Post: [1.13] Black Ops - Offsets And Addresses Collection
Options
06-24-2014, 05:28 AM
#1
iNDMx
Do a barrel roll!
This thread made to help the people here insted of searching in the whole forum for offsets
I added all the offsets here toghetor
So Lets Start
Multiplayer
Stats
Name Offset: 0x02000934
Class Name Offset: 0x01c3896f (Class # 1-5) & 0x01c43cf4 (Class # 6-10)
COD Points Offset: 0x020942d1
Time Played Offset: 0x02094731
Total Wins Offset: 0x0209475d
Total Losses Offset: 0x020944dd
Prestige Offset: 0x020946dd
Rank Offset (score basically): 0x020946e5
Kills Offset: 0x02094429
Deaths Offset: 0x020942f5
Assists Offset: 0x02094291
Kill/Death Ratio In Weapons Offset: 0x02094425
Wins/Loss Ration In Career Offset: 0x02094761
Headshots Offset: 0x0209440d
Amount Spent In Contracts Offset: 0x020942dd
Contracts Purchased Offset: 0x020942e1
XP Award In Contracts Offset: 0x020942e5
Return On Investment Contracts Offset (This is also amount earned) : 0x020942d9
Games Played Offset: 0x020938b1
Wager Match Earnings Offset: 0x020944d9
Clients
Ammo
Bytes To Full Ammo | 0xFF
Primary Weapon Offset 1 : 0x013954CB
Primary Weapon Offset 2 : 0x01395453
Second Weapon Offsets 1 : 0x013954C3
Second Weapon Offsets 2 : 0x0139544B
Lethal Grenade : 0x013954D3
Tactecal Grenade : 0x013954DB
God Mod
0x0139786F | On : 0xFF 0xFF
Speed Player x2
0x01397881 | On : 0x40 0x40 | Off :0x3F 0x80
Camo
Offset : 0x013952E0
Bytes :
Gold - 0x3C
Ice - 0x0a
Red - 0x0d
Olive - 0x10
Neveda - 0x14
sahara - 0x18
Teleport
Offset : 0x13950f0
Addresses
G_Client
G_Client - 0x13950C8
G_Client Size - 0x2A38
Code:
//MP
0x7538E8 - R_AddCmdDrawText(const char *text, int maxChars, Font_s *font, float x, float y, float xScale, float yScale, float rotation, const float *color, int style)
0x753B78 - R_AddCmdDrawTextWithPopInEffects(const char *text, int maxChars, Font_s *font, float x, float y, float xScale, float yScale, float rotation, const float *color, int style, const float *glowColor, Material *fxMaterial, Material *fxMaterialGlow, int fxBirthTime, int fxLetterTime, int fxDecayStartTime, int fxDecayDuration)
0x753CD8 - R_AddCmdDrawTextWithRedactEffects(const char *text, int maxChars, Font_s *font, float x, float y, float xScale, float yScale, float rotation, const float *color, int style, const float *glowColor, Material *fxMaterial, Material *fxMaterialGlow, int fxBirthTime, int fxLetterTime, int fxDecayStartTime, int fxDecayDuration, int fxRedactDecayStartTime, int fxRedactDecayDuration)
0x754108 - R_AddCmdDrawTextWithEffects(const char *text, int maxChars, Font_s *font, float x, float y, float w, float xScale, float yScale, float rotation, const float *color, int style, const float *glowColor, Material *fxMaterial, Material *fxMaterialGlow, int fxBirthTime, int fxLetterTime, int fxDecayStartTime, int fxDecayDuration)
0x753E48 - R_AddCmdDrawTextWithCOD7TypeWriterEffects(const char *text, int maxChars, Font_s *font, float x, float y, float xScale, float yScale, float rotation, const float *color, int style, const float *glowColor, Material *fxMaterial, Material *fxMaterialGlow, int fxBirthTime, int fxLetterTime, int fxDecayStartTime, int fxDecayDuration)
0x751940 - R_AddCmdDrawStretchPic(float x, float y, float w, float h, float s0, float t0, float s1, float t1, const float *color, Material *material)
0x734350 - R_RegisterFont(const char *name, int imageTrack)
0x745440 - Material_Register(const char *name, int imageTrack)
0x113550 - CG_GameMessage(int localClientNum, const char *msg)
0x003E95F0 - sv_gamesendservercommand(int clientNum, svscmd_type type, const char *text)
0x00370638 - G_LocalizedStringIndex(const char *string)
0x004C4FF0 - Dvar_GetBool(const char *dvarName)
0x00399CC8 - CBUF_AddText(int localClientNum, const char *text)
0x003F62A8 - Sv_SendClientSnapshot(client_s *client)
0x002D85E0 - Player_Die(unsigned int *self, unsigned int *inflictor, unsigned int *attacker, int damage, int meansOfDeath, int iWeapon, const float *vDir, unsigned int hitLoc, int psTimeOffset)
