Post: BO1 Offsets,Addresses & Scripts Thread [1.13]
Options
07-04-2014, 11:56 AM
#1
makeabce
I defeated!
Multiplayer
Name and Stats
Name Offset: 0x02000934
Class Name Offset: 0x01c3896f (Class # 1-5) & 0x01c43cf4 (Class # 6-10)
COD Points Offset: 0x020942d1
Time Played Offset: 0x02094731
Total Wins Offset: 0x0209475d
Total Losses Offset: 0x020944dd
Prestige Offset: 0x020946dd
Rank Offset (score basically): 0x020946e5
Kills Offset: 0x02094429
Deaths Offset: 0x020942f5
Assists Offset: 0x02094291
Kill/Death Ratio In Weapons Offset: 0x02094425
Wins/Loss Ration In Career Offset: 0x02094761
Headshots Offset: 0x0209440d
Amount Spent In Contracts Offset: 0x020942dd
Contracts Purchased Offset: 0x020942e1
XP Award In Contracts Offset: 0x020942e5
Return On Investment Contracts Offset (This is also amount earned) : 0x020942d9
Games Played Offset: 0x020938b1
Wager Match Earnings Offset: 0x020944d9
Unlock All Offset: 0x02094990 (Unlock All Bytes: https://pastebin.com/MxmMrR22)
Non-Host Offsets
Super Sleight of Hand
Bytes: 0x02 for on, 0x01 for off
Offset: 0xBBC2E8
Chrome Players
Bytes: 0x38, 0xC0, 0xFF, 0xFF for On, 0xFC, 0xC0, 0xF8, 0x90 for Off
Offset: 0x131144
Wallhack
Bytes: 0x38, 0xC0, 0xF0, 0x03 for On,0xFC, 0xC0, 0xF8, 0x90 for Off
Offset: 0x131144
Rapid Fire
Bytes: 0x02 for On, 0x01 for Off
Offset: 0xBBC2EC
Redboxes
Bytes: 0x60,0x00,0x00,0x00 for both, and when off then change redboxes offset with these: 0x41, 0x86, 0x02, 0x78
Perk Check Offset: 0x001206C8
Redboxes Offset: 0x001205C0
Blackbird
Bytes: 0x40, 0x9A, 0x00, 0xC4 for On, 0x41, 0x9A, 0x00, 0xC4 for Off
Offset: 0xEBDF4
Super Steady Aim
Bytes: 0x60,0x00,0x00,0x00 for On, 0x2F, 0x80, 0x00, 0x02 for Off
Offset: 0xAB8EC
No Recoil
Bytes: 0x60,0x00,0x00,0x00 for On, 0x4B, 0xF1, 0x84, 0xCD for Off
Offset: 0x19B244
Client Offsets Interval: 0x2A38
In-Game Name
Offset: 0x139784C
Godmode Scpript
public void Godmode(uint client)
{
PS3.SetMemory((0x12ab290 + (client * 760)) + 0x194, new byte[4]);
Thread.Sleep(50);
PS3.SetMemory((0x12ab290 + (client * 760)) + 0x194, new byte[] { 15, 0xff, 0xff, 0xff });
}
mFlags
Bytes: 0x01 for noclip,0x02 for ufo
Offset: 0x13979BF
Unlimited Ammo Scpript
public void UnlimitedAmmo(uint client)
{
PS3.SetMemory((0x13950c8 + (client * 0x2a3
) + 0x388, new byte[] { 15, 0xff, 0xff, 0xff });
PS3.SetMemory((0x13950c8 + (client * 0x2a3) + 0x400, new byte[] { 15, 0xff, 0xff, 0xff });
PS3.SetMemory((0x13950c8 + (client * 0x2a3) + 0x380, new byte[] { 15, 0xff, 0xff, 0xff });
PS3.SetMemory((0x13950c8 + (client * 0x2a3) + 0x3f8, new byte[] { 15, 0xff, 0xff, 0xff });
PS3.SetMemory((0x13950c8 + (client * 0x2a3) + 0x410, new byte[] { 15, 0xff, 0xff, 0xff });
PS3.SetMemory((0x13950c8 + (client * 0x2a3) + 0x408, new byte[] { 15, 0xff, 0xff, 0xff });
}
Blackbird
Bytes: 0x01 On, 0x00 Off
Offset: 0x1397AEB
Reconplane
Bytes: 0x03 for On, 0x00 for Off
Offset: 0x1397967
Second Chance
Bytes: 0x01 for On
Offset: 0x1397AEC
Speed
Bytes: 0x40,0x40 for super, 0x3F 0x80 for default, 0x00,0x00 for freeze
Offset: 0x1397880
In-Game Camo
Bytes: 60 for gold, 10 for ice,13 for red,10 for olive,20 for nevada,0x18 for sahara
Offset: 0x013952E0
Teleport
Offset: 0x13950f0
Scripts
Aimbot (By Seb5594 & DexModderFTW & Eddie mac)
public class Aimbot
{
#region Aimbot
//All of the getting info etc.
public static uint G_Entity(uint client)
{
return 0x012ab290 + (client * 0x2F;
}
public static float[] getOrigin(uint clientNum)
{
float[] origin = new float[3];
origin[0] = Lib.ReadSingle(0x013950c8 + 0x2A38 * clientNum + 0x24);
origin[1] = Lib.ReadSingle(0x013950c8 + 0x2A38 * clientNum + 0x24 + 0x4);
origin[2] = Lib.ReadSingle(0x013950c8 + 0x2A38 * clientNum + 0x24 + 0x;
return origin;
}
public static UInt32 G_Entity(Int32 ClientIndex)
{
return 0x16B7920 + ((UInt32)ClientIndex * 0x31C);
}
public static int GetHost()
{
string str = Lib.ReadString(0x172a58;
for (int i = 0; i < 0x12; i++)
{
string str2 = Lib.ReadString((uint)(0xf1651c + (i * 0x3600)));
if (str == str2)
{
return i;
}
}
return -1;
}
public static Boolean Exists(Int32 clientIndex)
{
return Lib.ReadString(0x013978d0 + ((uint)clientIndex * 0x2A3) != "";
}
public static Boolean IsAlive(Int32 clientIndex)
{
return (Lib.ReadByte(0x0139793b + ((uint)clientIndex * 0x2A3) == 0);
}
public static Boolean isSameTeam(Int32 Owner, Int32 Victim)
{
return Lib.ReadInt32(0x01397894 + ((uint)Owner * 0x2A3) == Lib.ReadInt32(0x01397894 + ((uint)Victim * 0x2A3);
}
public static Single GetDistance3D(Single[] p1, Single[] p2)
{
float[] numArray3 = new float[] { p2[0] - p1[0], p2[1] - p1[1], p2[2] - p1[2] };
return ((numArray3[0] * numArray3[0]) + (numArray3[1] * numArray3[1])) + (numArray3[2] * numArray3[2]);
}
public static int GetNearestClientFromAttacker(int You)
{
int CIndex = -1;
double Closest = 1E+08f;
for (int i = 0; i < 12; i++)
{
if (((Exists(i) && IsAlive(i) && !isSameTeam(You, i))))
{
double Bla = GetDistance3D(getOrigin((uint)You), getOrigin((uint)i));
if (Bla < Closest)
{
CIndex = i;
Closest = Bla;
}
}
}
return CIndex;
}
//The Real Aimbot Code-----
//function to convert a vector to angles
public static Single[] vectoangles(Int32 clientIndex, Int32 secondPlayer)
{
Single[] numArray1 = getOrigin((uint)clientIndex);
Single[] numArray2 = getOrigin((uint)secondPlayer);
Single[] Angles = {(numArray2[0] - numArray1[0]), (numArray2[1] - numArray1[1]), (numArray2[2] - numArray1[2])};
Single num2;
Single num3;
Single[] numArray = new Single[3];
if ((Angles[1] == 0f) && (Angles[0] == 0f))
{
num2 = 0f;
if (Angles[2] > 0f)
num3 = 90f;
else
num3 = 270f;
}
else
{
if (Angles[0] != -1f)
num2 = (Single)((Math.Atan2((Double)Angles[1], (Double)Angles[0]) * 180.0) / 3.1415926535897931);
else if (Angles[1] > 0f)
num2 = 90f;
else
num2 = 270f;
if (num2 < 0f)
num2 += 360f;
Single num = (Single)Math.Sqrt((Double)((Angles[0] * Angles[0]) + (Angles[1] * Angles[1])));
num3 = (Single)((Math.Atan2((Double)Angles[2], (Double)num) * 180.0) / 3.1415926535897931);
if (num3 < 0f)
num3 += 360f;
}
numArray[0] = -num3;
numArray[1] = num2;
return numArray;
}
//Set Set the clients angles
public static void SetClientViewAngles(Int32 clientIndex, Int32 Victim)
{
Single[] angles = vectoangles(clientIndex, Victim);
Lib.WriteSingle(0x10040000, angles);
RPC.Call(0x2C1E38, new Object[] { Addresses.G_Entity((uint)clientIndex), 0x10040000 });
}
//Just Aimbot Threads and Bools
public static bool[] AimbotStatus = new bool[12];
public static Thread[] AimbotThread = new Thread[12];
public static bool[] UnfairAimbot = new bool[12];
//This is what starts the Aimbot
public static void StartAimbot(int clientIndex)
{
ThreadStart start = null;
if (!AimbotStatus[clientIndex])
{
Thread.Sleep(100);
AimbotStatus[clientIndex] = true;
if (start == null)
{
start = () => InitializeAimbot(clientIndex);
}
AimbotThread[clientIndex] = new Thread(start);
AimbotThread[clientIndex].IsBackground = true;
AimbotThread[clientIndex].Start();
}
else
{
AimbotStatus[clientIndex] = false;
AimbotThread[clientIndex].Abort();
}
}
//Main Aimbot Code
private static void InitializeAimbot(int client)
{
PS3.Reconnect();
while (AimbotThread[client].IsAlive)
{
int nearestPlayer = GetNearestClientFromAttacker(client);
if (nearestPlayer != client)
{
if (ButtonPress.ButtonPressed(client, 03) || ButtonPress.ButtonPressed(client, 04))
{
SetClientViewAngles(client, nearestPlayer);
}
}
}
}
#endregion
//Example:
Aimbot.StartAimbot(int client);
Cbuf_AddText
public void cBuf_AddText(int localClient,string command)
{
RPC.Call(0x00399CC8, localClient, command);
}
cl_ingame
#region inGame
public static bool Dvar_GetBool(string DVAR)
{
bool State;
uint Value = (uint)RPC.Call(0x4C7BF0, DVAR);
if (Value == 1)
State = true;
else
State = false;
return State;
}
public static Boolean cl_inGame()
{
bool es;
if (Dvar_GetBool("cl_ingame") == true)
{
es = true;
}
else
{
es = false;
}
return es;
}
#endregion
// Thanks Chris for the original Dvar_GetBool function from his mw3 script and sc58 the correct address
Unlock All
public void UnlockAll()
{
PS3.SetMemory(0x02094990, new byte[] { 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF });
}
SV_GameSendServerCommand
public void SV_GameSendServerCommand(int client, string command)
{
RPC.Call(0x003E95F0, client, 1, command);
}
G_SetModel
public void SetModel(int client, string model)
{
RPC.Call(0x003701D8, (uint)(0x012ab290 + client * 0x2F, model);
}
FPS RPC (By Jo-Milk)
private void JM_RPC()
{
PS3.SetMemory(0x00466299, new byte[] { 0x9A });//RPC OFF
PS3.SetMemory(0x4667B4, new byte[] { 0x3F, 0x80, 0x10, 0x05, 0x81, 0x9C, 0x00, 0x48, 0x2C, 0x0C, 0x00, 0x00, 0x41, 0x82, 0x00, 0x64, 0x80, 0x7C, 0x00, 0x00, 0x80, 0x9C, 0x00, 0x04, 0x80, 0xBC, 0x00, 0x08, 0x80, 0xDC, 0x00, 0x0C, 0x80, 0xFC, 0x00, 0x10, 0x81, 0x1C, 0x00, 0x14, 0x81, 0x3C, 0x00, 0x18, 0x81, 0x5C, 0x00, 0x1C, 0x81, 0x7C, 0x00, 0x20, 0xC0, 0x3C, 0x00, 0x24, 0xC0, 0x5C, 0x00, 0x28, 0xC0, 0x7C, 0x00, 0x2C, 0xC0, 0x9C, 0x00, 0x30, 0xC0, 0xBC, 0x00, 0x34, 0xC0, 0xDC, 0x00, 0x38, 0xC0, 0xFC, 0x00, 0x3C, 0xC1, 0x1C, 0x00, 0x40, 0xC1, 0x3C, 0x00, 0x44, 0x7D, 0x89, 0x03, 0xA6, 0x4E, 0x80, 0x04, 0x21, 0x38, 0x80, 0x00, 0x00, 0x90, 0x9C, 0x00, 0x48, 0x90, 0x7C, 0x00, 0x4C, 0xD0, 0x3C, 0x00, 0x50, 0x48, 0x00, 0x00, 0x40 });//RPC CODE
PS3.SetMemory(0x10050000, new byte[0x2854]);//RPC arguments
PS3.SetMemory(0x00466299, new byte[] { 0x00 });//RPC ON
}
public static Int32 Call(UInt32 address, params Object[] parameters)//this is VezahHFH MW3 Call function I used same place to store the arguments because I'm Lazy and I don't feel like making that function since I code in C++ but I might optimize this function
{
Int32 length = parameters.Length;
Int32 index = 0;
UInt32 count = 0;
UInt32 Strings = 0;
UInt32 Single = 0;
UInt32 Array = 0;
while (index < length)
{
if (parameters[index] is Int32)
{
WriteInt32(0x10050000 + (count * 4), (Int32)parameters[index]);
count++;
}
else if (parameters[index] is UInt32)
{
WriteUInt32(0x10050000 + (count * 4), (UInt32)parameters[index]);
count++;
}
else if (parameters[index] is Int16)
{
WriteInt16(0x10050000 + (count * 4), (Int16)parameters[index]);
count++;
}
else if (parameters[index] is UInt16)
{
WriteUInt16(0x10050000 + (count * 4), (UInt16)parameters[index]);
count++;
}
else if (parameters[index] is Byte)
{
WriteByte(0x10050000 + (count * 4), (Byte)parameters[index]);
count++;
} //Should work now 
let me try
else
{
UInt32 pointer;
if (parameters[index] is String)
{
pointer = 0x10052000 + (Strings * 0x400);
WriteString(pointer, Convert.ToString(parameters[index]));
WriteUInt32(0x10050000 + (count * 4), pointer);
count++;
Strings++;
}
else if (parameters[index] is Single)
{
WriteSingle(0x10050024 + (Single * 4), (Single)parameters[index]);
Single++;
}
else if (parameters[index] is Single[])
{
Single[] Args = (Single[])parameters[index];
pointer = 0x10051000 + Array * 4;
WriteSingle(pointer, Args);
WriteUInt32(0x10050000 + count * 4, pointer);
count++;
Array += (UInt32)Args.Length;
}
}
index++;
}
WriteUInt32(0x10050048, address);
Thread.Sleep(20);
return ReadInt32(0x1005004c);
//or you could return a float pointer if the function that is called return one just check at the offset 0x10050050
}
RPC (By SC58 And Choco )
using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Threading.Tasks;
namespace BOIMPRPC
{
public class PS3
{
static uint processID;
private static uint GetProcessID()
{
uint[] ProcessIDs;
PS3_TMAPI.GetProcessList(0, out ProcessIDs);
return ProcessIDs[0];
}
public static void SetMemory(uint address, byte[] memory)
{
PS3_TMAPI.ProcessSetMemory(0, PS3_TMAPI.UnitType.PPU, processID, 0, address, memory);
}
public static byte[] GetMemory(uint address, int length)
{
byte[] bytes = new byte[length];
PS3_TMAPI.ProcessGetMemory(0, PS3_TMAPI.UnitType.PPU, processID, 0, address, ref bytes);
return bytes;
}
public static int Init()
{
processID = GetProcessID();
return RPC.Init();
}
}
public class RPC
{
static uint function_address;
public static int Init()
{
function_address = Get_func_address();
if (function_address == 0) return -1;
Enable_RPC();
return 0;
}
public static uint Get_func_address()
{
for (uint i = 0x7A21D4; i < 0x1000000; i += 4)
{
