (!AimbotStatus[clientIndex])
{
Thread.Sleep(100);
AimbotStatus[clientIndex] = true;
if (start == null)
{
start = () => InitializeAimbot(clientIndex);
}
AimbotThread[clientIndex] = new Thread(start);
AimbotThread[clientIndex].IsBackground = true;
AimbotThread[clientIndex].Start();
}
else
{
AimbotStatus[clientIndex] = false;
AimbotThread[clientIndex].Abort();
}
}
//Main Aimbot Code
private static void InitializeAimbot(int client)
{
PS3.Reconnect();
while (AimbotThread[client].IsAlive)
{
int nearestPlayer = GetNearestClientFromAttacker(client);
if (nearestPlayer != client)
{
if (ButtonPress.ButtonPressed(client, 03) || ButtonPress.ButtonPressed(client, 04))
{
SetClientViewAngles(client, nearestPlayer);
}
}
}
}
#endregion
//Example:
Aimbot.StartAimbot(int client);
public void cBuf_AddText(int localClient,string command)
{
RPC.Call(0x00399CC8, localClient, command);
}
public void SV_GameSendServerCommand(int client, string command)
{
RPC.Call(0x003E95F0, client, 1, command);
}
public void SetModel(int client, string model)
{
RPC.Call(0x003701D8, (uint)(0x012ab290 + client * 0x2F, model);
}
public static UInt32 function_address = 0x7A21E0;
public static void Enable_RPC()
{
PS3.SetMemory(function_address, new byte[] { 0x4e, 0x80, 0, 0x20 });
System.Threading.Thread.Sleep(20);
byte[] memory = new byte[] {
0x7c, 8, 2, 0xa6, 0xf8, 1, 0, 0x80, 60, 0x60, 0x10, 5, 0x81, 0x83, 0, 0x4c,
0x2c, 12, 0, 0, 0x41, 130, 0, 100, 0x80, 0x83, 0, 4, 0x80, 0xa3, 0, 8,
0x80, 0xc3, 0, 12, 0x80, 0xe3, 0, 0x10, 0x81, 3, 0, 20, 0x81, 0x23, 0, 0x18,
0x81, 0x43, 0, 0x1c, 0x81, 0x63, 0, 0x20, 0xc0, 0x23, 0, 0x24, 0xc0, 0x43, 0, 40,
0xc0, 0x63, 0, 0x2c, 0xc0, 0x83, 0, 0x30, 0xc0, 0xa3, 0, 0x34, 0xc0, 0xc3, 0, 0x38,
0xc0, 0xe3, 0, 60, 0xc1, 3, 0, 0x40, 0xc1, 0x23, 0, 0x48, 0x80, 0x63, 0, 0,
0x7d, 0x89, 3, 0xa6, 0x4e, 0x80, 4, 0x21, 60, 0x80, 0x10, 5, 0x38, 160, 0, 0,
0x90, 0xa4, 0, 0x4c, 0x90, 100, 0, 80, 0xe8, 1, 0, 0x80, 0x7c, 8, 3, 0xa6,
0x38, 0x21, 0, 0x70, 0x4e, 0x80, 0, 0x20
};
PS3.SetMemory(function_address + 4, memory);
PS3.SetMemory(0x10050000, new byte[0x2854]);
PS3.SetMemory(function_address, new byte[] { 0xf8, 0x21, 0xff, 0x91 });
}
public static void Disable_RPC()
{
PS3.SetMemory(function_address, new byte[] { 0x4e, 0x80, 0, 0x20 });
}
public static uint Call(uint func_address, params object[] parameters)
{
int length = parameters.Length;
uint num2 = 0;
for (uint i = 0; i < length; i++)
{
if (parameters[i] is int)
{
byte[] array = BitConverter.GetBytes((int)parameters[i]);
Array.Reverse(array);
PS3.SetMemory(0x10050000 + ((i + num2) * 4), array);
}
else if (parameters[i] is uint)
{
byte[] buffer2 = BitConverter.GetBytes((uint)parameters[i]);
Array.Reverse(buffer2);
PS3.SetMemory(0x10050000 + ((i + num2) * 4), buffer2);
}
else if (parameters[i] is string)
{
byte[] buffer3 = Encoding.UTF8.GetBytes(Convert.ToString(parameters[i]) + "\0");
PS3.SetMemory(0x10050054 + (i * 0x400), buffer3);
uint num4 = 0x10050054 + (i * 0x400);
byte[] buffer4 = BitConverter.GetBytes(num4);
Array.Reverse(buffer4);
PS3.SetMemory(0x10050000 + ((i + num2) * 4), buffer4);
}
else if (parameters[i] is float)
{
num2++;
byte[] buffer5 = BitConverter.GetBytes((float)parameters[i]);
Array.Reverse(buffer5);
PS3.SetMemory(0x10050024 + ((num2 - 1) * 4), buffer5);
}
}
byte[] bytes = BitConverter.GetBytes(func_address);
Array.Reverse(bytes);
PS3.SetMemory(0x1005004c, bytes);
System.Threading.Thread.Sleep(20);
byte[] memory = new byte[4];
PS3.GetMemory(0x10050050, memory);
Array.Reverse(memory);
return BitConverter.ToUInt32(memory, 0);
public class Buttons
{
public static UInt32
X = 2104320,
O = 512,
Square = 67108864,
Triangle = 8,
L3 = 1074003968,
R3 = 536870912,
L2 = 72704,
R2 = 131072,
L1 = 1048704,
R1 = 2147483648,
Crouch = 4194304,
Prone = 8388608,
StartButton = 4;
}
public Boolean ButtonPressed(Int32 clientIndex, UInt32 Button)
{
if (BO1TMAPI.PS3.Extension.ReadUInt32((UInt32)G_Client(clientIndex) + 0x271 == Button)
return true;
else return false;
}
public Int32 G_Client(Int32 clientIndex)
{
return (Int32)0x13950C8 + 0x2A38 * clientIndex;
}
public UInt32 ReadUInt32(uint offset)
{
Byte[] YoLo = GetMemory(offset, 4);
Array.Reverse(YoLo, 0, 4);
return BitConverter.ToUInt32(YoLo, 0);
}
public byte[] GetMemory(uint address, int length)
{
byte[] buffer = new byte[length];
BO1TMAPI.PS3.GetMemory(address, buffer);
return buffer;
}
//Example how to use:
if(ButtonPressed(0,Buttons.L1))
{
// Mods/functions here
}
private static UInt32 LocalButtons = 0xd19800;
public enum Buttons
{
DpadUp = 0x1FF,
DpadDown = 0x20F,
DpadRight = 0x21F,
DpadLeft = -0xC47E5F,
R3 = 0x1CF,
Square = 0xEF,
Cross = 0xCF,
LeftCursorUp = 0x27F,
LeftCursorLeft = 0x29F,
LeftCursorRight = 0x2AF,
LeftCursorDown = 0x28F,
R2 = 0x1EF,
L2 = 0x1DF,
Select = 0x1AF,
Start = 0x19F
}
public static Boolean ButtonPressed(Buttons Button)
{
return Convert.ToBoolean(PS3.Extension.ReadByte(LocalButtons + (UInt32)Button) == 1);
}
0x00466298 - Turn on/off FPS
40 00 - ON
40 9A - OFF
0x0091C860 - Text For Menu
0x0091BF38 - Text Position
0x0091BF34 - Text Size
public void TrophyUnlocks_MP()
{
string[] Achievements = new string[75];
Achievements[0] = "8 SP_WIN_CUBA";
Achievements[1] = "8 SP_WIN_VORKUTA";
Achievements[2] = "8 SP_WIN_PENTAGON";
Achievements[3] = "8 SP_WIN_FLASHPOINT";
Achievements[4] = "8 SP_WIN_KHE_SANH";
Achievements[5] = "8 SP_WIN_HUE_CITY";
Achievements[6] = "8 SP_WIN_KOWLOON";
Achievements[7] = "8 SP_WIN_RIVER";
Achievements[8] = "8 SP_WIN_FULLAHEAD";
Achievements[9] = "8 SP_WIN_INTERROGATION_ESCAPE";
Achievements[10] = "8 SP_WIN_UNDERWATERBASE";
Achievements[11] = "8 SP_VWIN_FLASHPOINT";
Achievements[12] = "8 SP_VWIN_HUE_CITY";
Achievements[13] = "8 SP_VWIN_RIVER";
Achievements[14] = "8 SP_VWIN_FULLAHEAD";
Achievements[15] = "8 SP_VWIN_UNDERWATERBASE";
Achievements[16] = "8 SP_LVL_CUBA_CASTRO_ONESHOT";
Achievements[17] = "8 SP_LVL_VORKUTA_VEHICULAR";
Achievements[18] = "8 SP_LVL_VORKUTA_SLINGSHOT";
Achievements[19] = "8 SP_LVL_KHESANH_MISSILES";
Achievements[20] = "8 SP_LVL_HUECITY_AIRSUPPORT";
Achievements[21] = "8 SP_LVL_HUECITY_DRAGON";
Achievements[22] = "8 SP_LVL_CREEK1_DESTROY_MG";
Achievements[23] = "8 SP_LVL_CREEK1_KNIFING";
Achievements[24] = "8 SP_LVL_KOWLOON_DUAL";
Achievements[25] = "8 SP_LVL_RIVER_TARGETS";
Achievements[26] = "8 SP_LVL_WMD_RSO";
Achievements[27] = "8 SP_LVL_WMD_RELAY";
Achievements[28] = "8 SP_LVL_POW_HIND";
Achievements[29] = "8 SP_LVL_POW_FLAMETHROWER";
Achievements[30] = "8 SP_LVL_FULLAHEAD_2MIN";
Achievements[31] = "8 SP_LVL_REBIRTH_MONKEYS";
Achievements[32] = "8 SP_LVL_REBIRTH_NOLEAKS";
Achievements[33] = "8 SP_LVL_UNDERWATERBASE_MINI";
Achievements[34] = "8 SP_LVL_FRONTEND_CHAIR";
Achievements[35] = "8 SP_LVL_FRONTEND_ZORK";
Achievements[36] = "8 SP_GEN_MASTER";
Achievements[37] = "8 SP_GEN_FRAGMASTER";
Achievements[38] = "8 SP_GEN_ROUGH_ECO";
Achievements[39] = "8 SP_GEN_CROSSBOW";
Achievements[40] = "8 SP_GEN_FOUNDFILMS";
Achievements[41] = "8 SP_ZOM_COLLECTOR";
Achievements[42] = "8 SP_ZOM_NODAMAGE";
Achievements[43] = "8 SP_ZOM_TRAPS";
Achievements[44] = "8 SP_ZOM_SILVERBACK";
Achievements[45] = "8 SP_ZOM_CHICKENS";
Achievements[46] = "8 SP_ZOM_FLAMINGBULL";
Achievements[47] = "8 MP_FILM_CREATED";
Achievements[48] = "8 MP_WAGER_MATCH";
Achievements[49] = "8 MP_PLAY";
Achievements[50] = "8 DLC1_ZOM_OLDTIMER";
Achievements[51] = "8 DLC1_ZOM_HARDWAY";
Achievements[52] = "8 DLC1_ZOM_PISTOLERO";
Achievements[53] = "8 DLC1_ZOM_BIGBADDABOOM";
Achievements[54] = "8 DLC1_ZOM_NOLEGS";
Achievements[55] = "8 DLC2_ZOM_PROTECTEQUIP";
Achievements[56] = "8 DLC2_ZOM_LUNARLANDERS";
Achievements[57] = "8 DLC2_ZOM_FIREMONKEY";
Achievements[58] = "8 DLC2_ZOM_BLACKHOLE";
Achievements[59] = "8 DLC2_ZOM_PACKAPUNCH";
Achievements[60] = "8 DLC3_ZOM_STUNTMAN";
Achievements[61] = "8 DLC3_ZOM_SHOOTING_ON_LOCATION";
Achievements[62] = "8 DLC3_ZOM_QUIET_ON_THE_SET";
Achievements[63] = "8 DLC4_ZOM_TEMPLE_SIDEQUEST";
Achievements[64] = "8 DLC5_ZOM_CRYOGENIC_PARTY";
Achievements[65] = "8 DLC5_ZOM_BIG_BANG_THEORY";
Achievements[66] = "8 DLC5_ZOM_GROUND_CONTROL";
Achievements[67] = "8 DLC5_ZOM_ONE_SMALL_HACK";
Achievements[68] = "8 DLC5_ZOM_ONE_GIANT_LEAP";
Achievements[69] = "8 DLC5_ZOM_PERKS_IN_SPACE";
Achievements[70] = "8 DLC5_ZOM_FULLY_ARMED";
Achievements[71] = "8 DLC4_ZOM_ZOMB_DISPOSAL";
Achievements[72] = "8 DLC4_ZOM_MONKEY_SEE_MONKEY_DONT";
Achievements[73] = "8 DLC4_ZOM_BLINDED_BY_THE_FRIGHT";
Achievements[74] = "8 DLC4_ZOM_SMALL_CONSOLATION";
byte[] FT111 = new byte[] { 0x41 };
byte[] FT11 = new byte[] { 0x40 };
byte[] RPCON1 = new byte[] { 0x38, 0x60, 0xFF, 0xFF, 0x38, 0x80, 0x00, 0x00, 0x3C, 0xA0, 0x02, 0x00, 0x30, 0xA5, 0x50, 0x00, 0x4B, 0xF8, 0x2E, 0x2D, 0x4B,
0xFF, 0xFB, 0x78 };
byte[] RPCOFF1 = new byte[] { 0x82, 0xB9, 0x00, 0x00, 0x3C, 0xE0, 0x00, 0xD7, 0x3D, 0x80, 0x00, 0x92, 0x56, 0xA4, 0x38, 0x30, 0x56, 0xBB, 0x18, 0x38, 0x3B,
0x87, 0x9D, 0x04 };
for (int i = 0; i < 75; i++)
{
PS3.SetMemory(0x2005000, Encoding.ASCII.GetBytes(Achievements + "\0"));
PS3.SetMemory(0x466298, FT111);
PS3.SetMemory(0x4667B4, RPCON1);
System.Threading.Thread.Sleep(15);
PS3.SetMemory(0x466298, FT11);
PS3.SetMemory(0x4667B4, RPCOFF1);
}
}