0x0007B720 - BG_GetPerkIndexForName(char *perkName)
0x00377208 - G_GivePlayerWeapon(playerState_s *pPS, int iWeaponIndex, char altModelIndex)
0x002D2D98 - G_InitializeAmmo(gentity_s *pSelf, int weaponIndex, char weaponModel, int hadWeapon)
0x00356BE0 - G_CallSpawnEntity(gentity_s *ent)
0x0036FFA0 - G_ModelIndex(const char *name)
0x00370238 - HudElem_Alloc(int clientNum, int teamNum)
0x003DFD90 - Sv_KickClient(client_s *cl, char *playerName, int maxPlayerNameLen)
0x003376C8 - SP_script_model(gentity_s *pSelf)
0x012ab290 - g_entity
0x003705D0 - G_MaterialIndex(const char *name)
0x003701D8 - G_SetModel(gentity_s *ent, const char *modelName)
0x00373488 - G_Spawn(void)
0x011F2738 - G_Hudelem
0x00375548 - G_GetWeaponIndexForName(const char *name)
0x0037FE50 - G_SpawnTurret(gentity_s *self, const char *weaponinfoname)
0x003EED08 - Sv_AddServerCommand
0x003E5200 - Sv_SendClientGameState(Client_s *)
0x002D4BA0 - G_Say(gentity_s *ent, gentity_s *target, int mode, const char *chatText)
0x002CA520 - PlayerCmd_SayAll
0x002CA608 - PlayerCmd_SayTeam
0x003E0848 - Sv_FastRestart_f
0x003E0660 - Sv_Maprestart(int fast_restart)
0x003E7528 - Sv_Addtestclient(void)
0x00310470 - GScr_AddTestClient
0x003E47B8 - SV_ClientCommand(client_s *cl, msg_t *msg)
0x003E1B60 - SV_ExecuteClientCommand(client_s *cl, const char *s, int clientOK)
0x0039B6C0 - SV_Cmd_TokenizeString(const char *text_in)
0x002D6140 - ClientCommand(int clientNum)
0x003996E8 - SV_Cmd_EndTokenizedString(void)
0x000C0A98 - BG_GetWeaponDef(unsigned int weaponIndex)
0x00356DF0 - G_Callspawn
0x00357500 - G_SpawnEntitiesFromString(void)
0x003EAD98 - SV_SetConfigstring(int index, const char *val)
0x005CF9B0 - Scr_GetVector(unsigned int index, float *vectorValue)
FPS offsets
-MP-
0x00466298 - Turn on/off FPS
40 00 - ON
40 9A - OFF
0x0091C860 - Text For Menu
0x0091BF38 - Text Position
0x0091BF34 - Text Size
Remote procedure Call (RPC)
//Choco ghosts rpc port to bo1 mp by sc58
using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Threading.Tasks;
namespace BOIMPRPC
{
public class PS3
{
static uint processID;
private static uint GetProcessID()
{
uint[] ProcessIDs;
PS3_TMAPI.GetProcessList(0, out ProcessIDs);
return ProcessIDs[0];
}
public static void SetMemory(uint address, byte[] memory)
{
PS3_TMAPI.ProcessSetMemory(0, PS3_TMAPI.UnitType.PPU, processID, 0, address, memory);
}
public static byte[] GetMemory(uint address, int length)
{
byte[] bytes = new byte[length];
PS3_TMAPI.ProcessGetMemory(0, PS3_TMAPI.UnitType.PPU, processID, 0, address, ref bytes);
return bytes;
}
public static int Init()
{
processID = GetProcessID();
return RPC.Init();
}
}
public class RPC
{
static uint function_address;
public static int Init()
{
function_address = Get_func_address();
if (function_address == 0) return -1;
Enable_RPC();
return 0;
}
public static uint Get_func_address()
{
for (uint i = 0x7A21D4; i < 0x1000000; i += 4)
{
byte[] bytes = PS3.GetMemory(i, 
;
if (((bytes[0] == 0x4B) && (bytes[1] == 0xFF) && (bytes[2] == 0xBE) && (bytes[3] == 0x05) && (bytes[4] == 0x4B) && (bytes[5] == 0xFF) && (bytes[6] == 0xFC) && (bytes[7] == 0x9))
{
return i + 0xC;
}
}
return 0;
}
public static void Enable_RPC()
{
PS3.SetMemory(function_address, new byte[] { 0x4E, 0x80, 0x00, 0x20 });
System.Threading.Thread.Sleep(20);
byte[] func = new byte[] { 0x7C, 0x08, 0x02, 0xA6, 0xF8, 0x01, 0x00, 0x80, 0x3C, 0x60, 0x10, 0x05, 0x81, 0x83, 0x00, 0x4C, 0x2C, 0x0C, 0x00, 0x00, 0x41, 0x82, 0x00, 0x64, 0x80, 0x83, 0x00, 0x04, 0x80, 0xA3, 0x00, 0x08, 0x80, 0xC3, 0x00, 0x0C, 0x80, 0xE3, 0x00, 0x10, 0x81, 0x03, 0x00, 0x14, 0x81, 0x23, 0x00, 0x18, 0x81, 0x43, 0x00, 0x1C, 0x81, 0x63, 0x00, 0x20, 0xC0, 0x23, 0x00, 0x24, 0xC0, 0x43, 0x00, 0x28, 0xC0, 0x63, 0x00, 0x2C, 0xC0, 0x83, 0x00, 0x30, 0xC0, 0xA3, 0x00, 0x34, 0xC0, 0xC3, 0x00, 0x38, 0xC0, 0xE3, 0x00, 0x3C, 0xC1, 0x03, 0x00, 0x40, 0xC1, 0x23, 0x00, 0x48, 0x80, 0x63, 0x00, 0x00, 0x7D, 0x89, 0x03, 0xA6, 0x4E, 0x80, 0x04, 0x21, 0x3C, 0x80, 0x10, 0x05, 0x38, 0xA0, 0x00, 0x00, 0x90, 0xA4, 0x00, 0x4C, 0x80, 0x64, 0x00, 0x50, 0xE8, 0x01, 0x00, 0x80, 0x7C, 0x08, 0x03, 0xA6, 0x38, 0x21, 0x00, 0x70, 0x4E, 0x80, 0x00, 0x20, 0x60, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x60, 0x00, 0x00, 0x00 };