byte[] bytes = PS3.GetMemory(i, ;
if (((bytes[0] == 0x4B) && (bytes[1] == 0xFF) && (bytes[2] == 0xBE) && (bytes[3] == 0x05) && (bytes[4] == 0x4B) && (bytes[5] == 0xFF) && (bytes[6] == 0xFC) && (bytes[7] == 0x9))
{
return i + 0xC;
}
}
return 0;
}
public static void Enable_RPC()
{
PS3.SetMemory(function_address, new byte[] { 0x4E, 0x80, 0x00, 0x20 });
System.Threading.Thread.Sleep(20);
byte[] func = new byte[] { 0x7C, 0x08, 0x02, 0xA6, 0xF8, 0x01, 0x00, 0x80, 0x3C, 0x60, 0x10, 0x05, 0x81, 0x83, 0x00, 0x4C, 0x2C, 0x0C, 0x00, 0x00, 0x41, 0x82, 0x00, 0x64, 0x80, 0x83, 0x00, 0x04, 0x80, 0xA3, 0x00, 0x08, 0x80, 0xC3, 0x00, 0x0C, 0x80, 0xE3, 0x00, 0x10, 0x81, 0x03, 0x00, 0x14, 0x81, 0x23, 0x00, 0x18, 0x81, 0x43, 0x00, 0x1C, 0x81, 0x63, 0x00, 0x20, 0xC0, 0x23, 0x00, 0x24, 0xC0, 0x43, 0x00, 0x28, 0xC0, 0x63, 0x00, 0x2C, 0xC0, 0x83, 0x00, 0x30, 0xC0, 0xA3, 0x00, 0x34, 0xC0, 0xC3, 0x00, 0x38, 0xC0, 0xE3, 0x00, 0x3C, 0xC1, 0x03, 0x00, 0x40, 0xC1, 0x23, 0x00, 0x48, 0x80, 0x63, 0x00, 0x00, 0x7D, 0x89, 0x03, 0xA6, 0x4E, 0x80, 0x04, 0x21, 0x3C, 0x80, 0x10, 0x05, 0x38, 0xA0, 0x00, 0x00, 0x90, 0xA4, 0x00, 0x4C, 0x80, 0x64, 0x00, 0x50, 0xE8, 0x01, 0x00, 0x80, 0x7C, 0x08, 0x03, 0xA6, 0x38, 0x21, 0x00, 0x70, 0x4E, 0x80, 0x00, 0x20, 0x60, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x60, 0x00, 0x00, 0x00 };
PS3.SetMemory(function_address + 0x4, func);
PS3.SetMemory(0x10050000, new byte[0x2854]);
PS3.SetMemory(function_address, new byte[] { 0xF8, 0x21, 0xFF, 0x91 });
}
public static int Call(uint func_address, params object[] parameters)
{
int num_params = parameters.Length;
uint num_floats = 0;
for (uint i = 0; i < num_params; i++)
{
if (parameters[i] is int)
{
byte[] val = BitConverter.GetBytes((int)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, val);
}
else if (parameters[i] is uint)
{
byte[] val = BitConverter.GetBytes((uint)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, val);
}
else if (parameters[i] is string)
{
byte[] str = Encoding.UTF8.GetBytes(Convert.ToString(parameters[i]) + "\0");
PS3.SetMemory(0x10050054 + i * 0x400, str);
uint addr = 0x10050054 + i * 0x400;
byte[] address = BitConverter.GetBytes(addr);
Array.Reverse(address);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, address);
}
else if (parameters[i] is float)
{
num_floats++;
byte[] val = BitConverter.GetBytes((float)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050024 + ((num_floats - 1) * 0x4), val);
}
}
byte[] fadd = BitConverter.GetBytes(func_address);
Array.Reverse(fadd);
PS3.SetMemory(0x1005004C, fadd);
System.Threading.Thread.Sleep(20);
byte[] ret = PS3.GetMemory(0x10050050, 4);
Array.Reverse(ret);
return BitConverter.ToInt32(ret, 0);
}
Buttons
Buttons Monitoring (by seb5594)
public class Buttons
{
public static UInt32
X = 2104320,
O = 512,
Square = 67108864,
Triangle = 8,
L3 = 1074003968,
R3 = 536870912,
L2 = 72704,
R2 = 131072,
L1 = 1048704,
R1 = 2147483648,
Crouch = 4194304,
Prone = 8388608,
StartButton = 4;
}
public Boolean ButtonPressed(Int32 clientIndex, UInt32 Button)
{
if (BO1TMAPI.PS3.Extension.ReadUInt32((UInt32)G_Client(clientIndex) + 0x271 == Button)
return true;
else return false;
}
public Int32 G_Client(Int32 clientIndex)
{
return (Int32)0x13950C8 + 0x2A38 * clientIndex;
}
public UInt32 ReadUInt32(uint offset)
{
Byte[] YoLo = GetMemory(offset, 4);
Array.Reverse(YoLo, 0, 4);
return BitConverter.ToUInt32(YoLo, 0);
}
public byte[] GetMemory(uint address, int length)
{
byte[] buffer = new byte[length];
BO1TMAPI.PS3.GetMemory(address, buffer);
return buffer;
}
//Example how to use:
if(ButtonPressed(0,Buttons.L1))
{
// Mods/functions here
}
Local Client Buttons Monitoring (by xPAQz )
private static UInt32 LocalButtons = 0xd19800;
public enum Buttons
{
DpadUp = 0x1FF,
DpadDown = 0x20F,
DpadRight = 0x21F,
DpadLeft = -0xC47E5F,
R3 = 0x1CF,
Square = 0xEF,
Cross = 0xCF,
LeftCursorUp = 0x27F,
LeftCursorLeft = 0x29F,
LeftCursorRight = 0x2AF,
LeftCursorDown = 0x28F,
R2 = 0x1EF,
L2 = 0x1DF,
Select = 0x1AF,
Start = 0x19F
}
public static Boolean ButtonPressed(Buttons Button)
{
return Convert.ToBoolean(PS3.Extension.ReadByte(LocalButtons + (UInt32)Button) == 1);
}
FPS (By SC58 )
0x00466298 - Turn on/off FPS
40 00 - ON
40 9A - OFF
0x0091C860 - Text For Menu
0x0091BF38 - Text Position
0x0091BF34 - Text Size
Unlock All Trophys (by SC58 )
public void TrophyUnlocks_MP()
{
string[] Achievements = new string[75];
Achievements[0] = "8 SP_WIN_CUBA";
Achievements[1] = "8 SP_WIN_VORKUTA";
Achievements[2] = "8 SP_WIN_PENTAGON";
Achievements[3] = "8 SP_WIN_FLASHPOINT";
Achievements[4] = "8 SP_WIN_KHE_SANH";
Achievements[5] = "8 SP_WIN_HUE_CITY";
Achievements[6] = "8 SP_WIN_KOWLOON";
Achievements[7] = "8 SP_WIN_RIVER";
Achievements[8] = "8 SP_WIN_FULLAHEAD";
Achievements[9] = "8 SP_WIN_INTERROGATION_ESCAPE";
Achievements[10] = "8 SP_WIN_UNDERWATERBASE";
Achievements[11] = "8 SP_VWIN_FLASHPOINT";
Achievements[12] = "8 SP_VWIN_HUE_CITY";
Achievements[13] = "8 SP_VWIN_RIVER";
Achievements[14] = "8 SP_VWIN_FULLAHEAD";
Achievements[15] = "8 SP_VWIN_UNDERWATERBASE";
Achievements[16] = "8 SP_LVL_CUBA_CASTRO_ONESHOT";
Achievements[17] = "8 SP_LVL_VORKUTA_VEHICULAR";
Achievements[18] = "8 SP_LVL_VORKUTA_SLINGSHOT";
Achievements[19] = "8 SP_LVL_KHESANH_MISSILES";
Achievements[20] = "8 SP_LVL_HUECITY_AIRSUPPORT";
Achievements[21] = "8 SP_LVL_HUECITY_DRAGON";
Achievements[22] = "8 SP_LVL_CREEK1_DESTROY_MG";
Achievements[23] = "8 SP_LVL_CREEK1_KNIFING";
Achievements[24] = "8 SP_LVL_KOWLOON_DUAL";
Achievements[25] = "8 SP_LVL_RIVER_TARGETS";
Achievements[26] = "8 SP_LVL_WMD_RSO";
Achievements[27] = "8 SP_LVL_WMD_RELAY";
Achievements[28] = "8 SP_LVL_POW_HIND";
Achievements[29] = "8 SP_LVL_POW_FLAMETHROWER";
Achievements[30] = "8 SP_LVL_FULLAHEAD_2MIN";
Achievements[31] = "8 SP_LVL_REBIRTH_MONKEYS";
Achievements[32] = "8 SP_LVL_REBIRTH_NOLEAKS";
Achievements[33] = "8 SP_LVL_UNDERWATERBASE_MINI";
Achievements[34] = "8 SP_LVL_FRONTEND_CHAIR";
Achievements[35] = "8 SP_LVL_FRONTEND_ZORK";
Achievements[36] = "8 SP_GEN_MASTER";
Achievements[37] = "8 SP_GEN_FRAGMASTER";
Achievements[38] = "8 SP_GEN_ROUGH_ECO";
Achievements[39] = "8 SP_GEN_CROSSBOW";
Achievements[40] = "8 SP_GEN_FOUNDFILMS";
Achievements[41] = "8 SP_ZOM_COLLECTOR";
Achievements[42] = "8 SP_ZOM_NODAMAGE";
Achievements[43] = "8 SP_ZOM_TRAPS";
Achievements[44] = "8 SP_ZOM_SILVERBACK";
Achievements[45] = "8 SP_ZOM_CHICKENS";
Achievements[46] = "8 SP_ZOM_FLAMINGBULL";
Achievements[47] = "8 MP_FILM_CREATED";
Achievements[48] = "8 MP_WAGER_MATCH";
Achievements[49] = "8 MP_PLAY";
Achievements[50] = "8 DLC1_ZOM_OLDTIMER";
Achievements[51] = "8 DLC1_ZOM_HARDWAY";
Achievements[52] = "8 DLC1_ZOM_PISTOLERO";
Achievements[53] = "8 DLC1_ZOM_BIGBADDABOOM";
Achievements[54] = "8 DLC1_ZOM_NOLEGS";
Achievements[55] = "8 DLC2_ZOM_PROTECTEQUIP";
Achievements[56] = "8 DLC2_ZOM_LUNARLANDERS";
Achievements[57] = "8 DLC2_ZOM_FIREMONKEY";
Achievements[58] = "8 DLC2_ZOM_BLACKHOLE";
Achievements[59] = "8 DLC2_ZOM_PACKAPUNCH";
Achievements[60] = "8 DLC3_ZOM_STUNTMAN";
Achievements[61] = "8 DLC3_ZOM_SHOOTING_ON_LOCATION";
Achievements[62] = "8 DLC3_ZOM_QUIET_ON_THE_SET";
Achievements[63] = "8 DLC4_ZOM_TEMPLE_SIDEQUEST";
Achievements[64] = "8 DLC5_ZOM_CRYOGENIC_PARTY";
Achievements[65] = "8 DLC5_ZOM_BIG_BANG_THEORY";
Achievements[66] = "8 DLC5_ZOM_GROUND_CONTROL";
Achievements[67] = "8 DLC5_ZOM_ONE_SMALL_HACK";
Achievements[68] = "8 DLC5_ZOM_ONE_GIANT_LEAP";
Achievements[69] = "8 DLC5_ZOM_PERKS_IN_SPACE";
Achievements[70] = "8 DLC5_ZOM_FULLY_ARMED";
Achievements[71] = "8 DLC4_ZOM_ZOMB_DISPOSAL";
Achievements[72] = "8 DLC4_ZOM_MONKEY_SEE_MONKEY_DONT";
Achievements[73] = "8 DLC4_ZOM_BLINDED_BY_THE_FRIGHT";
Achievements[74] = "8 DLC4_ZOM_SMALL_CONSOLATION";
byte[] FT111 = new byte[] { 0x41 };
byte[] FT11 = new byte[] { 0x40 };
byte[] RPCON1 = new byte[] { 0x38, 0x60, 0xFF, 0xFF, 0x38, 0x80, 0x00, 0x00, 0x3C, 0xA0, 0x02, 0x00, 0x30, 0xA5, 0x50, 0x00, 0x4B, 0xF8, 0x2E, 0x2D, 0x4B, 0xFF, 0xFB, 0x78 };
byte[] RPCOFF1 = new byte[] { 0x82, 0xB9, 0x00, 0x00, 0x3C, 0xE0, 0x00, 0xD7, 0x3D, 0x80, 0x00, 0x92, 0x56, 0xA4, 0x38, 0x30, 0x56, 0xBB, 0x18, 0x38, 0x3B, 0x87, 0x9D, 0x04 };
for (int i = 0; i < 75; i++)
{
PS3.SetMemory(0x2005000, Encoding.ASCII.GetBytes(Achievements + "\0"));
PS3.SetMemory(0x466298, FT111);
PS3.SetMemory(0x4667B4, RPCON1);
System.Threading.Thread.Sleep(15);
PS3.SetMemory(0x466298, FT11);
PS3.SetMemory(0x4667B4, RPCOFF1);
}
}
Addresses (by SC58 )
0x003E95F0 - sv_gamesendservercommand(int clientNum, svscmd_type type, const char *text)
0x00370638 - G_LocalizedStringIndex(const char *string)
0x004C4FF0 - Dvar_GetBool(const char *dvarName)
0x00399CC8 - CBUF_AddText(int localClientNum, const char *text)
0x003F62A8 - Sv_SendClientSnapshot(client_s *client)
0x002D85E0 - Player_Die(unsigned int *self, unsigned int *inflictor, unsigned int *attacker, int damage, int meansOfDeath, int iWeapon, const float *vDir, unsigned int hitLoc, int psTimeOffset)
0x0007B720 - BG_GetPerkIndexForName(char *perkName)
0x00377208 - G_GivePlayerWeapon(playerState_s *pPS, int iWeaponIndex, char altModelIndex)
0x002D2D98 - G_InitializeAmmo(gentity_s *pSelf, int weaponIndex, char weaponModel, int hadWeapon)
0x00356BE0 - G_CallSpawnEntity(gentity_s *ent)
0x0036FFA0 - G_ModelIndex(const char *name)
0x00370238 - HudElem_Alloc(int clientNum, int teamNum)
0x003DFD90 - Sv_KickClient(client_s *cl, char *playerName, int maxPlayerNameLen)
0x003376C8 - SP_script_model(gentity_s *pSelf)
0x012ab290 - g_entity
0x003705D0 - G_MaterialIndex(const char *name)
0x003701D8 - G_SetModel(gentity_s *ent, const char *modelName)
0x00373488 - G_Spawn(void)
0x011F2738 - G_Hudelem
0x00375548 - G_GetWeaponIndexForName(const char *name)
0x0037FE50 - G_SpawnTurret(gentity_s *self, const char *weaponinfoname)
0x003EED08 - Sv_AddServerCommand
0x003E5200 - Sv_SendClientGameState(Client_s *)
0x002D4BA0 - G_Say(gentity_s *ent, gentity_s *target, int mode, const char *chatText)
0x002CA520 - PlayerCmd_SayAll
0x002CA608 - PlayerCmd_SayTeam
0x003E0848 - Sv_FastRestart_f
0x003E0660 - Sv_Maprestart(int fast_restart)
0x003E7528 - Sv_Addtestclient(void)
0x00310470 - GScr_AddTestClient
0x003E47B8 - SV_ClientCommand(client_s *cl, msg_t *msg)
0x003E1B60 - SV_ExecuteClientCommand(client_s *cl, const char *s, int clientOK)
0x0039B6C0 - SV_Cmd_TokenizeString(const char *text_in)
0x002D6140 - ClientCommand(int clientNum)
0x003996E8 - SV_Cmd_EndTokenizedString(void)
0x000C0A98 - BG_GetWeaponDef(unsigned int weaponIndex)
0x00356DF0 - G_Callspawn
0x00357500 - G_SpawnEntitiesFromString(void)
0x003EAD98 - SV_SetConfigstring(int index, const char *val)
0x005CF9B0 - Scr_GetVector(unsigned int index, float *vectorValue)
0x4C7370 - Dvar_GetString
Zombies
Name And Motd
Lobby Name Offset: 0x01C33DB0
Message of the day Offset: 0x01c8004c
Client Offsets Interval: 0x1d30
In-Game Name
Offset: 0x011008B8
Godmode
Bytes: 0x08,0x88,0x08,0x88 for On, 0x00,0x00,0x00,0x64 for Off
Offset: 0x01100840
Dead Ops Arcade Godmode
Offset: 0x010FED8F
Unlimited Ammo
Bytes: 15,0xff,0xff,0xff for On
Offset 1: 0x010FF138
Offset 2: 0x010FF148
Offset 3: 0x010FF160
Offset 4: 0x010FF140
Offset 5: 0x010FF168
Offset 6: 0x010FF150
mFlags
Bytes: 0x01 for noclip,0x02 for ufo, 0x04 for frozen
Offset: 0x0110098F
Weapons
Primary Weapon: 0x010fef6f
Secondary Weapon: 0x010fef9f
Dead Ops Arcade Weapon
Bytes: FlameThrower- 0A ShotGun- 0E RayGun- 0B RegularGun- 0C MiniGun- 0D GranadeLuancher- 0F
Offset: 0x010FEF57
Modes
Bytes: 0x01 for notarget, 0x02 for spectator,0x00 for default
Offset: 0x0110079B
In-Game Stats
Score/Money Offset: 0x0110090C
Kills Offset: 0x01100910
Headshots Offset: 0x01100930
Revives Offset: 0x0110092C
Downs Offset: 0x01100928
Speed
Bytes: 0x40, 0x74 for super,0x00, 0x00 for freeze,0x3f, 0x80 for default
Offset: 0x01100854
Scripts
SV_GameSendServerCommand
public void SV_GameSendServerCommand(int client, string command)
{
RPC.Call(0x003C33A8, client, 1, command);
}
Round Skip
First add timer then a button,
add this to the button:
Cbuf_AddText(0,"set timescale 10");
timer1.Start();
Then this to the timer and set the interval 200/500 otherwise the game can crash.