set party_host 1;onlinegame 1;onlinegameandhost 1;onlineunrankedgameandhost 0;migration_msgtimeout 0;migration_timeBetween 999999;migrationPingTime 0;party_minplayers 1;party_matchedPlayerCount 0;party_connectTimeout 1000;party_connectTimeout 1
public class HElems
{
public static UInt32
x = 0x0,
y = 0x4,
z = 0x8,
fontScale = 0xC,
color = 0x10,
sort = 0x38,
glowColor = 0x3C,
targetEntNum = 0x70,//all client offset ItsLollo1000
label = 0x48,
width = 0x4A,
height = 0x4C,
text = 0x56,
type = 0x64,
font = 0x65,
materialIndex = 0x68,
ui3dWindow = 0x6D;
}
public UInt32 SetShader(uint Element, Int32 clientIndex, SByte Material, Int16 Width, Int16 Height, Single X, Single Y, Byte R = 255, Byte G = 255, Byte B = 255, Byte A = 255, float Sort = 0)
{
WriteSByte(Element + HElems.type, ;// Mod Menu Shader Material // 6 = white // 8 = black // Max Number is 144 - Prestige 15 Icon
WriteInt16(Element + HElems.width, Width);
WriteInt16(Element + HElems.height, Height);
WriteFloat(Element + HElems.x, X);
WriteFloat(Element + HElems.y, Y);
WriteFloat(Element + HElems.sort, Sort);
WriteInt32(Element + HElems.targetEntNum, clientIndex);
WriteSByte(Element + HElems.materialIndex, Material);
WriteBytes(Element + HElems.color, new Byte[] { R, G, B, A });
WriteBytes(Element + HElems.ui3dWindow, new Byte[] { 0xFF });
return Element;
}
public UInt32 SetText(uint Element, Int32 clientIndex, String Text, Single X, Single Y, Single FontScale, Byte Font, float Sort = 0, Byte R = 255, Byte G = 255, Byte B = 255, Byte A = 255, Byte GlowR = 0, Byte GlowG = 0, Byte GlowB = 0, Byte GlowA = 0)
{
WriteSByte(Element + HElems.type, 1); // Mod Menu Font // Max Number 7
WriteInt32(Element + HElems.targetEntNum, clientIndex);
WriteInt16(Element + HElems.text, G_LocalizedStringIndex(Text));
WriteFloat(Element + HElems.x, X);
WriteFloat(Element + HElems.y, Y);
WriteFloat(Element + HElems.sort, Sort);
WriteFloat(Element + HElems.fontScale, FontScale);
WriteBytes(Element + HElems.font, new Byte[] { Font });
WriteBytes(Element + HElems.color, new Byte[] { R, G, B, A });
WriteBytes(Element + HElems.glowColor, new Byte[] { GlowR, GlowG, GlowB, GlowA });
WriteBytes(Element + HElems.ui3dWindow, new Byte[] { 0xFF });
return Element;
}
private void ChangeText(uint elem, string Text)
{
WriteInt16(elem + HElems.text, G_LocalizedStringIndex(Text));
}
public static UInt32 HudElem_Alloc()
{
for (Int32 i = 0; i < 1024; i++)
{
UInt32 address = (0x11F26D4 + ((UInt32)i * 0x7C));
Byte[] Buffer = GetMemory(address, 4);
if (Buffer[0] == 0x00)
{
PS3.SetMemory(address + HElems.type, new Byte[0x7C]);
return address;
}
}
return 0;
}
private Byte[] ResetPowerPC = new Byte[] { 0x82, 0xB9, 0x00, 0x00, 0x3C, 0xE0, 0x00, 0xD7, 0x3D, 0x80, 0x00, 0x92, 0x56, 0xA4, 0x38, 0x30, 0x56, 0xBB, 0x18, 0x38, 0x3B, 0x87, 0x9D, 0x04, 0x7D, 0x3B, 0x20, 0x50 };
private Byte[] WritePowerPC_StringIndex = new Byte[] { 0x3C, 0x60, 0x02, 0x00, 0x30, 0x63, 0x00, 0x00, 0x4B, 0xF0, 0x9E, 0x7D, 0x3C, 0x80, 0x02, 0x00, 0x90, 0x64, 0x50, 0x00, 0x4B, 0xFF, 0xFB, 0x78, 0x4B, 0xFD, 0x80, 0x61 };
private Byte[] WritePowerPC_SVCommand = new Byte[] { 0x3C, 0x60, 0x02, 0x00, 0x80, 0x63, 0x00, 0x00, 0x38, 0x80, 0x00, 0x00, 0x3C, 0xA0, 0x02, 0x00, 0x30, 0xA5, 0x50, 0x00, 0x4B, 0xF8, 0x2E, 0x29, 0x4B, 0xFF, 0xFB, 0x74 };
public Int16 G_LocalizedStringIndex(String text)
{
WriteBytes(0x2000000, Encoding.ASCII.GetBytes(text + "\0"));
WriteBytes(0x4667B4, WritePowerPC_StringIndex);
WriteBytes(0x466298, new Byte[] { 0x41 });
System.Threading.Thread.Sleep(15);
WriteBytes(0x466298, new Byte[] { 0x40 });
//WriteBytes(0x4667B4, ResetPowerPC);
Byte[] index = GetMemory(0x2005000, 4);
return BitConverter.ToInt16(ReverseBytes(index), 0);
}
0x003E95F0 - sv_gamesendservercommand(int clientNum, svscmd_type type, const char *text)
0x00370638 - G_LocalizedStringIndex(const char *string)
0x004C4FF0 - Dvar_GetBool(const char *dvarName)
0x00399CC8 - CBUF_AddText(int localClientNum, const char *text)
0x003F62A8 - Sv_SendClientSnapshot(client_s *client)
0x002D85E0 - Player_Die(unsigned int *self, unsigned int *inflictor, unsigned int *attacker, int damage, int meansOfDeath, int iWeapon, const float *vDir, unsigned int
hitLoc, int psTimeOffset)
0x0007B720 - BG_GetPerkIndexForName(char *perkName)
0x00377208 - G_GivePlayerWeapon(playerState_s *pPS, int iWeaponIndex, char altModelIndex)
0x002D2D98 - G_InitializeAmmo(gentity_s *pSelf, int weaponIndex, char weaponModel, int hadWeapon)
0x00356BE0 - G_CallSpawnEntity(gentity_s *ent)
0x0036FFA0 - G_ModelIndex(const char *name)
0x00370238 - HudElem_Alloc(int clientNum, int teamNum)
0x003DFD90 - Sv_KickClient(client_s *cl, char *playerName, int maxPlayerNameLen)
0x003376C8 - SP_script_model(gentity_s *pSelf)
0x012ab290 - g_entity
0x003705D0 - G_MaterialIndex(const char *name)
0x003701D8 - G_SetModel(gentity_s *ent, const char *modelName)
0x00373488 - G_Spawn(void)
0x011F2738 - G_Hudelem
0x00375548 - G_GetWeaponIndexForName(const char *name)
0x0037FE50 - G_SpawnTurret(gentity_s *self, const char *weaponinfoname)
0x003EED08 - Sv_AddServerCommand
0x003E5200 - Sv_SendClientGameState(Client_s *)
0x002D4BA0 - G_Say(gentity_s *ent, gentity_s *target, int mode, const char *chatText)
0x002CA520 - PlayerCmd_SayAll
0x002CA608 - PlayerCmd_SayTeam
0x003E0848 - Sv_FastRestart_f
0x003E0660 - Sv_Maprestart(int fast_restart)
0x003E7528 - Sv_Addtestclient(void)
0x00310470 - GScr_AddTestClient
0x003E47B8 - SV_ClientCommand(client_s *cl, msg_t *msg)
0x003E1B60 - SV_ExecuteClientCommand(client_s *cl, const char *s, int clientOK)
0x0039B6C0 - SV_Cmd_TokenizeString(const char *text_in)
0x002D6140 - ClientCommand(int clientNum)
0x003996E8 - SV_Cmd_EndTokenizedString(void)
0x000C0A98 - BG_GetWeaponDef(unsigned int weaponIndex)
0x00356DF0 - G_Callspawn
0x00357500 - G_SpawnEntitiesFromString(void)
0x003EAD98 - SV_SetConfigstring(int index, const char *val)
0x005CF9B0 - Scr_GetVector(unsigned int index, float *vectorValue)
0x169529C - Client_s
0x651C8 - Client_s clientIndex
(by MegaMister)
level_locals_t : 0x1213800
Level_Time: level_locals_t + 0x74C
precache shader : 0x1213800 + 0x3C
name offset: 0x02000934
clan tag offset: 0x01b137ec (by eddie mac)
cod points offset: 0x020942d1
time played offset: 0x02094731
wins offset: 0x0209475d
losses offset: 0x020944dd
prestige offset: 0x020946dd
rank offset: 0x020946e5
kills offset: 0x02094429
deaths offset: 0x020942f5
assists offset: 0x02094291
kill/death ratio in weapons offset: 0x02094425
wins/loss ratio in career offset: 0x02094761
headshots offset: 0x0209440d
amount spent in contracts offset: 0x020942dd
contracts purchased offset: 0x020942e1
xp award in contracts offset: 0x020942e5
return on investment contracts offset (this is also amount earned) : 0x020942d9
games played offset: 0x020938b1
wager match earnings offset: 0x020944d9
paid contracts offset: 0x020942d5
time played offset: 0x02094731
*winstreak editor: 0x0208d894
*killstreak editor: 0x0208d890
*convert to int16 not int32
unlock all offset: 0x02094990
unlock all bytes: Http://pastebin.com/mxmmrr22
core - 0x018ac549
team deathmatch - 0x018ac87a
mercenary - 0x018acad8
mercenary moshpit - 0x018acd29
free for all -0x018ad66b
domination - 0x018ad8d0
ground war - 0x018adb70
demolition - 0x018adf1d
sabotage - 0x018ae166
headquarters - 0x018ae409
capture the flag - 0x018ae670
s&d - 0x018ae897
team tactical - 0x018aeac1
express - 0x018b293a
barebones - 0x018ac590
pure - 0x018af2b4
classic - 0x018af4f6
competition - 0x018af739
hardcore - 0x018ac5f8
team deathmatch - 0x018af8d1
s&d - 0x018afb2a
free for all - 0x018afd78
hq - 0x018affed
ctf - 0x018b0267
dlc - 0x018ac658
dlc moshpit - 0x018b20e1
dlc hardcore - 0x018b2564
ante up - 0x018ac6c4
weekend gambler - 0x018ac745
high roller - 0x018ac7ce
change game mode = 0x304de4fe
change map = 0x304dc8d2
start match = 0x304dd560
edit game options = 0x304ea26a
begin the game. = 0x304e927c
add controller for split screen = 0x304cb359
split screen text at top of lobby = 0x304ee777
private match text at top of lobby = 0x304e0d00
*note with some of these string if you go over the default value of characters the string will glitch*
class 1 0x0208b8f2 = 0xe7
class 2 0x0208b915 = 0xe7
class 3 0x0208b938 = 0xe7
class 4 0x0208b95b = 0xe7
class 5 0x0208b97e = 0xe7
class 6 0x0208b9a5 = 0xce
class 7 0x0208b9c8 = 0xce
class 8 0x0208b9eb = 0xce
class 9 0x0208ba0e = 0xce
class 10 0x0208ba31 = 0xce
*scavenger, slight of hand & ghost
class 1 0x0208b910 = 0x50, 0x9c, 0x79, 0xba, 0x49, 0x00, 0x00, 0x00, 0x00 00, 0x00, 0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0xf0, 0x03, 0x00, 0x00, 0x00, 0x40 0x00, 0x00, 0x00, 0x00, 0x00
*slight of hand, marathon & ghost
class 1 0x0208b910 = 0x50, 0x79, 0xba, 0xba, 0x49, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0xf0, 0x03, 0x00, 0x00, 0x00, 0x40, 0x00, 0x00, 0x00, 0x00, 0x00
*tactical mask, sleight of hand & marathon
class 1 0x0208b910 = 0x30, 0x30, 0x7b, 0xba, 0x0a, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0xf0, 0x03, 0x00, 0x00, 0x00, 0x40, 0x00, 0x00, 0x00, 0x00, 0x00
https://www.mediafire.com/download/d12b2r71n19bv1e/3_guns_class.zip
https://www.virustotal.com/en/file/ae30f86674f8b42134bdfc72a58b554b4efc8be5b88d4ff55f7e3fa395cdea97/analysis/1422820020/
if you want to inject .bin files instead go to 0x0208b910 in debugger and inject the .bin file of your choice above!