PS3.SetMemory(function_address + 0x4, func);
PS3.SetMemory(0x10050000, new byte[0x2854]);
PS3.SetMemory(function_address, new byte[] { 0xF8, 0x21, 0xFF, 0x91 });
}
public static int Call(uint func_address, params object[] parameters)
{
int num_params = parameters.Length;
uint num_floats = 0;
for (uint i = 0; i < num_params; i++)
{
if (parameters[i] is int)
{
byte[] val = BitConverter.GetBytes((int)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, val);
}
else if (parameters[i] is uint)
{
byte[] val = BitConverter.GetBytes((uint)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, val);
}
else if (parameters[i] is string)
{
byte[] str = Encoding.UTF8.GetBytes(Convert.ToString(parameters[i]) + "\0");
PS3.SetMemory(0x10050054 + i * 0x400, str);
uint addr = 0x10050054 + i * 0x400;
byte[] address = BitConverter.GetBytes(addr);
Array.Reverse(address);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, address);
}
else if (parameters[i] is float)
{
num_floats++;
byte[] val = BitConverter.GetBytes((float)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050024 + ((num_floats - 1) * 0x4), val);
}
}
byte[] fadd = BitConverter.GetBytes(func_address);
Array.Reverse(fadd);
PS3.SetMemory(0x1005004C, fadd);
System.Threading.Thread.Sleep(20);
byte[] ret = PS3.GetMemory(0x10050050, 4);
Array.Reverse(ret);
return BitConverter.ToInt32(ret, 0);
}
SV_GameSendServerCommand
Multiplayer : 0x009149E0
Commands :
v - Set Dvars
e - Killfeed Text
f - Killfeed Text 2
g - Center Text
h - Say CMD Text w/ out Playername
i - Say CMD Text
w - Server Disconnect w/ text (Kick)
a - Ammo/weap related
c - Center Text
W - flame effect
( weird checkerboard
B - weird stutter effect
H - team score
) - camera view - int
j - paper/material fx
n - frame skip
Examples:
v cg_fov 120 or v scr_dom_score_suicide -999999999
w "^2SC58"
c "^2Welcome to modded lobby"
Zombies
in Game Name :
0x11008B8
Client Size : 1D30
Unlimited Ammo
Gun 1 - 0x010FF138
Gun 2 - 0x010FF148
Gun 3 - 0x010FF160
Lethals- 0x010FF140
Tactical- 0x010FF168
Equipment- 0x010FF150
Noob Tubes- 0x010FF170
Bytes to get Unlimeted Ammo 0xFF 0xFF
Noclip
0x0110098F
Spec God Mod
0x010FED8F ON | 0x05 OFF |0x04
Speed
0x01100855
Map Name
Kino der toten - 0x013A5ADC
FIVE - 0x013A5B51
Dead Ops Arcade - 0x013A5BB8
ASCENSION - 0x013A5C26
Call Of The Dead - 0x013A5C97
Shangri-La - 0x013A5D0C
MOON - 0x013A5D77
Cod message
0x01C8004C
Status Client 0 in Game :
Score/Money- 0x0110090C
kills- 0x01100910
Headshots- 0x01100930
Revives- 0x0110092C
Downs- 0x01100928
Interval to next client- 0x1D30
FOV :
0x014374D8 : ON | 0x42 0xFF OFF | 0x42 0x82
Addresses
//ZM
0x00304BA0 - G_LocalizedStringIndex(const char *string)
0x00304B38 - G_MaterialIndex(const char *name)
0x00452280 - Dvar_GetBool(const char *dvarName)
0x003C33A8 - SV_GameSendServerCommand(int clientNum, svscmd_type type, const char *text)
0x00395BA8 - CBUF_AddText(int localClientNum, const char *text)
0x00309E30 - G_GetWeaponIndexForName(const char *name)
0x00305940 - SetModel(gentity_s *ent, const char *modelName)
0x00305650 - G_ModelIndex(const char *name)
0x00EE7BF2 - G_Hudelem
0x000A4968 - BG_GetWeaponDef(unsigned int weaponIndex)
0x002FD098 - G_Callspawn
0x002FD9C8 - G_SpawnEntitiesFromString(void)
0x00073A88 - BG_GetPerkIndexForName(const char *perkName)
0x004BE508 - SV_ExecuteClientCommand(client_s *cl, const char *s, int clientOK)
0x003066E0 - G_Spawn(void)
0x002DDFF8 - SP_script_model(gentity_s *pSelf)
FPS Offsets
0x00407554 - Turn on/off FPS
40 00 - ON
40 9A - OFF
0x00827950 - Text Position
0x0082794c - Text Size
0x008283a8 - Text For Menu
Remote Procedure Call (RPC)
