Post: BO1 Offsets,Addresses & Scripts Thread [1.13]
Options
07-04-2014, 11:56 AM
#1
makeabce
I defeated!
Multiplayer
Name and Stats
Name Offset: 0x02000934
Class Name Offset: 0x01c3896f (Class # 1-5) & 0x01c43cf4 (Class # 6-10)
COD Points Offset: 0x020942d1
Time Played Offset: 0x02094731
Total Wins Offset: 0x0209475d
Total Losses Offset: 0x020944dd
Prestige Offset: 0x020946dd
Rank Offset (score basically): 0x020946e5
Kills Offset: 0x02094429
Deaths Offset: 0x020942f5
Assists Offset: 0x02094291
Kill/Death Ratio In Weapons Offset: 0x02094425
Wins/Loss Ration In Career Offset: 0x02094761
Headshots Offset: 0x0209440d
Amount Spent In Contracts Offset: 0x020942dd
Contracts Purchased Offset: 0x020942e1
XP Award In Contracts Offset: 0x020942e5
Return On Investment Contracts Offset (This is also amount earned) : 0x020942d9
Games Played Offset: 0x020938b1
Wager Match Earnings Offset: 0x020944d9
Unlock All Offset: 0x02094990 (Unlock All Bytes: https://pastebin.com/MxmMrR22)
Non-Host Offsets
Super Sleight of Hand
Bytes: 0x02 for on, 0x01 for off
Offset: 0xBBC2E8
Chrome Players
Bytes: 0x38, 0xC0, 0xFF, 0xFF for On, 0xFC, 0xC0, 0xF8, 0x90 for Off
Offset: 0x131144
Wallhack
Bytes: 0x38, 0xC0, 0xF0, 0x03 for On,0xFC, 0xC0, 0xF8, 0x90 for Off
Offset: 0x131144
Rapid Fire
Bytes: 0x02 for On, 0x01 for Off
Offset: 0xBBC2EC
Redboxes
Bytes: 0x60,0x00,0x00,0x00 for both, and when off then change redboxes offset with these: 0x41, 0x86, 0x02, 0x78
Perk Check Offset: 0x001206C8
Redboxes Offset: 0x001205C0
Blackbird
Bytes: 0x40, 0x9A, 0x00, 0xC4 for On, 0x41, 0x9A, 0x00, 0xC4 for Off
Offset: 0xEBDF4
Super Steady Aim
Bytes: 0x60,0x00,0x00,0x00 for On, 0x2F, 0x80, 0x00, 0x02 for Off
Offset: 0xAB8EC
No Recoil
Bytes: 0x60,0x00,0x00,0x00 for On, 0x4B, 0xF1, 0x84, 0xCD for Off
Offset: 0x19B244
Client Offsets Interval: 0x2A38
In-Game Name
Offset: 0x139784C
Godmode Scpript
public void Godmode(uint client)
{
PS3.SetMemory((0x12ab290 + (client * 760)) + 0x194, new byte[4]);
Thread.Sleep(50);
PS3.SetMemory((0x12ab290 + (client * 760)) + 0x194, new byte[] { 15, 0xff, 0xff, 0xff });
}
mFlags
Bytes: 0x01 for noclip,0x02 for ufo
Offset: 0x13979BF
Unlimited Ammo Scpript
public void UnlimitedAmmo(uint client)
{
PS3.SetMemory((0x13950c8 + (client * 0x2a3
) + 0x388, new byte[] { 15, 0xff, 0xff, 0xff });
PS3.SetMemory((0x13950c8 + (client * 0x2a3) + 0x400, new byte[] { 15, 0xff, 0xff, 0xff });
PS3.SetMemory((0x13950c8 + (client * 0x2a3) + 0x380, new byte[] { 15, 0xff, 0xff, 0xff });
PS3.SetMemory((0x13950c8 + (client * 0x2a3) + 0x3f8, new byte[] { 15, 0xff, 0xff, 0xff });
PS3.SetMemory((0x13950c8 + (client * 0x2a3) + 0x410, new byte[] { 15, 0xff, 0xff, 0xff });
PS3.SetMemory((0x13950c8 + (client * 0x2a3) + 0x408, new byte[] { 15, 0xff, 0xff, 0xff });
}
Blackbird
Bytes: 0x01 On, 0x00 Off
Offset: 0x1397AEB
Reconplane
Bytes: 0x03 for On, 0x00 for Off
Offset: 0x1397967
Second Chance
Bytes: 0x01 for On
Offset: 0x1397AEC
Speed
Bytes: 0x40,0x40 for super, 0x3F 0x80 for default, 0x00,0x00 for freeze
Offset: 0x1397880
In-Game Camo
Bytes: 60 for gold, 10 for ice,13 for red,10 for olive,20 for nevada,0x18 for sahara
Offset: 0x013952E0
Teleport
Offset: 0x13950f0
Scripts
Aimbot (By Seb5594 & DexModderFTW & Eddie mac)
public class Aimbot
{
#region Aimbot
//All of the getting info etc.
public static uint G_Entity(uint client)
{
return 0x012ab290 + (client * 0x2F;
}
public static float[] getOrigin(uint clientNum)
{
float[] origin = new float[3];
origin[0] = Lib.ReadSingle(0x013950c8 + 0x2A38 * clientNum + 0x24);
origin[1] = Lib.ReadSingle(0x013950c8 + 0x2A38 * clientNum + 0x24 + 0x4);
origin[2] = Lib.ReadSingle(0x013950c8 + 0x2A38 * clientNum + 0x24 + 0x;
return origin;
}
public static UInt32 G_Entity(Int32 ClientIndex)
{
return 0x16B7920 + ((UInt32)ClientIndex * 0x31C);
}
public static int GetHost()
{
string str = Lib.ReadString(0x172a58;
for (int i = 0; i < 0x12; i++)
{
string str2 = Lib.ReadString((uint)(0xf1651c + (i * 0x3600)));
if (str == str2)
{
return i;
}
}
return -1;
}
public static Boolean Exists(Int32 clientIndex)
{
return Lib.ReadString(0x013978d0 + ((uint)clientIndex * 0x2A3) != "";
}
public static Boolean IsAlive(Int32 clientIndex)
{
return (Lib.ReadByte(0x0139793b + ((uint)clientIndex * 0x2A3) == 0);
}
public static Boolean isSameTeam(Int32 Owner, Int32 Victim)
{
return Lib.ReadInt32(0x01397894 + ((uint)Owner * 0x2A3) == Lib.ReadInt32(0x01397894 + ((uint)Victim * 0x2A3);
}
public static Single GetDistance3D(Single[] p1, Single[] p2)
{
float[] numArray3 = new float[] { p2[0] - p1[0], p2[1] - p1[1], p2[2] - p1[2] };
return ((numArray3[0] * numArray3[0]) + (numArray3[1] * numArray3[1])) + (numArray3[2] * numArray3[2]);
}
public static int GetNearestClientFromAttacker(int You)
{
int CIndex = -1;
double Closest = 1E+08f;
for (int i = 0; i < 12; i++)
{
if (((Exists(i) && IsAlive(i) && !isSameTeam(You, i))))
{
double Bla = GetDistance3D(getOrigin((uint)You), getOrigin((uint)i));
if (Bla < Closest)
{
CIndex = i;
Closest = Bla;
}
}
}
return CIndex;
}
//The Real Aimbot Code-----
//function to convert a vector to angles
public static Single[] vectoangles(Int32 clientIndex, Int32 secondPlayer)
{
Single[] numArray1 = getOrigin((uint)clientIndex);
Single[] numArray2 = getOrigin((uint)secondPlayer);
Single[] Angles = {(numArray2[0] - numArray1[0]), (numArray2[1] - numArray1[1]), (numArray2[2] - numArray1[2])};
Single num2;
Single num3;
Single[] numArray = new Single[3];
if ((Angles[1] == 0f) && (Angles[0] == 0f))
{
num2 = 0f;
if (Angles[2] > 0f)
num3 = 90f;
else
num3 = 270f;
}
else
{
if (Angles[0] != -1f)
num2 = (Single)((Math.Atan2((Double)Angles[1], (Double)Angles[0]) * 180.0) / 3.1415926535897931);
else if (Angles[1] > 0f)
num2 = 90f;
else
num2 = 270f;
if (num2 < 0f)
num2 += 360f;
Single num = (Single)Math.Sqrt((Double)((Angles[0] * Angles[0]) + (Angles[1] * Angles[1])));
num3 = (Single)((Math.Atan2((Double)Angles[2], (Double)num) * 180.0) / 3.1415926535897931);
if (num3 < 0f)
num3 += 360f;
}
numArray[0] = -num3;
numArray[1] = num2;
return numArray;
}
//Set Set the clients angles
public static void SetClientViewAngles(Int32 clientIndex, Int32 Victim)
{
Single[] angles = vectoangles(clientIndex, Victim);
Lib.WriteSingle(0x10040000, angles);
RPC.Call(0x2C1E38, new Object[] { Addresses.G_Entity((uint)clientIndex), 0x10040000 });
}
//Just Aimbot Threads and Bools
public static bool[] AimbotStatus = new bool[12];
public static Thread[] AimbotThread = new Thread[12];
public static bool[] UnfairAimbot = new bool[12];
//This is what starts the Aimbot
public static void StartAimbot(int clientIndex)
{
ThreadStart start = null;
if (!AimbotStatus[clientIndex])
{
Thread.Sleep(100);
AimbotStatus[clientIndex] = true;
if (start == null)
{
start = () => InitializeAimbot(clientIndex);
}
AimbotThread[clientIndex] = new Thread(start);
AimbotThread[clientIndex].IsBackground = true;
AimbotThread[clientIndex].Start();
}
else
{
AimbotStatus[clientIndex] = false;
AimbotThread[clientIndex].Abort();
}
}
//Main Aimbot Code
private static void InitializeAimbot(int client)
{
PS3.Reconnect();
while (AimbotThread[client].IsAlive)
{