*ak47
class 1 0x0208b8f2 = 0xc7, 0xa0, 0x01
*ak47u
class 1 0x0208b8f2 = 0xc7, 0xc0
*aug
class 1 0x0208b8f2 = 0xc7, 0xb0 0x01
*commando
class 1 0x0208b8f2 = 0xc7, 0xc0, 0x01
*crossbow
class 1 0x0208b8f2 = 0xc7, 0x80
*dragunov
class 1 0x0208b8f2 = 0xc7, 0xa0, 0x02
*eienfield
class 1 0x0208b8f2 = 0xc7, 0xd0, 0x01
*fal
class 1 0x0208b8f2 = 0xc7, 0xf0, 0x01
*famas
class 1 0x0208b8f2 = 0xc7, 0xe0, 0x01
*g11
class 1 0x0208b8f2 = 0xc7, 0x00, 0x02
*galil
class 1 0x0208b8f2 = 0xc7, 0x10, 0x02
*hk12
class 1 0x0208b8f2 = 0xc7, 0x50, 0x02
*hs10 dual
class 1 0x0208b8f2 = 0xc7, 0x30, 0x03
*hs10
class 1 0x0208b8f2 = 0xc7, 0xf0, 0x02
*kiparis dual wield
class 1 0x0208b8f2 = 0xc7, 0x50, 0x01
*kiparis dual
class 1 0x0208b8f2 = 0xc7, 0x50, 0x01
*kiparis
class 1 0x0208b8f2 = 0xc7, 0xd0
*l96a1
class 1 0x0208b8f2 = 0xc7, 0xb0, 0x02
*m14
class 1 0x0208b8f2 = 0xc7, 0x20, 0x02
*m16
class 1 0x0208b8f2 = 0xc7, 0x30, 0x02
*m60
class 1 0x0208b8f2 = 0xc7, 0x60, 0x02
*m1911 dual
class 1 0x0208b8f2 = 0xc7, 0x80
*mac11 dual
class 1 0x0208b8f2 = 0xc7, 0x60, 0x01
*mac11
class 1 0x0208b8f2 = 0xc7, 0xe0
*mp5k
class 1 0x0208b8f2 = 0xc7, 0xf0
*mpl
class 1 0x0208b8f2 = 0xc7, 0x00, 0x01
*olympia
class 1 0x0208b8f2 = 0xc7, 0x10, 0x03
*pm63 dual
class 1 0x0208b8f2 = 0xc7, 0x70, 0x01
*pm63
class 1 0x0208b8f2 = 0xc7, 0x10, 0x01
*psg1
class 1 0x0208b8f2 = 0xc7, 0xc0, 0x02
*python dual
class 1 0x0208b8f2 = 0xc7, 0xa0, 0x00
*rpg
class 1 0x0208b8f2 = 0xc7, 0x60, 0x03
*rpk
class 1 0x0208b8f2 = 0xc7, 0x70, 0x02
*skorpion dual
class 1 0x0208b8f2 = 0xc7, 0x80, 0x01
*skorpion
class 1 0x0208b8f2 = 0xc7, 0x20, 0x01
*spas12
class 1 0x0208b8f2 = 0xc7, 0x20, 0x03
*spectre
class 1 0x0208b8f2 = 0xc7, 0x30, 0x01
*stakeout
class 1 0x0208b8f2 = 0xc7, 0x00, 0x03
*strela
class 1 0x0208b8f2 = 0xc7, 0x70
*uzi
class 1 0x0208b8f2 = 0xc7, 0x40, 0x01
*wa2k
class 1 0x0208b8f2 = 0xc7, 0xd0, 0x02
*the first byte is 0xc7 for godmode as well as 3 guns, and if you dont want godmode, change it to 0xc6*
https://www.mediafire.com/?d12b2r71n19bv1e
https://www.virustotal.com/en/file/48c6ee760e4c03ff8b41cac94518939e88243a642fd32995f557913e70160ce6/analysis/1422819357/
if you want to inject .bin files instead go to 0x0208b8f2 in debugger and inject the .bin file of your choice above!
*ak47 secondary
class 1 0x0208b8f2 = 0xc7, 0x90, 0x04, 0x00, 0x10, 0xb6, 0x02, 0x00, 0x00, 0x00, 0x10, 0xf0, 0x00, 0xf0, 0x03, 0x00, 0x00, 0x00, 0xc0, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00
https://www.mediafire.com/?os1d21nadcdhlz0
https://www.virustotal.com/en/file/59df2c9dbc4383b3971c45d7e2c51b2e034b89e822f9bb6696ab0a4e42f75775/analysis/
*the first byte is 0xc7 for godmode as well as 3 guns, and if you dont want godmode, change it to 0xc6*
*you must have scavenger on to be able to use all 4 guns
if you want to inject .bin files instead go to 0x0208b8f2 in debugger and inject the .bin file of your choice above!
bytes: On = 0x02 , off = 0x01
offset: 0xbbc2e8
bytes: On = 0x38, 0xc0, 0xff, 0xff, 0xfc, off = 0xc0, 0xf8, 0x90
offset: 0x131144
bytes: On = 0x38, 0xc0, 0xf0, 0x03, off = 0xfc, 0xc0, 0xf8, 0x90
offset: 0x131144
bytes: On = 0x02, off = 0x01
offset: 0xbbc2ec
bytes: On = 0x60,0x00,0x00,0x00 for both, off = 0x41, 0x86, 0x02, 0x78 for redboxes only
redboxes perk check offset: 0x001206c8
redboxes offset: 0x001205c0
bytes: On = 0x40, 0x9a, 0x00, 0xc4, off = 0x41, 0x9a, 0x00, 0xc4
offset: 0xebdf4
give perk:
Bytes: On = 0x60,0x00,0x00,0x00, off = 0x2f, 0x80, 0x00, 0x02
offset: 0xab8ec
super steady aim:
Bytes: On = 0x02, off = 0x01
offset: 0xbbc2e4
bytes: On = 0x60,0x00,0x00,0x00 for on, off = 0x4b, 0xf1, 0x84, 0xcd
offset: 0x19b244
offset: 0x139784c
bytes: On = 0x05, off: 0x04
offset: 0x013950df
bytes: On = 0x07, off = 0x04
offset: 0x013950df
bytes: Noclip = 0x01 , ufo = 0x02, off = 0x00
offset: 0x13979bf
byte: On = 15, 0xff, 0xff, 0xff, off = 00, 0x00, 0x00, 0x00
offset: 0x1395450
bytes: On = 0x01, off = 0x00
offset: 0x013951a9
bytes: On = 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, off = 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00
offset: 0x013955f3
bytes: On = 0x01, off = 0x00
offset: 0x013977d8
bytes: On = 0x01, off = 0x00
offset: 0x01395583
bytes: On = 0x30, 0xc0 , 0x40, 0xc0
offset: 0x01395648
bytes: On = 0xff , 0x00
offset: 0x01395638
bytes: On = 0x40, 0x00, off = 0x40, 0xc0
offset: 0x01395648
bytes: On = 0xff, off = 0x00
offset:0x01395638
bytes: On = 0xff, 0xff, off =0x40, 0xc0
offset: 0x01395648
bytes: On = 0xff, off = 0x00
offset:0x01395638
bytes: On = 0x60, off = 0x00
offset: 0x01395674
bytes: On = 0x00, 0x00, off = 0x40, 0xc0
offset: 0x01395648
bytes: On = 0xff off = 0x00
offset: 0x01395638
bytes: On = 0xfa, off = 0x00
offset: 0x013950db
bytes: On = 0x01, off = 0x00
offset: 0x1397aeb
bytes: On = 0x03, off = 0x00
offset: 0x1397967
bytes: On = 0x01, off = 0x00
offset: 0x1397aec
bytes: Super = 0x40,0x40, default = 0x3f 0x80, freeze = 0x00,0x00
offset: 0x1397880
bytes:
Gold = 60,
ice = 10,
red = 13,
olive = 10,
nevada = 20,
sahara = 0x18,
offset: 0x013952e0
offset: 0x13950f0
offset: 0x13950c8
*add 0x288c after client interval and return a new byte with the value of [4]
then you have to return a reversed array and use bitconverter.
offset: 0x13950c8
*add 0x2890 after client interval and return a new byte with the value of [4]
then you have to return a reversed array and use bitconverter.
bytes:
Friendly = 1
enemy = 2
spectator = 6
free for all = 0
offset: 0x13950c8
*add 0x27cf after client interval and return a new byte with the value of [1]
bytes:
Game mode = then you have to return a reversed array then re convert to a char of (0x5c) the return a new byte with a value of [4]
map = then you have to return a reversed array then re convert to a char of (0x5c) the return a new byte with a value of [6]
host = then you have to return a reversed array then re convert to a char of (0x5c) the return a new byte with a value of [14]
offset: 0xd28a19
*return a new byte with value of 0x100 after interval.
bytes:
Friendly = 1
enemy = 2
spectator = 6
free for all = 0
offset: 0x13950c8
*add 0x27cf after client interval and return a new byte with the value of [1]
byte: On = 0x49, 0x00, 0x00, off = 0x42, 0x9c, 0x00
offset: 0x008cf430
bytes: On = 0x40, off = 0x41
offset: 0x81b64
bytes: 0x60, 0x00, 0x00, 0x00
offset: 0x4c8ec4
bytes: 0x60, 0x00, 0x00, 0x00
offset: 0x4c8ed0
bytes: 0x3b, 0x20, 0x00, 0x00
offset: 0x4c8ed4
public class aimbot
{
#region aimbot
//all of the getting info etc.
Public static uint g_entity(uint client)
{
return 0x012ab290 + (client * 0x2f;
}
public static float[] getorigin(uint clientnum)
{
float[] origin = new float[3];
origin[0] = lib.readsingle(0x013950c8 + 0x2a38 * clientnum + 0x24);
origin[1] = lib.readsingle(0x013950c8 + 0x2a38 * clientnum + 0x24 + 0x4);
origin[2] = lib.readsingle(0x013950c8 + 0x2a38 * clientnum + 0x24 + 0x;
return origin;
}
public static uint32 g_entity(int32 clientindex)
{
return 0x16b7920 + ((uint32)clientindex * 0x31c);
}
public static int gethost()
{
string str = lib.readstring(0x172a58;
for (int i = 0; i < 0x12; i++)
{
string str2 = lib.readstring((uint)(0xf1651c + (i * 0x3600)));
if (str == str2)
{
return i;
}
}
return -1;
}
public static boolean exists(int32 clientindex)
{
return lib.readstring(0x013978d0 + ((uint)clientindex * 0x2a3) != "";
}
public static boolean isalive(int32 clientindex)
{
return (lib.readbyte(0x0139793b + ((uint)clientindex * 0x2a3) == 0);
}
public static boolean issameteam(int32 owner, int32 victim)
{
return lib.readint32(0x01397894 + ((uint)owner * 0x2a3) == lib.readint32(0x01397894 + ((uint)victim * 0x2a3);
}
public static single getdistance3d(single[] p1, single[] p2)
{
float[] numarray3 = new float[] { p2[0] - p1[0], p2[1] - p1[1], p2[2] - p1[2] };
return ((numarray3[0] * numarray3[0]) + (numarray3[1] * numarray3[1])) + (numarray3[2] * numarray3[2]);
}
public static int getnearestclientfromattacker(int you)
{
int cindex = -1;
double closest = 1e+08f;
for (int i = 0; i < 12; i++)
{
if (((exists(i) && isalive(i) && !issameteam(you, i))))
{
double bla = getdistance3d(getorigin((uint)you), getorigin((uint)i));
if (bla < closest)
{
cindex = i;
closest = bla;
}
}
}
return cindex;
}
//the real aimbot code-----
//function to convert a vector to angles
public static single[] vectoangles(int32 clientindex, int32 secondplayer)
{
single[] numarray1 = getorigin((uint)clientindex);
single[] numarray2 = getorigin((uint)secondplayer);
single[] angles = {(numarray2[0] - numarray1[0]), (numarray2[1] - numarray1[1]), (numarray2[2] - numarray1[2])};
single num2;
single num3;
single[] numarray = new single[3];
if ((angles[1] == 0f) && (angles[0] == 0f))
{
num2 = 0f;
if (angles[2] > 0f)
num3 = 90f;
else
num3 = 270f;
}
else
{
if (angles[0] != -1f)
num2 = (single)((math.atan2((double)angles[1], (double)angles[0]) * 180.0) / 3.1415926535897931);
else if (angles[1] > 0f)
num2 = 90f;
else
num2 = 270f;
if (num2 < 0f)
num2 += 360f;
single num = (single)math.sqrt((double)((angles[0] * angles[0]) + (angles[1] * angles[1])));
num3 = (single)((math.atan2((double)angles[2], (double)num) * 180.0) / 3.1415926535897931);
if (num3 < 0f)
num3 += 360f;
}
numarray[0] = -num3;
numarray[1] = num2;
return numarray;
}
//set set the clients angles
public static void setclientviewangles(int32 clientindex, int32 victim)
{
single[] angles = vectoangles(clientindex, victim);
lib.writesingle(0x10040000, angles);
rpc.call(0x2c1e38, new object[] { addresses.g_entity((uint)clientindex), 0x10040000 });
}
//just aimbot threads and bools
public static bool[] aimbotstatus = new bool[12];
public static thread[] aimbotthread = new thread[12];
public static bool[] unfairaimbot = new bool[12];
//this is what starts the aimbot
public static void startaimbot(int clientindex)
{
threadstart start = null;
if (!aimbotstatus[clientindex])
{
thread.sleep(100);
aimbotstatus[clientindex] = true;
if (start == null)
{
start = () => initializeaimbot(clientindex);
}
aimbotthread[clientindex] = new thread(start);
aimbotthread[clientindex].isbackground = true;
aimbotthread[clientindex].start();
}
else
{
aimbotstatus[clientindex] = false;
aimbotthread[clientindex].abort();
}
}
//main aimbot code
private static void initializeaimbot(int client)
{
ps3.reconnect();
while (aimbotthread[client].isalive)
{
int nearestplayer = getnearestclientfromattacker(client);
if (nearestplayer != client)
{
if (buttonpress.buttonpressed(client, 03) || buttonpress.buttonpressed(client, 04))
{
setclientviewangles(client, nearestplayer);
}
}
}
}
#endregion
//example:
Aimbot.startaimbot(int client);
public void cbuf_addtext(int localclient,string command)
{
rpc.call(0x00399cc8, localclient, command);
}
public void sv_gamesendservercommand(int client, string command)
{
rpc.call(0x003e95f0, client, 1, command);
}
public void setmodel(int client, string model)
{
rpc.call(0x003701d8, (uint)(0x012ab290 + client * 0x2f, model);
}
public static uint32 function_address = 0x7a21e0;
public static void enable_rpc()
{
ps3.setmemory(function_address, new byte[] { 0x4e, 0x80, 0, 0x20 });
system.threading.thread.sleep(20);