//Black ops zombies 1.13 rpc
//all Credit to choco for the release source on ghosts, ported to bo1 zm by sc58
using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Threading.Tasks;
namespace BOIZMRPC
{
public class PS3
{
static uint processID;
private static uint GetProcessID()
{
uint[] ProcessIDs;
PS3_TMAPI.GetProcessList(0, out ProcessIDs);
return ProcessIDs[0];
}
public static void SetMemory(uint address, byte[] memory)
{
PS3_TMAPI.ProcessSetMemory(0, PS3_TMAPI.UnitType.PPU, processID, 0, address, memory);
}
public static byte[] GetMemory(uint address, int length)
{
byte[] bytes = new byte[length];
PS3_TMAPI.ProcessGetMemory(0, PS3_TMAPI.UnitType.PPU, processID, 0, address, ref bytes);
return bytes;
}
public static int Init()
{
processID = GetProcessID();
return RPC.Init();
}
}
public class RPC
{
static uint function_address;
public static int Init()
{
function_address = Get_func_address();
if (function_address == 0) return -1;
Enable_RPC();
return 0;
}
public static uint Get_func_address()
{
for (uint i = 0x6E34D4; i < 0x1000000; i += 4)
{
byte[] bytes = PS3.GetMemory(i, ;
if (((bytes[0] == 0x4B) && (bytes[1] == 0xFF) && (bytes[2] == 0xBE) && (bytes[3] == 0x05) && (bytes[4] == 0x4B) && (bytes[5] == 0xFF) && (bytes[6] == 0xFC) && (bytes[7] == 0x9))
{
return i + 0xC;
}
}
return 0;
}
public static void Enable_RPC()
{
/*
Here is the PPC function that gets written into memory, at the address of the fog function
stdu r1, -0x70(r1)
mflr r0
std r0, 0x80(r1)
lis r3, 0x1005
lwz r12, 0x4C(r3)
cmpwi r12, 0
beq 0x64 #local return
lwz r4, 4(r3)
lwz r5, 8(r3)
lwz r6, 0xC(r3)
lwz r7, 0x10(r3)
lwz r8, 0x14(r3)
lwz r9, 0x18(r3)
lwz r10, 0x1C(r3)
lwz r11, 0x20(r3)
lfs f1, 0x24(r3)
lfs f2, 0x28(r3)
lfs f3, 0x2C(r3)
lfs f4, 0x30(r3)
lfs f5, 0x34(r3)
lfs f6, 0x38(r3)
lfs f7, 0x3C(r3)
lfs f8, 0x40(r3)
lfs f9, 0x48(r3)
lwz r3, 0(r3)
mtctr r12
bctrl
lis r4, 0x1005
li r5, 0
stw r5, 0x4C(r4)
lwz r3, 0x50(r4)
ld r0, arg_80(r1) #here's what the local return branch goes to
mtlr r0
addi r1, r1, 0x70
blr
*/
PS3.SetMemory(function_address, new byte[] { 0x4E, 0x80, 0x00, 0x20 });
System.Threading.Thread.Sleep(20);
byte[] func = new byte[] { 0x7C, 0x08, 0x02, 0xA6, 0xF8, 0x01, 0x00, 0x80, 0x3C, 0x60, 0x10, 0x05, 0x81, 0x83, 0x00, 0x4C, 0x2C, 0x0C, 0x00, 0x00, 0x41, 0x82, 0x00, 0x64, 0x80, 0x83, 0x00, 0x04, 0x80, 0xA3, 0x00, 0x08, 0x80, 0xC3, 0x00, 0x0C, 0x80, 0xE3, 0x00, 0x10, 0x81, 0x03, 0x00, 0x14, 0x81, 0x23, 0x00, 0x18, 0x81, 0x43, 0x00, 0x1C, 0x81, 0x63, 0x00, 0x20, 0xC0, 0x23, 0x00, 0x24, 0xC0, 0x43, 0x00, 0x28, 0xC0, 0x63, 0x00, 0x2C, 0xC0, 0x83, 0x00, 0x30, 0xC0, 0xA3, 0x00, 0x34, 0xC0, 0xC3, 0x00, 0x38, 0xC0, 0xE3, 0x00, 0x3C, 0xC1, 0x03, 0x00, 0x40, 0xC1, 0x23, 0x00, 0x48, 0x80, 0x63, 0x00, 0x00, 0x7D, 0x89, 0x03, 0xA6, 0x4E, 0x80, 0x04, 0x21, 0x3C, 0x80, 0x10, 0x05, 0x38, 0xA0, 0x00, 0x00, 0x90, 0xA4, 0x00, 0x4C, 0x80, 0x64, 0x00, 0x50, 0xE8, 0x01, 0x00, 0x80, 0x7C, 0x08, 0x03, 0xA6, 0x38, 0x21, 0x00, 0x70, 0x4E, 0x80, 0x00, 0x20, 0x60, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x60, 0x00, 0x00, 0x00 };
PS3.SetMemory(function_address + 0x4, func);
PS3.SetMemory(0x10050000, new byte[0x2854]);
PS3.SetMemory(function_address, new byte[] { 0xF8, 0x21, 0xFF, 0x91 });
}
public static int Call(uint func_address, params object[] parameters)
{
int num_params = parameters.Length;
uint num_floats = 0;
for (uint i = 0; i < num_params; i++)
{
if (parameters[i] is int)
{
byte[] val = BitConverter.GetBytes((int)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, val);
}
else if (parameters[i] is uint)
{
byte[] val = BitConverter.GetBytes((uint)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, val);
}
else if (parameters[i] is string)
{
byte[] str = Encoding.UTF8.GetBytes(Convert.ToString(parameters[i]) + "\0");
PS3.SetMemory(0x10050054 + i * 0x400, str);
uint addr = 0x10050054 + i * 0x400;
byte[] address = BitConverter.GetBytes(addr);