int nearestPlayer = GetNearestClientFromAttacker(client);
if (nearestPlayer != client)
{
if (ButtonPress.ButtonPressed(client, 03) || ButtonPress.ButtonPressed(client, 04))
{
SetClientViewAngles(client, nearestPlayer);
}
}
}
}
#endregion
//Example:
Aimbot.StartAimbot(int client);
Cbuf_AddText
public void cBuf_AddText(int localClient,string command)
{
RPC.Call(0x00399CC8, localClient, command);
}
cl_ingame
#region inGame
public static bool Dvar_GetBool(string DVAR)
{
bool State;
uint Value = (uint)RPC.Call(0x4C7BF0, DVAR);
if (Value == 1)
State = true;
else
State = false;
return State;
}
public static Boolean cl_inGame()
{
bool es;
if (Dvar_GetBool("cl_ingame") == true)
{
es = true;
}
else
{
es = false;
}
return es;
}
#endregion
// Thanks Chris for the original Dvar_GetBool function from his mw3 script and sc58 the correct address
Unlock All
public void UnlockAll()
{
PS3.SetMemory(0x02094990, new byte[] { 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF });
}
SV_GameSendServerCommand
public void SV_GameSendServerCommand(int client, string command)
{
RPC.Call(0x003E95F0, client, 1, command);
}
G_SetModel
public void SetModel(int client, string model)
{
RPC.Call(0x003701D8, (uint)(0x012ab290 + client * 0x2F, model);
}
FPS RPC (By Jo-Milk)
private void JM_RPC()
{
PS3.SetMemory(0x00466299, new byte[] { 0x9A });//RPC OFF
PS3.SetMemory(0x4667B4, new byte[] { 0x3F, 0x80, 0x10, 0x05, 0x81, 0x9C, 0x00, 0x48, 0x2C, 0x0C, 0x00, 0x00, 0x41, 0x82, 0x00, 0x64, 0x80, 0x7C, 0x00, 0x00, 0x80, 0x9C, 0x00, 0x04, 0x80, 0xBC, 0x00, 0x08, 0x80, 0xDC, 0x00, 0x0C, 0x80, 0xFC, 0x00, 0x10, 0x81, 0x1C, 0x00, 0x14, 0x81, 0x3C, 0x00, 0x18, 0x81, 0x5C, 0x00, 0x1C, 0x81, 0x7C, 0x00, 0x20, 0xC0, 0x3C, 0x00, 0x24, 0xC0, 0x5C, 0x00, 0x28, 0xC0, 0x7C, 0x00, 0x2C, 0xC0, 0x9C, 0x00, 0x30, 0xC0, 0xBC, 0x00, 0x34, 0xC0, 0xDC, 0x00, 0x38, 0xC0, 0xFC, 0x00, 0x3C, 0xC1, 0x1C, 0x00, 0x40, 0xC1, 0x3C, 0x00, 0x44, 0x7D, 0x89, 0x03, 0xA6, 0x4E, 0x80, 0x04, 0x21, 0x38, 0x80, 0x00, 0x00, 0x90, 0x9C, 0x00, 0x48, 0x90, 0x7C, 0x00, 0x4C, 0xD0, 0x3C, 0x00, 0x50, 0x48, 0x00, 0x00, 0x40 });//RPC CODE
PS3.SetMemory(0x10050000, new byte[0x2854]);//RPC arguments
PS3.SetMemory(0x00466299, new byte[] { 0x00 });//RPC ON
}
public static Int32 Call(UInt32 address, params Object[] parameters)//this is VezahHFH MW3 Call function I used same place to store the arguments because I'm Lazy and I don't feel like making that function since I code in C++ but I might optimize this function
{
Int32 length = parameters.Length;
Int32 index = 0;
UInt32 count = 0;
UInt32 Strings = 0;
UInt32 Single = 0;
UInt32 Array = 0;
while (index < length)
{
if (parameters[index] is Int32)
{
WriteInt32(0x10050000 + (count * 4), (Int32)parameters[index]);
count++;
}
else if (parameters[index] is UInt32)
{
WriteUInt32(0x10050000 + (count * 4), (UInt32)parameters[index]);
count++;
}
else if (parameters[index] is Int16)
{
WriteInt16(0x10050000 + (count * 4), (Int16)parameters[index]);
count++;
}
else if (parameters[index] is UInt16)
{
WriteUInt16(0x10050000 + (count * 4), (UInt16)parameters[index]);
count++;
}
else if (parameters[index] is Byte)
{
WriteByte(0x10050000 + (count * 4), (Byte)parameters[index]);
count++;
} //Should work now 
let me try
else
{
UInt32 pointer;
if (parameters[index] is String)
{
pointer = 0x10052000 + (Strings * 0x400);
WriteString(pointer, Convert.ToString(parameters[index]));
WriteUInt32(0x10050000 + (count * 4), pointer);
count++;
Strings++;
}
else if (parameters[index] is Single)
{
WriteSingle(0x10050024 + (Single * 4), (Single)parameters[index]);
Single++;
}
else if (parameters[index] is Single[])
{
Single[] Args = (Single[])parameters[index];
pointer = 0x10051000 + Array * 4;
WriteSingle(pointer, Args);
WriteUInt32(0x10050000 + count * 4, pointer);
count++;
Array += (UInt32)Args.Length;
}
}
index++;
}
WriteUInt32(0x10050048, address);
Thread.Sleep(20);
return ReadInt32(0x1005004c);
//or you could return a float pointer if the function that is called return one just check at the offset 0x10050050
}
RPC (By SC58 And Choco )
using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Threading.Tasks;
namespace BOIMPRPC
{
public class PS3
{
static uint processID;
private static uint GetProcessID()
{
uint[] ProcessIDs;
PS3_TMAPI.GetProcessList(0, out ProcessIDs);
return ProcessIDs[0];
}
public static void SetMemory(uint address, byte[] memory)
{
PS3_TMAPI.ProcessSetMemory(0, PS3_TMAPI.UnitType.PPU, processID, 0, address, memory);
}
public static byte[] GetMemory(uint address, int length)
{
byte[] bytes = new byte[length];
PS3_TMAPI.ProcessGetMemory(0, PS3_TMAPI.UnitType.PPU, processID, 0, address, ref bytes);
return bytes;
}
public static int Init()
{
processID = GetProcessID();
return RPC.Init();
}
}
public class RPC
{
static uint function_address;
public static int Init()
{
function_address = Get_func_address();
if (function_address == 0) return -1;
Enable_RPC();
return 0;
}
public static uint Get_func_address()
{
for (uint i = 0x7A21D4; i < 0x1000000; i += 4)
{
byte[] bytes = PS3.GetMemory(i, ;
if (((bytes[0] == 0x4B) && (bytes[1] == 0xFF) && (bytes[2] == 0xBE) && (bytes[3] == 0x05) && (bytes[4] == 0x4B) && (bytes[5] == 0xFF) && (bytes[6] == 0xFC) && (bytes[7] == 0x9))
{
return i + 0xC;
}
}
return 0;
}
public static void Enable_RPC()
{
PS3.SetMemory(function_address, new byte[] { 0x4E, 0x80, 0x00, 0x20 });
System.Threading.Thread.Sleep(20);
byte[] func = new byte[] { 0x7C, 0x08, 0x02, 0xA6, 0xF8, 0x01, 0x00, 0x80, 0x3C, 0x60, 0x10, 0x05, 0x81, 0x83, 0x00, 0x4C, 0x2C, 0x0C, 0x00, 0x00, 0x41, 0x82, 0x00, 0x64, 0x80, 0x83, 0x00, 0x04, 0x80, 0xA3, 0x00, 0x08, 0x80, 0xC3, 0x00, 0x0C, 0x80, 0xE3, 0x00, 0x10, 0x81, 0x03, 0x00, 0x14, 0x81, 0x23, 0x00, 0x18, 0x81, 0x43, 0x00, 0x1C, 0x81, 0x63, 0x00, 0x20, 0xC0, 0x23, 0x00, 0x24, 0xC0, 0x43, 0x00, 0x28, 0xC0, 0x63, 0x00, 0x2C, 0xC0, 0x83, 0x00, 0x30, 0xC0, 0xA3, 0x00, 0x34, 0xC0, 0xC3, 0x00, 0x38, 0xC0, 0xE3, 0x00, 0x3C, 0xC1, 0x03, 0x00, 0x40, 0xC1, 0x23, 0x00, 0x48, 0x80, 0x63, 0x00, 0x00, 0x7D, 0x89, 0x03, 0xA6, 0x4E, 0x80, 0x04, 0x21, 0x3C, 0x80, 0x10, 0x05, 0x38, 0xA0, 0x00, 0x00, 0x90, 0xA4, 0x00, 0x4C, 0x80, 0x64, 0x00, 0x50, 0xE8, 0x01, 0x00, 0x80, 0x7C, 0x08, 0x03, 0xA6, 0x38, 0x21, 0x00, 0x70, 0x4E, 0x80, 0x00, 0x20, 0x60, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x60, 0x00, 0x00, 0x00 };
PS3.SetMemory(function_address + 0x4, func);
PS3.SetMemory(0x10050000, new byte[0x2854]);
PS3.SetMemory(function_address, new byte[] { 0xF8, 0x21, 0xFF, 0x91 });
}
public static int Call(uint func_address, params object[] parameters)
{
int num_params = parameters.Length;
uint num_floats = 0;
for (uint i = 0; i < num_params; i++)
{
if (parameters[i] is int)
{
byte[] val = BitConverter.GetBytes((int)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, val);
}
else if (parameters[i] is uint)
{
byte[] val = BitConverter.GetBytes((uint)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, val);
}
else if (parameters[i] is string)
{
byte[] str = Encoding.UTF8.GetBytes(Convert.ToString(parameters[i]) + "\0");
PS3.SetMemory(0x10050054 + i * 0x400, str);
uint addr = 0x10050054 + i * 0x400;