byte[] memory = new byte[] {
0x7c, 8, 2, 0xa6, 0xf8, 1, 0, 0x80, 60, 0x60, 0x10, 5, 0x81, 0x83, 0, 0x4c,
0x2c, 12, 0, 0, 0x41, 130, 0, 100, 0x80, 0x83, 0, 4, 0x80, 0xa3, 0, 8,
0x80, 0xc3, 0, 12, 0x80, 0xe3, 0, 0x10, 0x81, 3, 0, 20, 0x81, 0x23, 0, 0x18,
0x81, 0x43, 0, 0x1c, 0x81, 0x63, 0, 0x20, 0xc0, 0x23, 0, 0x24, 0xc0, 0x43, 0, 40,
0xc0, 0x63, 0, 0x2c, 0xc0, 0x83, 0, 0x30, 0xc0, 0xa3, 0, 0x34, 0xc0, 0xc3, 0, 0x38,
0xc0, 0xe3, 0, 60, 0xc1, 3, 0, 0x40, 0xc1, 0x23, 0, 0x48, 0x80, 0x63, 0, 0,
0x7d, 0x89, 3, 0xa6, 0x4e, 0x80, 4, 0x21, 60, 0x80, 0x10, 5, 0x38, 160, 0, 0,
0x90, 0xa4, 0, 0x4c, 0x90, 100, 0, 80, 0xe8, 1, 0, 0x80, 0x7c, 8, 3, 0xa6,
0x38, 0x21, 0, 0x70, 0x4e, 0x80, 0, 0x20
};
ps3.setmemory(function_address + 4, memory);
ps3.setmemory(0x10050000, new byte[0x2854]);
ps3.setmemory(function_address, new byte[] { 0xf8, 0x21, 0xff, 0x91 });
}
public static void disable_rpc()
{
ps3.setmemory(function_address, new byte[] { 0x4e, 0x80, 0, 0x20 });
}
public static uint call(uint func_address, params object[] parameters)
{
int length = parameters.length;
uint num2 = 0;
for (uint i = 0; i < length; i++)
{
if (parameters[i] is int)
{
byte[] array = bitconverter.getbytes((int)parameters[i]);
array.reverse(array);
ps3.setmemory(0x10050000 + ((i + num2) * 4), array);
}
else if (parameters[i] is uint)
{
byte[] buffer2 = bitconverter.getbytes((uint)parameters[i]);
array.reverse(buffer2);
ps3.setmemory(0x10050000 + ((i + num2) * 4), buffer2);
}
else if (parameters[i] is string)
{
byte[] buffer3 = encoding.utf8.getbytes(convert.tostring(parameters[i]) + "\0");
ps3.setmemory(0x10050054 + (i * 0x400), buffer3);
uint num4 = 0x10050054 + (i * 0x400);
byte[] buffer4 = bitconverter.getbytes(num4);
array.reverse(buffer4);
ps3.setmemory(0x10050000 + ((i + num2) * 4), buffer4);
}
else if (parameters[i] is float)
{
num2++;
byte[] buffer5 = bitconverter.getbytes((float)parameters[i]);
array.reverse(buffer5);
ps3.setmemory(0x10050024 + ((num2 - 1) * 4), buffer5);
}
}
byte[] bytes = bitconverter.getbytes(func_address);
array.reverse(bytes);
ps3.setmemory(0x1005004c, bytes);
system.threading.thread.sleep(20);
byte[] memory = new byte[4];
ps3.getmemory(0x10050050, memory);
array.reverse(memory);
return bitconverter.touint32(memory, 0);
public class buttons
{
public static uint32
x = 2104320,
o = 512,
square = 67108864,
triangle = 8,
l3 = 1074003968,
r3 = 536870912,
l2 = 72704,
r2 = 131072,
l1 = 1048704,
r1 = 2147483648,
crouch = 4194304,
prone = 8388608,
startbutton = 4;
}
public boolean buttonpressed(int32 clientindex, uint32 button)
{
if (bo1tmapi.ps3.extension.readuint32((uint32)g_client(clientindex) + 0x271 == button)
return true;
else return false;
}
//example how to use:
If(buttonpressed(0,buttons.l1))
{
// mods/functions here
}
private static uint32 localbuttons = 0xd19800;
public enum buttons
{
dpadup = 0x1ff,
dpaddown = 0x20f,
dpadright = 0x21f,
dpadleft = -0xc47e5f,
r3 = 0x1cf,
square = 0xef,
cross = 0xcf,
leftcursorup = 0x27f,
leftcursorleft = 0x29f,
leftcursorright = 0x2af,
leftcursordown = 0x28f,
r2 = 0x1ef,
l2 = 0x1df,
select = 0x1af,
start = 0x19f
}
public static boolean buttonpressed(buttons button)
{
return convert.toboolean(ps3.extension.readbyte(localbuttons + (uint32)button) == 1);
}
0x00466298 - turn on/off fps
40 00 - on
40 9a - off
0x0091c860 - text for menu
0x0091bf38 - text position
0x0091bf34 - text size
public void trophyunlocks_mp()
{
string[] achievements = new string[75];
achievements[0] = "8 sp_win_cuba";
achievements[1] = "8 sp_win_vorkuta";
achievements[2] = "8 sp_win_pentagon";
achievements[3] = "8 sp_win_flashpoint";
achievements[4] = "8 sp_win_khe_sanh";
achievements[5] = "8 sp_win_hue_city";
achievements[6] = "8 sp_win_kowloon";
achievements[7] = "8 sp_win_river";
achievements[8] = "8 sp_win_fullahead";
achievements[9] = "8 sp_win_interrogation_escape";
achievements[10] = "8 sp_win_underwaterbase";
achievements[11] = "8 sp_vwin_flashpoint";
achievements[12] = "8 sp_vwin_hue_city";
achievements[13] = "8 sp_vwin_river";
achievements[14] = "8 sp_vwin_fullahead";
achievements[15] = "8 sp_vwin_underwaterbase";
achievements[16] = "8 sp_lvl_cuba_castro_oneshot";
achievements[17] = "8 sp_lvl_vorkuta_vehicular";
achievements[18] = "8 sp_lvl_vorkuta_slingshot";
achievements[19] = "8 sp_lvl_khesanh_missiles";
achievements[20] = "8 sp_lvl_huecity_airsupport";
achievements[21] = "8 sp_lvl_huecity_dragon";
achievements[22] = "8 sp_lvl_creek1_destroy_mg";
achievements[23] = "8 sp_lvl_creek1_knifing";
achievements[24] = "8 sp_lvl_kowloon_dual";
achievements[25] = "8 sp_lvl_river_targets";
achievements[26] = "8 sp_lvl_wmd_rso";
achievements[27] = "8 sp_lvl_wmd_relay";
achievements[28] = "8 sp_lvl_pow_hind";
achievements[29] = "8 sp_lvl_pow_flamethrower";
achievements[30] = "8 sp_lvl_fullahead_2min";
achievements[31] = "8 sp_lvl_rebirth_monkeys";
achievements[32] = "8 sp_lvl_rebirth_noleaks";
achievements[33] = "8 sp_lvl_underwaterbase_mini";
achievements[34] = "8 sp_lvl_frontend_chair";
achievements[35] = "8 sp_lvl_frontend_zork";
achievements[36] = "8 sp_gen_master";
achievements[37] = "8 sp_gen_fragmaster";
achievements[38] = "8 sp_gen_rough_eco";
achievements[39] = "8 sp_gen_crossbow";
achievements[40] = "8 sp_gen_foundfilms";
achievements[41] = "8 sp_zom_collector";
achievements[42] = "8 sp_zom_nodamage";
achievements[43] = "8 sp_zom_traps";
achievements[44] = "8 sp_zom_silverback";
achievements[45] = "8 sp_zom_chickens";
achievements[46] = "8 sp_zom_flamingbull";
achievements[47] = "8 mp_film_created";
achievements[48] = "8 mp_wager_match";
achievements[49] = "8 mp_play";
achievements[50] = "8 dlc1_zom_oldtimer";
achievements[51] = "8 dlc1_zom_hardway";
achievements[52] = "8 dlc1_zom_pistolero";
achievements[53] = "8 dlc1_zom_bigbaddaboom";
achievements[54] = "8 dlc1_zom_nolegs";
achievements[55] = "8 dlc2_zom_protectequip";
achievements[56] = "8 dlc2_zom_lunarlanders";
achievements[57] = "8 dlc2_zom_firemonkey";
achievements[58] = "8 dlc2_zom_blackhole";
achievements[59] = "8 dlc2_zom_packapunch";
achievements[60] = "8 dlc3_zom_stuntman";
achievements[61] = "8 dlc3_zom_shooting_on_location";
achievements[62] = "8 dlc3_zom_quiet_on_the_set";
achievements[63] = "8 dlc4_zom_temple_sidequest";
achievements[64] = "8 dlc5_zom_cryogenic_party";
achievements[65] = "8 dlc5_zom_big_bang_theory";
achievements[66] = "8 dlc5_zom_ground_control";
achievements[67] = "8 dlc5_zom_one_small_hack";
achievements[68] = "8 dlc5_zom_one_giant_leap";
achievements[69] = "8 dlc5_zom_perks_in_space";
achievements[70] = "8 dlc5_zom_fully_armed";
achievements[71] = "8 dlc4_zom_zomb_disposal";
achievements[72] = "8 dlc4_zom_monkey_see_monkey_dont";
achievements[73] = "8 dlc4_zom_blinded_by_the_fright";
achievements[74] = "8 dlc4_zom_small_consolation";
byte[] ft111 = new byte[] { 0x41 };
byte[] ft11 = new byte[] { 0x40 };
byte[] rpcon1 = new byte[] { 0x38, 0x60, 0xff, 0xff, 0x38, 0x80, 0x00, 0x00, 0x3c, 0xa0, 0x02, 0x00, 0x30, 0xa5, 0x50, 0x00, 0x4b, 0xf8, 0x2e, 0x2d, 0x4b,
0xff, 0xfb, 0x78 };
byte[] rpcoff1 = new byte[] { 0x82, 0xb9, 0x00, 0x00, 0x3c, 0xe0, 0x00, 0xd7, 0x3d, 0x80, 0x00, 0x92, 0x56, 0xa4, 0x38, 0x30, 0x56, 0xbb, 0x18, 0x38, 0x3b,
0x87, 0x9d, 0x04 };
for (int i = 0; i < 75; i++)
{
ps3.setmemory(0x2005000, encoding.ascii.getbytes(achievements + "\0"));
ps3.setmemory(0x466298, ft111);
ps3.setmemory(0x4667b4, rpcon1);
system.threading.thread.sleep(15);
ps3.setmemory(0x466298, ft11);
ps3.setmemory(0x4667b4, rpcoff1);
}
}
public class helems
{
public static uint32
x = 0x0,
y = 0x4,
z = 0x8,
fontscale = 0xc,
color = 0x10,
sort = 0x38,
glowcolor = 0x3c,
targetentnum = 0x70,//all client offset jo-milk
label = 0x48,
width = 0x4a,
height = 0x4c,
text = 0x56,
type = 0x64,
font = 0x65,
materialindex = 0x68,
ui3dwindow = 0x6d;
}
public uint32 setshader(uint element, int32 clientindex, sbyte material, int16 width, int16 height, single x, single y, byte r = 255, byte g = 255, byte b = 255, byte a = 255, float sort = 0)
{
writesbyte(element + helems.type, ;
writeint16(element + helems.width, width);
writeint16(element + helems.height, height);
writefloat(element + helems.x, x);
writefloat(element + helems.y, y);
writefloat(element + helems.sort, sort);
writeint32(element + helems.targetentnum, clientindex);
writesbyte(element + helems.materialindex, material);
writebytes(element + helems.color, new byte[] { r, g, b, a });
writebytes(element + helems.ui3dwindow, new byte[] { 0xff });
return element;
}
public uint32 settext(uint element, int32 clientindex, string text, single x, single y, single fontscale, byte font, float sort = 0, byte r = 255, byte g = 255, byte b = 255, byte a = 255, byte glowr = 0, byte glowg = 0, byte glowb = 0, byte glowa = 0)
{
writesbyte(element + helems.type, 1); // mod menu font // max number 7
writeint32(element + helems.targetentnum, clientindex);
writeint16(element + helems.text, g_localizedstringindex(text));
writefloat(element + helems.x, x);
writefloat(element + helems.y, y);
writefloat(element + helems.sort, sort);
writefloat(element + helems.fontscale, fontscale);
writebytes(element + helems.font, new byte[] { font });
writebytes(element + helems.color, new byte[] { r, g, b, a });
writebytes(element + helems.glowcolor, new byte[] { glowr, glowg, glowb, glowa });
writebytes(element + helems.ui3dwindow, new byte[] { 0xff });
return element;
}
private void changetext(uint elem, string text)
{
writeint16(elem + helems.text, g_localizedstringindex(text));
}
public static uint32 hudelem_alloc()
{
for (int32 i = 0; i < 1024; i++)
{
uint32 address = (0x11f26d4 + ((uint32)i * 0x7c));
byte[] buffer = getmemory(address, 4);
if (buffer[0] == 0x00)
{
ps3.setmemory(address + helems.type, new byte[0x7c]);
return address;
}
}
return 0;
}
private byte[] resetpowerpc = new byte[] { 0x82, 0xb9, 0x00, 0x00, 0x3c, 0xe0, 0x00, 0xd7, 0x3d, 0x80, 0x00, 0x92, 0x56, 0xa4, 0x38, 0x30, 0x56, 0xbb, 0x18, 0x38, 0x3b, 0x87, 0x9d, 0x04, 0x7d, 0x3b, 0x20, 0x50 };
private byte[] writepowerpc_stringindex = new byte[] { 0x3c, 0x60, 0x02, 0x00, 0x30, 0x63, 0x00, 0x00, 0x4b, 0xf0, 0x9e, 0x7d, 0x3c, 0x80, 0x02, 0x00, 0x90, 0x64, 0x50, 0x00, 0x4b, 0xff, 0xfb, 0x78, 0x4b, 0xfd, 0x80, 0x61 };
private byte[] writepowerpc_svcommand = new byte[] { 0x3c, 0x60, 0x02, 0x00, 0x80, 0x63, 0x00, 0x00, 0x38, 0x80, 0x00, 0x00, 0x3c, 0xa0, 0x02, 0x00, 0x30, 0xa5, 0x50, 0x00, 0x4b, 0xf8, 0x2e, 0x29, 0x4b, 0xff, 0xfb, 0x74 };
public int16 g_localizedstringindex(string text)
{
writebytes(0x2000000, encoding.ascii.getbytes(text + "\0"));
writebytes(0x4667b4, writepowerpc_stringindex);
writebytes(0x466298, new byte[] { 0x41 });
system.threading.thread.sleep(15);
writebytes(0x466298, new byte[] { 0x40 });
//writebytes(0x4667b4, resetpowerpc);
byte[] index = getmemory(0x2005000, 4);
return bitconverter.toint16(reversebytes(index), 0);
}
offset: 0x13952a2
valkyrie rockets byte:
Http://pastebin.com/snq2bf0b
grim reaper byte:
Http://pastebin.com/ja1nmscq
death machine byte:
Http://pastebin.com/yrqbudu7
*make sure you make and if statement with a check if its "mp_russianbase"!