Array.Reverse(address);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, address);
}
else if (parameters[i] is float)
{
num_floats++;
byte[] val = BitConverter.GetBytes((float)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050024 + ((num_floats - 1) * 0x4), val);
}
}
byte[] fadd = BitConverter.GetBytes(func_address);
Array.Reverse(fadd);
PS3.SetMemory(0x1005004C, fadd);
System.Threading.Thread.Sleep(20);
byte[] ret = PS3.GetMemory(0x10050050, 4);
Array.Reverse(ret);
return BitConverter.ToInt32(ret, 0);
}
}
}
SV_GameSendServerCommand
Zombies : 0x00825268
Commands :
v - Set Dvars
e - Killfeed Text
f - Killfeed Text 2
g - Center Text
h - Say CMD Text w/ out Playername
i - Say CMD Text
w - Server Disconnect w/ text (Kick)
a - Ammo/weap related
c - Center Text
W - flame effect
( weird checkerboard
B - weird stutter effect
H - team score
) - camera view - int
j - paper/material fx
n - frame skip
Examples:
v cg_fov 120 or v scr_dom_score_suicide -999999999
w "^2SC58"
c "^2Welcome to modded lobby"C# Scripts
Unlock All Trophies
Multiplayer
private void button1_Click(object sender, EventArgs e)
{
string[] Achievements = new string[75];
Achievements[0] = "8 SP_WIN_CUBA";
Achievements[1] = "8 SP_WIN_VORKUTA";
Achievements[2] = "8 SP_WIN_PENTAGON";
Achievements[3] = "8 SP_WIN_FLASHPOINT";
Achievements[4] = "8 SP_WIN_KHE_SANH";
Achievements[5] = "8 SP_WIN_HUE_CITY";
Achievements[6] = "8 SP_WIN_KOWLOON";
Achievements[7] = "8 SP_WIN_RIVER";
Achievements[8] = "8 SP_WIN_FULLAHEAD";
Achievements[9] = "8 SP_WIN_INTERROGATION_ESCAPE";
Achievements[10] = "8 SP_WIN_UNDERWATERBASE";
Achievements[11] = "8 SP_VWIN_FLASHPOINT";
Achievements[12] = "8 SP_VWIN_HUE_CITY";
Achievements[13] = "8 SP_VWIN_RIVER";
Achievements[14] = "8 SP_VWIN_FULLAHEAD";
Achievements[15] = "8 SP_VWIN_UNDERWATERBASE";
Achievements[16] = "8 SP_LVL_CUBA_CASTRO_ONESHOT";
Achievements[17] = "8 SP_LVL_VORKUTA_VEHICULAR";
Achievements[18] = "8 SP_LVL_VORKUTA_SLINGSHOT";
Achievements[19] = "8 SP_LVL_KHESANH_MISSILES";
Achievements[20] = "8 SP_LVL_HUECITY_AIRSUPPORT";
Achievements[21] = "8 SP_LVL_HUECITY_DRAGON";
Achievements[22] = "8 SP_LVL_CREEK1_DESTROY_MG";
Achievements[23] = "8 SP_LVL_CREEK1_KNIFING";
Achievements[24] = "8 SP_LVL_KOWLOON_DUAL";
Achievements[25] = "8 SP_LVL_RIVER_TARGETS";
Achievements[26] = "8 SP_LVL_WMD_RSO";
Achievements[27] = "8 SP_LVL_WMD_RELAY";
Achievements[28] = "8 SP_LVL_POW_HIND";
Achievements[29] = "8 SP_LVL_POW_FLAMETHROWER";
Achievements[30] = "8 SP_LVL_FULLAHEAD_2MIN";
Achievements[31] = "8 SP_LVL_REBIRTH_MONKEYS";
Achievements[32] = "8 SP_LVL_REBIRTH_NOLEAKS";
Achievements[33] = "8 SP_LVL_UNDERWATERBASE_MINI";
Achievements[34] = "8 SP_LVL_FRONTEND_CHAIR";
Achievements[35] = "8 SP_LVL_FRONTEND_ZORK";
Achievements[36] = "8 SP_GEN_MASTER";
Achievements[37] = "8 SP_GEN_FRAGMASTER";
Achievements[38] = "8 SP_GEN_ROUGH_ECO";
Achievements[39] = "8 SP_GEN_CROSSBOW";
Achievements[40] = "8 SP_GEN_FOUNDFILMS";
Achievements[41] = "8 SP_ZOM_COLLECTOR";
Achievements[42] = "8 SP_ZOM_NODAMAGE";
Achievements[43] = "8 SP_ZOM_TRAPS";
Achievements[44] = "8 SP_ZOM_SILVERBACK";
Achievements[45] = "8 SP_ZOM_CHICKENS";
Achievements[46] = "8 SP_ZOM_FLAMINGBULL";
Achievements[47] = "8 MP_FILM_CREATED";
Achievements[48] = "8 MP_WAGER_MATCH";
Achievements[49] = "8 MP_PLAY";
Achievements[50] = "8 DLC1_ZOM_OLDTIMER";
Achievements[51] = "8 DLC1_ZOM_HARDWAY";
Achievements[52] = "8 DLC1_ZOM_PISTOLERO";
Achievements[53] = "8 DLC1_ZOM_BIGBADDABOOM";
Achievements[54] = "8 DLC1_ZOM_NOLEGS";
Achievements[55] = "8 DLC2_ZOM_PROTECTEQUIP";
Achievements[56] = "8 DLC2_ZOM_LUNARLANDERS";
Achievements[57] = "8 DLC2_ZOM_FIREMONKEY";
Achievements[58] = "8 DLC2_ZOM_BLACKHOLE";
Achievements[59] = "8 DLC2_ZOM_PACKAPUNCH";
Achievements[60] = "8 DLC3_ZOM_STUNTMAN";
Achievements[61] = "8 DLC3_ZOM_SHOOTING_ON_LOCATION";
Achievements[62] = "8 DLC3_ZOM_QUIET_ON_THE_SET";
Achievements[63] = "8 DLC4_ZOM_TEMPLE_SIDEQUEST";
Achievements[64] = "8 DLC5_ZOM_CRYOGENIC_PARTY";