byte[] address = BitConverter.GetBytes(addr);
Array.Reverse(address);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, address);
}
else if (parameters[i] is float)
{
num_floats++;
byte[] val = BitConverter.GetBytes((float)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050024 + ((num_floats - 1) * 0x4), val);
}
}
byte[] fadd = BitConverter.GetBytes(func_address);
Array.Reverse(fadd);
PS3.SetMemory(0x1005004C, fadd);
System.Threading.Thread.Sleep(20);
byte[] ret = PS3.GetMemory(0x10050050, 4);
Array.Reverse(ret);
return BitConverter.ToInt32(ret, 0);
}
Buttons
Buttons Monitoring (by seb5594)
public class Buttons
{
public static UInt32
X = 2104320,
O = 512,
Square = 67108864,
Triangle = 8,
L3 = 1074003968,
R3 = 536870912,
L2 = 72704,
R2 = 131072,
L1 = 1048704,
R1 = 2147483648,
Crouch = 4194304,
Prone = 8388608,
StartButton = 4;
}
public Boolean ButtonPressed(Int32 clientIndex, UInt32 Button)
{
if (BO1TMAPI.PS3.Extension.ReadUInt32((UInt32)G_Client(clientIndex) + 0x271 == Button)
return true;
else return false;
}
public Int32 G_Client(Int32 clientIndex)
{
return (Int32)0x13950C8 + 0x2A38 * clientIndex;
}
public UInt32 ReadUInt32(uint offset)
{
Byte[] YoLo = GetMemory(offset, 4);
Array.Reverse(YoLo, 0, 4);
return BitConverter.ToUInt32(YoLo, 0);
}
public byte[] GetMemory(uint address, int length)
{
byte[] buffer = new byte[length];
BO1TMAPI.PS3.GetMemory(address, buffer);
return buffer;
}
//Example how to use:
if(ButtonPressed(0,Buttons.L1))
{
// Mods/functions here
}
Local Client Buttons Monitoring (by xPAQz )
private static UInt32 LocalButtons = 0xd19800;
public enum Buttons
{
DpadUp = 0x1FF,
DpadDown = 0x20F,
DpadRight = 0x21F,
DpadLeft = -0xC47E5F,
R3 = 0x1CF,
Square = 0xEF,
Cross = 0xCF,
LeftCursorUp = 0x27F,
LeftCursorLeft = 0x29F,
LeftCursorRight = 0x2AF,
LeftCursorDown = 0x28F,
R2 = 0x1EF,
L2 = 0x1DF,
Select = 0x1AF,
Start = 0x19F
}
public static Boolean ButtonPressed(Buttons Button)
{
return Convert.ToBoolean(PS3.Extension.ReadByte(LocalButtons + (UInt32)Button) == 1);
}
FPS (By SC58 )
0x00466298 - Turn on/off FPS
40 00 - ON
40 9A - OFF
0x0091C860 - Text For Menu
0x0091BF38 - Text Position
0x0091BF34 - Text Size
Unlock All Trophys (by SC58 )
public void TrophyUnlocks_MP()
{
string[] Achievements = new string[75];
Achievements[0] = "8 SP_WIN_CUBA";
Achievements[1] = "8 SP_WIN_VORKUTA";
Achievements[2] = "8 SP_WIN_PENTAGON";
Achievements[3] = "8 SP_WIN_FLASHPOINT";
Achievements[4] = "8 SP_WIN_KHE_SANH";
Achievements[5] = "8 SP_WIN_HUE_CITY";
Achievements[6] = "8 SP_WIN_KOWLOON";
Achievements[7] = "8 SP_WIN_RIVER";
Achievements[8] = "8 SP_WIN_FULLAHEAD";
Achievements[9] = "8 SP_WIN_INTERROGATION_ESCAPE";
Achievements[10] = "8 SP_WIN_UNDERWATERBASE";
Achievements[11] = "8 SP_VWIN_FLASHPOINT";
Achievements[12] = "8 SP_VWIN_HUE_CITY";
Achievements[13] = "8 SP_VWIN_RIVER";
Achievements[14] = "8 SP_VWIN_FULLAHEAD";
Achievements[15] = "8 SP_VWIN_UNDERWATERBASE";
Achievements[16] = "8 SP_LVL_CUBA_CASTRO_ONESHOT";
Achievements[17] = "8 SP_LVL_VORKUTA_VEHICULAR";
Achievements[18] = "8 SP_LVL_VORKUTA_SLINGSHOT";
Achievements[19] = "8 SP_LVL_KHESANH_MISSILES";
Achievements[20] = "8 SP_LVL_HUECITY_AIRSUPPORT";
Achievements[21] = "8 SP_LVL_HUECITY_DRAGON";
Achievements[22] = "8 SP_LVL_CREEK1_DESTROY_MG";
Achievements[23] = "8 SP_LVL_CREEK1_KNIFING";
Achievements[24] = "8 SP_LVL_KOWLOON_DUAL";
Achievements[25] = "8 SP_LVL_RIVER_TARGETS";
Achievements[26] = "8 SP_LVL_WMD_RSO";
Achievements[27] = "8 SP_LVL_WMD_RELAY";
Achievements[28] = "8 SP_LVL_POW_HIND";
Achievements[29] = "8 SP_LVL_POW_FLAMETHROWER";
Achievements[30] = "8 SP_LVL_FULLAHEAD_2MIN";
Achievements[31] = "8 SP_LVL_REBIRTH_MONKEYS";
Achievements[32] = "8 SP_LVL_REBIRTH_NOLEAKS";
Achievements[33] = "8 SP_LVL_UNDERWATERBASE_MINI";
Achievements[34] = "8 SP_LVL_FRONTEND_CHAIR";
Achievements[35] = "8 SP_LVL_FRONTEND_ZORK";
Achievements[36] = "8 SP_GEN_MASTER";
Achievements[37] = "8 SP_GEN_FRAGMASTER";
Achievements[38] = "8 SP_GEN_ROUGH_ECO";
Achievements[39] = "8 SP_GEN_CROSSBOW";
Achievements[40] = "8 SP_GEN_FOUNDFILMS";
Achievements[41] = "8 SP_ZOM_COLLECTOR";
Achievements[42] = "8 SP_ZOM_NODAMAGE";
Achievements[43] = "8 SP_ZOM_TRAPS";
Achievements[44] = "8 SP_ZOM_SILVERBACK";
Achievements[45] = "8 SP_ZOM_CHICKENS";
Achievements[46] = "8 SP_ZOM_FLAMINGBULL";
Achievements[47] = "8 MP_FILM_CREATED";
Achievements[48] = "8 MP_WAGER_MATCH";
Achievements[49] = "8 MP_PLAY";
Achievements[50] = "8 DLC1_ZOM_OLDTIMER";
Achievements[51] = "8 DLC1_ZOM_HARDWAY";
Achievements[52] = "8 DLC1_ZOM_PISTOLERO";
Achievements[53] = "8 DLC1_ZOM_BIGBADDABOOM";
Achievements[54] = "8 DLC1_ZOM_NOLEGS";
Achievements[55] = "8 DLC2_ZOM_PROTECTEQUIP";
Achievements[56] = "8 DLC2_ZOM_LUNARLANDERS";
Achievements[57] = "8 DLC2_ZOM_FIREMONKEY";
Achievements[58] = "8 DLC2_ZOM_BLACKHOLE";
Achievements[59] = "8 DLC2_ZOM_PACKAPUNCH";
Achievements[60] = "8 DLC3_ZOM_STUNTMAN";
Achievements[61] = "8 DLC3_ZOM_SHOOTING_ON_LOCATION";
Achievements[62] = "8 DLC3_ZOM_QUIET_ON_THE_SET";
Achievements[63] = "8 DLC4_ZOM_TEMPLE_SIDEQUEST";
Achievements[64] = "8 DLC5_ZOM_CRYOGENIC_PARTY";
Achievements[65] = "8 DLC5_ZOM_BIG_BANG_THEORY";
Achievements[66] = "8 DLC5_ZOM_GROUND_CONTROL";
Achievements[67] = "8 DLC5_ZOM_ONE_SMALL_HACK";
Achievements[68] = "8 DLC5_ZOM_ONE_GIANT_LEAP";
Achievements[69] = "8 DLC5_ZOM_PERKS_IN_SPACE";
Achievements[70] = "8 DLC5_ZOM_FULLY_ARMED";
Achievements[71] = "8 DLC4_ZOM_ZOMB_DISPOSAL";
Achievements[72] = "8 DLC4_ZOM_MONKEY_SEE_MONKEY_DONT";
Achievements[73] = "8 DLC4_ZOM_BLINDED_BY_THE_FRIGHT";
Achievements[74] = "8 DLC4_ZOM_SMALL_CONSOLATION";
byte[] FT111 = new byte[] { 0x41 };
byte[] FT11 = new byte[] { 0x40 };
byte[] RPCON1 = new byte[] { 0x38, 0x60, 0xFF, 0xFF, 0x38, 0x80, 0x00, 0x00, 0x3C, 0xA0, 0x02, 0x00, 0x30, 0xA5, 0x50, 0x00, 0x4B, 0xF8, 0x2E, 0x2D, 0x4B, 0xFF, 0xFB, 0x78 };
byte[] RPCOFF1 = new byte[] { 0x82, 0xB9, 0x00, 0x00, 0x3C, 0xE0, 0x00, 0xD7, 0x3D, 0x80, 0x00, 0x92, 0x56, 0xA4, 0x38, 0x30, 0x56, 0xBB, 0x18, 0x38, 0x3B, 0x87, 0x9D, 0x04 };
for (int i = 0; i < 75; i++)
{
PS3.SetMemory(0x2005000, Encoding.ASCII.GetBytes(Achievements + "\0"));
PS3.SetMemory(0x466298, FT111);
PS3.SetMemory(0x4667B4, RPCON1);
System.Threading.Thread.Sleep(15);
PS3.SetMemory(0x466298, FT11);
PS3.SetMemory(0x4667B4, RPCOFF1);
}
}
Addresses (by SC58 )
0x003E95F0 - sv_gamesendservercommand(int clientNum, svscmd_type type, const char *text)
0x00370638 - G_LocalizedStringIndex(const char *string)
0x004C4FF0 - Dvar_GetBool(const char *dvarName)
0x00399CC8 - CBUF_AddText(int localClientNum, const char *text)
0x003F62A8 - Sv_SendClientSnapshot(client_s *client)
0x002D85E0 - Player_Die(unsigned int *self, unsigned int *inflictor, unsigned int *attacker, int damage, int meansOfDeath, int iWeapon, const float *vDir, unsigned int hitLoc, int psTimeOffset)
0x0007B720 - BG_GetPerkIndexForName(char *perkName)
0x00377208 - G_GivePlayerWeapon(playerState_s *pPS, int iWeaponIndex, char altModelIndex)
0x002D2D98 - G_InitializeAmmo(gentity_s *pSelf, int weaponIndex, char weaponModel, int hadWeapon)
0x00356BE0 - G_CallSpawnEntity(gentity_s *ent)
0x0036FFA0 - G_ModelIndex(const char *name)