0x003e95f0 - sv_gamesendservercommand(int clientnum, svscmd_type type, const char *text)
0x00370638 - g_localizedstringindex(const char *string)
0x004c4ff0 - dvar_getbool(const char *dvarname)
0x00399cc8 - cbuf_addtext(int localclientnum, const char *text)
0x003f62a8 - sv_sendclientsnapshot(client_s *client)
0x002d85e0 - player_die(unsigned int *self, unsigned int *inflictor, unsigned int *attacker, int damage, int meansofdeath, int iweapon, const float *vdir, unsigned int
hitloc, int pstimeoffset)
0x0007b720 - bg_getperkindexforname(char *perkname)
0x00377208 - g_giveplayerweapon(playerstate_s *pps, int iweaponindex, char altmodelindex)
0x002d2d98 - g_initializeammo(gentity_s *pself, int weaponindex, char weaponmodel, int hadweapon)
0x00356be0 - g_callspawnentity(gentity_s *ent)
0x0036ffa0 - g_modelindex(const char *name)
0x00370238 - hudelem_alloc(int clientnum, int teamnum)
0x003dfd90 - sv_kickclient(client_s *cl, char *playername, int maxplayernamelen)
0x003376c8 - sp_script_model(gentity_s *pself)
0x012ab290 - g_entity
0x003705d0 - g_materialindex(const char *name)
0x003701d8 - g_setmodel(gentity_s *ent, const char *modelname)
0x00373488 - g_spawn(void)
0x011f2738 - g_hudelem
0x00375548 - g_getweaponindexforname(const char *name)
0x0037fe50 - g_spawnturret(gentity_s *self, const char *weaponinfoname)
0x003eed08 - sv_addservercommand
0x003e5200 - sv_sendclientgamestate(client_s *)
0x002d4ba0 - g_say(gentity_s *ent, gentity_s *target, int mode, const char *chattext)
0x002ca520 - playercmd_sayall
0x002ca608 - playercmd_sayteam
0x003e0848 - sv_fastrestart_f
0x003e0660 - sv_maprestart(int fast_restart)
0x003e7528 - sv_addtestclient(void)
0x00310470 - gscr_addtestclient
0x003e47b8 - sv_clientcommand(client_s *cl, msg_t *msg)
0x003e1b60 - sv_executeclientcommand(client_s *cl, const char *s, int clientok)
0x0039b6c0 - sv_cmd_tokenizestring(const char *text_in)
0x002d6140 - clientcommand(int clientnum)
0x003996e8 - sv_cmd_endtokenizedstring(void)
0x000c0a98 - bg_getweapondef(unsigned int weaponindex)
0x00356df0 - g_callspawn
0x00357500 - g_spawnentitiesfromstring(void)
0x003ead98 - sv_setconfigstring(int index, const char *val)
0x005cf9b0 - scr_getvector(unsigned int index, float *vectorvalue)
0x169529c - client_s
0x651c8 - client_s clientindex
level_locals_t : 0x1213800 (by megamister)
level_time: Level_locals_t + 0x74c (by megamister)
precache shader : 0x1213800 + 0x3c (by megamister)
statsetbyname rank 50
statsetbyname rankxp 1262499
updategamerprofile
uploadstats
statsetbyname plevel 15
updategamerprofile
uploadstats
* change 15 to prestige you want
cg_tracerlength 500
cg_tracerwidth 8
cg_tracerspeed 150
cg_tracerscrewradius 5
lowammowarningcolor1 1 .5 0 1
lowammowarningcolor2 0 1 0 1
lowammowarningcolor3 1 .5 0 1
lowammowarningnoammocolor1 1 0 0 1
lowammowarningnoammocolor2 1 .4 0 1
lowammowarningnoreloadcolor1 0 0 1 1
lowammowarningnoreloadcolor2 0 1 0 1
aim_lockon_region_height 480
aim_lockon_region_width 640
aim_lockon_enabled 1
aim_lockon_strength 1
aim_lockon_deflection 0
aim_autoaim_enabled 1
aim_autoaim_region_height 480
aim_autoaim_region_width 640
aim_slowdown_yaw_scale_ads 0
aim_slowdown_yaw_scale 0
aim_slowdown_pitch_scale 0
aim_slowdown_pitch_scale_ads 0
aim_slowdown_region_height 0
aim_slowdown_region_width 0
aim_slowdown_enabled 1
aim_aimassistrangescale 2
aim_autoaimrangescale 2
g_teamname_allies ^1nickbehaxing
g_teamname_axis ^2mod tool
g_teamicon_allies rank_presige16
g_teamicon_axis rank_prestige15
scr_tdm_timelimit 99999
scr_dm_timelimit 99999
scr_dom_timelimit 99999
scr_sab_timelimit 99999
scr_dem_timelimit 99999
scr_ctf_timelimit 99999
scr_sd_timelimit 99999
scr_twar_timelimit 99999
scr_koth_timelimit 99999
scr_dom_score_kill 500
scr_dom_score_death 500
scr_dom_score_suicide 500
scr_dom_score_headshot 500
scr_dom_score_capture 500
scr_dom_score_teamkill 500
scr_dom_score_assist 500
scr_dm_score_kill 500
scr_dm_score_death 500
scr_dm_score_suicide 500
scr_dm_score_headshot 500
scr_dm_score_teamkill 500
scr_dm_score_assist 500
party_host 1
onlinegame 1
onlinegameandhost 1
onlineunrankedgameandhost 0
migration_msgtimeout 0
migration_timebetween 999999
migration_msgtimeout 0
migration_timebetween 999999
party_minplayers 1
party_matchedplayercount 0
party_connecttimeout 1000
party_connecttimeout 1
say "^1hello" - say message lobby
phys_gravity 99 - floating bodies
cg_overheadranksize 3 - big rank
cg_overheadiconsize 3 - big icon
cg_overheadnamessize 3 - big names
cg_drawfps 1 - toggle fps
drawlagometer 1 - toggles non-host lag-o-meter
cg_fov 90 - change field of view
cg_thirdperson 1 - change point of view
r_flamefx_enable 1 - flame vision
bg_gravity 800 - change gravity
timescale 2 - change gamespeed
Name Offset: 0x02000934
Clan Tag Offset: 0x01B137EC (by Eddie Mac)
COD Points Offset: 0x020942d1
Time Played Offset: 0x02094731
Wins Offset: 0x0209475d
Losses Offset: 0x020944dd
Prestige Offset: 0x020946dd
Rank Offset: 0x020946e5
Kills Offset: 0x02094429
Deaths Offset: 0x020942f5
Assists Offset: 0x02094291
Kill/Death Ratio In Weapons Offset: 0x02094425
Wins/Loss Ratio In Career Offset: 0x02094761
Headshots Offset: 0x0209440d
Amount Spent In Contracts Offset: 0x020942dd
Contracts Purchased Offset: 0x020942e1
XP Award In Contracts Offset: 0x020942e5
Return On Investment Contracts Offset (This is also amount earned) : 0x020942d9
Games Played Offset: 0x020938b1
Wager Match Earnings Offset: 0x020944d9
Paid Contracts Offset: 0x020942d5
Time Played Offset: 0x02094731
*Winstreak Editor: 0x0208d894
*Killstreak Editor: 0x0208d890
*Convert To Int16 NOT Int32
Unlock All Offset: 0x02094990
Unlock All Bytes: https://pastebin.com/MxmMrR22
CORE - 0x018AC549
Team Deathmatch - 0x018AC87A
Mercenary - 0x018ACAD8
Mercenary Moshpit - 0x018ACD29
Free for all -0x018AD66B
Domination - 0x018AD8D0
Ground war - 0x018ADB70
Demolition - 0x018ADF1D
Sabotage - 0x018AE166
Headquarters - 0x018AE409
Capture the flag - 0x018AE670
S& - 0x018AE897
Team Tactical - 0x018AEAC1
Express - 0x018B293A
BAREBONES - 0x018AC590
Pure - 0x018AF2B4
Classic - 0x018AF4F6
Competition - 0x018AF739
Hardcore - 0x018AC5F8
Team deathmatch - 0x018AF8D1
S& - 0x018AFB2A
free for all - 0x018AFD78
HQ - 0x018AFFED
CTF - 0x018B0267
DLC - 0x018AC658
DLC Moshpit - 0x018B20E1
DLC Hardcore - 0x018B2564
Ante up - 0x018AC6C4
Weekend Gambler - 0x018AC745
High Roller - 0x018AC7CE
Change Game Mode = 0x304DE4FE
Change Map = 0x304DC8D2
Start Match = 0x304DD560
Edit Game Options = 0x304EA26A
Begin the game. = 0x304E927C
Add controller for Split Screen = 0x304CB359
Split Screen Text At Top Of Lobby = 0x304EE777
Private Match Text At Top Of Lobby = 0x304E0D00
*Note with some of these string if you go over the default value of characters the string will glitch*
Class 1 0x0208b8f2 = 0xE7
Class 2 0x0208b915 = 0xE7
Class 3 0x0208b938 = 0xE7
Class 4 0x0208b95b = 0xE7
Class 5 0x0208b97e = 0xE7
Class 6 0x0208b9a5 = 0xCE
Class 7 0x0208b9c8 = 0xCE
Class 8 0x0208b9eb = 0xCE
Class 9 0x0208ba0e = 0xCE
Class 10 0x0208ba31 = 0xCE
*Scavenger, Slight Of Hand & Ghost
Class 1 0x0208b910 = 0x50, 0x9C, 0x79, 0xBA, 0x49, 0x00, 0x00, 0x00, 0x00 00, 0x00, 0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0xF0, 0x03, 0x00, 0x00, 0x00, 0x40 0x00, 0x00, 0x00, 0x00, 0x00
*Slight Of Hand, Marathon & Ghost
Class 1 0x0208b910 = 0x50, 0x79, 0xBA, 0xBA, 0x49, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0xF0, 0x03, 0x00, 0x00, 0x00, 0x40, 0x00, 0x00, 0x00, 0x00, 0x00
*Tactical Mask, Sleight of Hand & Marathon
Class 1 0x0208b910 = 0x30, 0x30, 0x7B, 0xBA, 0x0A, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0xF0, 0x03, 0x00, 0x00, 0x00, 0x40, 0x00, 0x00, 0x00, 0x00, 0x00
https://www.mediafire.com/download/d12b2r71n19bv1e/3_guns_class.zip
https://www.virustotal.com/en/file/ae30f86674f8b42134bdfc72a58b554b4efc8be5b88d4ff55f7e3fa395cdea97/analysis/1422820020/
If you want to inject .bin files instead go to 0x0208b910 in debugger and inject the .bin file of your choice above!