Achievements[65] = "8 DLC5_ZOM_BIG_BANG_THEORY";
Achievements[66] = "8 DLC5_ZOM_GROUND_CONTROL";
Achievements[67] = "8 DLC5_ZOM_ONE_SMALL_HACK";
Achievements[68] = "8 DLC5_ZOM_ONE_GIANT_LEAP";
Achievements[69] = "8 DLC5_ZOM_PERKS_IN_SPACE";
Achievements[70] = "8 DLC5_ZOM_FULLY_ARMED";
Achievements[71] = "8 DLC4_ZOM_ZOMB_DISPOSAL";
Achievements[72] = "8 DLC4_ZOM_MONKEY_SEE_MONKEY_DONT";
Achievements[73] = "8 DLC4_ZOM_BLINDED_BY_THE_FRIGHT";
Achievements[74] = "8 DLC4_ZOM_SMALL_CONSOLATION";
byte[] FT111 = new byte[] { 0x41 };
byte[] FT11 = new byte[] { 0x40 };
byte[] RPCON1 = new byte[] { 0x38, 0x60, 0xFF, 0xFF, 0x38, 0x80, 0x00, 0x00, 0x3C, 0xA0, 0x02, 0x00, 0x30, 0xA5, 0x50, 0x00, 0x4B, 0xF8, 0x2E, 0x2D, 0x4B, 0xFF, 0xFB, 0x78 };
byte[] RPCOFF1 = new byte[] { 0x82, 0xB9, 0x00, 0x00, 0x3C, 0xE0, 0x00, 0xD7, 0x3D, 0x80, 0x00, 0x92, 0x56, 0xA4, 0x38, 0x30, 0x56, 0xBB, 0x18, 0x38, 0x3B, 0x87, 0x9D, 0x04 };
for (int i = 0; i < 75; i++)
{
PS3.SetMemory(0x2005000, Encoding.ASCII.GetBytes(Achievements + "\0"));
PS3.SetMemory(0x466298, FT111);
PS3.SetMemory(0x4667B4, RPCON1);
System.Threading.Thread.Sleep(15);
PS3.SetMemory(0x466298, FT11);
PS3.SetMemory(0x4667B4, RPCOFF1);
}
}
}
}
Zombies
private void button1_Click(object sender, EventArgs e)
{
string[] Achievements = new string[75];
Achievements[0] = "8 SP_WIN_CUBA";
Achievements[1] = "8 SP_WIN_VORKUTA";
Achievements[2] = "8 SP_WIN_PENTAGON";
Achievements[3] = "8 SP_WIN_FLASHPOINT";
Achievements[4] = "8 SP_WIN_KHE_SANH";
Achievements[5] = "8 SP_WIN_HUE_CITY";
Achievements[6] = "8 SP_WIN_KOWLOON";
Achievements[7] = "8 SP_WIN_RIVER";
Achievements[8] = "8 SP_WIN_FULLAHEAD";
Achievements[9] = "8 SP_WIN_INTERROGATION_ESCAPE";
Achievements[10] = "8 SP_WIN_UNDERWATERBASE";
Achievements[11] = "8 SP_VWIN_FLASHPOINT";
Achievements[12] = "8 SP_VWIN_HUE_CITY";
Achievements[13] = "8 SP_VWIN_RIVER";
Achievements[14] = "8 SP_VWIN_FULLAHEAD";
Achievements[15] = "8 SP_VWIN_UNDERWATERBASE";
Achievements[16] = "8 SP_LVL_CUBA_CASTRO_ONESHOT";
Achievements[17] = "8 SP_LVL_VORKUTA_VEHICULAR";
Achievements[18] = "8 SP_LVL_VORKUTA_SLINGSHOT";
Achievements[19] = "8 SP_LVL_KHESANH_MISSILES";
Achievements[20] = "8 SP_LVL_HUECITY_AIRSUPPORT";
Achievements[21] = "8 SP_LVL_HUECITY_DRAGON";
Achievements[22] = "8 SP_LVL_CREEK1_DESTROY_MG";
Achievements[23] = "8 SP_LVL_CREEK1_KNIFING";
Achievements[24] = "8 SP_LVL_KOWLOON_DUAL";
Achievements[25] = "8 SP_LVL_RIVER_TARGETS";
Achievements[26] = "8 SP_LVL_WMD_RSO";
Achievements[27] = "8 SP_LVL_WMD_RELAY";
Achievements[28] = "8 SP_LVL_POW_HIND";
Achievements[29] = "8 SP_LVL_POW_FLAMETHROWER";
Achievements[30] = "8 SP_LVL_FULLAHEAD_2MIN";
Achievements[31] = "8 SP_LVL_REBIRTH_MONKEYS";
Achievements[32] = "8 SP_LVL_REBIRTH_NOLEAKS";
Achievements[33] = "8 SP_LVL_UNDERWATERBASE_MINI";
Achievements[34] = "8 SP_LVL_FRONTEND_CHAIR";
Achievements[35] = "8 SP_LVL_FRONTEND_ZORK";
Achievements[36] = "8 SP_GEN_MASTER";
Achievements[37] = "8 SP_GEN_FRAGMASTER";
Achievements[38] = "8 SP_GEN_ROUGH_ECO";
Achievements[39] = "8 SP_GEN_CROSSBOW";
Achievements[40] = "8 SP_GEN_FOUNDFILMS";
Achievements[41] = "8 SP_ZOM_COLLECTOR";
Achievements[42] = "8 SP_ZOM_NODAMAGE";
Achievements[43] = "8 SP_ZOM_TRAPS";
Achievements[44] = "8 SP_ZOM_SILVERBACK";
Achievements[45] = "8 SP_ZOM_CHICKENS";
Achievements[46] = "8 SP_ZOM_FLAMINGBULL";
Achievements[47] = "8 MP_FILM_CREATED";
Achievements[48] = "8 MP_WAGER_MATCH";
Achievements[49] = "8 MP_PLAY";
Achievements[50] = "8 DLC1_ZOM_OLDTIMER";
Achievements[51] = "8 DLC1_ZOM_HARDWAY";
Achievements[52] = "8 DLC1_ZOM_PISTOLERO";
Achievements[53] = "8 DLC1_ZOM_BIGBADDABOOM";
Achievements[54] = "8 DLC1_ZOM_NOLEGS";
Achievements[55] = "8 DLC2_ZOM_PROTECTEQUIP";
Achievements[56] = "8 DLC2_ZOM_LUNARLANDERS";
Achievements[57] = "8 DLC2_ZOM_FIREMONKEY";
Achievements[58] = "8 DLC2_ZOM_BLACKHOLE";
Achievements[59] = "8 DLC2_ZOM_PACKAPUNCH";
Achievements[60] = "8 DLC3_ZOM_STUNTMAN";