0x00370238 - HudElem_Alloc(int clientNum, int teamNum)
0x003DFD90 - Sv_KickClient(client_s *cl, char *playerName, int maxPlayerNameLen)
0x003376C8 - SP_script_model(gentity_s *pSelf)
0x012ab290 - g_entity
0x003705D0 - G_MaterialIndex(const char *name)
0x003701D8 - G_SetModel(gentity_s *ent, const char *modelName)
0x00373488 - G_Spawn(void)
0x011F2738 - G_Hudelem
0x00375548 - G_GetWeaponIndexForName(const char *name)
0x0037FE50 - G_SpawnTurret(gentity_s *self, const char *weaponinfoname)
0x003EED08 - Sv_AddServerCommand
0x003E5200 - Sv_SendClientGameState(Client_s *)
0x002D4BA0 - G_Say(gentity_s *ent, gentity_s *target, int mode, const char *chatText)
0x002CA520 - PlayerCmd_SayAll
0x002CA608 - PlayerCmd_SayTeam
0x003E0848 - Sv_FastRestart_f
0x003E0660 - Sv_Maprestart(int fast_restart)
0x003E7528 - Sv_Addtestclient(void)
0x00310470 - GScr_AddTestClient
0x003E47B8 - SV_ClientCommand(client_s *cl, msg_t *msg)
0x003E1B60 - SV_ExecuteClientCommand(client_s *cl, const char *s, int clientOK)
0x0039B6C0 - SV_Cmd_TokenizeString(const char *text_in)
0x002D6140 - ClientCommand(int clientNum)
0x003996E8 - SV_Cmd_EndTokenizedString(void)
0x000C0A98 - BG_GetWeaponDef(unsigned int weaponIndex)
0x00356DF0 - G_Callspawn
0x00357500 - G_SpawnEntitiesFromString(void)
0x003EAD98 - SV_SetConfigstring(int index, const char *val)
0x005CF9B0 - Scr_GetVector(unsigned int index, float *vectorValue)
0x4C7370 - Dvar_GetString
Zombies
Name And Motd
Lobby Name Offset: 0x01C33DB0
Message of the day Offset: 0x01c8004c
Client Offsets Interval: 0x1d30
In-Game Name
Offset: 0x011008B8
Godmode
Bytes: 0x08,0x88,0x08,0x88 for On, 0x00,0x00,0x00,0x64 for Off
Offset: 0x01100840
Dead Ops Arcade Godmode
Offset: 0x010FED8F
Unlimited Ammo
Bytes: 15,0xff,0xff,0xff for On
Offset 1: 0x010FF138
Offset 2: 0x010FF148
Offset 3: 0x010FF160
Offset 4: 0x010FF140
Offset 5: 0x010FF168
Offset 6: 0x010FF150
mFlags
Bytes: 0x01 for noclip,0x02 for ufo, 0x04 for frozen
Offset: 0x0110098F
Weapons
Primary Weapon: 0x010fef6f
Secondary Weapon: 0x010fef9f
Dead Ops Arcade Weapon
Bytes: FlameThrower- 0A ShotGun- 0E RayGun- 0B RegularGun- 0C MiniGun- 0D GranadeLuancher- 0F
Offset: 0x010FEF57
Modes
Bytes: 0x01 for notarget, 0x02 for spectator,0x00 for default
Offset: 0x0110079B
In-Game Stats
Score/Money Offset: 0x0110090C
Kills Offset: 0x01100910
Headshots Offset: 0x01100930
Revives Offset: 0x0110092C
Downs Offset: 0x01100928
Speed
Bytes: 0x40, 0x74 for super,0x00, 0x00 for freeze,0x3f, 0x80 for default
Offset: 0x01100854
Scripts
SV_GameSendServerCommand
public void SV_GameSendServerCommand(int client, string command)
{
RPC.Call(0x003C33A8, client, 1, command);
}
Round Skip
First add timer then a button,
add this to the button:
Cbuf_AddText(0,"set timescale 10");
timer1.Start();
Then this to the timer and set the interval 200/500 otherwise the game can crash.
Cbuf_AddText(0,"ai axis delete");
Cbuf_AddText
public void Cbuf_AddText(int localClient,string command)
{
RPC.Call(0x00395BA8,localClient,command);
}
SetModel
public void SetModel(int client, string model)
{
RPC.Call(0x00305940, (uint)(0xFA805C + client * 0x34C), model);
}
Aim Assist (By me)
public void Give_AimAssist(int client)
{
SV_SendServerCommand(client, "v aim_lockon_region_height 480");
SV_SendServerCommand(client, "v aim_lockon_region_width 640");
SV_SendServerCommand(client, "v aim_lockon_enabled 1");
Thread.Sleep(10);
SV_SendServerCommand(client, "v aim_lockon_strength 1");
SV_SendServerCommand(client, "v aim_lockon_deflection 0");
SV_SendServerCommand(client, "v aim_autoaim_enabled 1");
Thread.Sleep(10);
SV_SendServerCommand(client, "v aim_autoaim_region_height 480");
SV_SendServerCommand(client, "v aim_autoaim_region_width 640");
SV_SendServerCommand(client, "v aim_slowdown_yaw_scale_ads 0");
Thread.Sleep(10);
SV_SendServerCommand(client, "v aim_slowdown_yaw_scale 0");
SV_SendServerCommand(client, "v aim_slowdown_pitch_scale 0");
SV_SendServerCommand(client, "v aim_slowdown_pitch_scale_ads 0");
Thread.Sleep(10);
SV_SendServerCommand(client, "v aim_slowdown_region_height 0");
SV_SendServerCommand(client, "v aim_slowdown_region_width 0");
SV_SendServerCommand(client, "v aim_slowdown_enabled 1");
Thread.Sleep(10);
SV_SendServerCommand(client, "v aim_aimAssistRangeScale 2");
SV_SendServerCommand(client, "v aim_autoAimRangeScale 2");
}
FPS (by SC58 )
0x00407554 - Turn on/off FPS
40 00 - ON
40 9A - OFF
0x00827950 - Text Position
0x0082794c - Text Size
0x008283a8 - Text For Menu
All Clients Buttons Monitoring (By AlmightySo )
public static class Buttonz
{
public static Int32
L1 = 1048704,
L2 = 72704,
L3 = 1074003968,
R1 = -2147483648,
R2 = 131072,
R3 = 536870912,
Square = 67108864,
Cross = 2104320,
Crouch = 4194304,
Prone = 8388608,
Triangle = 8;
}
public static bool ButtonPressed(int client, int Button)
{
if (Convert.ToInt32(Debug.ReadInt32(0x11007E8 + ((uint)client * 0x104)) == Button)
return true;
else return false;
}
Local Clients Buttons Monitoring (by SC58 )
Offset for Client 0: 0x00B4EB60
Interval: 4392
Jetpack (by AlmightySo )
public uint findPS(int client)
{
return 0x10FEDB0 + ((uint)client * 0x104;
}
public void JetPack(int client)
{
float jH = Debug.ReadFloat(findPS(client));
jH += 70;
PS3.Extension.WriteFloat(findPS(client), jH);
}
//Use JetPack(); in a timer with button handling.
Addresses (by SC58 )
0x00304BA0 - G_LocalizedStringIndex(const char *string)
0x00304B38 - G_MaterialIndex(const char *name)
0x00452280 - Dvar_GetBool(const char *dvarName)
0x003C33A8 - SV_GameSendServerCommand(int clientNum, svscmd_type type, const char *text)
0x00395BA8 - CBUF_AddText(int localClientNum, const char *text)
0x00309E30 - G_GetWeaponIndexForName(const char *name)
0x00305940 - SetModel(gentity_s *ent, const char *modelName)
0x00305650 - G_ModelIndex(const char *name)
0x00EE7BF2 - G_Hudelem
0x000A4968 - BG_GetWeaponDef(unsigned int weaponIndex)
0x002FD098 - G_Callspawn
0x002FD9C8 - G_SpawnEntitiesFromString(void)
0x00073A88 - BG_GetPerkIndexForName(const char *perkName)
0x004BE508 - SV_ExecuteClientCommand(client_s *cl, const char *s, int clientOK)
0x003066E0 - G_Spawn(void)
0x002DDFF8 - SP_script_model(gentity_s *pSelf)
Useful Dvars (You can use these even when not host using cbuf_addtext)
noclip - you can fly
ufo - you can also fly with this
god - godmode (unlimited health..)
notarget - zombies can't see you
give <item here> - you can give weapons/perks
give all - gives you all weapons
take all - takes all your stuff
cg_thirdPerson - thirdperson (values: 1 or 0)
cg_fov - field of view (any value between 1-200)
ai axis delete - kills all zombies
cg_drawfps - fps in the corner (values: 1 or 0)
dropweapon - drops your current weapon
Non-Host Offsets
No Recoil
Bytes: ON 0x60, 0x00, 0x00, 0x00 ,OFF 0x4B, 0xF3, 0xFF, 0x89
Offset: 0x15A320
Super Steady Aim
Bytes: ON 2F 80 00 00, OFF 2F 80 00 02
Offset: 0x91014
Credits
SC58
AlmightySo
Choco
Jo-Milk
Seb5594
primetime43
xPAQz
DexModderFTW
Eddie Mac
iNDMx - Here is also his good thread: You must login or register to view this content.
Anera
Me =D
I will update the thread soon!
Last edited by
makeabce ; 04-25-2016 at 03:56 PM.