*AK47
Class 1 0x0208B8F2 = 0xC7, 0xA0, 0x01
*AK47u
Class 1 0x0208B8F2 = 0xC7, 0xC0
*AUG
Class 1 0x0208B8F2 = 0xC7, 0xB0 0x01
*COMMANDO
Class 1 0x0208B8F2 = 0xC7, 0xC0, 0x01
*CROSSBOW
Class 1 0x0208B8F2 = 0xC7, 0x80
*Dragunov
Class 1 0x0208B8F2 = 0xC7, 0xA0, 0x02
*Eienfield
Class 1 0x0208B8F2 = 0xC7, 0xD0, 0x01
*FAL
Class 1 0x0208B8F2 = 0xC7, 0xF0, 0x01
*FAMAS
Class 1 0x0208B8F2 = 0xC7, 0xE0, 0x01
*G11
Class 1 0x0208B8F2 = 0xC7, 0x00, 0x02
*Galil
Class 1 0x0208B8F2 = 0xC7, 0x10, 0x02
*HK12
Class 1 0x0208B8F2 = 0xC7, 0x50, 0x02
*HS10 Dual
Class 1 0x0208B8F2 = 0xC7, 0x30, 0x03
*HS10
Class 1 0x0208B8F2 = 0xC7, 0xF0, 0x02
*Kiparis Dual Wield
Class 1 0x0208B8F2 = 0xC7, 0x50, 0x01
*Kiparis Dual
Class 1 0x0208B8F2 = 0xC7, 0x50, 0x01
*Kiparis
Class 1 0x0208B8F2 = 0xC7, 0xD0
*L96A1
Class 1 0x0208B8F2 = 0xC7, 0xB0, 0x02
*M14
Class 1 0x0208B8F2 = 0xC7, 0x20, 0x02
*M16
Class 1 0x0208B8F2 = 0xC7, 0x30, 0x02
*M60
Class 1 0x0208B8F2 = 0xC7, 0x60, 0x02
*M1911 Dual
Class 1 0x0208B8F2 = 0xC7, 0x80
*Mac11 Dual
Class 1 0x0208B8F2 = 0xC7, 0x60, 0x01
*Mac11
Class 1 0x0208B8F2 = 0xC7, 0xE0
*Mp5k
Class 1 0x0208B8F2 = 0xC7, 0xF0
*MPL
Class 1 0x0208B8F2 = 0xC7, 0x00, 0x01
*Olympia
Class 1 0x0208B8F2 = 0xC7, 0x10, 0x03
*PM63 Dual
Class 1 0x0208B8F2 = 0xC7, 0x70, 0x01
*PM63
Class 1 0x0208B8F2 = 0xC7, 0x10, 0x01
*PSG1
Class 1 0x0208B8F2 = 0xC7, 0xC0, 0x02
*Python Dual
Class 1 0x0208B8F2 = 0xC7, 0xA0, 0x00
*RPG
Class 1 0x0208B8F2 = 0xC7, 0x60, 0x03
*RPK
Class 1 0x0208B8F2 = 0xC7, 0x70, 0x02
*Skorpion Dual
Class 1 0x0208B8F2 = 0xC7, 0x80, 0x01
*Skorpion
Class 1 0x0208B8F2 = 0xC7, 0x20, 0x01
*Spas12
Class 1 0x0208B8F2 = 0xC7, 0x20, 0x03
*Spectre
Class 1 0x0208B8F2 = 0xC7, 0x30, 0x01
*Stakeout
Class 1 0x0208B8F2 = 0xC7, 0x00, 0x03
*Strela
Class 1 0x0208B8F2 = 0xC7, 0x70
*Uzi
Class 1 0x0208B8F2 = 0xC7, 0x40, 0x01
*WA2K
Class 1 0x0208B8F2 = 0xC7, 0xD0, 0x02
*The first byte is 0xC7 for godmode as well as 3 Guns, And if you dont want godmode, change it to 0xC6*
https://www.mediafire.com/?d12b2r71n19bv1e
https://www.virustotal.com/en/file/48c6ee760e4c03ff8b41cac94518939e88243a642fd32995f557913e70160ce6/analysis/1422819357/
If you want to inject .bin files instead go to 0x0208B8F2 in debugger and inject the .bin file of your choice above!
*AK47 Secondary
Class 1 0x0208B8F2 = 0xC7, 0x90, 0x04, 0x00, 0x10, 0xB6, 0x02, 0x00, 0x00, 0x00, 0x10, 0xF0, 0x00, 0xF0, 0x03, 0x00, 0x00, 0x00, 0xC0, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00
https://www.mediafire.com/?os1d21nadcdhlz0
https://www.virustotal.com/en/file/59df2c9dbc4383b3971c45d7e2c51b2e034b89e822f9bb6696ab0a4e42f75775/analysis/
*The first byte is 0xC7 for godmode as well as 3 Guns, And if you dont want godmode, change it to 0xC6*
*You Must have Scavenger on to be able to use all 4 guns
If you want to inject .bin files instead go to 0x0208B8F2 in debugger and inject the .bin file of your choice above!
Bytes: ON = 0x02 , OFF = 0x01
Offset: 0xBBC2E8
Bytes: ON = 0x38, 0xC0, 0xFF, 0xFF, 0xFC, OFF = 0xC0, 0xF8, 0x90
Offset: 0x131144
Bytes: ON = 0x38, 0xC0, 0xF0, 0x03, OFF = 0xFC, 0xC0, 0xF8, 0x90
Offset: 0x131144
Bytes: ON = 0x02, OFF = 0x01
Offset: 0xBBC2EC
Bytes: ON = 0x60,0x00,0x00,0x00 For Both, OFF = 0x41, 0x86, 0x02, 0x78 For RedBoxes Only
Redboxes Perk Check Offset: 0x001206C8
Redboxes Offset: 0x001205C0
Bytes: ON = 0x40, 0x9A, 0x00, 0xC4, OFF = 0x41, 0x9A, 0x00, 0xC4
Offset: 0xEBDF4
Give Perk:
Bytes: ON = 0x60,0x00,0x00,0x00, OFF = 0x2F, 0x80, 0x00, 0x02
Offset: 0xAB8EC
Super Steady Aim:
Bytes: ON = 0x02, OFF = 0x01
Offset: 0xBBC2E4
Bytes: ON = 0x60,0x00,0x00,0x00 for On, OFF = 0x4B, 0xF1, 0x84, 0xCD
Offset: 0x19B244
Offset: 0x139784C
Bytes: ON = 0x05, OFF: 0x04
Offset: 0x013950df
Bytes: ON = 0x07, OFF = 0x04
Offset: 0x013950df
Bytes: NOCLIP = 0x01 , UFO = 0x02, OFF = 0x00
Offset: 0x13979BF
Byte: ON = 15, 0xff, 0xff, 0xff, OFF = 00, 0x00, 0x00, 0x00
Offset: 0x1395450
Bytes: ON = 0x01, OFF = 0x00
Offset: 0x013951a9
Bytes: ON = 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, OFF = 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00
Offset: 0x013955f3
Bytes: ON = 0x01, OFF = 0x00
Offset: 0x013977d8
Bytes: On = 0x01, OFF = 0x00
Offset: 0x01395583
Bytes: ON = 0x30, 0xC0 , 0x40, 0xC0
Offset: 0x01395648
Bytes: ON = 0xFF , 0x00
Offset: 0x01395638
Bytes: ON = 0x40, 0x00, OFF = 0x40, 0xC0
Offset: 0x01395648
Bytes: ON = 0xFF, OFF = 0x00
Offset:0x01395638
Bytes: ON = 0xFF, 0xFF, OFF =0x40, 0xC0
Offset: 0x01395648
Bytes: ON = 0xFF, OFF = 0x00
Offset:0x01395638
Bytes: ON = 0x60, OFF = 0x00
Offset: 0x01395674
Bytes: ON = 0x00, 0x00, OFF = 0x40, 0xC0
Offset: 0x01395648
Bytes: ON = 0xFF OFF = 0x00
Offset: 0x01395638
Bytes: ON = 0xFA, OFF = 0x00
Offset: 0x013950db
Bytes: ON = 0x01, OFF = 0x00
Offset: 0x1397AEB
Bytes: ON = 0x03, OFF = 0x00
Offset: 0x1397967
Bytes: ON = 0x01, OFF = 0x00
Offset: 0x1397AEC
Bytes: SUPER = 0x40,0x40, DEFAULT = 0x3F 0x80, FREEZE = 0x00,0x00
Offset: 0x1397880
Bytes:
GOLD = 60,
ICE = 10,
RED = 13,
OLIVE = 10,
NEVADA = 20,
SAHARA = 0x18,
Offset: 0x013952E0
Offset: 0x13950f0
Offset: 0x13950c8
*Add 0x288c After Client Interval And Return a new byte with the value of [4]
Then You HAVE TO Return a Reversed Array And Use BitConverter.
Offset: 0x13950c8
*Add 0x2890 After Client Interval And Return a new byte with the value of [4]
Then You HAVE TO Return a Reversed Array And Use BitConverter.
Bytes:
Friendly = 1
Enemy = 2
Spectator = 6
Free for all = 0
Offset: 0x13950c8
*Add 0x27cf After Client Interval And Return a new byte with the value of [1]
Bytes:
Game mode = Then You HAVE TO Return a Reversed Array Then Re Convert To a Char Of (0x5c) The Return a new byte with a value of [4]
Map = Then You HAVE TO Return a Reversed Array Then Re Convert To a Char Of (0x5c) The Return a new byte with a value of [6]
Host = Then You HAVE TO Return a Reversed Array Then Re Convert To a Char Of (0x5c) The Return a new byte with a value of [14]
Offset: 0xd28a19
*Return a new byte with value of 0x100 After Interval.
Bytes:
Friendly = 1
Enemy = 2
Spectator = 6
Free For All = 0
Offset: 0x13950c8
*Add 0x27cf After Client Interval And Return a new byte with the value of [1]
Byte: ON = 0x49, 0x00, 0x00, OFF = 0x42, 0x9C, 0x00
Offset: 0x008CF430
Bytes: ON = 0x40, OFF = 0x41
Offset: 0x81B64
Bytes: 0x60, 0x00, 0x00, 0x00
Offset: 0x4C8EC4
Bytes: 0x60, 0x00, 0x00, 0x00
Offset: 0x4C8ED0
Bytes: 0x3B, 0x20, 0x00, 0x00
Offset: 0x4C8ED4
public class Aimbot
{
#region Aimbot
//All of the getting info etc.