Cbuf_AddText(0,"ai axis delete");
Cbuf_AddText
public void Cbuf_AddText(int localClient,string command)
{
RPC.Call(0x00395BA8,localClient,command);
}
SetModel
public void SetModel(int client, string model)
{
RPC.Call(0x00305940, (uint)(0xFA805C + client * 0x34C), model);
}
Aim Assist (By me)
public void Give_AimAssist(int client)
{
SV_SendServerCommand(client, "v aim_lockon_region_height 480");
SV_SendServerCommand(client, "v aim_lockon_region_width 640");
SV_SendServerCommand(client, "v aim_lockon_enabled 1");
Thread.Sleep(10);
SV_SendServerCommand(client, "v aim_lockon_strength 1");
SV_SendServerCommand(client, "v aim_lockon_deflection 0");
SV_SendServerCommand(client, "v aim_autoaim_enabled 1");
Thread.Sleep(10);
SV_SendServerCommand(client, "v aim_autoaim_region_height 480");
SV_SendServerCommand(client, "v aim_autoaim_region_width 640");
SV_SendServerCommand(client, "v aim_slowdown_yaw_scale_ads 0");
Thread.Sleep(10);
SV_SendServerCommand(client, "v aim_slowdown_yaw_scale 0");
SV_SendServerCommand(client, "v aim_slowdown_pitch_scale 0");
SV_SendServerCommand(client, "v aim_slowdown_pitch_scale_ads 0");
Thread.Sleep(10);
SV_SendServerCommand(client, "v aim_slowdown_region_height 0");
SV_SendServerCommand(client, "v aim_slowdown_region_width 0");
SV_SendServerCommand(client, "v aim_slowdown_enabled 1");
Thread.Sleep(10);
SV_SendServerCommand(client, "v aim_aimAssistRangeScale 2");
SV_SendServerCommand(client, "v aim_autoAimRangeScale 2");
}
FPS (by SC58 )
0x00407554 - Turn on/off FPS
40 00 - ON
40 9A - OFF
0x00827950 - Text Position
0x0082794c - Text Size
0x008283a8 - Text For Menu
All Clients Buttons Monitoring (By AlmightySo )
public static class Buttonz
{
public static Int32
L1 = 1048704,
L2 = 72704,
L3 = 1074003968,
R1 = -2147483648,
R2 = 131072,
R3 = 536870912,
Square = 67108864,
Cross = 2104320,
Crouch = 4194304,
Prone = 8388608,
Triangle = 8;
}
public static bool ButtonPressed(int client, int Button)
{
if (Convert.ToInt32(Debug.ReadInt32(0x11007E8 + ((uint)client * 0x104)) == Button)
return true;
else return false;
}
Local Clients Buttons Monitoring (by SC58 )
Offset for Client 0: 0x00B4EB60
Interval: 4392
Jetpack (by AlmightySo )
public uint findPS(int client)
{
return 0x10FEDB0 + ((uint)client * 0x104;
}
public void JetPack(int client)
{
float jH = Debug.ReadFloat(findPS(client));
jH += 70;
PS3.Extension.WriteFloat(findPS(client), jH);
}
//Use JetPack(); in a timer with button handling.
Addresses (by SC58 )
0x00304BA0 - G_LocalizedStringIndex(const char *string)
0x00304B38 - G_MaterialIndex(const char *name)
0x00452280 - Dvar_GetBool(const char *dvarName)
0x003C33A8 - SV_GameSendServerCommand(int clientNum, svscmd_type type, const char *text)
0x00395BA8 - CBUF_AddText(int localClientNum, const char *text)
0x00309E30 - G_GetWeaponIndexForName(const char *name)
0x00305940 - SetModel(gentity_s *ent, const char *modelName)
0x00305650 - G_ModelIndex(const char *name)
0x00EE7BF2 - G_Hudelem
0x000A4968 - BG_GetWeaponDef(unsigned int weaponIndex)
0x002FD098 - G_Callspawn
0x002FD9C8 - G_SpawnEntitiesFromString(void)
0x00073A88 - BG_GetPerkIndexForName(const char *perkName)
0x004BE508 - SV_ExecuteClientCommand(client_s *cl, const char *s, int clientOK)
0x003066E0 - G_Spawn(void)
0x002DDFF8 - SP_script_model(gentity_s *pSelf)
Useful Dvars (You can use these even when not host using cbuf_addtext)
noclip - you can fly
ufo - you can also fly with this
god - godmode (unlimited health..)
notarget - zombies can't see you
give <item here> - you can give weapons/perks
give all - gives you all weapons
take all - takes all your stuff
cg_thirdPerson - thirdperson (values: 1 or 0)
cg_fov - field of view (any value between 1-200)
ai axis delete - kills all zombies
cg_drawfps - fps in the corner (values: 1 or 0)
dropweapon - drops your current weapon
Non-Host Offsets
No Recoil
Bytes: ON 0x60, 0x00, 0x00, 0x00 ,OFF 0x4B, 0xF3, 0xFF, 0x89
Offset: 0x15A320
Super Steady Aim
Bytes: ON 2F 80 00 00, OFF 2F 80 00 02
Offset: 0x91014
Credits
SC58
AlmightySo
Choco
Jo-Milk
Seb5594
primetime43
xPAQz
DexModderFTW
Eddie Mac
iNDMx - Here is also his good thread: You must login or register to view this content.
Anera
Me =D
I will update the thread soon!
Last edited by
makeabce ; 04-25-2016 at 03:56 PM.
Reason: added fps rpc to mp scripts
The following 31 users say thank you to makeabce for this useful post:
-JM-, A Friend, APOCALYP, Azus, bmob10189, Chris, Father Luckeyy, hackeveryone, Hunter926, iNDMx, Insult, iTzzTrojan, kainer wainer, LizzoOo, Mango_Knife, MODZ4FUN420, Mogren, NickBeHaxing, Obris, gopro_2027, puffindaherb, ShutTheCrunchUp, Swaqq, SyTry, TheGreenPlanet, TreyarchTragedy, xPAQz, xSuperLᴏbbies, XxBlud23xX
05-03-2016, 07:07 PM
#83
TheGreenPlanet
Do a barrel roll!
Im starting to get the hang of this i found these today:
//For MP
Atan - 0x55A098
va -0x4DB3D8
gentity_s - 0x12AB290
Scr_ObjectError - 0x5CE938
Scr_GetString - 0x5D0D68
Scr_GetFloat - 0x5D0DA0
Scr_AddFloat - 0x5DF630
R_NormalizedTextScale - 0x734310
GScr_LoadConsts - 0x37DBD8
BG_GetWeaponDef - 0xC0A98
BG_weaponDefs - 0xBD877C
SL_GetString - 0x5B99C8
SL_ConvertToString - 5B6D10
i found these today://For MP
Atan - 0x55A098
va -0x4DB3D8
gentity_s - 0x12AB290
Scr_ObjectError - 0x5CE938
Scr_GetString - 0x5D0D68
Scr_GetFloat - 0x5D0DA0
Scr_AddFloat - 0x5DF630
R_NormalizedTextScale - 0x734310
GScr_LoadConsts - 0x37DBD8
BG_GetWeaponDef - 0xC0A98
BG_weaponDefs - 0xBD877C
SL_GetString - 0x5B99C8
SL_ConvertToString - 5B6D10
Last edited by
TheGreenPlanet ; 06-29-2016 at 06:25 PM.
05-12-2016, 05:15 PM
#84
-JM-
Space Ninja
Originally posted by makeabce
Hello guys, here is my offsets thread! The old one was okay,but littlebit messy and here is more stuff.
Multiplayer
Name and Stats
Non-Host Offsets
Super Sleight of Hand
Chrome Players
Wallhack
Rapid Fire
Redboxes
Blackbird
Super Steady Aim
No Recoil
Client Offsets Interval: 0x2A38
In-Game Name
Godmode Scpript
mFlags
Unlimited Ammo Scpript
Blackbird
Reconplane
Second Chance
Speed
In-Game Camo
Teleport
Scripts
Aimbot (By Seb5594 & DexModderFTW & Eddie mac)
Cbuf_AddText
cl_ingame
Unlock All
SV_GameSendServerCommand
G_SetModel
FPS RPC (By Jo-Milk)
RPC (By SC58 And Choco )
Buttons
Buttons Monitoring (by seb5594)
Local Client Buttons Monitoring (by xPAQz )
FPS (By SC58 )
Unlock All Trophys (by SC58 )
Addresses (by SC58 )
Zombies
Name And Motd
Client Offsets Interval: 0x1d30
In-Game Name
Godmode
Dead Ops Arcade Godmode
Unlimited Ammo
mFlags
Weapons
Dead Ops Arcade Weapon
Modes
In-Game Stats
Speed
Scripts
SV_GameSendServerCommand
Round Skip
Cbuf_AddText
SetModel
Aim Assist (By me)
FPS (by SC58 )
All Clients Buttons Monitoring (By AlmightySo )
Local Clients Buttons Monitoring (by SC58 )
Jetpack (by AlmightySo )
Addresses (by SC58 )
Useful Dvars (You can use these even when not host using cbuf_addtext)
Non-Host Offsets
No Recoil
Super Steady Aim
Credits
SC58
AlmightySo
Choco
Jo-Milk
Seb5594
primetime43
xPAQz
DexModderFTW
Eddie Mac
iNDMx - Here is also his good thread: You must login or register to view this content.
Anera
Me =D
I will update the thread soon!
Multiplayer
Name and Stats
Name Offset: 0x02000934
Class Name Offset: 0x01c3896f (Class # 1-5) & 0x01c43cf4 (Class # 6-10)
COD Points Offset: 0x020942d1
Time Played Offset: 0x02094731
Total Wins Offset: 0x0209475d
Total Losses Offset: 0x020944dd
Prestige Offset: 0x020946dd
Rank Offset (score basically): 0x020946e5
Kills Offset: 0x02094429
Deaths Offset: 0x020942f5
Assists Offset: 0x02094291
Kill/Death Ratio In Weapons Offset: 0x02094425
Wins/Loss Ration In Career Offset: 0x02094761
Headshots Offset: 0x0209440d
Amount Spent In Contracts Offset: 0x020942dd
Contracts Purchased Offset: 0x020942e1
XP Award In Contracts Offset: 0x020942e5
Return On Investment Contracts Offset (This is also amount earned) : 0x020942d9
Games Played Offset: 0x020938b1
Wager Match Earnings Offset: 0x020944d9
Unlock All Offset: 0x02094990 (Unlock All Bytes: https://pastebin.com/MxmMrR22)
Non-Host Offsets
Super Sleight of Hand
Bytes: 0x02 for on, 0x01 for off
Offset: 0xBBC2E8
Chrome Players
Bytes: 0x38, 0xC0, 0xFF, 0xFF for On, 0xFC, 0xC0, 0xF8, 0x90 for Off
Offset: 0x131144
Wallhack
Bytes: 0x38, 0xC0, 0xF0, 0x03 for On,0xFC, 0xC0, 0xF8, 0x90 for Off
Offset: 0x131144
Rapid Fire
Bytes: 0x02 for On, 0x01 for Off
Offset: 0xBBC2EC
Redboxes
Bytes: 0x60,0x00,0x00,0x00 for both, and when off then change redboxes offset with these: 0x41, 0x86, 0x02, 0x78
Perk Check Offset: 0x001206C8
Redboxes Offset: 0x001205C0
Blackbird
Bytes: 0x40, 0x9A, 0x00, 0xC4 for On, 0x41, 0x9A, 0x00, 0xC4 for Off
Offset: 0xEBDF4
Super Steady Aim
Bytes: 0x60,0x00,0x00,0x00 for On, 0x2F, 0x80, 0x00, 0x02 for Off
Offset: 0xAB8EC
No Recoil
Bytes: 0x60,0x00,0x00,0x00 for On, 0x4B, 0xF1, 0x84, 0xCD for Off
Offset: 0x19B244
Client Offsets Interval: 0x2A38
In-Game Name
Offset: 0x139784C
Godmode Scpript
public void Godmode(uint client)
{
PS3.SetMemory((0x12ab290 + (client * 760)) + 0x194, new byte[4]);
Thread.Sleep(50);
PS3.SetMemory((0x12ab290 + (client * 760)) + 0x194, new byte[] { 15, 0xff, 0xff, 0xff });
}
mFlags
Bytes: 0x01 for noclip,0x02 for ufo
Offset: 0x13979BF
Unlimited Ammo Scpript
public void UnlimitedAmmo(uint client)
{
PS3.SetMemory((0x13950c8 + (client * 0x2a3) + 0x388, new byte[] { 15, 0xff, 0xff, 0xff });
PS3.SetMemory((0x13950c8 + (client * 0x2a3) + 0x400, new byte[] { 15, 0xff, 0xff, 0xff });
PS3.SetMemory((0x13950c8 + (client * 0x2a3) + 0x380, new byte[] { 15, 0xff, 0xff, 0xff });
PS3.SetMemory((0x13950c8 + (client * 0x2a3) + 0x3f8, new byte[] { 15, 0xff, 0xff, 0xff });
PS3.SetMemory((0x13950c8 + (client * 0x2a3) + 0x410, new byte[] { 15, 0xff, 0xff, 0xff });
PS3.SetMemory((0x13950c8 + (client * 0x2a3) + 0x408, new byte[] { 15, 0xff, 0xff, 0xff });
}
Blackbird
Bytes: 0x01 On, 0x00 Off
Offset: 0x1397AEB
Reconplane
Bytes: 0x03 for On, 0x00 for Off
Offset: 0x1397967
Second Chance
Bytes: 0x01 for On
Offset: 0x1397AEC
Speed
Bytes: 0x40,0x40 for super, 0x3F 0x80 for default, 0x00,0x00 for freeze
Offset: 0x1397880
In-Game Camo
Bytes: 60 for gold, 10 for ice,13 for red,10 for olive,20 for nevada,0x18 for sahara
Offset: 0x013952E0
Teleport
Offset: 0x13950f0
Scripts
Aimbot (By Seb5594 & DexModderFTW & Eddie mac)
public class Aimbot
{
#region Aimbot
//All of the getting info etc.