Achievements[61] = "8 DLC3_ZOM_SHOOTING_ON_LOCATION";
Achievements[62] = "8 DLC3_ZOM_QUIET_ON_THE_SET";
Achievements[63] = "8 DLC4_ZOM_TEMPLE_SIDEQUEST";
Achievements[64] = "8 DLC5_ZOM_CRYOGENIC_PARTY";
Achievements[65] = "8 DLC5_ZOM_BIG_BANG_THEORY";
Achievements[66] = "8 DLC5_ZOM_GROUND_CONTROL";
Achievements[67] = "8 DLC5_ZOM_ONE_SMALL_HACK";
Achievements[68] = "8 DLC5_ZOM_ONE_GIANT_LEAP";
Achievements[69] = "8 DLC5_ZOM_PERKS_IN_SPACE";
Achievements[70] = "8 DLC5_ZOM_FULLY_ARMED";
Achievements[71] = "8 DLC4_ZOM_ZOMB_DISPOSAL";
Achievements[72] = "8 DLC4_ZOM_MONKEY_SEE_MONKEY_DONT";
Achievements[73] = "8 DLC4_ZOM_BLINDED_BY_THE_FRIGHT";
Achievements[74] = "8 DLC4_ZOM_SMALL_CONSOLATION";
byte[] FT111 = new byte[] { 0x41 };
byte[] FT11 = new byte[] { 0x40 };
byte[] RPCON1 = new byte[] { 0x38, 0x60, 0xFF, 0xFF, 0x38, 0x80, 0x00, 0x00, 0x3C, 0xA0, 0x02, 0x00, 0x30, 0xA5, 0x50, 0x00, 0x4B, 0xFB, 0xAE, 0xB5, 0x4B, 0xFF, 0xF0, 0x60 };
byte[] RPCOFF1 = new byte[] { 0x82, 0xF8, 0x00, 0x00, 0x3E, 0xA0, 0x00, 0xB5, 0x3D, 0x20, 0x00, 0x82, 0x56, 0xE0, 0x18, 0x38, 0x56, 0xE4, 0x38, 0x30, 0x3B, 0x95, 0x6C, 0x50, 0x7F, 0x60, 0x20, 0x50, 0x38, 0x80, 0x00, 0x00 };
for (int i = 0; i < 75; i++)
{
PS3.SetMemory(0x2005000, Encoding.ASCII.GetBytes(Achievements + "\0"));
PS3.SetMemory(0x407554, FT111);
PS3.SetMemory(0x4084E4, RPCON1);
System.Threading.Thread.Sleep(15);
PS3.SetMemory(0x407554, FT11);
PS3.SetMemory(0x4084E4, RPCOFF1);
}
}
}
}
Fair Aimbot
public class Aimbot
{
#region Aimbot
//All of the getting info etc.
public static uint G_Entity(uint client)
{
return 0x012ab290 + (client * 0x2F;
}
public static float[] getOrigin(uint clientNum)
{
float[] origin = new float[3];
origin[0] = Lib.ReadSingle(0x013950c8 + 0x2A38 * clientNum + 0x24);
origin[1] = Lib.ReadSingle(0x013950c8 + 0x2A38 * clientNum + 0x24 + 0x4);
origin[2] = Lib.ReadSingle(0x013950c8 + 0x2A38 * clientNum + 0x24 + 0x;
return origin;
}
public static UInt32 G_Entity(Int32 ClientIndex)
{
return 0x16B7920 + ((UInt32)ClientIndex * 0x31C);
}
public static int GetHost()
{
string str = Lib.ReadString(0x172a58;
for (int i = 0; i < 0x12; i++)
{
string str2 = Lib.ReadString((uint)(0xf1651c + (i * 0x3600)));
if (str == str2)
{
return i;
}
}
return -1;
}
public static Boolean Exists(Int32 clientIndex)
{
return Lib.ReadString(0x013978d0 + ((uint)clientIndex * 0x2A3) != "";
}
public static Boolean IsAlive(Int32 clientIndex)
{
return (Lib.ReadByte(0x0139793b + ((uint)clientIndex * 0x2A3) == 0);
}
public static Boolean isSameTeam(Int32 Owner, Int32 Victim)
{
return Lib.ReadInt32(0x01397894 + ((uint)Owner * 0x2A3) == Lib.ReadInt32(0x01397894 + ((uint)Victim * 0x2A3);
}
public static Single GetDistance3D(Single[] p1, Single[] p2)
{
float[] numArray3 = new float[] { p2[0] - p1[0], p2[1] - p1[1], p2[2] - p1[2] };
return ((numArray3[0] * numArray3[0]) + (numArray3[1] * numArray3[1])) + (numArray3[2] * numArray3[2]);
}
public static int GetNearestClientFromAttacker(int You)
{
int CIndex = -1;
double Closest = 1E+08f;
for (int i = 0; i < 12; i++)
{
if (((Exists(i) && IsAlive(i) && !isSameTeam(You, i))))
{
double Bla = GetDistance3D(getOrigin((uint)You), getOrigin((uint)i));
if (Bla < Closest)
{
CIndex = i;
Closest = Bla;
}
}
}
return CIndex;
}
//The Real Aimbot Code-----
//function to convert a vector to angles
public static Single[] vectoangles(Int32 clientIndex, Int32 secondPlayer)
{
Single[] numArray1 = getOrigin((uint)clientIndex);
Single[] numArray2 = getOrigin((uint)secondPlayer);
Single[] Angles = {(numArray2[0] - numArray1[0]), (numArray2[1] - numArray1[1]), (numArray2[2] - numArray1[2])};
Single num2;
Single num3;
Single[] numArray = new Single[3];
if ((Angles[1] == 0f) && (Angles[0] == 0f))
{
num2 = 0f;
if (Angles[2] > 0f)
num3 = 90f;
else
num3 = 270f;
}
else
{
if (Angles[0] != -1f)
num2 = (Single)((Math.Atan2((Double)Angles[1], (Double)Angles[0]) * 180.0) / 3.1415926535897931);
else if (Angles[1] > 0f)
num2 = 90f;
else
num2 = 270f;
if (num2 < 0f)