Reason: added fps rpc to mp scripts
The following 31 users say thank you to makeabce for this useful post:
-JM-, A Friend, APOCALYP, Azus, bmob10189, Chris, Father Luckeyy, hackeveryone, Hunter926, iNDMx, Insult, iTzzTrojan, kainer wainer, LizzoOo, Mango_Knife, MODZ4FUN420, Mogren, NickBeHaxing, Obris, gopro_2027, puffindaherb, ShutTheCrunchUp, Swaqq, SyTry, TheGreenPlanet, TreyarchTragedy, xPAQz, xSuperLᴏbbies, XxBlud23xX
08-09-2014, 10:15 AM
#38
MaNamesTyler
Little One
08-19-2014, 03:19 AM
#41
Azus
Little One
Originally posted by makeabce
Hello guys, here is my offsets thread! The old one was okay,but littlebit messy and here is more stuff.
Multiplayer
Name and Stats
Non-Host Offsets
Super Sleight of Hand
Chrome Players
Wallhack
Rapid Fire
Redboxes
Blackbird
Super Steady Aim
No Recoil
Client Offsets Interval: 0x2A38
In-Game Name
Godmode Scpript
mFlags
Unlimited Ammo Scpript
Blackbird
Reconplane
Second Chance
Speed
In-Game Camo
Teleport
Scripts
Aimbot (By Seb5594 & DexModderFTW & Eddie mac)
Cbuf_AddText
SV_GameSendServerCommand
G_SetModel
RPC (By SC58 And Choco )
Buttons
Buttons Monitoring (by seb5594)
Local Client Buttons Monitoring (by xPAQz )
FPS (By SC58 )
Unlock All Trophys (by SC58 )
Addresses (by SC58 )
Zombies
Name And Motd
Client Offsets Interval: 0x1d30
In-Game Name
Godmode
Dead Ops Arcade Godmode
Unlimited Ammo
mFlags
Weapons
Dead Ops Arcade Weapon
Modes
In-Game Stats
Speed
Scripts
SV_GameSendServerCommand
Round Skip
Cbuf_AddText
SetModel
Aim Assist (By me)
FPS (by SC58 )
All Clients Buttons Monitoring (By AlmightySo )
Local Clients Buttons Monitoring (by SC58 )
Jetpack (by AlmightySo )
Addresses (by SC58 )
Useful Dvars (You can use these even when not host using cbuf_addtext)
Non-Host Offsets
No Recoil
Super Steady Aim
Credits
SC58
AlmightySo
Choco
Seb5594
primetime
xPAQz
DexModderFTW
Eddie Mac
iNDMx - Here is also his good thread: You must login or register to view this content.
Anera
I will update the thread soon!
Multiplayer
Name and Stats
Name Offset: 0x02000934
Class Name Offset: 0x01c3896f (Class # 1-5) & 0x01c43cf4 (Class # 6-10)
COD Points Offset: 0x020942d1
Time Played Offset: 0x02094731
Total Wins Offset: 0x0209475d
Total Losses Offset: 0x020944dd
Prestige Offset: 0x020946dd
Rank Offset (score basically): 0x020946e5
Kills Offset: 0x02094429
Deaths Offset: 0x020942f5
Assists Offset: 0x02094291
Kill/Death Ratio In Weapons Offset: 0x02094425
Wins/Loss Ration In Career Offset: 0x02094761
Headshots Offset: 0x0209440d
Amount Spent In Contracts Offset: 0x020942dd
Contracts Purchased Offset: 0x020942e1
XP Award In Contracts Offset: 0x020942e5
Return On Investment Contracts Offset (This is also amount earned) : 0x020942d9
Games Played Offset: 0x020938b1
Wager Match Earnings Offset: 0x020944d9
Unlock All Offset: 0x02094990 (Unlock All Bytes: https://pastebin.com/MxmMrR22)
Non-Host Offsets
Super Sleight of Hand
Bytes: 0x02 for on, 0x01 for off
Offset: 0xBBC2E8
Chrome Players
Bytes: 0x38, 0xC0, 0xFF, 0xFF for On, 0xFC, 0xC0, 0xF8, 0x90 for Off
Offset: 0x131144
Wallhack
Bytes: 0x38, 0xC0, 0xF0, 0x03 for On,0xFC, 0xC0, 0xF8, 0x90 for Off
Offset: 0x131144
Rapid Fire
Bytes: 0x02 for On, 0x01 for Off
Offset: 0xBBC2EC
Redboxes
Bytes: 0x60,0x00,0x00,0x00 for both, and when off then change redboxes offset with these: 0x41, 0x86, 0x02, 0x78
Perk Check Offset: 0x001206C8
Redboxes Offset: 0x001205C0
Blackbird
Bytes: 0x40, 0x9A, 0x00, 0xC4 for On, 0x41, 0x9A, 0x00, 0xC4 for Off
Offset: 0xEBDF4
Super Steady Aim
Bytes: 0x60,0x00,0x00,0x00 for On, 0x2F, 0x80, 0x00, 0x02 for Off
Offset: 0xAB8EC
No Recoil
Bytes: 0x60,0x00,0x00,0x00 for On, 0x4B, 0xF1, 0x84, 0xCD for Off
Offset: 0x19B244
Client Offsets Interval: 0x2A38
In-Game Name
Offset: 0x139784C
Godmode Scpript
public void Godmode(uint client)
{
PS3.SetMemory((0x12ab290 + (client * 760)) + 0x194, new byte[4]);
Thread.Sleep(50);
PS3.SetMemory((0x12ab290 + (client * 760)) + 0x194, new byte[] { 15, 0xff, 0xff, 0xff });
}
mFlags
Bytes: 0x01 for noclip,0x02 for ufo
Offset: 0x13979BF
Unlimited Ammo Scpript
public void UnlimitedAmmo(uint client)
{
PS3.SetMemory((0x13950c8 + (client * 0x2a3) + 0x388, new byte[] { 15, 0xff, 0xff, 0xff });
PS3.SetMemory((0x13950c8 + (client * 0x2a3) + 0x400, new byte[] { 15, 0xff, 0xff, 0xff });
PS3.SetMemory((0x13950c8 + (client * 0x2a3) + 0x380, new byte[] { 15, 0xff, 0xff, 0xff });
PS3.SetMemory((0x13950c8 + (client * 0x2a3) + 0x3f8, new byte[] { 15, 0xff, 0xff, 0xff });
PS3.SetMemory((0x13950c8 + (client * 0x2a3) + 0x410, new byte[] { 15, 0xff, 0xff, 0xff });
PS3.SetMemory((0x13950c8 + (client * 0x2a3) + 0x408, new byte[] { 15, 0xff, 0xff, 0xff });
}
Blackbird
Bytes: 0x01 On, 0x00 Off
Offset: 0x1397AEB
Reconplane
Bytes: 0x03 for On, 0x00 for Off
Offset: 0x1397967
Second Chance
Bytes: 0x01 for On
Offset: 0x1397AEC
Speed
Bytes: 0x40,0x40 for super, 0x3F 0x80 for default, 0x00,0x00 for freeze
Offset: 0x1397880
In-Game Camo
Bytes: 60 for gold, 10 for ice,13 for red,10 for olive,20 for nevada,0x18 for sahara
Offset: 0x013952E0
Teleport
Offset: 0x13950f0
Scripts
Aimbot (By Seb5594 & DexModderFTW & Eddie mac)
public class Aimbot
{
#region Aimbot
//All of the getting info etc.