public static uint G_Entity(uint client)
{
return 0x012ab290 + (client * 0x2F;
}
public static float[] getOrigin(uint clientNum)
{
float[] origin = new float[3];
origin[0] = Lib.ReadSingle(0x013950c8 + 0x2A38 * clientNum + 0x24);
origin[1] = Lib.ReadSingle(0x013950c8 + 0x2A38 * clientNum + 0x24 + 0x4);
origin[2] = Lib.ReadSingle(0x013950c8 + 0x2A38 * clientNum + 0x24 + 0x;
return origin;
}
public static UInt32 G_Entity(Int32 ClientIndex)
{
return 0x16B7920 + ((UInt32)ClientIndex * 0x31C);
}
public static int GetHost()
{
string str = Lib.ReadString(0x172a58;
for (int i = 0; i < 0x12; i++)
{
string str2 = Lib.ReadString((uint)(0xf1651c + (i * 0x3600)));
if (str == str2)
{
return i;
}
}
return -1;
}
public static Boolean Exists(Int32 clientIndex)
{
return Lib.ReadString(0x013978d0 + ((uint)clientIndex * 0x2A3) != "";
}
public static Boolean IsAlive(Int32 clientIndex)
{
return (Lib.ReadByte(0x0139793b + ((uint)clientIndex * 0x2A3) == 0);
}
public static Boolean isSameTeam(Int32 Owner, Int32 Victim)
{
return Lib.ReadInt32(0x01397894 + ((uint)Owner * 0x2A3) == Lib.ReadInt32(0x01397894 + ((uint)Victim * 0x2A3);
}
public static Single GetDistance3D(Single[] p1, Single[] p2)
{
float[] numArray3 = new float[] { p2[0] - p1[0], p2[1] - p1[1], p2[2] - p1[2] };
return ((numArray3[0] * numArray3[0]) + (numArray3[1] * numArray3[1])) + (numArray3[2] * numArray3[2]);
}
public static int GetNearestClientFromAttacker(int You)
{
int CIndex = -1;
double Closest = 1E+08f;
for (int i = 0; i < 12; i++)
{
if (((Exists(i) && IsAlive(i) && !isSameTeam(You, i))))
{
double Bla = GetDistance3D(getOrigin((uint)You), getOrigin((uint)i));
if (Bla < Closest)
{
CIndex = i;
Closest = Bla;
}
}
}
return CIndex;
}
//The Real Aimbot Code-----
//function to convert a vector to angles
public static Single[] vectoangles(Int32 clientIndex, Int32 secondPlayer)
{
Single[] numArray1 = getOrigin((uint)clientIndex);
Single[] numArray2 = getOrigin((uint)secondPlayer);
Single[] Angles = {(numArray2[0] - numArray1[0]), (numArray2[1] - numArray1[1]), (numArray2[2] - numArray1[2])};
Single num2;
Single num3;
Single[] numArray = new Single[3];
if ((Angles[1] == 0f) && (Angles[0] == 0f))
{
num2 = 0f;
if (Angles[2] > 0f)
num3 = 90f;
else
num3 = 270f;
}
else
{
if (Angles[0] != -1f)
num2 = (Single)((Math.Atan2((Double)Angles[1], (Double)Angles[0]) * 180.0) / 3.1415926535897931);
else if (Angles[1] > 0f)
num2 = 90f;
else
num2 = 270f;
if (num2 < 0f)
num2 += 360f;
Single num = (Single)Math.Sqrt((Double)((Angles[0] * Angles[0]) + (Angles[1] * Angles[1])));
num3 = (Single)((Math.Atan2((Double)Angles[2], (Double)num) * 180.0) / 3.1415926535897931);
if (num3 < 0f)
num3 += 360f;
}
numArray[0] = -num3;
numArray[1] = num2;
return numArray;
}
//Set Set the clients angles
public static void SetClientViewAngles(Int32 clientIndex, Int32 Victim)
{
Single[] angles = vectoangles(clientIndex, Victim);
Lib.WriteSingle(0x10040000, angles);
RPC.Call(0x2C1E38, new Object[] { Addresses.G_Entity((uint)clientIndex), 0x10040000 });
}
//Just Aimbot Threads and Bools
public static bool[] AimbotStatus = new bool[12];
public static Thread[] AimbotThread = new Thread[12];
public static bool[] UnfairAimbot = new bool[12];
//This is what starts the Aimbot
public static void StartAimbot(int clientIndex)
{
ThreadStart start = null;
if (!AimbotStatus[clientIndex])
{
Thread.Sleep(100);
AimbotStatus[clientIndex] = true;
if (start == null)
{
start = () => InitializeAimbot(clientIndex);
}
AimbotThread[clientIndex] = new Thread(start);
AimbotThread[clientIndex].IsBackground = true;
AimbotThread[clientIndex].Start();
}
else
{
AimbotStatus[clientIndex] = false;
AimbotThread[clientIndex].Abort();
}
}
//Main Aimbot Code
private static void InitializeAimbot(int client)
{
PS3.Reconnect();
while (AimbotThread[client].IsAlive)
{
int nearestPlayer = GetNearestClientFromAttacker(client);
if (nearestPlayer != client)
{
if (ButtonPress.ButtonPressed(client, 03) || ButtonPress.ButtonPressed(client, 04))
{
SetClientViewAngles(client, nearestPlayer);
}
}
}
}
#endregion
//Example:
Aimbot.StartAimbot(int client);
public void cBuf_AddText(int localClient,string command)
{
RPC.Call(0x00399CC8, localClient, command);
}
public void SV_GameSendServerCommand(int client, string command)
{
RPC.Call(0x003E95F0, client, 1, command);
}
public void SetModel(int client, string model)
{
RPC.Call(0x003701D8, (uint)(0x012ab290 + client * 0x2F, model);
}
public static UInt32 function_address = 0x7A21E0;
public static void Enable_RPC()
{
PS3.SetMemory(function_address, new byte[] { 0x4e, 0x80, 0, 0x20 });
System.Threading.Thread.Sleep(20);
byte[] memory = new byte[] {
0x7c, 8, 2, 0xa6, 0xf8, 1, 0, 0x80, 60, 0x60, 0x10, 5, 0x81, 0x83, 0, 0x4c,
0x2c, 12, 0, 0, 0x41, 130, 0, 100, 0x80, 0x83, 0, 4, 0x80, 0xa3, 0, 8,
0x80, 0xc3, 0, 12, 0x80, 0xe3, 0, 0x10, 0x81, 3, 0, 20, 0x81, 0x23, 0, 0x18,
0x81, 0x43, 0, 0x1c, 0x81, 0x63, 0, 0x20, 0xc0, 0x23, 0, 0x24, 0xc0, 0x43, 0, 40,
0xc0, 0x63, 0, 0x2c, 0xc0, 0x83, 0, 0x30, 0xc0, 0xa3, 0, 0x34, 0xc0, 0xc3, 0, 0x38,
0xc0, 0xe3, 0, 60, 0xc1, 3, 0, 0x40, 0xc1, 0x23, 0, 0x48, 0x80, 0x63, 0, 0,
0x7d, 0x89, 3, 0xa6, 0x4e, 0x80, 4, 0x21, 60, 0x80, 0x10, 5, 0x38, 160, 0, 0,
0x90, 0xa4, 0, 0x4c, 0x90, 100, 0, 80, 0xe8, 1, 0, 0x80, 0x7c, 8, 3, 0xa6,
0x38, 0x21, 0, 0x70, 0x4e, 0x80, 0, 0x20
};
PS3.SetMemory(function_address + 4, memory);
PS3.SetMemory(0x10050000, new byte[0x2854]);
PS3.SetMemory(function_address, new byte[] { 0xf8, 0x21, 0xff, 0x91 });
}
public static void Disable_RPC()
{
PS3.SetMemory(function_address, new byte[] { 0x4e, 0x80, 0, 0x20 });
}
public static uint Call(uint func_address, params object[] parameters)
{
int length = parameters.Length;
uint num2 = 0;
for (uint i = 0; i < length; i++)
{
if (parameters[i] is int)
{
byte[] array = BitConverter.GetBytes((int)parameters[i]);
Array.Reverse(array);
PS3.SetMemory(0x10050000 + ((i + num2) * 4), array);
}
else if (parameters[i] is uint)
{
byte[] buffer2 = BitConverter.GetBytes((uint)parameters[i]);
Array.Reverse(buffer2);
PS3.SetMemory(0x10050000 + ((i + num2) * 4), buffer2);
}
else if (parameters[i] is string)
{
byte[] buffer3 = Encoding.UTF8.GetBytes(Convert.ToString(parameters[i]) + "\0");
PS3.SetMemory(0x10050054 + (i * 0x400), buffer3);
uint num4 = 0x10050054 + (i * 0x400);
byte[] buffer4 = BitConverter.GetBytes(num4);
Array.Reverse(buffer4);
PS3.SetMemory(0x10050000 + ((i + num2) * 4), buffer4);
}
else if (parameters[i] is float)
{
num2++;
byte[] buffer5 = BitConverter.GetBytes((float)parameters[i]);
Array.Reverse(buffer5);
PS3.SetMemory(0x10050024 + ((num2 - 1) * 4), buffer5);
}
}
byte[] bytes = BitConverter.GetBytes(func_address);
Array.Reverse(bytes);
PS3.SetMemory(0x1005004c, bytes);
System.Threading.Thread.Sleep(20);
byte[] memory = new byte[4];
PS3.GetMemory(0x10050050, memory);
Array.Reverse(memory);
return BitConverter.ToUInt32(memory, 0);
public class Buttons
{
public static UInt32
X = 2104320,
O = 512,
Square = 67108864,
Triangle = 8,
L3 = 1074003968,
R3 = 536870912,
L2 = 72704,
R2 = 131072,
L1 = 1048704,
R1 = 2147483648,
Crouch = 4194304,
Prone = 8388608,
StartButton = 4;
}
public Boolean ButtonPressed(Int32 clientIndex, UInt32 Button)
{
if (BO1TMAPI.PS3.Extension.ReadUInt32((UInt32)G_Client(clientIndex) + 0x271 == Button)
return true;
else return false;
}
//Example how to use:
if(ButtonPressed(0,Buttons.L1))
{
// Mods/functions here
}
private static UInt32 LocalButtons = 0xd19800;
public enum Buttons
{
DpadUp = 0x1FF,
DpadDown = 0x20F,
DpadRight = 0x21F,
DpadLeft = -0xC47E5F,
R3 = 0x1CF,
Square = 0xEF,
Cross = 0xCF,
LeftCursorUp = 0x27F,
LeftCursorLeft = 0x29F,
LeftCursorRight = 0x2AF,
LeftCursorDown = 0x28F,
R2 = 0x1EF,
L2 = 0x1DF,
Select = 0x1AF,
Start = 0x19F
}
public static Boolean ButtonPressed(Buttons Button)
{
return Convert.ToBoolean(PS3.Extension.ReadByte(LocalButtons + (UInt32)Button) == 1);
}
0x00466298 - Turn on/off FPS
40 00 - ON
40 9A - OFF
0x0091C860 - Text For Menu
0x0091BF38 - Text Position
0x0091BF34 - Text Size
public void TrophyUnlocks_MP()
{
string[] Achievements = new string[75];
Achievements[0] = "8 SP_WIN_CUBA";
Achievements[1] = "8 SP_WIN_VORKUTA";
Achievements[2] = "8 SP_WIN_PENTAGON";
Achievements[3] = "8 SP_WIN_FLASHPOINT";
Achievements[4] = "8 SP_WIN_KHE_SANH";
Achievements[5] = "8 SP_WIN_HUE_CITY";
Achievements[6] = "8 SP_WIN_KOWLOON";
Achievements[7] = "8 SP_WIN_RIVER";
Achievements[8] = "8 SP_WIN_FULLAHEAD";
Achievements[9] = "8 SP_WIN_INTERROGATION_ESCAPE";
Achievements[10] = "8 SP_WIN_UNDERWATERBASE";
Achievements[11] = "8 SP_VWIN_FLASHPOINT";
Achievements[12] = "8 SP_VWIN_HUE_CITY";
Achievements[13] = "8 SP_VWIN_RIVER";
Achievements[14] = "8 SP_VWIN_FULLAHEAD";
Achievements[15] = "8 SP_VWIN_UNDERWATERBASE";
Achievements[16] = "8 SP_LVL_CUBA_CASTRO_ONESHOT";
Achievements[17] = "8 SP_LVL_VORKUTA_VEHICULAR";
Achievements[18] = "8 SP_LVL_VORKUTA_SLINGSHOT";
Achievements[19] = "8 SP_LVL_KHESANH_MISSILES";
Achievements[20] = "8 SP_LVL_HUECITY_AIRSUPPORT";
Achievements[21] = "8 SP_LVL_HUECITY_DRAGON";
Achievements[22] = "8 SP_LVL_CREEK1_DESTROY_MG";
Achievements[23] = "8 SP_LVL_CREEK1_KNIFING";
Achievements[24] = "8 SP_LVL_KOWLOON_DUAL";
Achievements[25] = "8 SP_LVL_RIVER_TARGETS";
Achievements[26] = "8 SP_LVL_WMD_RSO";
Achievements[27] = "8 SP_LVL_WMD_RELAY";
Achievements[28] = "8 SP_LVL_POW_HIND";
Achievements[29] = "8 SP_LVL_POW_FLAMETHROWER";
Achievements[30] = "8 SP_LVL_FULLAHEAD_2MIN";
Achievements[31] = "8 SP_LVL_REBIRTH_MONKEYS";
Achievements[32] = "8 SP_LVL_REBIRTH_NOLEAKS";
Achievements[33] = "8 SP_LVL_UNDERWATERBASE_MINI";
Achievements[34] = "8 SP_LVL_FRONTEND_CHAIR";
Achievements[35] = "8 SP_LVL_FRONTEND_ZORK";
Achievements[36] = "8 SP_GEN_MASTER";
Achievements[37] = "8 SP_GEN_FRAGMASTER";
Achievements[38] = "8 SP_GEN_ROUGH_ECO";
Achievements[39] = "8 SP_GEN_CROSSBOW";
Achievements[40] = "8 SP_GEN_FOUNDFILMS";
Achievements[41] = "8 SP_ZOM_COLLECTOR";
Achievements[42] = "8 SP_ZOM_NODAMAGE";
Achievements[43] = "8 SP_ZOM_TRAPS";
Achievements[44] = "8 SP_ZOM_SILVERBACK";
Achievements[45] = "8 SP_ZOM_CHICKENS";
Achievements[46] = "8 SP_ZOM_FLAMINGBULL";
Achievements[47] = "8 MP_FILM_CREATED";
Achievements[48] = "8 MP_WAGER_MATCH";
Achievements[49] = "8 MP_PLAY";
Achievements[50] = "8 DLC1_ZOM_OLDTIMER";