public static uint G_Entity(uint client)
{
return 0x012ab290 + (client * 0x2F;
}
public static float[] getOrigin(uint clientNum)
{
float[] origin = new float[3];
origin[0] = Lib.ReadSingle(0x013950c8 + 0x2A38 * clientNum + 0x24);
origin[1] = Lib.ReadSingle(0x013950c8 + 0x2A38 * clientNum + 0x24 + 0x4);
origin[2] = Lib.ReadSingle(0x013950c8 + 0x2A38 * clientNum + 0x24 + 0x;
return origin;
}
public static UInt32 G_Entity(Int32 ClientIndex)
{
return 0x16B7920 + ((UInt32)ClientIndex * 0x31C);
}
public static int GetHost()
{
string str = Lib.ReadString(0x172a58;
for (int i = 0; i < 0x12; i++)
{
string str2 = Lib.ReadString((uint)(0xf1651c + (i * 0x3600)));
if (str == str2)
{
return i;
}
}
return -1;
}
public static Boolean Exists(Int32 clientIndex)
{
return Lib.ReadString(0x013978d0 + ((uint)clientIndex * 0x2A3) != "";
}
public static Boolean IsAlive(Int32 clientIndex)
{
return (Lib.ReadByte(0x0139793b + ((uint)clientIndex * 0x2A3) == 0);
}
public static Boolean isSameTeam(Int32 Owner, Int32 Victim)
{
return Lib.ReadInt32(0x01397894 + ((uint)Owner * 0x2A3) == Lib.ReadInt32(0x01397894 + ((uint)Victim * 0x2A3);
}
public static Single GetDistance3D(Single[] p1, Single[] p2)
{
float[] numArray3 = new float[] { p2[0] - p1[0], p2[1] - p1[1], p2[2] - p1[2] };
return ((numArray3[0] * numArray3[0]) + (numArray3[1] * numArray3[1])) + (numArray3[2] * numArray3[2]);
}
public static int GetNearestClientFromAttacker(int You)
{
int CIndex = -1;
double Closest = 1E+08f;
for (int i = 0; i < 12; i++)
{
if (((Exists(i) && IsAlive(i) && !isSameTeam(You, i))))
{
double Bla = GetDistance3D(getOrigin((uint)You), getOrigin((uint)i));
if (Bla < Closest)
{
CIndex = i;
Closest = Bla;
}
}
}
return CIndex;
}
//The Real Aimbot Code-----
//function to convert a vector to angles
public static Single[] vectoangles(Int32 clientIndex, Int32 secondPlayer)
{
Single[] numArray1 = getOrigin((uint)clientIndex);
Single[] numArray2 = getOrigin((uint)secondPlayer);
Single[] Angles = {(numArray2[0] - numArray1[0]), (numArray2[1] - numArray1[1]), (numArray2[2] - numArray1[2])};
Single num2;
Single num3;
Single[] numArray = new Single[3];
if ((Angles[1] == 0f) && (Angles[0] == 0f))
{
num2 = 0f;
if (Angles[2] > 0f)
num3 = 90f;
else
num3 = 270f;
}
else
{
if (Angles[0] != -1f)
num2 = (Single)((Math.Atan2((Double)Angles[1], (Double)Angles[0]) * 180.0) / 3.1415926535897931);
else if (Angles[1] > 0f)
num2 = 90f;
else
num2 = 270f;
if (num2 < 0f)
num2 += 360f;
Single num = (Single)Math.Sqrt((Double)((Angles[0] * Angles[0]) + (Angles[1] * Angles[1])));
num3 = (Single)((Math.Atan2((Double)Angles[2], (Double)num) * 180.0) / 3.1415926535897931);
if (num3 < 0f)
num3 += 360f;
}
numArray[0] = -num3;
numArray[1] = num2;
return numArray;
}
//Set Set the clients angles
public static void SetClientViewAngles(Int32 clientIndex, Int32 Victim)
{
Single[] angles = vectoangles(clientIndex, Victim);
Lib.WriteSingle(0x10040000, angles);
RPC.Call(0x2C1E38, new Object[] { Addresses.G_Entity((uint)clientIndex), 0x10040000 });
}
//Just Aimbot Threads and Bools
public static bool[] AimbotStatus = new bool[12];
public static Thread[] AimbotThread = new Thread[12];
public static bool[] UnfairAimbot = new bool[12];
//This is what starts the Aimbot
public static void StartAimbot(int clientIndex)
{
ThreadStart start = null;
if (!AimbotStatus[clientIndex])
{
Thread.Sleep(100);
AimbotStatus[clientIndex] = true;
if (start == null)
{
start = () => InitializeAimbot(clientIndex);
}
AimbotThread[clientIndex] = new Thread(start);
AimbotThread[clientIndex].IsBackground = true;
AimbotThread[clientIndex].Start();
}
else
{
AimbotStatus[clientIndex] = false;
AimbotThread[clientIndex].Abort();
}
}
//Main Aimbot Code
private static void InitializeAimbot(int client)
{
PS3.Reconnect();
while (AimbotThread[client].IsAlive)
{
int nearestPlayer = GetNearestClientFromAttacker(client);
if (nearestPlayer != client)
{
if (ButtonPress.ButtonPressed(client, 03) || ButtonPress.ButtonPressed(client, 04))
{
SetClientViewAngles(client, nearestPlayer);
}
}
}
}
#endregion
//Example:
Aimbot.StartAimbot(int client);
Cbuf_AddText
public void cBuf_AddText(int localClient,string command)
{
RPC.Call(0x00399CC8, localClient, command);
}
cl_ingame
#region inGame
public static bool Dvar_GetBool(string DVAR)
{
bool State;
uint Value = (uint)RPC.Call(0x4C7BF0, DVAR);
if (Value == 1)
State = true;
else
State = false;
return State;
}
public static Boolean cl_inGame()
{
bool es;
if (Dvar_GetBool("cl_ingame") == true)
{
es = true;
}
else
{
es = false;
}
return es;
}
#endregion
// Thanks Chris for the original Dvar_GetBool function from his mw3 script and sc58 the correct address
Unlock All
public void UnlockAll()
{
PS3.SetMemory(0x02094990, new byte[] { 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF });
}
SV_GameSendServerCommand
public void SV_GameSendServerCommand(int client, string command)
{
RPC.Call(0x003E95F0, client, 1, command);
}
G_SetModel
public void SetModel(int client, string model)
{
RPC.Call(0x003701D8, (uint)(0x012ab290 + client * 0x2F, model);
}
FPS RPC (By Jo-Milk)
private void JM_RPC()
{
PS3.SetMemory(0x00466299, new byte[] { 0x9A });//RPC OFF
PS3.SetMemory(0x4667B4, new byte[] { 0x3F, 0x80, 0x10, 0x05, 0x81, 0x9C, 0x00, 0x48, 0x2C, 0x0C, 0x00, 0x00, 0x41, 0x82, 0x00, 0x64, 0x80, 0x7C, 0x00, 0x00, 0x80, 0x9C, 0x00, 0x04, 0x80, 0xBC, 0x00, 0x08, 0x80, 0xDC, 0x00, 0x0C, 0x80, 0xFC, 0x00, 0x10, 0x81, 0x1C, 0x00, 0x14, 0x81, 0x3C, 0x00, 0x18, 0x81, 0x5C, 0x00, 0x1C, 0x81, 0x7C, 0x00, 0x20, 0xC0, 0x3C, 0x00, 0x24, 0xC0, 0x5C, 0x00, 0x28, 0xC0, 0x7C, 0x00, 0x2C, 0xC0, 0x9C, 0x00, 0x30, 0xC0, 0xBC, 0x00, 0x34, 0xC0, 0xDC, 0x00, 0x38, 0xC0, 0xFC, 0x00, 0x3C, 0xC1, 0x1C, 0x00, 0x40, 0xC1, 0x3C, 0x00, 0x44, 0x7D, 0x89, 0x03, 0xA6, 0x4E, 0x80, 0x04, 0x21, 0x38, 0x80, 0x00, 0x00, 0x90, 0x9C, 0x00, 0x48, 0x90, 0x7C, 0x00, 0x4C, 0xD0, 0x3C, 0x00, 0x50, 0x48, 0x00, 0x00, 0x40 });//RPC CODE
PS3.SetMemory(0x10050000, new byte[0x2854]);//RPC arguments
PS3.SetMemory(0x00466299, new byte[] { 0x00 });//RPC ON
}
public static Int32 Call(UInt32 address, params Object[] parameters)//this is VezahHFH MW3 Call function I used same place to store the arguments because I'm Lazy and I don't feel like making that function since I code in C++ but I might optimize this function
{
Int32 length = parameters.Length;
Int32 index = 0;
UInt32 count = 0;
UInt32 Strings = 0;
UInt32 Single = 0;
UInt32 Array = 0;
while (index < length)
{
if (parameters[index] is Int32)
{
WriteInt32(0x10050000 + (count * 4), (Int32)parameters[index]);
count++;
}
else if (parameters[index] is UInt32)
{
WriteUInt32(0x10050000 + (count * 4), (UInt32)parameters[index]);
count++;
}
else if (parameters[index] is Int16)
{
WriteInt16(0x10050000 + (count * 4), (Int16)parameters[index]);
count++;
}
else if (parameters[index] is UInt16)
{
WriteUInt16(0x10050000 + (count * 4), (UInt16)parameters[index]);
count++;
}
else if (parameters[index] is Byte)
{
WriteByte(0x10050000 + (count * 4), (Byte)parameters[index]);
count++;
} //Should work now let me try
else
{
UInt32 pointer;
if (parameters[index] is String)
{
pointer = 0x10052000 + (Strings * 0x400);
WriteString(pointer, Convert.ToString(parameters[index]));
WriteUInt32(0x10050000 + (count * 4), pointer);
count++;
Strings++;
}
else if (parameters[index] is Single)
{
WriteSingle(0x10050024 + (Single * 4), (Single)parameters[index]);
Single++;
}
else if (parameters[index] is Single[])
{
Single[] Args = (Single[])parameters[index];
pointer = 0x10051000 + Array * 4;
WriteSingle(pointer, Args);
WriteUInt32(0x10050000 + count * 4, pointer);
count++;
Array += (UInt32)Args.Length;
}
}
index++;
}
WriteUInt32(0x10050048, address);
Thread.Sleep(20);
return ReadInt32(0x1005004c);
//or you could return a float pointer if the function that is called return one just check at the offset 0x10050050
}
RPC (By SC58 And Choco )
using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Threading.Tasks;
namespace BOIMPRPC
{
public class PS3
{
static uint processID;
private static uint GetProcessID()
{
uint[] ProcessIDs;
PS3_TMAPI.GetProcessList(0, out ProcessIDs);
return ProcessIDs[0];
}
public static void SetMemory(uint address, byte[] memory)
{
PS3_TMAPI.ProcessSetMemory(0, PS3_TMAPI.UnitType.PPU, processID, 0, address, memory);
}
public static byte[] GetMemory(uint address, int length)
{
byte[] bytes = new byte[length];
PS3_TMAPI.ProcessGetMemory(0, PS3_TMAPI.UnitType.PPU, processID, 0, address, ref bytes);
return bytes;
}
public static int Init()
{
processID = GetProcessID();
return RPC.Init();
}
}
public class RPC
{
static uint function_address;
public static int Init()
{
function_address = Get_func_address();
if (function_address == 0) return -1;
Enable_RPC();
return 0;
}
public static uint Get_func_address()
{
for (uint i = 0x7A21D4; i < 0x1000000; i += 4)
{
byte[] bytes = PS3.GetMemory(i, ;
if (((bytes[0] == 0x4B) && (bytes[1] == 0xFF) && (bytes[2] == 0xBE) && (bytes[3] == 0x05) && (bytes[4] == 0x4B) && (bytes[5] == 0xFF) && (bytes[6] == 0xFC) && (bytes[7] == 0x9))
{
return i + 0xC;
}
}
return 0;
}
public static void Enable_RPC()
{
PS3.SetMemory(function_address, new byte[] { 0x4E, 0x80, 0x00, 0x20 });
System.Threading.Thread.Sleep(20);
byte[] func = new byte[] { 0x7C, 0x08, 0x02, 0xA6, 0xF8, 0x01, 0x00, 0x80, 0x3C, 0x60, 0x10, 0x05, 0x81, 0x83, 0x00, 0x4C, 0x2C, 0x0C, 0x00, 0x00, 0x41, 0x82, 0x00, 0x64, 0x80, 0x83, 0x00, 0x04, 0x80, 0xA3, 0x00, 0x08, 0x80, 0xC3, 0x00, 0x0C, 0x80, 0xE3, 0x00, 0x10, 0x81, 0x03, 0x00, 0x14, 0x81, 0x23, 0x00, 0x18, 0x81, 0x43, 0x00, 0x1C, 0x81, 0x63, 0x00, 0x20, 0xC0, 0x23, 0x00, 0x24, 0xC0, 0x43, 0x00, 0x28, 0xC0, 0x63, 0x00, 0x2C, 0xC0, 0x83, 0x00, 0x30, 0xC0, 0xA3, 0x00, 0x34, 0xC0, 0xC3, 0x00, 0x38, 0xC0, 0xE3, 0x00, 0x3C, 0xC1, 0x03, 0x00, 0x40, 0xC1, 0x23, 0x00, 0x48, 0x80, 0x63, 0x00, 0x00, 0x7D, 0x89, 0x03, 0xA6, 0x4E, 0x80, 0x04, 0x21, 0x3C, 0x80, 0x10, 0x05, 0x38, 0xA0, 0x00, 0x00, 0x90, 0xA4, 0x00, 0x4C, 0x80, 0x64, 0x00, 0x50, 0xE8, 0x01, 0x00, 0x80, 0x7C, 0x08, 0x03, 0xA6, 0x38, 0x21, 0x00, 0x70, 0x4E, 0x80, 0x00, 0x20, 0x60, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x60, 0x00, 0x00, 0x00 };
PS3.SetMemory(function_address + 0x4, func);
PS3.SetMemory(0x10050000, new byte[0x2854]);
PS3.SetMemory(function_address, new byte[] { 0xF8, 0x21, 0xFF, 0x91 });
}
public static int Call(uint func_address, params object[] parameters)
{
int num_params = parameters.Length;
uint num_floats = 0;
for (uint i = 0; i < num_params; i++)
{
if (parameters[i] is int)
{
byte[] val = BitConverter.GetBytes((int)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, val);
}
else if (parameters[i] is uint)
{
byte[] val = BitConverter.GetBytes((uint)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, val);
}
else if (parameters[i] is string)
{
byte[] str = Encoding.UTF8.GetBytes(Convert.ToString(parameters[i]) + "\0");
PS3.SetMemory(0x10050054 + i * 0x400, str);
uint addr = 0x10050054 + i * 0x400;
byte[] address = BitConverter.GetBytes(addr);
Array.Reverse(address);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, address);
}
else if (parameters[i] is float)
{
num_floats++;
byte[] val = BitConverter.GetBytes((float)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050024 + ((num_floats - 1) * 0x4), val);
}
}
byte[] fadd = BitConverter.GetBytes(func_address);
Array.Reverse(fadd);
PS3.SetMemory(0x1005004C, fadd);
System.Threading.Thread.Sleep(20);
byte[] ret = PS3.GetMemory(0x10050050, 4);
Array.Reverse(ret);
return BitConverter.ToInt32(ret, 0);
}
Buttons
Buttons Monitoring (by seb5594)
public class Buttons
{
public static UInt32
X = 2104320,
O = 512,
Square = 67108864,
Triangle = 8,
L3 = 1074003968,
R3 = 536870912,
L2 = 72704,