public static uint G_Entity(uint client)
{
return 0x012ab290 + (client * 0x2F;
}
public static float[] getOrigin(uint clientNum)
{
float[] origin = new float[3];
origin[0] = Lib.ReadSingle(0x013950c8 + 0x2A38 * clientNum + 0x24);
origin[1] = Lib.ReadSingle(0x013950c8 + 0x2A38 * clientNum + 0x24 + 0x4);
origin[2] = Lib.ReadSingle(0x013950c8 + 0x2A38 * clientNum + 0x24 + 0x;
return origin;
}
public static UInt32 G_Entity(Int32 ClientIndex)
{
return 0x16B7920 + ((UInt32)ClientIndex * 0x31C);
}
public static int GetHost()
{
string str = Lib.ReadString(0x172a58;
for (int i = 0; i < 0x12; i++)
{
string str2 = Lib.ReadString((uint)(0xf1651c + (i * 0x3600)));
if (str == str2)
{
return i;
}
}
return -1;
}
public static Boolean Exists(Int32 clientIndex)
{
return Lib.ReadString(0x013978d0 + ((uint)clientIndex * 0x2A3) != "";
}
public static Boolean IsAlive(Int32 clientIndex)
{
return (Lib.ReadByte(0x0139793b + ((uint)clientIndex * 0x2A3) == 0);
}
public static Boolean isSameTeam(Int32 Owner, Int32 Victim)
{
return Lib.ReadInt32(0x01397894 + ((uint)Owner * 0x2A3) == Lib.ReadInt32(0x01397894 + ((uint)Victim * 0x2A3);
}
public static Single GetDistance3D(Single[] p1, Single[] p2)
{
float[] numArray3 = new float[] { p2[0] - p1[0], p2[1] - p1[1], p2[2] - p1[2] };
return ((numArray3[0] * numArray3[0]) + (numArray3[1] * numArray3[1])) + (numArray3[2] * numArray3[2]);
}
public static int GetNearestClientFromAttacker(int You)
{
int CIndex = -1;
double Closest = 1E+08f;
for (int i = 0; i < 12; i++)
{
if (((Exists(i) && IsAlive(i) && !isSameTeam(You, i))))
{
double Bla = GetDistance3D(getOrigin((uint)You), getOrigin((uint)i));
if (Bla < Closest)
{
CIndex = i;
Closest = Bla;
}
}
}
return CIndex;
}
//The Real Aimbot Code-----
//function to convert a vector to angles
public static Single[] vectoangles(Int32 clientIndex, Int32 secondPlayer)
{
Single[] numArray1 = getOrigin((uint)clientIndex);
Single[] numArray2 = getOrigin((uint)secondPlayer);
Single[] Angles = {(numArray2[0] - numArray1[0]), (numArray2[1] - numArray1[1]), (numArray2[2] - numArray1[2])};
Single num2;
Single num3;
Single[] numArray = new Single[3];
if ((Angles[1] == 0f) && (Angles[0] == 0f))
{
num2 = 0f;
if (Angles[2] > 0f)
num3 = 90f;
else
num3 = 270f;
}
else
{
if (Angles[0] != -1f)
num2 = (Single)((Math.Atan2((Double)Angles[1], (Double)Angles[0]) * 180.0) / 3.1415926535897931);
else if (Angles[1] > 0f)
num2 = 90f;
else
num2 = 270f;
if (num2 < 0f)
num2 += 360f;
Single num = (Single)Math.Sqrt((Double)((Angles[0] * Angles[0]) + (Angles[1] * Angles[1])));
num3 = (Single)((Math.Atan2((Double)Angles[2], (Double)num) * 180.0) / 3.1415926535897931);
if (num3 < 0f)
num3 += 360f;
}
numArray[0] = -num3;
numArray[1] = num2;
return numArray;
}
//Set Set the clients angles
public static void SetClientViewAngles(Int32 clientIndex, Int32 Victim)
{
Single[] angles = vectoangles(clientIndex, Victim);
Lib.WriteSingle(0x10040000, angles);
RPC.Call(0x2C1E38, new Object[] { Addresses.G_Entity((uint)clientIndex), 0x10040000 });
}
//Just Aimbot Threads and Bools
public static bool[] AimbotStatus = new bool[12];
public static Thread[] AimbotThread = new Thread[12];
public static bool[] UnfairAimbot = new bool[12];
//This is what starts the Aimbot
public static void StartAimbot(int clientIndex)
{
ThreadStart start = null;
if (!AimbotStatus[clientIndex])
{
Thread.Sleep(100);
AimbotStatus[clientIndex] = true;
if (start == null)
{
start = () => InitializeAimbot(clientIndex);
}
AimbotThread[clientIndex] = new Thread(start);
AimbotThread[clientIndex].IsBackground = true;
AimbotThread[clientIndex].Start();
}
else
{
AimbotStatus[clientIndex] = false;
AimbotThread[clientIndex].Abort();
}
}
//Main Aimbot Code
private static void InitializeAimbot(int client)
{
PS3.Reconnect();
while (AimbotThread[client].IsAlive)
{
int nearestPlayer = GetNearestClientFromAttacker(client);
if (nearestPlayer != client)
{
if (ButtonPress.ButtonPressed(client, 03) || ButtonPress.ButtonPressed(client, 04))
{
SetClientViewAngles(client, nearestPlayer);
}
}
}
}
#endregion
//Example:
Aimbot.StartAimbot(int client);
Cbuf_AddText
public void cBuf_AddText(int localClient,string command)
{
RPC.Call(0x00399CC8, localClient, command);
}
SV_GameSendServerCommand
public void SV_GameSendServerCommand(int client, string command)
{
RPC.Call(0x003E95F0, client, 1, command);
}
G_SetModel
public void SetModel(int client, string model)
{
RPC.Call(0x003701D8, (uint)(0x012ab290 + client * 0x2F, model);
}
RPC (By SC58 And Choco )
using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Threading.Tasks;
namespace BOIMPRPC
{
public class PS3
{
static uint processID;
private static uint GetProcessID()
{
uint[] ProcessIDs;
PS3_TMAPI.GetProcessList(0, out ProcessIDs);
return ProcessIDs[0];
}
public static void SetMemory(uint address, byte[] memory)
{
PS3_TMAPI.ProcessSetMemory(0, PS3_TMAPI.UnitType.PPU, processID, 0, address, memory);
}
public static byte[] GetMemory(uint address, int length)
{
byte[] bytes = new byte[length];
PS3_TMAPI.ProcessGetMemory(0, PS3_TMAPI.UnitType.PPU, processID, 0, address, ref bytes);
return bytes;
}
public static int Init()
{
processID = GetProcessID();
return RPC.Init();
}
}
public class RPC
{
static uint function_address;
public static int Init()
{
function_address = Get_func_address();
if (function_address == 0) return -1;
Enable_RPC();
return 0;
}
public static uint Get_func_address()
{
for (uint i = 0x7A21D4; i < 0x1000000; i += 4)
{
byte[] bytes = PS3.GetMemory(i, ;
if (((bytes[0] == 0x4B) && (bytes[1] == 0xFF) && (bytes[2] == 0xBE) && (bytes[3] == 0x05) && (bytes[4] == 0x4B) && (bytes[5] == 0xFF) && (bytes[6] == 0xFC) && (bytes[7] == 0x9))
{
return i + 0xC;
}
}
return 0;
}
public static void Enable_RPC()
{
PS3.SetMemory(function_address, new byte[] { 0x4E, 0x80, 0x00, 0x20 });
System.Threading.Thread.Sleep(20);
byte[] func = new byte[] { 0x7C, 0x08, 0x02, 0xA6, 0xF8, 0x01, 0x00, 0x80, 0x3C, 0x60, 0x10, 0x05, 0x81, 0x83, 0x00, 0x4C, 0x2C, 0x0C, 0x00, 0x00, 0x41, 0x82, 0x00, 0x64, 0x80, 0x83, 0x00, 0x04, 0x80, 0xA3, 0x00, 0x08, 0x80, 0xC3, 0x00, 0x0C, 0x80, 0xE3, 0x00, 0x10, 0x81, 0x03, 0x00, 0x14, 0x81, 0x23, 0x00, 0x18, 0x81, 0x43, 0x00, 0x1C, 0x81, 0x63, 0x00, 0x20, 0xC0, 0x23, 0x00, 0x24, 0xC0, 0x43, 0x00, 0x28, 0xC0, 0x63, 0x00, 0x2C, 0xC0, 0x83, 0x00, 0x30, 0xC0, 0xA3, 0x00, 0x34, 0xC0, 0xC3, 0x00, 0x38, 0xC0, 0xE3, 0x00, 0x3C, 0xC1, 0x03, 0x00, 0x40, 0xC1, 0x23, 0x00, 0x48, 0x80, 0x63, 0x00, 0x00, 0x7D, 0x89, 0x03, 0xA6, 0x4E, 0x80, 0x04, 0x21, 0x3C, 0x80, 0x10, 0x05, 0x38, 0xA0, 0x00, 0x00, 0x90, 0xA4, 0x00, 0x4C, 0x80, 0x64, 0x00, 0x50, 0xE8, 0x01, 0x00, 0x80, 0x7C, 0x08, 0x03, 0xA6, 0x38, 0x21, 0x00, 0x70, 0x4E, 0x80, 0x00, 0x20, 0x60, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x60, 0x00, 0x00, 0x00 };
PS3.SetMemory(function_address + 0x4, func);
PS3.SetMemory(0x10050000, new byte[0x2854]);
PS3.SetMemory(function_address, new byte[] { 0xF8, 0x21, 0xFF, 0x91 });
}
public static int Call(uint func_address, params object[] parameters)
{
int num_params = parameters.Length;
uint num_floats = 0;
for (uint i = 0; i < num_params; i++)
{
if (parameters[i] is int)
{
byte[] val = BitConverter.GetBytes((int)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, val);
}
else if (parameters[i] is uint)
{
byte[] val = BitConverter.GetBytes((uint)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, val);
}
else if (parameters[i] is string)
{
byte[] str = Encoding.UTF8.GetBytes(Convert.ToString(parameters[i]) + "\0");
PS3.SetMemory(0x10050054 + i * 0x400, str);
uint addr = 0x10050054 + i * 0x400;
byte[] address = BitConverter.GetBytes(addr);
Array.Reverse(address);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, address);
}
else if (parameters[i] is float)
{
num_floats++;
byte[] val = BitConverter.GetBytes((float)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050024 + ((num_floats - 1) * 0x4), val);
}
}
byte[] fadd = BitConverter.GetBytes(func_address);
Array.Reverse(fadd);
PS3.SetMemory(0x1005004C, fadd);
System.Threading.Thread.Sleep(20);
byte[] ret = PS3.GetMemory(0x10050050, 4);
Array.Reverse(ret);
return BitConverter.ToInt32(ret, 0);
}
Buttons
Buttons Monitoring (by seb5594)
public class Buttons
{
public static UInt32
X = 2104320,
O = 512,
Square = 67108864,
Triangle = 8,
L3 = 1074003968,
R3 = 536870912,
L2 = 72704,
R2 = 131072,
L1 = 1048704,
R1 = 2147483648,
Crouch = 4194304,
Prone = 8388608,
StartButton = 4;
}
public Boolean ButtonPressed(Int32 clientIndex, UInt32 Button)
{
if (BO1TMAPI.PS3.Extension.ReadUInt32((UInt32)G_Client(clientIndex) + 0x271 == Button)
return true;
else return false;
}
public Int32 G_Client(Int32 clientIndex)
{
return (Int32)0x13950C8 + 0x2A38 * clientIndex;
}
public UInt32 ReadUInt32(uint offset)
{
Byte[] YoLo = GetMemory(offset, 4);