num2 += 360f;
Single num = (Single)Math.Sqrt((Double)((Angles[0] * Angles[0]) + (Angles[1] * Angles[1])));
num3 = (Single)((Math.Atan2((Double)Angles[2], (Double)num) * 180.0) / 3.1415926535897931);
if (num3 < 0f)
num3 += 360f;
}
numArray[0] = -num3;
numArray[1] = num2;
return numArray;
}
//Set Set the clients angles
public static void SetClientViewAngles(Int32 clientIndex, Int32 Victim)
{
Single[] angles = vectoangles(clientIndex, Victim);
Lib.WriteSingle(0x10040000, angles);
RPC.Call(0x2C1E38, new Object[] { Addresses.G_Entity((uint)clientIndex), 0x10040000 });
}
//Just Aimbot Threads and Bools
public static bool[] AimbotStatus = new bool[12];
public static Thread[] AimbotThread = new Thread[12];
public static bool[] UnfairAimbot = new bool[12];
//This is what starts the Aimbot
public static void StartAimbot(int clientIndex)
{
ThreadStart start = null;
if (!AimbotStatus[clientIndex])
{
Thread.Sleep(100);
AimbotStatus[clientIndex] = true;
if (start == null)
{
start = () => InitializeAimbot(clientIndex);
}
AimbotThread[clientIndex] = new Thread(start);
AimbotThread[clientIndex].IsBackground = true;
AimbotThread[clientIndex].Start();
}
else
{
AimbotStatus[clientIndex] = false;
AimbotThread[clientIndex].Abort();
}
}
//Main Aimbot Code
private static void InitializeAimbot(int client)
{
PS3.Reconnect();
while (AimbotThread[client].IsAlive)
{
int nearestPlayer = GetNearestClientFromAttacker(client);
if (nearestPlayer != client)
{
if (ButtonPress.ButtonPressed(client, 03) || ButtonPress.ButtonPressed(client, 04))
{
SetClientViewAngles(client, nearestPlayer);
}
}
}
}
#endregion
//Example:
Aimbot.StartAimbot(int client);
Credits
Me
SC58 - Unlock All Trophies C# & Address And Function & FPS offsets
primetime43 - Stats Offsets
eddie mac - Offsets & Script
MostWanted - Offsets ZM
MegaMister - Offsets
Anera - Offsets
Choco - RPC
Seb5594 - Orginal Aimbot Script
DexModderFTW - Fair Aimbot Script
Maybe they Are More But i dont know if they are more pm me
Last edited by
iNDMx ; 02-17-2015 at 12:59 PM.
Reason: More Stuff, MP Addresses
The following 17 users say thank you to iNDMx for this useful post:
06-30-2014, 10:07 PM
#20
1.MostWanted
K i l l e r b e r g
Here is some Zombies offsets that i found, Add them if you want
Map names:
Kino der toten - 0x013A5ADC
FIVE - 0x013A5B51
Dead Ops Arcade - 0x013A5BB8
ASCENSION - 0x013A5C26
Call Of The Dead - 0x013A5C97
Shangri-La - 0x013A5D0C
MOON - 0x013A5D77
COD message - 0x01C8004C
Ingame Name- 0x11008B8 + 1D30
I got many more, so if there is any offsets for the thread need just let me know
Map names:
Kino der toten - 0x013A5ADC
FIVE - 0x013A5B51
Dead Ops Arcade - 0x013A5BB8
ASCENSION - 0x013A5C26
Call Of The Dead - 0x013A5C97
Shangri-La - 0x013A5D0C
MOON - 0x013A5D77
COD message - 0x01C8004C
Ingame Name- 0x11008B8 + 1D30
I got many more, so if there is any offsets for the thread need just let me know
Last edited by
1.MostWanted ; 06-30-2014 at 10:19 PM.
The following user thanked 1.MostWanted for this useful post:
07-01-2014, 07:52 PM
#24
iNDMx
Do a barrel roll!
Originally posted by 1.MostWanted
Here is some Zombies offsets that i found, Add them if you want
Map names:
Kino der toten - 0x013A5ADC
FIVE - 0x013A5B51
Dead Ops Arcade - 0x013A5BB8
ASCENSION - 0x013A5C26
Call Of The Dead - 0x013A5C97
Shangri-La - 0x013A5D0C
MOON - 0x013A5D77
COD message - 0x01C8004C
Ingame Name- 0x11008B8 + 1D30
I got many more, so if there is any offsets for the thread need just let me know
Map names:
Kino der toten - 0x013A5ADC
FIVE - 0x013A5B51
Dead Ops Arcade - 0x013A5BB8
ASCENSION - 0x013A5C26
Call Of The Dead - 0x013A5C97
Shangri-La - 0x013A5D0C
MOON - 0x013A5D77
COD message - 0x01C8004C
Ingame Name- 0x11008B8 + 1D30
I got many more, so if there is any offsets for the thread need just let me know
i will add it but credits ?
MostWanted ?
07-01-2014, 11:19 PM
#27
1.MostWanted
K i l l e r b e r g
Copyright © 2024, NextGenUpdate.
All Rights Reserved.