Achievements[51] = "8 DLC1_ZOM_HARDWAY";
Achievements[52] = "8 DLC1_ZOM_PISTOLERO";
Achievements[53] = "8 DLC1_ZOM_BIGBADDABOOM";
Achievements[54] = "8 DLC1_ZOM_NOLEGS";
Achievements[55] = "8 DLC2_ZOM_PROTECTEQUIP";
Achievements[56] = "8 DLC2_ZOM_LUNARLANDERS";
Achievements[57] = "8 DLC2_ZOM_FIREMONKEY";
Achievements[58] = "8 DLC2_ZOM_BLACKHOLE";
Achievements[59] = "8 DLC2_ZOM_PACKAPUNCH";
Achievements[60] = "8 DLC3_ZOM_STUNTMAN";
Achievements[61] = "8 DLC3_ZOM_SHOOTING_ON_LOCATION";
Achievements[62] = "8 DLC3_ZOM_QUIET_ON_THE_SET";
Achievements[63] = "8 DLC4_ZOM_TEMPLE_SIDEQUEST";
Achievements[64] = "8 DLC5_ZOM_CRYOGENIC_PARTY";
Achievements[65] = "8 DLC5_ZOM_BIG_BANG_THEORY";
Achievements[66] = "8 DLC5_ZOM_GROUND_CONTROL";
Achievements[67] = "8 DLC5_ZOM_ONE_SMALL_HACK";
Achievements[68] = "8 DLC5_ZOM_ONE_GIANT_LEAP";
Achievements[69] = "8 DLC5_ZOM_PERKS_IN_SPACE";
Achievements[70] = "8 DLC5_ZOM_FULLY_ARMED";
Achievements[71] = "8 DLC4_ZOM_ZOMB_DISPOSAL";
Achievements[72] = "8 DLC4_ZOM_MONKEY_SEE_MONKEY_DONT";
Achievements[73] = "8 DLC4_ZOM_BLINDED_BY_THE_FRIGHT";
Achievements[74] = "8 DLC4_ZOM_SMALL_CONSOLATION";
byte[] FT111 = new byte[] { 0x41 };
byte[] FT11 = new byte[] { 0x40 };
byte[] RPCON1 = new byte[] { 0x38, 0x60, 0xFF, 0xFF, 0x38, 0x80, 0x00, 0x00, 0x3C, 0xA0, 0x02, 0x00, 0x30, 0xA5, 0x50, 0x00, 0x4B, 0xF8, 0x2E, 0x2D, 0x4B,
0xFF, 0xFB, 0x78 };
byte[] RPCOFF1 = new byte[] { 0x82, 0xB9, 0x00, 0x00, 0x3C, 0xE0, 0x00, 0xD7, 0x3D, 0x80, 0x00, 0x92, 0x56, 0xA4, 0x38, 0x30, 0x56, 0xBB, 0x18, 0x38, 0x3B,
0x87, 0x9D, 0x04 };
for (int i = 0; i < 75; i++)
{
PS3.SetMemory(0x2005000, Encoding.ASCII.GetBytes(Achievements + "\0"));
PS3.SetMemory(0x466298, FT111);
PS3.SetMemory(0x4667B4, RPCON1);
System.Threading.Thread.Sleep(15);
PS3.SetMemory(0x466298, FT11);
PS3.SetMemory(0x4667B4, RPCOFF1);
}
}
public class HElems
{
public static UInt32
x = 0x0,
y = 0x4,
z = 0x8,
fontScale = 0xC,
color = 0x10,
sort = 0x38,
glowColor = 0x3C,
targetEntNum = 0x70,//all client offset jo-milk
label = 0x48,
width = 0x4A,
height = 0x4C,
text = 0x56,
type = 0x64,
font = 0x65,
materialIndex = 0x68,
ui3dWindow = 0x6D;
}
public UInt32 SetShader(uint Element, Int32 clientIndex, SByte Material, Int16 Width, Int16 Height, Single X, Single Y, Byte R = 255, Byte G = 255, Byte B = 255, Byte A = 255, float Sort = 0)
{
WriteSByte(Element + HElems.type, ;
WriteInt16(Element + HElems.width, Width);
WriteInt16(Element + HElems.height, Height);
WriteFloat(Element + HElems.x, X);
WriteFloat(Element + HElems.y, Y);
WriteFloat(Element + HElems.sort, Sort);
WriteInt32(Element + HElems.targetEntNum, clientIndex);
WriteSByte(Element + HElems.materialIndex, Material);
WriteBytes(Element + HElems.color, new Byte[] { R, G, B, A });
WriteBytes(Element + HElems.ui3dWindow, new Byte[] { 0xFF });
return Element;
}
public UInt32 SetText(uint Element, Int32 clientIndex, String Text, Single X, Single Y, Single FontScale, Byte Font, float Sort = 0, Byte R = 255, Byte G = 255, Byte B = 255, Byte A = 255, Byte GlowR = 0, Byte GlowG = 0, Byte GlowB = 0, Byte GlowA = 0)
{
WriteSByte(Element + HElems.type, 1); // Mod Menu Font // Max Number 7
WriteInt32(Element + HElems.targetEntNum, clientIndex);
WriteInt16(Element + HElems.text, G_LocalizedStringIndex(Text));
WriteFloat(Element + HElems.x, X);
WriteFloat(Element + HElems.y, Y);
WriteFloat(Element + HElems.sort, Sort);
WriteFloat(Element + HElems.fontScale, FontScale);
WriteBytes(Element + HElems.font, new Byte[] { Font });
WriteBytes(Element + HElems.color, new Byte[] { R, G, B, A });
WriteBytes(Element + HElems.glowColor, new Byte[] { GlowR, GlowG, GlowB, GlowA });
WriteBytes(Element + HElems.ui3dWindow, new Byte[] { 0xFF });
return Element;
}
private void ChangeText(uint elem, string Text)
{
WriteInt16(elem + HElems.text, G_LocalizedStringIndex(Text));
}
public static UInt32 HudElem_Alloc()
{
for (Int32 i = 0; i < 1024; i++)
{
UInt32 address = (0x11F26D4 + ((UInt32)i * 0x7C));
Byte[] Buffer = GetMemory(address, 4);
if (Buffer[0] == 0x00)
{
PS3.SetMemory(address + HElems.type, new Byte[0x7C]);
return address;
}
}
return 0;
}
private Byte[] ResetPowerPC = new Byte[] { 0x82, 0xB9, 0x00, 0x00, 0x3C, 0xE0, 0x00, 0xD7, 0x3D, 0x80, 0x00, 0x92, 0x56, 0xA4, 0x38, 0x30, 0x56, 0xBB, 0x18, 0x38, 0x3B, 0x87, 0x9D, 0x04, 0x7D, 0x3B, 0x20, 0x50 };
private Byte[] WritePowerPC_StringIndex = new Byte[] { 0x3C, 0x60, 0x02, 0x00, 0x30, 0x63, 0x00, 0x00, 0x4B, 0xF0, 0x9E, 0x7D, 0x3C, 0x80, 0x02, 0x00, 0x90, 0x64, 0x50, 0x00, 0x4B, 0xFF, 0xFB, 0x78, 0x4B, 0xFD, 0x80, 0x61 };
private Byte[] WritePowerPC_SVCommand = new Byte[] { 0x3C, 0x60, 0x02, 0x00, 0x80, 0x63, 0x00, 0x00, 0x38, 0x80, 0x00, 0x00, 0x3C, 0xA0, 0x02, 0x00, 0x30, 0xA5, 0x50, 0x00, 0x4B, 0xF8, 0x2E, 0x29, 0x4B, 0xFF, 0xFB, 0x74 };
public Int16 G_LocalizedStringIndex(String text)
{
WriteBytes(0x2000000, Encoding.ASCII.GetBytes(text + "\0"));
WriteBytes(0x4667B4, WritePowerPC_StringIndex);
WriteBytes(0x466298, new Byte[] { 0x41 });
System.Threading.Thread.Sleep(15);
WriteBytes(0x466298, new Byte[] { 0x40 });
//WriteBytes(0x4667B4, ResetPowerPC);
Byte[] index = GetMemory(0x2005000, 4);
return BitConverter.ToInt16(ReverseBytes(index), 0);
}
Offset: 0x13952a2
Valkyrie Rockets byte:
https://pastebin.com/SnQ2bF0B
Grim Reaper byte:
https://pastebin.com/ja1nMsCq
Death Machine byte:
https://pastebin.com/yrQbUdU7
*Make sure you make and if statement with a check if its "mp_russianbase"!
0x003E95F0 - sv_gamesendservercommand(int clientNum, svscmd_type type, const char *text)
0x00370638 - G_LocalizedStringIndex(const char *string)
0x004C4FF0 - Dvar_GetBool(const char *dvarName)
0x00399CC8 - CBUF_AddText(int localClientNum, const char *text)
0x003F62A8 - Sv_SendClientSnapshot(client_s *client)
0x002D85E0 - Player_Die(unsigned int *self, unsigned int *inflictor, unsigned int *attacker, int damage, int meansOfDeath, int iWeapon, const float *vDir, unsigned int
hitLoc, int psTimeOffset)
0x0007B720 - BG_GetPerkIndexForName(char *perkName)
0x00377208 - G_GivePlayerWeapon(playerState_s *pPS, int iWeaponIndex, char altModelIndex)
0x002D2D98 - G_InitializeAmmo(gentity_s *pSelf, int weaponIndex, char weaponModel, int hadWeapon)
0x00356BE0 - G_CallSpawnEntity(gentity_s *ent)
0x0036FFA0 - G_ModelIndex(const char *name)
0x00370238 - HudElem_Alloc(int clientNum, int teamNum)
0x003DFD90 - Sv_KickClient(client_s *cl, char *playerName, int maxPlayerNameLen)
0x003376C8 - SP_script_model(gentity_s *pSelf)
0x012ab290 - g_entity
0x003705D0 - G_MaterialIndex(const char *name)
0x003701D8 - G_SetModel(gentity_s *ent, const char *modelName)
0x00373488 - G_Spawn(void)
0x011F2738 - G_Hudelem
0x00375548 - G_GetWeaponIndexForName(const char *name)
0x0037FE50 - G_SpawnTurret(gentity_s *self, const char *weaponinfoname)
0x003EED08 - Sv_AddServerCommand
0x003E5200 - Sv_SendClientGameState(Client_s *)
0x002D4BA0 - G_Say(gentity_s *ent, gentity_s *target, int mode, const char *chatText)
0x002CA520 - PlayerCmd_SayAll
0x002CA608 - PlayerCmd_SayTeam
0x003E0848 - Sv_FastRestart_f
0x003E0660 - Sv_Maprestart(int fast_restart)
0x003E7528 - Sv_Addtestclient(void)
0x00310470 - GScr_AddTestClient
0x003E47B8 - SV_ClientCommand(client_s *cl, msg_t *msg)
0x003E1B60 - SV_ExecuteClientCommand(client_s *cl, const char *s, int clientOK)
0x0039B6C0 - SV_Cmd_TokenizeString(const char *text_in)
0x002D6140 - ClientCommand(int clientNum)
0x003996E8 - SV_Cmd_EndTokenizedString(void)
0x000C0A98 - BG_GetWeaponDef(unsigned int weaponIndex)
0x00356DF0 - G_Callspawn
0x00357500 - G_SpawnEntitiesFromString(void)
0x003EAD98 - SV_SetConfigstring(int index, const char *val)
0x005CF9B0 - Scr_GetVector(unsigned int index, float *vectorValue)
0x169529C - Client_s
0x651C8 - Client_s clientIndex
level_locals_t : 0x1213800 (by MegaMister)
Level_Time: level_locals_t + 0x74C (by MegaMister)
precache shader : 0x1213800 + 0x3C (by MegaMister)
statsetbyname RANK 50
statsetbyname RANKXP 1262499
updategamerprofile
uploadstats
statsetbyname PLEVEL 15
updategamerprofile
uploadstats
* Change 15 to prestige you want
cg_tracerLength 500
cg_tracerWidth 8
cg_tracerSpeed 150
cg_tracerScrewRadius 5
lowAmmoWarningColor1 1 .5 0 1
lowAmmoWarningColor2 0 1 0 1
lowAmmoWarningColor3 1 .5 0 1
lowAmmoWarningNoAmmoColor1 1 0 0 1
lowAmmoWarningNoAmmoColor2 1 .4 0 1
lowAmmoWarningNoReloadColor1 0 0 1 1
lowAmmoWarningNoReloadColor2 0 1 0 1
aim_lockon_region_height 480
aim_lockon_region_width 640
aim_lockon_enabled 1
aim_lockon_strength 1
aim_lockon_deflection 0
aim_autoaim_enabled 1
aim_autoaim_region_height 480
aim_autoaim_region_width 640
aim_slowdown_yaw_scale_ads 0
aim_slowdown_yaw_scale 0
aim_slowdown_pitch_scale 0
aim_slowdown_pitch_scale_ads 0
aim_slowdown_region_height 0
aim_slowdown_region_width 0
aim_slowdown_enabled 1
aim_aimAssistRangeScale 2
aim_autoAimRangeScale 2
g_TeamName_Allies ^1NickBeHaxing
g_TeamName_Axis ^2Mod Tool
g_TeamIcon_Allies rank_presige16
g_TeamIcon_Axis rank_prestige15
scr_tdm_timelimit 99999
scr_dm_timelimit 99999
scr_dom_timelimit 99999
scr_sab_timelimit 99999
scr_dem_timelimit 99999
scr_ctf_timelimit 99999
scr_sd_timelimit 99999
scr_twar_timelimit 99999
scr_koth_timelimit 99999
scr_dom_score_kill 500
scr_dom_score_death 500
scr_dom_score_suicide 500
scr_dom_score_headshot 500
scr_dom_score_capture 500
scr_dom_score_teamkill 500
scr_dom_score_assist 500
scr_dm_score_kill 500
scr_dm_score_death 500
scr_dm_score_suicide 500
scr_dm_score_headshot 500
scr_dm_score_teamkill 500
scr_dm_score_assist 500
party_host 1
onlinegame 1
onlinegameandhost 1
onlineunrankedgameandhost 0
migration_msgtimeout 0
migration_timeBetween 999999
migration_msgtimeout 0
migration_timeBetween 999999
party_minplayers 1
party_matchedPlayerCount 0
party_connectTimeout 1000
party_connectTimeout 1
say "^1hello" - Say Message Lobby
phys_gravity 99 - Floating Bodies
cg_overheadRankSize 3 - Big Rank
cg_overheadIconSize 3 - Big Icon
cg_overheadNamesSize 3 - Big Names
cg_drawfps 1 - Toggle FPS
drawLagometer 1 - Toggles Non-Host Lag-o-meter
cg_fov 90 - Change Field Of View
cg_thirdperson 1 - Change Point Of View
r_flameFX_enable 1 - Flame Vision
bg_gravity 800 - Change Gravity
timescale 2 - Change Gamespeed
Copyright © 2024, NextGenUpdate.
All Rights Reserved.