R2 = 131072,
L1 = 1048704,
R1 = 2147483648,
Crouch = 4194304,
Prone = 8388608,
StartButton = 4;
}
public Boolean ButtonPressed(Int32 clientIndex, UInt32 Button)
{
if (BO1TMAPI.PS3.Extension.ReadUInt32((UInt32)G_Client(clientIndex) + 0x271 == Button)
return true;
else return false;
}
public Int32 G_Client(Int32 clientIndex)
{
return (Int32)0x13950C8 + 0x2A38 * clientIndex;
}
public UInt32 ReadUInt32(uint offset)
{
Byte[] YoLo = GetMemory(offset, 4);
Array.Reverse(YoLo, 0, 4);
return BitConverter.ToUInt32(YoLo, 0);
}
public byte[] GetMemory(uint address, int length)
{
byte[] buffer = new byte[length];
BO1TMAPI.PS3.GetMemory(address, buffer);
return buffer;
}
//Example how to use:
if(ButtonPressed(0,Buttons.L1))
{
// Mods/functions here
}
Local Client Buttons Monitoring (by xPAQz )
private static UInt32 LocalButtons = 0xd19800;
public enum Buttons
{
DpadUp = 0x1FF,
DpadDown = 0x20F,
DpadRight = 0x21F,
DpadLeft = -0xC47E5F,
R3 = 0x1CF,
Square = 0xEF,
Cross = 0xCF,
LeftCursorUp = 0x27F,
LeftCursorLeft = 0x29F,
LeftCursorRight = 0x2AF,
LeftCursorDown = 0x28F,
R2 = 0x1EF,
L2 = 0x1DF,
Select = 0x1AF,
Start = 0x19F
}
public static Boolean ButtonPressed(Buttons Button)
{
return Convert.ToBoolean(PS3.Extension.ReadByte(LocalButtons + (UInt32)Button) == 1);
}
FPS (By SC58 )
0x00466298 - Turn on/off FPS
40 00 - ON
40 9A - OFF
0x0091C860 - Text For Menu
0x0091BF38 - Text Position
0x0091BF34 - Text Size
Unlock All Trophys (by SC58 )
public void TrophyUnlocks_MP()
{
string[] Achievements = new string[75];
Achievements[0] = "8 SP_WIN_CUBA";
Achievements[1] = "8 SP_WIN_VORKUTA";
Achievements[2] = "8 SP_WIN_PENTAGON";
Achievements[3] = "8 SP_WIN_FLASHPOINT";
Achievements[4] = "8 SP_WIN_KHE_SANH";
Achievements[5] = "8 SP_WIN_HUE_CITY";
Achievements[6] = "8 SP_WIN_KOWLOON";
Achievements[7] = "8 SP_WIN_RIVER";
Achievements[8] = "8 SP_WIN_FULLAHEAD";
Achievements[9] = "8 SP_WIN_INTERROGATION_ESCAPE";
Achievements[10] = "8 SP_WIN_UNDERWATERBASE";
Achievements[11] = "8 SP_VWIN_FLASHPOINT";
Achievements[12] = "8 SP_VWIN_HUE_CITY";
Achievements[13] = "8 SP_VWIN_RIVER";
Achievements[14] = "8 SP_VWIN_FULLAHEAD";
Achievements[15] = "8 SP_VWIN_UNDERWATERBASE";
Achievements[16] = "8 SP_LVL_CUBA_CASTRO_ONESHOT";
Achievements[17] = "8 SP_LVL_VORKUTA_VEHICULAR";
Achievements[18] = "8 SP_LVL_VORKUTA_SLINGSHOT";
Achievements[19] = "8 SP_LVL_KHESANH_MISSILES";
Achievements[20] = "8 SP_LVL_HUECITY_AIRSUPPORT";
Achievements[21] = "8 SP_LVL_HUECITY_DRAGON";
Achievements[22] = "8 SP_LVL_CREEK1_DESTROY_MG";
Achievements[23] = "8 SP_LVL_CREEK1_KNIFING";
Achievements[24] = "8 SP_LVL_KOWLOON_DUAL";
Achievements[25] = "8 SP_LVL_RIVER_TARGETS";
Achievements[26] = "8 SP_LVL_WMD_RSO";
Achievements[27] = "8 SP_LVL_WMD_RELAY";
Achievements[28] = "8 SP_LVL_POW_HIND";
Achievements[29] = "8 SP_LVL_POW_FLAMETHROWER";
Achievements[30] = "8 SP_LVL_FULLAHEAD_2MIN";
Achievements[31] = "8 SP_LVL_REBIRTH_MONKEYS";
Achievements[32] = "8 SP_LVL_REBIRTH_NOLEAKS";
Achievements[33] = "8 SP_LVL_UNDERWATERBASE_MINI";
Achievements[34] = "8 SP_LVL_FRONTEND_CHAIR";
Achievements[35] = "8 SP_LVL_FRONTEND_ZORK";
Achievements[36] = "8 SP_GEN_MASTER";
Achievements[37] = "8 SP_GEN_FRAGMASTER";
Achievements[38] = "8 SP_GEN_ROUGH_ECO";
Achievements[39] = "8 SP_GEN_CROSSBOW";
Achievements[40] = "8 SP_GEN_FOUNDFILMS";
Achievements[41] = "8 SP_ZOM_COLLECTOR";
Achievements[42] = "8 SP_ZOM_NODAMAGE";
Achievements[43] = "8 SP_ZOM_TRAPS";
Achievements[44] = "8 SP_ZOM_SILVERBACK";
Achievements[45] = "8 SP_ZOM_CHICKENS";
Achievements[46] = "8 SP_ZOM_FLAMINGBULL";
Achievements[47] = "8 MP_FILM_CREATED";
Achievements[48] = "8 MP_WAGER_MATCH";
Achievements[49] = "8 MP_PLAY";
Achievements[50] = "8 DLC1_ZOM_OLDTIMER";
Achievements[51] = "8 DLC1_ZOM_HARDWAY";
Achievements[52] = "8 DLC1_ZOM_PISTOLERO";
Achievements[53] = "8 DLC1_ZOM_BIGBADDABOOM";
Achievements[54] = "8 DLC1_ZOM_NOLEGS";
Achievements[55] = "8 DLC2_ZOM_PROTECTEQUIP";
Achievements[56] = "8 DLC2_ZOM_LUNARLANDERS";
Achievements[57] = "8 DLC2_ZOM_FIREMONKEY";
Achievements[58] = "8 DLC2_ZOM_BLACKHOLE";
Achievements[59] = "8 DLC2_ZOM_PACKAPUNCH";
Achievements[60] = "8 DLC3_ZOM_STUNTMAN";
Achievements[61] = "8 DLC3_ZOM_SHOOTING_ON_LOCATION";
Achievements[62] = "8 DLC3_ZOM_QUIET_ON_THE_SET";
Achievements[63] = "8 DLC4_ZOM_TEMPLE_SIDEQUEST";
Achievements[64] = "8 DLC5_ZOM_CRYOGENIC_PARTY";
Achievements[65] = "8 DLC5_ZOM_BIG_BANG_THEORY";
Achievements[66] = "8 DLC5_ZOM_GROUND_CONTROL";
Achievements[67] = "8 DLC5_ZOM_ONE_SMALL_HACK";
Achievements[68] = "8 DLC5_ZOM_ONE_GIANT_LEAP";
Achievements[69] = "8 DLC5_ZOM_PERKS_IN_SPACE";
Achievements[70] = "8 DLC5_ZOM_FULLY_ARMED";
Achievements[71] = "8 DLC4_ZOM_ZOMB_DISPOSAL";
Achievements[72] = "8 DLC4_ZOM_MONKEY_SEE_MONKEY_DONT";
Achievements[73] = "8 DLC4_ZOM_BLINDED_BY_THE_FRIGHT";
Achievements[74] = "8 DLC4_ZOM_SMALL_CONSOLATION";
byte[] FT111 = new byte[] { 0x41 };
byte[] FT11 = new byte[] { 0x40 };
byte[] RPCON1 = new byte[] { 0x38, 0x60, 0xFF, 0xFF, 0x38, 0x80, 0x00, 0x00, 0x3C, 0xA0, 0x02, 0x00, 0x30, 0xA5, 0x50, 0x00, 0x4B, 0xF8, 0x2E, 0x2D, 0x4B, 0xFF, 0xFB, 0x78 };
byte[] RPCOFF1 = new byte[] { 0x82, 0xB9, 0x00, 0x00, 0x3C, 0xE0, 0x00, 0xD7, 0x3D, 0x80, 0x00, 0x92, 0x56, 0xA4, 0x38, 0x30, 0x56, 0xBB, 0x18, 0x38, 0x3B, 0x87, 0x9D, 0x04 };
for (int i = 0; i < 75; i++)
{
PS3.SetMemory(0x2005000, Encoding.ASCII.GetBytes(Achievements + "\0"));
PS3.SetMemory(0x466298, FT111);
PS3.SetMemory(0x4667B4, RPCON1);
System.Threading.Thread.Sleep(15);
PS3.SetMemory(0x466298, FT11);
PS3.SetMemory(0x4667B4, RPCOFF1);
}
}
Addresses (by SC58 )
0x003E95F0 - sv_gamesendservercommand(int clientNum, svscmd_type type, const char *text)
0x00370638 - G_LocalizedStringIndex(const char *string)
0x004C4FF0 - Dvar_GetBool(const char *dvarName)
0x00399CC8 - CBUF_AddText(int localClientNum, const char *text)
0x003F62A8 - Sv_SendClientSnapshot(client_s *client)
0x002D85E0 - Player_Die(unsigned int *self, unsigned int *inflictor, unsigned int *attacker, int damage, int meansOfDeath, int iWeapon, const float *vDir, unsigned int hitLoc, int psTimeOffset)
0x0007B720 - BG_GetPerkIndexForName(char *perkName)
0x00377208 - G_GivePlayerWeapon(playerState_s *pPS, int iWeaponIndex, char altModelIndex)
0x002D2D98 - G_InitializeAmmo(gentity_s *pSelf, int weaponIndex, char weaponModel, int hadWeapon)
0x00356BE0 - G_CallSpawnEntity(gentity_s *ent)
0x0036FFA0 - G_ModelIndex(const char *name)
0x00370238 - HudElem_Alloc(int clientNum, int teamNum)
0x003DFD90 - Sv_KickClient(client_s *cl, char *playerName, int maxPlayerNameLen)
0x003376C8 - SP_script_model(gentity_s *pSelf)
0x012ab290 - g_entity
0x003705D0 - G_MaterialIndex(const char *name)
0x003701D8 - G_SetModel(gentity_s *ent, const char *modelName)
0x00373488 - G_Spawn(void)
0x011F2738 - G_Hudelem
0x00375548 - G_GetWeaponIndexForName(const char *name)
0x0037FE50 - G_SpawnTurret(gentity_s *self, const char *weaponinfoname)
0x003EED08 - Sv_AddServerCommand
0x003E5200 - Sv_SendClientGameState(Client_s *)
0x002D4BA0 - G_Say(gentity_s *ent, gentity_s *target, int mode, const char *chatText)
0x002CA520 - PlayerCmd_SayAll
0x002CA608 - PlayerCmd_SayTeam
0x003E0848 - Sv_FastRestart_f
0x003E0660 - Sv_Maprestart(int fast_restart)
0x003E7528 - Sv_Addtestclient(void)
0x00310470 - GScr_AddTestClient
0x003E47B8 - SV_ClientCommand(client_s *cl, msg_t *msg)
0x003E1B60 - SV_ExecuteClientCommand(client_s *cl, const char *s, int clientOK)
0x0039B6C0 - SV_Cmd_TokenizeString(const char *text_in)
0x002D6140 - ClientCommand(int clientNum)
0x003996E8 - SV_Cmd_EndTokenizedString(void)
0x000C0A98 - BG_GetWeaponDef(unsigned int weaponIndex)
0x00356DF0 - G_Callspawn
0x00357500 - G_SpawnEntitiesFromString(void)
0x003EAD98 - SV_SetConfigstring(int index, const char *val)
0x005CF9B0 - Scr_GetVector(unsigned int index, float *vectorValue)
0x4C7370 - Dvar_GetString
Zombies
Name And Motd
Lobby Name Offset: 0x01C33DB0
Message of the day Offset: 0x01c8004c
Client Offsets Interval: 0x1d30
In-Game Name
Offset: 0x011008B8
Godmode
Bytes: 0x08,0x88,0x08,0x88 for On, 0x00,0x00,0x00,0x64 for Off
Offset: 0x01100840
Dead Ops Arcade Godmode
Offset: 0x010FED8F
Unlimited Ammo
Bytes: 15,0xff,0xff,0xff for On
Offset 1: 0x010FF138
Offset 2: 0x010FF148
Offset 3: 0x010FF160
Offset 4: 0x010FF140
Offset 5: 0x010FF168
Offset 6: 0x010FF150
mFlags
Bytes: 0x01 for noclip,0x02 for ufo, 0x04 for frozen
Offset: 0x0110098F
Weapons
Primary Weapon: 0x010fef6f
Secondary Weapon: 0x010fef9f
Dead Ops Arcade Weapon
Bytes: FlameThrower- 0A ShotGun- 0E RayGun- 0B RegularGun- 0C MiniGun- 0D GranadeLuancher- 0F
Offset: 0x010FEF57
Modes
Bytes: 0x01 for notarget, 0x02 for spectator,0x00 for default
Offset: 0x0110079B
In-Game Stats
Score/Money Offset: 0x0110090C
Kills Offset: 0x01100910
Headshots Offset: 0x01100930
Revives Offset: 0x0110092C
Downs Offset: 0x01100928
Speed
Bytes: 0x40, 0x74 for super,0x00, 0x00 for freeze,0x3f, 0x80 for default
Offset: 0x01100854
Scripts
SV_GameSendServerCommand
public void SV_GameSendServerCommand(int client, string command)
{
RPC.Call(0x003C33A8, client, 1, command);
}
Round Skip
First add timer then a button,
add this to the button:
Cbuf_AddText(0,"set timescale 10");
timer1.Start();
Then this to the timer and set the interval 200/500 otherwise the game can crash.
Cbuf_AddText(0,"ai axis delete");
Cbuf_AddText
public void Cbuf_AddText(int localClient,string command)
{
RPC.Call(0x00395BA8,localClient,command);
}
SetModel
public void SetModel(int client, string model)
{
RPC.Call(0x00305940, (uint)(0xFA805C + client * 0x34C), model);
}
Aim Assist (By me)
public void Give_AimAssist(int client)
{
SV_SendServerCommand(client, "v aim_lockon_region_height 480");
SV_SendServerCommand(client, "v aim_lockon_region_width 640");
SV_SendServerCommand(client, "v aim_lockon_enabled 1");
Thread.Sleep(10);
SV_SendServerCommand(client, "v aim_lockon_strength 1");
SV_SendServerCommand(client, "v aim_lockon_deflection 0");
SV_SendServerCommand(client, "v aim_autoaim_enabled 1");
Thread.Sleep(10);
SV_SendServerCommand(client, "v aim_autoaim_region_height 480");
SV_SendServerCommand(client, "v aim_autoaim_region_width 640");
SV_SendServerCommand(client, "v aim_slowdown_yaw_scale_ads 0");
Thread.Sleep(10);
SV_SendServerCommand(client, "v aim_slowdown_yaw_scale 0");
SV_SendServerCommand(client, "v aim_slowdown_pitch_scale 0");
SV_SendServerCommand(client, "v aim_slowdown_pitch_scale_ads 0");
Thread.Sleep(10);
SV_SendServerCommand(client, "v aim_slowdown_region_height 0");
SV_SendServerCommand(client, "v aim_slowdown_region_width 0");
SV_SendServerCommand(client, "v aim_slowdown_enabled 1");
Thread.Sleep(10);
SV_SendServerCommand(client, "v aim_aimAssistRangeScale 2");
SV_SendServerCommand(client, "v aim_autoAimRangeScale 2");
}
FPS (by SC58 )
0x00407554 - Turn on/off FPS
40 00 - ON
40 9A - OFF
0x00827950 - Text Position
0x0082794c - Text Size
0x008283a8 - Text For Menu
All Clients Buttons Monitoring (By AlmightySo )
public static class Buttonz
{
public static Int32
L1 = 1048704,
L2 = 72704,
L3 = 1074003968,
R1 = -2147483648,
R2 = 131072,
R3 = 536870912,
Square = 67108864,
Cross = 2104320,
Crouch = 4194304,
Prone = 8388608,
Triangle = 8;
}
public static bool ButtonPressed(int client, int Button)
{
if (Convert.ToInt32(Debug.ReadInt32(0x11007E8 + ((uint)client * 0x104)) == Button)
return true;
else return false;
}
Local Clients Buttons Monitoring (by SC58 )
Offset for Client 0: 0x00B4EB60
Interval: 4392
Jetpack (by AlmightySo )
public uint findPS(int client)
{
return 0x10FEDB0 + ((uint)client * 0x104;
}
public void JetPack(int client)
{
float jH = Debug.ReadFloat(findPS(client));
jH += 70;
PS3.Extension.WriteFloat(findPS(client), jH);
}
//Use JetPack(); in a timer with button handling.