Array.Reverse(YoLo, 0, 4);
return BitConverter.ToUInt32(YoLo, 0);
}
public byte[] GetMemory(uint address, int length)
{
byte[] buffer = new byte[length];
BO1TMAPI.PS3.GetMemory(address, buffer);
return buffer;
}
//Example how to use:
if(ButtonPressed(0,Buttons.L1))
{
// Mods/functions here
}
Local Client Buttons Monitoring (by xPAQz )
private static UInt32 LocalButtons = 0xd19800;
public enum Buttons
{
DpadUp = 0x1FF,
DpadDown = 0x20F,
DpadRight = 0x21F,
DpadLeft = -0xC47E5F,
R3 = 0x1CF,
Square = 0xEF,
Cross = 0xCF,
LeftCursorUp = 0x27F,
LeftCursorLeft = 0x29F,
LeftCursorRight = 0x2AF,
LeftCursorDown = 0x28F,
R2 = 0x1EF,
L2 = 0x1DF,
Select = 0x1AF,
Start = 0x19F
}
public static Boolean ButtonPressed(Buttons Button)
{
return Convert.ToBoolean(PS3.Extension.ReadByte(LocalButtons + (UInt32)Button) == 1);
}
FPS (By SC58 )
0x00466298 - Turn on/off FPS
40 00 - ON
40 9A - OFF
0x0091C860 - Text For Menu
0x0091BF38 - Text Position
0x0091BF34 - Text Size
Unlock All Trophys (by SC58 )
public void TrophyUnlocks_MP()
{
string[] Achievements = new string[75];
Achievements[0] = "8 SP_WIN_CUBA";
Achievements[1] = "8 SP_WIN_VORKUTA";
Achievements[2] = "8 SP_WIN_PENTAGON";
Achievements[3] = "8 SP_WIN_FLASHPOINT";
Achievements[4] = "8 SP_WIN_KHE_SANH";
Achievements[5] = "8 SP_WIN_HUE_CITY";
Achievements[6] = "8 SP_WIN_KOWLOON";
Achievements[7] = "8 SP_WIN_RIVER";
Achievements[8] = "8 SP_WIN_FULLAHEAD";
Achievements[9] = "8 SP_WIN_INTERROGATION_ESCAPE";
Achievements[10] = "8 SP_WIN_UNDERWATERBASE";
Achievements[11] = "8 SP_VWIN_FLASHPOINT";
Achievements[12] = "8 SP_VWIN_HUE_CITY";
Achievements[13] = "8 SP_VWIN_RIVER";
Achievements[14] = "8 SP_VWIN_FULLAHEAD";
Achievements[15] = "8 SP_VWIN_UNDERWATERBASE";
Achievements[16] = "8 SP_LVL_CUBA_CASTRO_ONESHOT";
Achievements[17] = "8 SP_LVL_VORKUTA_VEHICULAR";
Achievements[18] = "8 SP_LVL_VORKUTA_SLINGSHOT";
Achievements[19] = "8 SP_LVL_KHESANH_MISSILES";
Achievements[20] = "8 SP_LVL_HUECITY_AIRSUPPORT";
Achievements[21] = "8 SP_LVL_HUECITY_DRAGON";
Achievements[22] = "8 SP_LVL_CREEK1_DESTROY_MG";
Achievements[23] = "8 SP_LVL_CREEK1_KNIFING";
Achievements[24] = "8 SP_LVL_KOWLOON_DUAL";
Achievements[25] = "8 SP_LVL_RIVER_TARGETS";
Achievements[26] = "8 SP_LVL_WMD_RSO";
Achievements[27] = "8 SP_LVL_WMD_RELAY";
Achievements[28] = "8 SP_LVL_POW_HIND";
Achievements[29] = "8 SP_LVL_POW_FLAMETHROWER";
Achievements[30] = "8 SP_LVL_FULLAHEAD_2MIN";
Achievements[31] = "8 SP_LVL_REBIRTH_MONKEYS";
Achievements[32] = "8 SP_LVL_REBIRTH_NOLEAKS";
Achievements[33] = "8 SP_LVL_UNDERWATERBASE_MINI";
Achievements[34] = "8 SP_LVL_FRONTEND_CHAIR";
Achievements[35] = "8 SP_LVL_FRONTEND_ZORK";
Achievements[36] = "8 SP_GEN_MASTER";
Achievements[37] = "8 SP_GEN_FRAGMASTER";
Achievements[38] = "8 SP_GEN_ROUGH_ECO";
Achievements[39] = "8 SP_GEN_CROSSBOW";
Achievements[40] = "8 SP_GEN_FOUNDFILMS";
Achievements[41] = "8 SP_ZOM_COLLECTOR";
Achievements[42] = "8 SP_ZOM_NODAMAGE";
Achievements[43] = "8 SP_ZOM_TRAPS";
Achievements[44] = "8 SP_ZOM_SILVERBACK";
Achievements[45] = "8 SP_ZOM_CHICKENS";
Achievements[46] = "8 SP_ZOM_FLAMINGBULL";
Achievements[47] = "8 MP_FILM_CREATED";
Achievements[48] = "8 MP_WAGER_MATCH";
Achievements[49] = "8 MP_PLAY";
Achievements[50] = "8 DLC1_ZOM_OLDTIMER";
Achievements[51] = "8 DLC1_ZOM_HARDWAY";
Achievements[52] = "8 DLC1_ZOM_PISTOLERO";
Achievements[53] = "8 DLC1_ZOM_BIGBADDABOOM";
Achievements[54] = "8 DLC1_ZOM_NOLEGS";
Achievements[55] = "8 DLC2_ZOM_PROTECTEQUIP";
Achievements[56] = "8 DLC2_ZOM_LUNARLANDERS";
Achievements[57] = "8 DLC2_ZOM_FIREMONKEY";
Achievements[58] = "8 DLC2_ZOM_BLACKHOLE";
Achievements[59] = "8 DLC2_ZOM_PACKAPUNCH";
Achievements[60] = "8 DLC3_ZOM_STUNTMAN";
Achievements[61] = "8 DLC3_ZOM_SHOOTING_ON_LOCATION";
Achievements[62] = "8 DLC3_ZOM_QUIET_ON_THE_SET";
Achievements[63] = "8 DLC4_ZOM_TEMPLE_SIDEQUEST";
Achievements[64] = "8 DLC5_ZOM_CRYOGENIC_PARTY";
Achievements[65] = "8 DLC5_ZOM_BIG_BANG_THEORY";
Achievements[66] = "8 DLC5_ZOM_GROUND_CONTROL";
Achievements[67] = "8 DLC5_ZOM_ONE_SMALL_HACK";
Achievements[68] = "8 DLC5_ZOM_ONE_GIANT_LEAP";
Achievements[69] = "8 DLC5_ZOM_PERKS_IN_SPACE";
Achievements[70] = "8 DLC5_ZOM_FULLY_ARMED";
Achievements[71] = "8 DLC4_ZOM_ZOMB_DISPOSAL";
Achievements[72] = "8 DLC4_ZOM_MONKEY_SEE_MONKEY_DONT";
Achievements[73] = "8 DLC4_ZOM_BLINDED_BY_THE_FRIGHT";
Achievements[74] = "8 DLC4_ZOM_SMALL_CONSOLATION";
byte[] FT111 = new byte[] { 0x41 };
byte[] FT11 = new byte[] { 0x40 };
byte[] RPCON1 = new byte[] { 0x38, 0x60, 0xFF, 0xFF, 0x38, 0x80, 0x00, 0x00, 0x3C, 0xA0, 0x02, 0x00, 0x30, 0xA5, 0x50, 0x00, 0x4B, 0xF8, 0x2E, 0x2D, 0x4B, 0xFF, 0xFB, 0x78 };
byte[] RPCOFF1 = new byte[] { 0x82, 0xB9, 0x00, 0x00, 0x3C, 0xE0, 0x00, 0xD7, 0x3D, 0x80, 0x00, 0x92, 0x56, 0xA4, 0x38, 0x30, 0x56, 0xBB, 0x18, 0x38, 0x3B, 0x87, 0x9D, 0x04 };
for (int i = 0; i < 75; i++)
{
PS3.SetMemory(0x2005000, Encoding.ASCII.GetBytes(Achievements + "\0"));
PS3.SetMemory(0x466298, FT111);
PS3.SetMemory(0x4667B4, RPCON1);
System.Threading.Thread.Sleep(15);
PS3.SetMemory(0x466298, FT11);
PS3.SetMemory(0x4667B4, RPCOFF1);
}
}
Addresses (by SC58 )
0x003E95F0 - sv_gamesendservercommand(int clientNum, svscmd_type type, const char *text)
0x00370638 - G_LocalizedStringIndex(const char *string)
0x004C4FF0 - Dvar_GetBool(const char *dvarName)
0x00399CC8 - CBUF_AddText(int localClientNum, const char *text)
0x003F62A8 - Sv_SendClientSnapshot(client_s *client)
0x002D85E0 - Player_Die(unsigned int *self, unsigned int *inflictor, unsigned int *attacker, int damage, int meansOfDeath, int iWeapon, const float *vDir, unsigned int hitLoc, int psTimeOffset)
0x0007B720 - BG_GetPerkIndexForName(char *perkName)
0x00377208 - G_GivePlayerWeapon(playerState_s *pPS, int iWeaponIndex, char altModelIndex)
0x002D2D98 - G_InitializeAmmo(gentity_s *pSelf, int weaponIndex, char weaponModel, int hadWeapon)
0x00356BE0 - G_CallSpawnEntity(gentity_s *ent)
0x0036FFA0 - G_ModelIndex(const char *name)
0x00370238 - HudElem_Alloc(int clientNum, int teamNum)
0x003DFD90 - Sv_KickClient(client_s *cl, char *playerName, int maxPlayerNameLen)
0x003376C8 - SP_script_model(gentity_s *pSelf)
0x012ab290 - g_entity
0x003705D0 - G_MaterialIndex(const char *name)
0x003701D8 - G_SetModel(gentity_s *ent, const char *modelName)
0x00373488 - G_Spawn(void)
0x011F2738 - G_Hudelem
0x00375548 - G_GetWeaponIndexForName(const char *name)
0x0037FE50 - G_SpawnTurret(gentity_s *self, const char *weaponinfoname)
0x003EED08 - Sv_AddServerCommand
0x003E5200 - Sv_SendClientGameState(Client_s *)
0x002D4BA0 - G_Say(gentity_s *ent, gentity_s *target, int mode, const char *chatText)
0x002CA520 - PlayerCmd_SayAll
0x002CA608 - PlayerCmd_SayTeam
0x003E0848 - Sv_FastRestart_f
0x003E0660 - Sv_Maprestart(int fast_restart)
0x003E7528 - Sv_Addtestclient(void)
0x00310470 - GScr_AddTestClient
0x003E47B8 - SV_ClientCommand(client_s *cl, msg_t *msg)
0x003E1B60 - SV_ExecuteClientCommand(client_s *cl, const char *s, int clientOK)
0x0039B6C0 - SV_Cmd_TokenizeString(const char *text_in)
0x002D6140 - ClientCommand(int clientNum)
0x003996E8 - SV_Cmd_EndTokenizedString(void)
0x000C0A98 - BG_GetWeaponDef(unsigned int weaponIndex)
0x00356DF0 - G_Callspawn
0x00357500 - G_SpawnEntitiesFromString(void)
0x003EAD98 - SV_SetConfigstring(int index, const char *val)
0x005CF9B0 - Scr_GetVector(unsigned int index, float *vectorValue)
Zombies
Name And Motd
Lobby Name Offset: 0x01C33DB0
Message of the day Offset: 0x01c8004c
Client Offsets Interval: 0x1d30
In-Game Name
Offset: 0x011008B8
Godmode
Bytes: 0x08,0x88,0x08,0x88 for On, 0x00,0x00,0x00,0x64 for Off
Offset: 0x01100840
Dead Ops Arcade Godmode
Offset: 0x010FED8F
Unlimited Ammo
Bytes: 15,0xff,0xff,0xff for On
Offset 1: 0x010FF138
Offset 2: 0x010FF148
Offset 3: 0x010FF160
Offset 4: 0x010FF140
Offset 5: 0x010FF168
Offset 6: 0x010FF150
mFlags
Bytes: 0x01 for noclip,0x02 for ufo, 0x04 for frozen
Offset: 0x0110098F
Weapons
Primary Weapon: 0x010fef6f
Secondary Weapon: 0x010fef9f
Dead Ops Arcade Weapon
Bytes: FlameThrower- 0A ShotGun- 0E RayGun- 0B RegularGun- 0C MiniGun- 0D GranadeLuancher- 0F
Offset: 0x010FEF57
Modes
Bytes: 0x01 for notarget, 0x02 for spectator,0x00 for default
Offset: 0x0110079B
In-Game Stats
Score/Money Offset: 0x0110090C
Kills Offset: 0x01100910
Headshots Offset: 0x01100930
Revives Offset: 0x0110092C
Downs Offset: 0x01100928
Speed
Bytes: 0x40, 0x74 for super,0x00, 0x00 for freeze,0x3f, 0x80 for default
Offset: 0x01100854
Scripts
SV_GameSendServerCommand
public void SV_GameSendServerCommand(int client, string command)
{
RPC.Call(0x003C33A8, client, 1, command);
}
Round Skip
First add timer then a button,
add this to the button:
Cbuf_AddText(0,"set timescale 10");
timer1.Start();
Then this to the timer and set the interval 200/500 otherwise the game can crash.