Addresses (by SC58 )
0x00304BA0 - G_LocalizedStringIndex(const char *string)
0x00304B38 - G_MaterialIndex(const char *name)
0x00452280 - Dvar_GetBool(const char *dvarName)
0x003C33A8 - SV_GameSendServerCommand(int clientNum, svscmd_type type, const char *text)
0x00395BA8 - CBUF_AddText(int localClientNum, const char *text)
0x00309E30 - G_GetWeaponIndexForName(const char *name)
0x00305940 - SetModel(gentity_s *ent, const char *modelName)
0x00305650 - G_ModelIndex(const char *name)
0x00EE7BF2 - G_Hudelem
0x000A4968 - BG_GetWeaponDef(unsigned int weaponIndex)
0x002FD098 - G_Callspawn
0x002FD9C8 - G_SpawnEntitiesFromString(void)
0x00073A88 - BG_GetPerkIndexForName(const char *perkName)
0x004BE508 - SV_ExecuteClientCommand(client_s *cl, const char *s, int clientOK)
0x003066E0 - G_Spawn(void)
0x002DDFF8 - SP_script_model(gentity_s *pSelf)
Useful Dvars (You can use these even when not host using cbuf_addtext)
noclip - you can fly
ufo - you can also fly with this
god - godmode (unlimited health..)
notarget - zombies can't see you
give <item here> - you can give weapons/perks
give all - gives you all weapons
take all - takes all your stuff
cg_thirdPerson - thirdperson (values: 1 or 0)
cg_fov - field of view (any value between 1-200)
ai axis delete - kills all zombies
cg_drawfps - fps in the corner (values: 1 or 0)
dropweapon - drops your current weapon
Non-Host Offsets
No Recoil
Bytes: ON 0x60, 0x00, 0x00, 0x00 ,OFF 0x4B, 0xF3, 0xFF, 0x89
Offset: 0x15A320
Super Steady Aim
Bytes: ON 2F 80 00 00, OFF 2F 80 00 02
Offset: 0x91014
Credits
SC58
AlmightySo
Choco
Jo-Milk
Seb5594
primetime43
xPAQz
DexModderFTW
Eddie Mac
iNDMx - Here is also his good thread: You must login or register to view this content.
Anera
Me =D
I will update the thread soon!
idk what's new but here
0x13977C4 forceSpectatorClient:.space 4
0x13977C8 killCamEntity:.space 4
0x13977CC killCamTargetEntity:.space 4
0x13977D0 archiveTime:.space 4
0x13977D4 scriptPersId:.space 4
0x13977D8 connected:.space 4
0x1397844 localClient:.space 4
0x1397848 predictItemPickup:.space 4
0x139784C newnetname:.space 0x20
0x139786C maxHealth:.space 4
0x1397870 enterTime:.space 4
0x1397874 location:.space 4
0x1397878 voteCount:.space 4
0x139787C teamVoteCount:.space 4
0x1397880 moveSpeedScaleMultiplier:.space 4
0x1397884 viewmodelIndex:.space 4
013977DC cmdservertime:.space 4
013977E0 cmdbutton_bits:.space 8
013977E8 cmdangles:.space 0xC
013977F4 cmdweapon:.space 2
013977F6 cmdoffHandIndex:.space 2
013977F8 cmdlastWeaponAltModeSwitch:.space 1
013977F9 cmdforwardmove:.space 1
013977FA cmdrightmove:.space 1
013977FB cmdupmove:.space 1
013977FC cmdpitchmove:.space 1
013977FD cmdyawmove:.space 1
013977FF cmdmeleeChargeYaw:.space 4
01397803 cmdmeleeChargeDist:.space 1
0x1397807 cmdrollmove:.space 4
0x139780B cmdselectedLocation:.space 2
0x139780D cmdselectedYaw:.space 1
0x1397888 noSpectate:.space 4
0x139788C teamInfo:.space 4
0x1397890 clientIndex:.space 4
0x1397894 team:.space 4
0x1397898 ffaTeam:.space 4
0x139789C modelindex:.space 4
0x13978A0 attachModelIndex:.space 0x18
0x13978B8 attachTagIndex:.space 0x18
0x13978D0 name:.space 0x20 # char name[20]
0x13978F0 maxSprintTimeMultiplier:.space 4
0x13978F4 Rank:.space 4
0x13978F8 Prestige:.space 4
0x13978FC lastDamageTime:.space 4
0x1397900 lastStandStartTime:.space 4
0x1397908 xuid:.space 8
0x1397910 perks:.space 8
0x1397918 clanAbbrev:.space 8
0x1397920 attachedVehEntNum:.space 4
0x1397924 attachedVehSeat:.space 4
0x1397928 needsRevive:.space 4
0x139792C vehAnimState:.space 4
0x1397930 ping:.space 4
0x208B600 statentry
0x00B61CE0 klicensee offset
it's a copy past from my ida so I found my self even if some been found before I did
Last edited by
Gryphus ; 11-11-2016 at 05:25 PM.
Reason: added spoiler
The following user thanked -JM- for this useful post:
08-25-2016, 07:34 PM
#85
TheGreenPlanet
Do a barrel roll!
Originally posted by makeabce
Hello guys, here is my offsets thread! The old one was okay,but littlebit messy and here is more stuff.
Multiplayer
Name and Stats
Non-Host Offsets
Super Sleight of Hand
Chrome Players
Wallhack
Rapid Fire
Redboxes
Blackbird
Super Steady Aim
No Recoil
Client Offsets Interval: 0x2A38
In-Game Name
Godmode Scpript
mFlags
Unlimited Ammo Scpript
Blackbird
Reconplane
Second Chance
Speed
In-Game Camo
Teleport
Scripts
Aimbot (By Seb5594 & DexModderFTW & Eddie mac)
Cbuf_AddText
cl_ingame
Unlock All
SV_GameSendServerCommand
G_SetModel
FPS RPC (By Jo-Milk)
RPC (By SC58 And Choco )
Buttons
Buttons Monitoring (by seb5594)
Local Client Buttons Monitoring (by xPAQz )
FPS (By SC58 )
Unlock All Trophys (by SC58 )
Addresses (by SC58 )
Zombies
Name And Motd
Client Offsets Interval: 0x1d30
In-Game Name
Godmode
Dead Ops Arcade Godmode
Unlimited Ammo
mFlags
Weapons
Dead Ops Arcade Weapon
Modes
In-Game Stats
Speed
Scripts
SV_GameSendServerCommand
Round Skip
Cbuf_AddText
SetModel
Aim Assist (By me)
FPS (by SC58 )
All Clients Buttons Monitoring (By AlmightySo )
Local Clients Buttons Monitoring (by SC58 )
Jetpack (by AlmightySo )
Addresses (by SC58 )
Useful Dvars (You can use these even when not host using cbuf_addtext)
Non-Host Offsets
No Recoil
Super Steady Aim
Credits
SC58
AlmightySo
Choco
Jo-Milk
Seb5594
primetime43
xPAQz
DexModderFTW
Eddie Mac
iNDMx - Here is also his good thread: You must login or register to view this content.
Anera
Me =D
I will update the thread soon!
Multiplayer
Name and Stats
Name Offset: 0x02000934
Class Name Offset: 0x01c3896f (Class # 1-5) & 0x01c43cf4 (Class # 6-10)
COD Points Offset: 0x020942d1
Time Played Offset: 0x02094731
Total Wins Offset: 0x0209475d
Total Losses Offset: 0x020944dd
Prestige Offset: 0x020946dd
Rank Offset (score basically): 0x020946e5
Kills Offset: 0x02094429
Deaths Offset: 0x020942f5
Assists Offset: 0x02094291
Kill/Death Ratio In Weapons Offset: 0x02094425
Wins/Loss Ration In Career Offset: 0x02094761
Headshots Offset: 0x0209440d
Amount Spent In Contracts Offset: 0x020942dd
Contracts Purchased Offset: 0x020942e1
XP Award In Contracts Offset: 0x020942e5
Return On Investment Contracts Offset (This is also amount earned) : 0x020942d9
Games Played Offset: 0x020938b1
Wager Match Earnings Offset: 0x020944d9
Unlock All Offset: 0x02094990 (Unlock All Bytes: https://pastebin.com/MxmMrR22)
Non-Host Offsets
Super Sleight of Hand
Bytes: 0x02 for on, 0x01 for off
Offset: 0xBBC2E8
Chrome Players
Bytes: 0x38, 0xC0, 0xFF, 0xFF for On, 0xFC, 0xC0, 0xF8, 0x90 for Off
Offset: 0x131144
Wallhack
Bytes: 0x38, 0xC0, 0xF0, 0x03 for On,0xFC, 0xC0, 0xF8, 0x90 for Off
Offset: 0x131144
Rapid Fire
Bytes: 0x02 for On, 0x01 for Off
Offset: 0xBBC2EC
Redboxes
Bytes: 0x60,0x00,0x00,0x00 for both, and when off then change redboxes offset with these: 0x41, 0x86, 0x02, 0x78
Perk Check Offset: 0x001206C8
Redboxes Offset: 0x001205C0
Blackbird
Bytes: 0x40, 0x9A, 0x00, 0xC4 for On, 0x41, 0x9A, 0x00, 0xC4 for Off
Offset: 0xEBDF4
Super Steady Aim
Bytes: 0x60,0x00,0x00,0x00 for On, 0x2F, 0x80, 0x00, 0x02 for Off
Offset: 0xAB8EC
No Recoil
Bytes: 0x60,0x00,0x00,0x00 for On, 0x4B, 0xF1, 0x84, 0xCD for Off
Offset: 0x19B244
Client Offsets Interval: 0x2A38
In-Game Name
Offset: 0x139784C
Godmode Scpript
public void Godmode(uint client)
{
PS3.SetMemory((0x12ab290 + (client * 760)) + 0x194, new byte[4]);
Thread.Sleep(50);
PS3.SetMemory((0x12ab290 + (client * 760)) + 0x194, new byte[] { 15, 0xff, 0xff, 0xff });
}
mFlags
Bytes: 0x01 for noclip,0x02 for ufo
Offset: 0x13979BF
Unlimited Ammo Scpript
public void UnlimitedAmmo(uint client)
{
PS3.SetMemory((0x13950c8 + (client * 0x2a3) + 0x388, new byte[] { 15, 0xff, 0xff, 0xff });
PS3.SetMemory((0x13950c8 + (client * 0x2a3) + 0x400, new byte[] { 15, 0xff, 0xff, 0xff });
PS3.SetMemory((0x13950c8 + (client * 0x2a3) + 0x380, new byte[] { 15, 0xff, 0xff, 0xff });
PS3.SetMemory((0x13950c8 + (client * 0x2a3) + 0x3f8, new byte[] { 15, 0xff, 0xff, 0xff });
PS3.SetMemory((0x13950c8 + (client * 0x2a3) + 0x410, new byte[] { 15, 0xff, 0xff, 0xff });
PS3.SetMemory((0x13950c8 + (client * 0x2a3) + 0x408, new byte[] { 15, 0xff, 0xff, 0xff });
}
Blackbird
Bytes: 0x01 On, 0x00 Off
Offset: 0x1397AEB
Reconplane
Bytes: 0x03 for On, 0x00 for Off
Offset: 0x1397967
Second Chance
Bytes: 0x01 for On
Offset: 0x1397AEC
Speed
Bytes: 0x40,0x40 for super, 0x3F 0x80 for default, 0x00,0x00 for freeze
Offset: 0x1397880
In-Game Camo
Bytes: 60 for gold, 10 for ice,13 for red,10 for olive,20 for nevada,0x18 for sahara
Offset: 0x013952E0
Teleport
Offset: 0x13950f0
Scripts
Aimbot (By Seb5594 & DexModderFTW & Eddie mac)
public class Aimbot
{
#region Aimbot
//All of the getting info etc.
public static uint G_Entity(uint client)
{
return 0x012ab290 + (client * 0x2F;
}
public static float[] getOrigin(uint clientNum)
{
float[] origin = new float[3];
origin[0] = Lib.ReadSingle(0x013950c8 + 0x2A38 * clientNum + 0x24);
origin[1] = Lib.ReadSingle(0x013950c8 + 0x2A38 * clientNum + 0x24 + 0x4);
origin[2] = Lib.ReadSingle(0x013950c8 + 0x2A38 * clientNum + 0x24 + 0x;
return origin;
}
public static UInt32 G_Entity(Int32 ClientIndex)
{
return 0x16B7920 + ((UInt32)ClientIndex * 0x31C);
}
public static int GetHost()
{
string str = Lib.ReadString(0x172a58;
for (int i = 0; i < 0x12; i++)
{
string str2 = Lib.ReadString((uint)(0xf1651c + (i * 0x3600)));
if (str == str2)
{
return i;
}
}
return -1;
}
public static Boolean Exists(Int32 clientIndex)
{
return Lib.ReadString(0x013978d0 + ((uint)clientIndex * 0x2A3) != "";
}
public static Boolean IsAlive(Int32 clientIndex)
{
return (Lib.ReadByte(0x0139793b + ((uint)clientIndex * 0x2A3) == 0);
}
public static Boolean isSameTeam(Int32 Owner, Int32 Victim)
{
return Lib.ReadInt32(0x01397894 + ((uint)Owner * 0x2A3) == Lib.ReadInt32(0x01397894 + ((uint)Victim * 0x2A3);
}
public static Single GetDistance3D(Single[] p1, Single[] p2)
{
float[] numArray3 = new float[] { p2[0] - p1[0], p2[1] - p1[1], p2[2] - p1[2] };
return ((numArray3[0] * numArray3[0]) + (numArray3[1] * numArray3[1])) + (numArray3[2] * numArray3[2]);
}
public static int GetNearestClientFromAttacker(int You)
{
int CIndex = -1;
double Closest = 1E+08f;
for (int i = 0; i < 12; i++)
{
if (((Exists(i) && IsAlive(i) && !isSameTeam(You, i))))
{
double Bla = GetDistance3D(getOrigin((uint)You), getOrigin((uint)i));
if (Bla < Closest)
{
CIndex = i;
Closest = Bla;
}
}
}
return CIndex;
}
//The Real Aimbot Code-----
//function to convert a vector to angles
public static Single[] vectoangles(Int32 clientIndex, Int32 secondPlayer)
{
Single[] numArray1 = getOrigin((uint)clientIndex);
Single[] numArray2 = getOrigin((uint)secondPlayer);
Single[] Angles = {(numArray2[0] - numArray1[0]), (numArray2[1] - numArray1[1]), (numArray2[2] - numArray1[2])};
Single num2;
Single num3;
Single[] numArray = new Single[3];
if ((Angles[1] == 0f) && (Angles[0] == 0f))
{
num2 = 0f;
if (Angles[2] > 0f)
num3 = 90f;
else
num3 = 270f;
}
else
{
if (Angles[0] != -1f)
num2 = (Single)((Math.Atan2((Double)Angles[1], (Double)Angles[0]) * 180.0) / 3.1415926535897931);
else if (Angles[1] > 0f)
num2 = 90f;
else
num2 = 270f;
if (num2 < 0f)
num2 += 360f;
Single num = (Single)Math.Sqrt((Double)((Angles[0] * Angles[0]) + (Angles[1] * Angles[1])));
num3 = (Single)((Math.Atan2((Double)Angles[2], (Double)num) * 180.0) / 3.1415926535897931);
if (num3 < 0f)
num3 += 360f;
}
numArray[0] = -num3;
numArray[1] = num2;
return numArray;
}
//Set Set the clients angles
public static void SetClientViewAngles(Int32 clientIndex, Int32 Victim)
{
Single[] angles = vectoangles(clientIndex, Victim);
Lib.WriteSingle(0x10040000, angles);
RPC.Call(0x2C1E38, new Object[] { Addresses.G_Entity((uint)clientIndex), 0x10040000 });
}
//Just Aimbot Threads and Bools
public static bool[] AimbotStatus = new bool[12];
public static Thread[] AimbotThread = new Thread[12];
public static bool[] UnfairAimbot = new bool[12];
//This is what starts the Aimbot
public static void StartAimbot(int clientIndex)
{
ThreadStart start = null;
if (!AimbotStatus[clientIndex])
{
Thread.Sleep(100);
AimbotStatus[clientIndex] = true;
if (start == null)
{
start = () => InitializeAimbot(clientIndex);
}
AimbotThread[clientIndex] = new Thread(start);
AimbotThread[clientIndex].IsBackground = true;
AimbotThread[clientIndex].Start();
}
else
{
AimbotStatus[clientIndex] = false;
AimbotThread[clientIndex].Abort();
}
}
//Main Aimbot Code
private static void InitializeAimbot(int client)
{
PS3.Reconnect();
while (AimbotThread[client].IsAlive)
{
int nearestPlayer = GetNearestClientFromAttacker(client);
if (nearestPlayer != client)
{
if (ButtonPress.ButtonPressed(client, 03) || ButtonPress.ButtonPressed(client, 04))
{
SetClientViewAngles(client, nearestPlayer);
}
}
}
}
#endregion
//Example:
Aimbot.StartAimbot(int client);
Cbuf_AddText
public void cBuf_AddText(int localClient,string command)
{
RPC.Call(0x00399CC8, localClient, command);
}
cl_ingame
#region inGame
public static bool Dvar_GetBool(string DVAR)
{
bool State;
uint Value = (uint)RPC.Call(0x4C7BF0, DVAR);
if (Value == 1)
State = true;
else
State = false;
return State;
}
public static Boolean cl_inGame()
{
bool es;
if (Dvar_GetBool("cl_ingame") == true)
{
es = true;
}
else
{
es = false;
}
return es;
}
#endregion
// Thanks Chris for the original Dvar_GetBool function from his mw3 script and sc58 the correct address
Unlock All
public void UnlockAll()
{
PS3.SetMemory(0x02094990, new byte[] { 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF });
}
SV_GameSendServerCommand
public void SV_GameSendServerCommand(int client, string command)
{
RPC.Call(0x003E95F0, client, 1, command);
}
G_SetModel
public void SetModel(int client, string model)
{
RPC.Call(0x003701D8, (uint)(0x012ab290 + client * 0x2F, model);
}
FPS RPC (By Jo-Milk)
private void JM_RPC()
{
PS3.SetMemory(0x00466299, new byte[] { 0x9A });//RPC OFF
PS3.SetMemory(0x4667B4, new byte[] { 0x3F, 0x80, 0x10, 0x05, 0x81, 0x9C, 0x00, 0x48, 0x2C, 0x0C, 0x00, 0x00, 0x41, 0x82, 0x00, 0x64, 0x80, 0x7C, 0x00, 0x00, 0x80, 0x9C, 0x00, 0x04, 0x80, 0xBC, 0x00, 0x08, 0x80, 0xDC, 0x00, 0x0C, 0x80, 0xFC, 0x00, 0x10, 0x81, 0x1C, 0x00, 0x14, 0x81, 0x3C, 0x00, 0x18, 0x81, 0x5C, 0x00, 0x1C, 0x81, 0x7C, 0x00, 0x20, 0xC0, 0x3C, 0x00, 0x24, 0xC0, 0x5C, 0x00, 0x28, 0xC0, 0x7C, 0x00, 0x2C, 0xC0, 0x9C, 0x00, 0x30, 0xC0, 0xBC, 0x00, 0x34, 0xC0, 0xDC, 0x00, 0x38, 0xC0, 0xFC, 0x00, 0x3C, 0xC1, 0x1C, 0x00, 0x40, 0xC1, 0x3C, 0x00, 0x44, 0x7D, 0x89, 0x03, 0xA6, 0x4E, 0x80, 0x04, 0x21, 0x38, 0x80, 0x00, 0x00, 0x90, 0x9C, 0x00, 0x48, 0x90, 0x7C, 0x00, 0x4C, 0xD0, 0x3C, 0x00, 0x50, 0x48, 0x00, 0x00, 0x40 });//RPC CODE
PS3.SetMemory(0x10050000, new byte[0x2854]);//RPC arguments
PS3.SetMemory(0x00466299, new byte[] { 0x00 });//RPC ON
}
public static Int32 Call(UInt32 address, params Object[] parameters)//this is VezahHFH MW3 Call function I used same place to store the arguments because I'm Lazy and I don't feel like making that function since I code in C++ but I might optimize this function
{
Int32 length = parameters.Length;
Int32 index = 0;
UInt32 count = 0;
UInt32 Strings = 0;
UInt32 Single = 0;
UInt32 Array = 0;
while (index < length)
{
if (parameters[index] is Int32)
{
WriteInt32(0x10050000 + (count * 4), (Int32)parameters[index]);
count++;
}
else if (parameters[index] is UInt32)
{
WriteUInt32(0x10050000 + (count * 4), (UInt32)parameters[index]);
count++;
}
else if (parameters[index] is Int16)
{
WriteInt16(0x10050000 + (count * 4), (Int16)parameters[index]);
count++;
}
else if (parameters[index] is UInt16)
{
WriteUInt16(0x10050000 + (count * 4), (UInt16)parameters[index]);
count++;
}
else if (parameters[index] is Byte)
{
WriteByte(0x10050000 + (count * 4), (Byte)parameters[index]);
count++;
} //Should work now let me try
else
{
UInt32 pointer;
if (parameters[index] is String)
{
pointer = 0x10052000 + (Strings * 0x400);
WriteString(pointer, Convert.ToString(parameters[index]));
WriteUInt32(0x10050000 + (count * 4), pointer);
count++;
Strings++;
}
else if (parameters[index] is Single)
{
WriteSingle(0x10050024 + (Single * 4), (Single)parameters[index]);
Single++;
}
else if (parameters[index] is Single[])
{
Single[] Args = (Single[])parameters[index];
pointer = 0x10051000 + Array * 4;
WriteSingle(pointer, Args);
WriteUInt32(0x10050000 + count * 4, pointer);
count++;
Array += (UInt32)Args.Length;
}
}
index++;
}
WriteUInt32(0x10050048, address);
Thread.Sleep(20);
return ReadInt32(0x1005004c);
//or you could return a float pointer if the function that is called return one just check at the offset 0x10050050
}
RPC (By SC58 And Choco )
using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Threading.Tasks;
namespace BOIMPRPC
{
public class PS3
{
static uint processID;
private static uint GetProcessID()
{
uint[] ProcessIDs;
PS3_TMAPI.GetProcessList(0, out ProcessIDs);
return ProcessIDs[0];
}
public static void SetMemory(uint address, byte[] memory)
{
PS3_TMAPI.ProcessSetMemory(0, PS3_TMAPI.UnitType.PPU, processID, 0, address, memory);
}
public static byte[] GetMemory(uint address, int length)
{
byte[] bytes = new byte[length];
PS3_TMAPI.ProcessGetMemory(0, PS3_TMAPI.UnitType.PPU, processID, 0, address, ref bytes);
return bytes;
}
public static int Init()
{
processID = GetProcessID();
return RPC.Init();
}
}
public class RPC
{
static uint function_address;
public static int Init()
{
function_address = Get_func_address();
if (function_address == 0) return -1;
Enable_RPC();
return 0;
}
public static uint Get_func_address()
{
for (uint i = 0x7A21D4; i < 0x1000000; i += 4)
{
byte[] bytes = PS3.GetMemory(i, ;
if (((bytes[0] == 0x4B) && (bytes[1] == 0xFF) && (bytes[2] == 0xBE) && (bytes[3] == 0x05) && (bytes[4] == 0x4B) && (bytes[5] == 0xFF) && (bytes[6] == 0xFC) && (bytes[7] == 0x9))
{
return i + 0xC;
}
}
return 0;
}
public static void Enable_RPC()
{
PS3.SetMemory(function_address, new byte[] { 0x4E, 0x80, 0x00, 0x20 });
System.Threading.Thread.Sleep(20);
byte[] func = new byte[] { 0x7C, 0x08, 0x02, 0xA6, 0xF8, 0x01, 0x00, 0x80, 0x3C, 0x60, 0x10, 0x05, 0x81, 0x83, 0x00, 0x4C, 0x2C, 0x0C, 0x00, 0x00, 0x41, 0x82, 0x00, 0x64, 0x80, 0x83, 0x00, 0x04, 0x80, 0xA3, 0x00, 0x08, 0x80, 0xC3, 0x00, 0x0C, 0x80, 0xE3, 0x00, 0x10, 0x81, 0x03, 0x00, 0x14, 0x81, 0x23, 0x00, 0x18, 0x81, 0x43, 0x00, 0x1C, 0x81, 0x63, 0x00, 0x20, 0xC0, 0x23, 0x00, 0x24, 0xC0, 0x43, 0x00, 0x28, 0xC0, 0x63, 0x00, 0x2C, 0xC0, 0x83, 0x00, 0x30, 0xC0, 0xA3, 0x00, 0x34, 0xC0, 0xC3, 0x00, 0x38, 0xC0, 0xE3, 0x00, 0x3C, 0xC1, 0x03, 0x00, 0x40, 0xC1, 0x23, 0x00, 0x48, 0x80, 0x63, 0x00, 0x00, 0x7D, 0x89, 0x03, 0xA6, 0x4E, 0x80, 0x04, 0x21, 0x3C, 0x80, 0x10, 0x05, 0x38, 0xA0, 0x00, 0x00, 0x90, 0xA4, 0x00, 0x4C, 0x80, 0x64, 0x00, 0x50, 0xE8, 0x01, 0x00, 0x80, 0x7C, 0x08, 0x03, 0xA6, 0x38, 0x21, 0x00, 0x70, 0x4E, 0x80, 0x00, 0x20, 0x60, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x60, 0x00, 0x00, 0x00 };
PS3.SetMemory(function_address + 0x4, func);
PS3.SetMemory(0x10050000, new byte[0x2854]);
PS3.SetMemory(function_address, new byte[] { 0xF8, 0x21, 0xFF, 0x91 });
}
public static int Call(uint func_address, params object[] parameters)
{
int num_params = parameters.Length;
uint num_floats = 0;
for (uint i = 0; i < num_params; i++)
{
if (parameters[i] is int)
{
byte[] val = BitConverter.GetBytes((int)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, val);
}
else if (parameters[i] is uint)
{
byte[] val = BitConverter.GetBytes((uint)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, val);
}
else if (parameters[i] is string)
{
byte[] str = Encoding.UTF8.GetBytes(Convert.ToString(parameters[i]) + "\0");
PS3.SetMemory(0x10050054 + i * 0x400, str);
uint addr = 0x10050054 + i * 0x400;
byte[] address = BitConverter.GetBytes(addr);
Array.Reverse(address);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, address);
}
else if (parameters[i] is float)
{
num_floats++;
byte[] val = BitConverter.GetBytes((float)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050024 + ((num_floats - 1) * 0x4), val);
}
}
byte[] fadd = BitConverter.GetBytes(func_address);
Array.Reverse(fadd);
PS3.SetMemory(0x1005004C, fadd);
System.Threading.Thread.Sleep(20);
byte[] ret = PS3.GetMemory(0x10050050, 4);
Array.Reverse(ret);
return BitConverter.ToInt32(ret, 0);
}
Buttons
Buttons Monitoring (by seb5594)
public class Buttons
{
public static UInt32
X = 2104320,
O = 512,
Square = 67108864,
Triangle = 8,
L3 = 1074003968,
R3 = 536870912,
L2 = 72704,
R2 = 131072,
L1 = 1048704,
R1 = 2147483648,
Crouch = 4194304,
Prone = 8388608,
StartButton = 4;
}
public Boolean ButtonPressed(Int32 clientIndex, UInt32 Button)
{
if (BO1TMAPI.PS3.Extension.ReadUInt32((UInt32)G_Client(clientIndex) + 0x271 == Button)
return true;
else return false;
}
public Int32 G_Client(Int32 clientIndex)
{
return (Int32)0x13950C8 + 0x2A38 * clientIndex;
}
public UInt32 ReadUInt32(uint offset)
{
Byte[] YoLo = GetMemory(offset, 4);
Array.Reverse(YoLo, 0, 4);
return BitConverter.ToUInt32(YoLo, 0);
}
public byte[] GetMemory(uint address, int length)
{
byte[] buffer = new byte[length];
BO1TMAPI.PS3.GetMemory(address, buffer);
return buffer;
}
//Example how to use:
if(ButtonPressed(0,Buttons.L1))
{
// Mods/functions here
}
Local Client Buttons Monitoring (by xPAQz )
private static UInt32 LocalButtons = 0xd19800;
public enum Buttons
{
DpadUp = 0x1FF,
DpadDown = 0x20F,
DpadRight = 0x21F,
DpadLeft = -0xC47E5F,
R3 = 0x1CF,
Square = 0xEF,
Cross = 0xCF,
LeftCursorUp = 0x27F,
LeftCursorLeft = 0x29F,
LeftCursorRight = 0x2AF,
LeftCursorDown = 0x28F,
R2 = 0x1EF,
L2 = 0x1DF,
Select = 0x1AF,
Start = 0x19F
}
public static Boolean ButtonPressed(Buttons Button)
{
return Convert.ToBoolean(PS3.Extension.ReadByte(LocalButtons + (UInt32)Button) == 1);
}
FPS (By SC58 )
0x00466298 - Turn on/off FPS
40 00 - ON
40 9A - OFF
0x0091C860 - Text For Menu
0x0091BF38 - Text Position
0x0091BF34 - Text Size
Unlock All Trophys (by SC58 )
public void TrophyUnlocks_MP()
{
string[] Achievements = new string[75];
Achievements[0] = "8 SP_WIN_CUBA";
Achievements[1] = "8 SP_WIN_VORKUTA";
Achievements[2] = "8 SP_WIN_PENTAGON";
Achievements[3] = "8 SP_WIN_FLASHPOINT";
Achievements[4] = "8 SP_WIN_KHE_SANH";
Achievements[5] = "8 SP_WIN_HUE_CITY";
Achievements[6] = "8 SP_WIN_KOWLOON";
Achievements[7] = "8 SP_WIN_RIVER";
Achievements[8] = "8 SP_WIN_FULLAHEAD";
Achievements[9] = "8 SP_WIN_INTERROGATION_ESCAPE";
Achievements[10] = "8 SP_WIN_UNDERWATERBASE";
Achievements[11] = "8 SP_VWIN_FLASHPOINT";
Achievements[12] = "8 SP_VWIN_HUE_CITY";
Achievements[13] = "8 SP_VWIN_RIVER";
Achievements[14] = "8 SP_VWIN_FULLAHEAD";
Achievements[15] = "8 SP_VWIN_UNDERWATERBASE";
Achievements[16] = "8 SP_LVL_CUBA_CASTRO_ONESHOT";
Achievements[17] = "8 SP_LVL_VORKUTA_VEHICULAR";
Achievements[18] = "8 SP_LVL_VORKUTA_SLINGSHOT";
Achievements[19] = "8 SP_LVL_KHESANH_MISSILES";
Achievements[20] = "8 SP_LVL_HUECITY_AIRSUPPORT";
Achievements[21] = "8 SP_LVL_HUECITY_DRAGON";
Achievements[22] = "8 SP_LVL_CREEK1_DESTROY_MG";
Achievements[23] = "8 SP_LVL_CREEK1_KNIFING";
Achievements[24] = "8 SP_LVL_KOWLOON_DUAL";
Achievements[25] = "8 SP_LVL_RIVER_TARGETS";
Achievements[26] = "8 SP_LVL_WMD_RSO";
Achievements[27] = "8 SP_LVL_WMD_RELAY";
Achievements[28] = "8 SP_LVL_POW_HIND";
Achievements[29] = "8 SP_LVL_POW_FLAMETHROWER";
Achievements[30] = "8 SP_LVL_FULLAHEAD_2MIN";
Achievements[31] = "8 SP_LVL_REBIRTH_MONKEYS";
Achievements[32] = "8 SP_LVL_REBIRTH_NOLEAKS";
Achievements[33] = "8 SP_LVL_UNDERWATERBASE_MINI";
Achievements[34] = "8 SP_LVL_FRONTEND_CHAIR";
Achievements[35] = "8 SP_LVL_FRONTEND_ZORK";
Achievements[36] = "8 SP_GEN_MASTER";
Achievements[37] = "8 SP_GEN_FRAGMASTER";
Achievements[38] = "8 SP_GEN_ROUGH_ECO";
Achievements[39] = "8 SP_GEN_CROSSBOW";
Achievements[40] = "8 SP_GEN_FOUNDFILMS";
Achievements[41] = "8 SP_ZOM_COLLECTOR";
Achievements[42] = "8 SP_ZOM_NODAMAGE";
Achievements[43] = "8 SP_ZOM_TRAPS";
Achievements[44] = "8 SP_ZOM_SILVERBACK";
Achievements[45] = "8 SP_ZOM_CHICKENS";
Achievements[46] = "8 SP_ZOM_FLAMINGBULL";
Achievements[47] = "8 MP_FILM_CREATED";
Achievements[48] = "8 MP_WAGER_MATCH";
Achievements[49] = "8 MP_PLAY";
Achievements[50] = "8 DLC1_ZOM_OLDTIMER";
Achievements[51] = "8 DLC1_ZOM_HARDWAY";
Achievements[52] = "8 DLC1_ZOM_PISTOLERO";
Achievements[53] = "8 DLC1_ZOM_BIGBADDABOOM";
Achievements[54] = "8 DLC1_ZOM_NOLEGS";
Achievements[55] = "8 DLC2_ZOM_PROTECTEQUIP";
Achievements[56] = "8 DLC2_ZOM_LUNARLANDERS";
Achievements[57] = "8 DLC2_ZOM_FIREMONKEY";
Achievements[58] = "8 DLC2_ZOM_BLACKHOLE";