Cbuf_AddText(0,"ai axis delete");
Cbuf_AddText
public void Cbuf_AddText(int localClient,string command)
{
RPC.Call(0x00395BA8,localClient,command);
}
SetModel
public void SetModel(int client, string model)
{
RPC.Call(0x00305940, (uint)(0xFA805C + client * 0x34C), model);
}
Aim Assist (By me)
public void Give_AimAssist(int client)
{
SV_SendServerCommand(client, "v aim_lockon_region_height 480");
SV_SendServerCommand(client, "v aim_lockon_region_width 640");
SV_SendServerCommand(client, "v aim_lockon_enabled 1");
Thread.Sleep(10);
SV_SendServerCommand(client, "v aim_lockon_strength 1");
SV_SendServerCommand(client, "v aim_lockon_deflection 0");
SV_SendServerCommand(client, "v aim_autoaim_enabled 1");
Thread.Sleep(10);
SV_SendServerCommand(client, "v aim_autoaim_region_height 480");
SV_SendServerCommand(client, "v aim_autoaim_region_width 640");
SV_SendServerCommand(client, "v aim_slowdown_yaw_scale_ads 0");
Thread.Sleep(10);
SV_SendServerCommand(client, "v aim_slowdown_yaw_scale 0");
SV_SendServerCommand(client, "v aim_slowdown_pitch_scale 0");
SV_SendServerCommand(client, "v aim_slowdown_pitch_scale_ads 0");
Thread.Sleep(10);
SV_SendServerCommand(client, "v aim_slowdown_region_height 0");
SV_SendServerCommand(client, "v aim_slowdown_region_width 0");
SV_SendServerCommand(client, "v aim_slowdown_enabled 1");
Thread.Sleep(10);
SV_SendServerCommand(client, "v aim_aimAssistRangeScale 2");
SV_SendServerCommand(client, "v aim_autoAimRangeScale 2");
}
FPS (by SC58 )
0x00407554 - Turn on/off FPS
40 00 - ON
40 9A - OFF
0x00827950 - Text Position
0x0082794c - Text Size
0x008283a8 - Text For Menu
All Clients Buttons Monitoring (By AlmightySo )
public static class Buttonz
{
public static Int32
L1 = 1048704,
L2 = 72704,
L3 = 1074003968,
R1 = -2147483648,
R2 = 131072,
R3 = 536870912,
Square = 67108864,
Cross = 2104320,
Crouch = 4194304,
Prone = 8388608,
Triangle = 8;
}
public static bool ButtonPressed(int client, int Button)
{
if (Convert.ToInt32(Debug.ReadInt32(0x11007E8 + ((uint)client * 0x104)) == Button)
return true;
else return false;
}
Local Clients Buttons Monitoring (by SC58 )
Offset for Client 0: 0x00B4EB60
Interval: 4392
Jetpack (by AlmightySo )
public uint findPS(int client)
{
return 0x10FEDB0 + ((uint)client * 0x104;
}
public void JetPack(int client)
{
float jH = Debug.ReadFloat(findPS(client));
jH += 70;
PS3.Extension.WriteFloat(findPS(client), jH);
}
//Use JetPack(); in a timer with button handling.
Addresses (by SC58 )
0x00304BA0 - G_LocalizedStringIndex(const char *string)
0x00304B38 - G_MaterialIndex(const char *name)
0x00452280 - Dvar_GetBool(const char *dvarName)
0x003C33A8 - SV_GameSendServerCommand(int clientNum, svscmd_type type, const char *text)
0x00395BA8 - CBUF_AddText(int localClientNum, const char *text)
0x00309E30 - G_GetWeaponIndexForName(const char *name)
0x00305940 - SetModel(gentity_s *ent, const char *modelName)
0x00305650 - G_ModelIndex(const char *name)
0x00EE7BF2 - G_Hudelem
0x000A4968 - BG_GetWeaponDef(unsigned int weaponIndex)
0x002FD098 - G_Callspawn
0x002FD9C8 - G_SpawnEntitiesFromString(void)
0x00073A88 - BG_GetPerkIndexForName(const char *perkName)
0x004BE508 - SV_ExecuteClientCommand(client_s *cl, const char *s, int clientOK)
0x003066E0 - G_Spawn(void)
0x002DDFF8 - SP_script_model(gentity_s *pSelf)
Useful Dvars (You can use these even when not host using cbuf_addtext)
noclip - you can fly
ufo - you can also fly with this
god - godmode (unlimited health..)
notarget - zombies can't see you
give <item here> - you can give weapons/perks
give all - gives you all weapons
take all - takes all your stuff
cg_thirdPerson - thirdperson (values: 1 or 0)
cg_fov - field of view (any value between 1-200)
ai axis delete - kills all zombies
cg_drawfps - fps in the corner (values: 1 or 0)
dropweapon - drops your current weapon
Non-Host Offsets
No Recoil
Bytes: ON 0x60, 0x00, 0x00, 0x00 ,OFF 0x4B, 0xF3, 0xFF, 0x89
Offset: 0x15A320
Super Steady Aim
Bytes: ON 2F 80 00 00, OFF 2F 80 00 02
Offset: 0x91014
Credits
SC58
AlmightySo
Choco
Seb5594
primetime
xPAQz
DexModderFTW
Eddie Mac
iNDMx - Here is also his good thread: You must login or register to view this content.
Anera
I will update the thread soon!
Since SPRX is out now, I figured I would convert a function or two from MP and ZM. So here you go :p
Multiplayer:
SV_GameSendServerCommand:
void SV_GameSendServerCommand(int Client, char* Command)
{
opd_s SV1 = { 0x003E95F0 };
void(*SVGSSC)(int client, int type, char* cmd) = (void(*)(int, int, char*))&SV1;
SVGSSC(Client, 1, Command);
}
Cbuf_AddText:
void Cbuf_AddText(int localClient, char* Command)
{
opd_s Cb1 = { 0x00399CC8 };
void(*CbAT)(int lClient, char* cmd) = (void(*)(int, char*))&Cb1;
CbAT(localClient, Command);
}
Zombies:
SV_GameSendServerCommand:
void SV_GameSendServerCommand(int Client, char* Command)
{
opd_s SV1 = { 0x003C33A8 };
void(*SVGSSC)(int client, int type, char* cmd) = (void(*)(int, int, char*))&SV1;
SVGSSC(Client, 1, Command);
}
Cbuf_AddText:
void Cbuf_AddText(int localClient, char* Command)
{
opd_s Cb1 = { 0x00395BA8 };
void(*CbAT)(int lClient, char* cmd) = (void(*)(int, char*))&Cb1;
CbAT(localClient, Command);
}
Last edited by
Azus ; 08-19-2014 at 03:25 AM.
The following 2 users say thank you to Azus for this useful post:
08-20-2014, 12:01 AM
#42
SC58
Former Staff
Originally posted by El
Here the client_s 0x1215680
I think it's unreleased, so have fun! :p
I think it's unreleased, so have fun! :p
Your address is not client_s lol
Here it is for Mp/Zm
-------------------------
- Black Ops MP 1.13
0x169529C
clientIndex - 0x651C8
-------------------------
- Black Ops ZM 1.13
0x15F221C
clientIndex - 0x3DDC0
-------------------------
The following 2 users say thank you to SC58 for this useful post:
08-20-2014, 01:12 AM
#43
MegaMister
Former Mega Staff
08-20-2014, 11:11 PM
#45
MaNamesTyler
Little One
08-30-2014, 07:41 AM
#46
Stefan The God
Keeper
Thank u 
And please remove the _ in the coding of the PS3_TMAPI :p for the ppl wich does'nt know thta much since it will just give u error :p so it's like : You must login or register to view this content.
But thx anyways, good release
And please remove the _ in the coding of the PS3_TMAPI :p for the ppl wich does'nt know thta much since it will just give u error :p so it's like : You must login or register to view this content.
But thx anyways, good release
Last edited by
Stefan The God ; 08-30-2014 at 07:45 AM.
Copyright © 2024, NextGenUpdate.
All Rights Reserved.