Achievements[59] = "8 DLC2_ZOM_PACKAPUNCH";
Achievements[60] = "8 DLC3_ZOM_STUNTMAN";
Achievements[61] = "8 DLC3_ZOM_SHOOTING_ON_LOCATION";
Achievements[62] = "8 DLC3_ZOM_QUIET_ON_THE_SET";
Achievements[63] = "8 DLC4_ZOM_TEMPLE_SIDEQUEST";
Achievements[64] = "8 DLC5_ZOM_CRYOGENIC_PARTY";
Achievements[65] = "8 DLC5_ZOM_BIG_BANG_THEORY";
Achievements[66] = "8 DLC5_ZOM_GROUND_CONTROL";
Achievements[67] = "8 DLC5_ZOM_ONE_SMALL_HACK";
Achievements[68] = "8 DLC5_ZOM_ONE_GIANT_LEAP";
Achievements[69] = "8 DLC5_ZOM_PERKS_IN_SPACE";
Achievements[70] = "8 DLC5_ZOM_FULLY_ARMED";
Achievements[71] = "8 DLC4_ZOM_ZOMB_DISPOSAL";
Achievements[72] = "8 DLC4_ZOM_MONKEY_SEE_MONKEY_DONT";
Achievements[73] = "8 DLC4_ZOM_BLINDED_BY_THE_FRIGHT";
Achievements[74] = "8 DLC4_ZOM_SMALL_CONSOLATION";
byte[] FT111 = new byte[] { 0x41 };
byte[] FT11 = new byte[] { 0x40 };
byte[] RPCON1 = new byte[] { 0x38, 0x60, 0xFF, 0xFF, 0x38, 0x80, 0x00, 0x00, 0x3C, 0xA0, 0x02, 0x00, 0x30, 0xA5, 0x50, 0x00, 0x4B, 0xF8, 0x2E, 0x2D, 0x4B, 0xFF, 0xFB, 0x78 };
byte[] RPCOFF1 = new byte[] { 0x82, 0xB9, 0x00, 0x00, 0x3C, 0xE0, 0x00, 0xD7, 0x3D, 0x80, 0x00, 0x92, 0x56, 0xA4, 0x38, 0x30, 0x56, 0xBB, 0x18, 0x38, 0x3B, 0x87, 0x9D, 0x04 };
for (int i = 0; i < 75; i++)
{
PS3.SetMemory(0x2005000, Encoding.ASCII.GetBytes(Achievements + "\0"));
PS3.SetMemory(0x466298, FT111);
PS3.SetMemory(0x4667B4, RPCON1);
System.Threading.Thread.Sleep(15);
PS3.SetMemory(0x466298, FT11);
PS3.SetMemory(0x4667B4, RPCOFF1);
}
}
Addresses (by SC58 )
0x003E95F0 - sv_gamesendservercommand(int clientNum, svscmd_type type, const char *text)
0x00370638 - G_LocalizedStringIndex(const char *string)
0x004C4FF0 - Dvar_GetBool(const char *dvarName)
0x00399CC8 - CBUF_AddText(int localClientNum, const char *text)
0x003F62A8 - Sv_SendClientSnapshot(client_s *client)
0x002D85E0 - Player_Die(unsigned int *self, unsigned int *inflictor, unsigned int *attacker, int damage, int meansOfDeath, int iWeapon, const float *vDir, unsigned int hitLoc, int psTimeOffset)
0x0007B720 - BG_GetPerkIndexForName(char *perkName)
0x00377208 - G_GivePlayerWeapon(playerState_s *pPS, int iWeaponIndex, char altModelIndex)
0x002D2D98 - G_InitializeAmmo(gentity_s *pSelf, int weaponIndex, char weaponModel, int hadWeapon)
0x00356BE0 - G_CallSpawnEntity(gentity_s *ent)
0x0036FFA0 - G_ModelIndex(const char *name)
0x00370238 - HudElem_Alloc(int clientNum, int teamNum)
0x003DFD90 - Sv_KickClient(client_s *cl, char *playerName, int maxPlayerNameLen)
0x003376C8 - SP_script_model(gentity_s *pSelf)
0x012ab290 - g_entity
0x003705D0 - G_MaterialIndex(const char *name)
0x003701D8 - G_SetModel(gentity_s *ent, const char *modelName)
0x00373488 - G_Spawn(void)
0x011F2738 - G_Hudelem
0x00375548 - G_GetWeaponIndexForName(const char *name)
0x0037FE50 - G_SpawnTurret(gentity_s *self, const char *weaponinfoname)
0x003EED08 - Sv_AddServerCommand
0x003E5200 - Sv_SendClientGameState(Client_s *)
0x002D4BA0 - G_Say(gentity_s *ent, gentity_s *target, int mode, const char *chatText)
0x002CA520 - PlayerCmd_SayAll
0x002CA608 - PlayerCmd_SayTeam
0x003E0848 - Sv_FastRestart_f
0x003E0660 - Sv_Maprestart(int fast_restart)
0x003E7528 - Sv_Addtestclient(void)
0x00310470 - GScr_AddTestClient
0x003E47B8 - SV_ClientCommand(client_s *cl, msg_t *msg)
0x003E1B60 - SV_ExecuteClientCommand(client_s *cl, const char *s, int clientOK)
0x0039B6C0 - SV_Cmd_TokenizeString(const char *text_in)
0x002D6140 - ClientCommand(int clientNum)
0x003996E8 - SV_Cmd_EndTokenizedString(void)
0x000C0A98 - BG_GetWeaponDef(unsigned int weaponIndex)
0x00356DF0 - G_Callspawn
0x00357500 - G_SpawnEntitiesFromString(void)
0x003EAD98 - SV_SetConfigstring(int index, const char *val)
0x005CF9B0 - Scr_GetVector(unsigned int index, float *vectorValue)
0x4C7370 - Dvar_GetString
Zombies
Name And Motd
Lobby Name Offset: 0x01C33DB0
Message of the day Offset: 0x01c8004c
Client Offsets Interval: 0x1d30
In-Game Name
Offset: 0x011008B8
Godmode
Bytes: 0x08,0x88,0x08,0x88 for On, 0x00,0x00,0x00,0x64 for Off
Offset: 0x01100840
Dead Ops Arcade Godmode
Offset: 0x010FED8F
Unlimited Ammo
Bytes: 15,0xff,0xff,0xff for On
Offset 1: 0x010FF138
Offset 2: 0x010FF148
Offset 3: 0x010FF160
Offset 4: 0x010FF140
Offset 5: 0x010FF168
Offset 6: 0x010FF150
mFlags
Bytes: 0x01 for noclip,0x02 for ufo, 0x04 for frozen
Offset: 0x0110098F
Weapons
Primary Weapon: 0x010fef6f
Secondary Weapon: 0x010fef9f
Dead Ops Arcade Weapon
Bytes: FlameThrower- 0A ShotGun- 0E RayGun- 0B RegularGun- 0C MiniGun- 0D GranadeLuancher- 0F
Offset: 0x010FEF57
Modes
Bytes: 0x01 for notarget, 0x02 for spectator,0x00 for default
Offset: 0x0110079B
In-Game Stats
Score/Money Offset: 0x0110090C
Kills Offset: 0x01100910
Headshots Offset: 0x01100930
Revives Offset: 0x0110092C
Downs Offset: 0x01100928
Speed
Bytes: 0x40, 0x74 for super,0x00, 0x00 for freeze,0x3f, 0x80 for default
Offset: 0x01100854
Scripts
SV_GameSendServerCommand
public void SV_GameSendServerCommand(int client, string command)
{
RPC.Call(0x003C33A8, client, 1, command);
}
Round Skip
First add timer then a button,
add this to the button:
Cbuf_AddText(0,"set timescale 10");
timer1.Start();
Then this to the timer and set the interval 200/500 otherwise the game can crash.
Cbuf_AddText(0,"ai axis delete");
Cbuf_AddText
public void Cbuf_AddText(int localClient,string command)
{
RPC.Call(0x00395BA8,localClient,command);
}
SetModel
public void SetModel(int client, string model)
{
RPC.Call(0x00305940, (uint)(0xFA805C + client * 0x34C), model);
}
Aim Assist (By me)
public void Give_AimAssist(int client)
{
SV_SendServerCommand(client, "v aim_lockon_region_height 480");
SV_SendServerCommand(client, "v aim_lockon_region_width 640");
SV_SendServerCommand(client, "v aim_lockon_enabled 1");
Thread.Sleep(10);
SV_SendServerCommand(client, "v aim_lockon_strength 1");
SV_SendServerCommand(client, "v aim_lockon_deflection 0");
SV_SendServerCommand(client, "v aim_autoaim_enabled 1");
Thread.Sleep(10);
SV_SendServerCommand(client, "v aim_autoaim_region_height 480");
SV_SendServerCommand(client, "v aim_autoaim_region_width 640");
SV_SendServerCommand(client, "v aim_slowdown_yaw_scale_ads 0");
Thread.Sleep(10);
SV_SendServerCommand(client, "v aim_slowdown_yaw_scale 0");
SV_SendServerCommand(client, "v aim_slowdown_pitch_scale 0");
SV_SendServerCommand(client, "v aim_slowdown_pitch_scale_ads 0");
Thread.Sleep(10);
SV_SendServerCommand(client, "v aim_slowdown_region_height 0");
SV_SendServerCommand(client, "v aim_slowdown_region_width 0");
SV_SendServerCommand(client, "v aim_slowdown_enabled 1");
Thread.Sleep(10);
SV_SendServerCommand(client, "v aim_aimAssistRangeScale 2");
SV_SendServerCommand(client, "v aim_autoAimRangeScale 2");
}
FPS (by SC58 )
0x00407554 - Turn on/off FPS
40 00 - ON
40 9A - OFF
0x00827950 - Text Position
0x0082794c - Text Size
0x008283a8 - Text For Menu
All Clients Buttons Monitoring (By AlmightySo )
public static class Buttonz
{
public static Int32
L1 = 1048704,
L2 = 72704,
L3 = 1074003968,
R1 = -2147483648,
R2 = 131072,
R3 = 536870912,
Square = 67108864,
Cross = 2104320,
Crouch = 4194304,
Prone = 8388608,
Triangle = 8;
}
public static bool ButtonPressed(int client, int Button)
{
if (Convert.ToInt32(Debug.ReadInt32(0x11007E8 + ((uint)client * 0x104)) == Button)
return true;
else return false;
}
Local Clients Buttons Monitoring (by SC58 )
Offset for Client 0: 0x00B4EB60
Interval: 4392
Jetpack (by AlmightySo )
public uint findPS(int client)
{
return 0x10FEDB0 + ((uint)client * 0x104;
}
public void JetPack(int client)
{
float jH = Debug.ReadFloat(findPS(client));
jH += 70;
PS3.Extension.WriteFloat(findPS(client), jH);
}
//Use JetPack(); in a timer with button handling.
Addresses (by SC58 )
0x00304BA0 - G_LocalizedStringIndex(const char *string)
0x00304B38 - G_MaterialIndex(const char *name)
0x00452280 - Dvar_GetBool(const char *dvarName)
0x003C33A8 - SV_GameSendServerCommand(int clientNum, svscmd_type type, const char *text)
0x00395BA8 - CBUF_AddText(int localClientNum, const char *text)
0x00309E30 - G_GetWeaponIndexForName(const char *name)
0x00305940 - SetModel(gentity_s *ent, const char *modelName)
0x00305650 - G_ModelIndex(const char *name)
0x00EE7BF2 - G_Hudelem
0x000A4968 - BG_GetWeaponDef(unsigned int weaponIndex)
0x002FD098 - G_Callspawn
0x002FD9C8 - G_SpawnEntitiesFromString(void)
0x00073A88 - BG_GetPerkIndexForName(const char *perkName)
0x004BE508 - SV_ExecuteClientCommand(client_s *cl, const char *s, int clientOK)
0x003066E0 - G_Spawn(void)
0x002DDFF8 - SP_script_model(gentity_s *pSelf)
Useful Dvars (You can use these even when not host using cbuf_addtext)
noclip - you can fly
ufo - you can also fly with this
god - godmode (unlimited health..)
notarget - zombies can't see you
give <item here> - you can give weapons/perks
give all - gives you all weapons
take all - takes all your stuff
cg_thirdPerson - thirdperson (values: 1 or 0)
cg_fov - field of view (any value between 1-200)
ai axis delete - kills all zombies
cg_drawfps - fps in the corner (values: 1 or 0)
dropweapon - drops your current weapon
Non-Host Offsets
No Recoil
Bytes: ON 0x60, 0x00, 0x00, 0x00 ,OFF 0x4B, 0xF3, 0xFF, 0x89
Offset: 0x15A320
Super Steady Aim
Bytes: ON 2F 80 00 00, OFF 2F 80 00 02
Offset: 0x91014
Credits
SC58
AlmightySo
Choco
Jo-Milk
Seb5594
primetime43
xPAQz
DexModderFTW
Eddie Mac
iNDMx - Here is also his good thread: You must login or register to view this content.
Anera
Me =D
I will update the thread soon!
Lol changed my mind
Here you go:
Non Host Hud Addresses + Visibility Address
0x0FA640 - CG_DrawRotatedPicPhysical
0x734350 - R_RegisterFont
0x7458D8 - Material_RegisterHandleNice
0x751940 - R_AddCmdDrawStretchPic
0x754410 - R_AddCmdDrawText
0x754B48 - R_AddCmdDrawStretchPicRotateXY
This is for you gopro_2027 xD
0x0F4BC8 - CG_CanSeeFriendlyHead
//note! CG_CanSeeF... is correct, although it freezes when playing Online (not sure why), but I think you can figure it out if you really want to 8-)
I also noticed people were unable to "fix" the isSameTeam function. So here it is:
bool IsSameTeam(int me, int them)//by TheGreenPlanet
{
if (!strcmp(Dvar_GetString("ui_gametype"), "dm") || !strcmp(Dvar_GetString("ui_gametype"), "oic") || !strcmp(Dvar_GetString("ui_gametype"), "hlnd") || !strcmp(Dvar_GetString("ui_gametype"), "gun") || !strcmp(Dvar_GetString("ui_gametype"), "sharp")) // All Non Team based modes
{
return true;
}
else if (*(int*)(0x3768AD28 + (me * 0x5D0)) != *(int*)(0x3768AD28 + (them * 0x5D0)))
{
return true;
}
else if (*(int*)(0x3768AD28 + (me * 0x5D0)) == *(int*)(0x3768AD28 + (them * 0x5D0)))
{
return false;
}
}
Structures
Heres some structure(CG_S) addresses:
HostName: 0x37703450
Mapname: 0x37703558
Gametype: 0x2059C8C //Cant remember the structure name
Last edited by
TheGreenPlanet ; 08-25-2016 at 09:37 PM.
The following user thanked TheGreenPlanet for this useful post:
12-07-2016, 06:29 AM
#89
Hunter926
Little One
Originally posted by makeabce
I will update the thread soon!
Hey could you please update godmode?
The value you have listed is not the maximum, this is.
Also your method does not start working immediately, this does.
Current Health goes by an interval of 0x34C per player
For On:
Maximum Health: 0x1100840 - 0x7F, 0xFF, 0xFF, 0xFF
Current Health: 0xFA81E0 - 0x7F, 0xFF, 0xFF, 0xFF
For Off:
Maximum Health: 0x1100840 - 0x00, 0x00, 0x00, 0x64
Current Health: 0xFA81E0 - 0x00, 0x00, 0x00, 0x64
Thanks for your time
12-07-2016, 05:14 PM
#90
makeabce
I defeated!
Originally posted by Hunter926
Hey could you please update godmode?
The value you have listed is not the maximum, this is.
Also your method does not start working immediately, this does.
Thanks for your time
The value you have listed is not the maximum, this is.
Also your method does not start working immediately, this does.
Current Health goes by an interval of 0x34C per player
For On:
Maximum Health: 0x1100840 - 0x7F, 0xFF, 0xFF, 0xFF
Current Health: 0xFA81E0 - 0x7F, 0xFF, 0xFF, 0xFF
For Off:
Maximum Health: 0x1100840 - 0x00, 0x00, 0x00, 0x64
Current Health: 0xFA81E0 - 0x00, 0x00, 0x00, 0x64
Thanks for your time
Zombies or mp?
12-07-2016, 05:41 PM
#91
Father Luckeyy
Retired - Lead Content Manager
Copyright © 2024, NextGenUpdate.
All Rights Reserved.
