THREAD: BO1 Offsets,Addresses & Scripts Thread [1.13]
  1. 07-04-2014, 11:56 AM
    makeabce's Avatar
    makeabce
    I defeated!
    makeabce's Avatar
    makeabce
    I defeated!
    614
    Posts
    5,882
    Reputation
    Feb 2013
    NextGenUpdate
    Hello guys, here is my offsets thread! The old one was okay,but littlebit messy and here is more stuff. Smile
    Multiplayer
    Spoiler:

    Name and Stats
    Spoiler:


    Name Offset: 0x02000934
    Class Name Offset: 0x01c3896f (Class # 1-5) & 0x01c43cf4 (Class # 6-10)
    COD Points Offset: 0x020942d1
    Time Played Offset: 0x02094731
    Total Wins Offset: 0x0209475d
    Total Losses Offset: 0x020944dd
    Prestige Offset: 0x020946dd
    Rank Offset (score basically): 0x020946e5
    Kills Offset: 0x02094429
    Deaths Offset: 0x020942f5
    Assists Offset: 0x02094291
    Kill/Death Ratio In Weapons Offset: 0x02094425
    Wins/Loss Ration In Career Offset: 0x02094761
    Headshots Offset: 0x0209440d
    Amount Spent In Contracts Offset: 0x020942dd
    Contracts Purchased Offset: 0x020942e1
    XP Award In Contracts Offset: 0x020942e5
    Return On Investment Contracts Offset (This is also amount earned) : 0x020942d9
    Games Played Offset: 0x020938b1
    Wager Match Earnings Offset: 0x020944d9
    Unlock All Offset: 0x02094990 (Unlock All Bytes: https://pastebin.com/MxmMrR22)


    Non-Host Offsets
    Spoiler:

    Super Sleight of Hand

    Bytes: 0x02 for on, 0x01 for off
    Offset: 0xBBC2E8

    Chrome Players

    Bytes: 0x38, 0xC0, 0xFF, 0xFF for On, 0xFC, 0xC0, 0xF8, 0x90 for Off
    Offset: 0x131144

    Wallhack

    Bytes: 0x38, 0xC0, 0xF0, 0x03 for On,0xFC, 0xC0, 0xF8, 0x90 for Off
    Offset: 0x131144

    Rapid Fire

    Bytes: 0x02 for On, 0x01 for Off
    Offset: 0xBBC2EC

    Redboxes

    Bytes: 0x60,0x00,0x00,0x00 for both, and when off then change redboxes offset with these: 0x41, 0x86, 0x02, 0x78
    Perk Check Offset: 0x001206C8
    Redboxes Offset: 0x001205C0

    Blackbird

    Bytes: 0x40, 0x9A, 0x00, 0xC4 for On, 0x41, 0x9A, 0x00, 0xC4 for Off
    Offset: 0xEBDF4

    Super Steady Aim

    Bytes: 0x60,0x00,0x00,0x00 for On, 0x2F, 0x80, 0x00, 0x02 for Off
    Offset: 0xAB8EC

    No Recoil

    Bytes: 0x60,0x00,0x00,0x00 for On, 0x4B, 0xF1, 0x84, 0xCD for Off
    Offset: 0x19B244


    Client Offsets Interval: 0x2A38
    Spoiler:

    In-Game Name

    Offset: 0x139784C

    Godmode Scpript

    public void Godmode(uint client)
    {
    PS3.SetMemory((0x12ab290 + (client * 760)) + 0x194, new byte[4]);
    Thread.Sleep(50);
    PS3.SetMemory((0x12ab290 + (client * 760)) + 0x194, new byte[] { 15, 0xff, 0xff, 0xff });
    }

    mFlags

    Bytes: 0x01 for noclip,0x02 for ufo
    Offset: 0x13979BF

    Unlimited Ammo Scpript

    public void UnlimitedAmmo(uint client)
    {
    PS3.SetMemory((0x13950c8 + (client * 0x2a3Cool Man (aka Tustin)) + 0x388, new byte[] { 15, 0xff, 0xff, 0xff });
    PS3.SetMemory((0x13950c8 + (client * 0x2a3Cool Man (aka Tustin)) + 0x400, new byte[] { 15, 0xff, 0xff, 0xff });
    PS3.SetMemory((0x13950c8 + (client * 0x2a3Cool Man (aka Tustin)) + 0x380, new byte[] { 15, 0xff, 0xff, 0xff });
    PS3.SetMemory((0x13950c8 + (client * 0x2a3Cool Man (aka Tustin)) + 0x3f8, new byte[] { 15, 0xff, 0xff, 0xff });
    PS3.SetMemory((0x13950c8 + (client * 0x2a3Cool Man (aka Tustin)) + 0x410, new byte[] { 15, 0xff, 0xff, 0xff });
    PS3.SetMemory((0x13950c8 + (client * 0x2a3Cool Man (aka Tustin)) + 0x408, new byte[] { 15, 0xff, 0xff, 0xff });
    }

    Blackbird

    Bytes: 0x01 On, 0x00 Off
    Offset: 0x1397AEB

    Reconplane

    Bytes: 0x03 for On, 0x00 for Off
    Offset: 0x1397967

    Second Chance

    Bytes: 0x01 for On
    Offset: 0x1397AEC

    Speed

    Bytes: 0x40,0x40 for super, 0x3F 0x80 for default, 0x00,0x00 for freeze
    Offset: 0x1397880

    In-Game Camo

    Bytes: 60 for gold, 10 for ice,13 for red,10 for olive,20 for nevada,0x18 for sahara
    Offset: 0x013952E0

    Teleport

    Offset: 0x13950f0


    Scripts
    Spoiler:

    Aimbot (By Seb5594 & DexModderFTW & Eddie mac)
    Spoiler:


    public class Aimbot
    {

    #region Aimbot
    //All of the getting info etc.
    public static uint G_Entity(uint client)
    {
    return 0x012ab290 + (client * 0x2FCool Man (aka Tustin);
    }
    public static float[] getOrigin(uint clientNum)
    {
    float[] origin = new float[3];
    origin[0] = Lib.ReadSingle(0x013950c8 + 0x2A38 * clientNum + 0x24);
    origin[1] = Lib.ReadSingle(0x013950c8 + 0x2A38 * clientNum + 0x24 + 0x4);
    origin[2] = Lib.ReadSingle(0x013950c8 + 0x2A38 * clientNum + 0x24 + 0xCool Man (aka Tustin);
    return origin;
    }
    public static UInt32 G_Entity(Int32 ClientIndex)
    {
    return 0x16B7920 + ((UInt32)ClientIndex * 0x31C);
    }

    public static int GetHost()
    {
    string str = Lib.ReadString(0x172a58Cool Man (aka Tustin);
    for (int i = 0; i < 0x12; i++)
    {
    string str2 = Lib.ReadString((uint)(0xf1651c + (i * 0x3600)));
    if (str == str2)
    {
    return i;
    }
    }
    return -1;
    }
    public static Boolean Exists(Int32 clientIndex)
    {
    return Lib.ReadString(0x013978d0 + ((uint)clientIndex * 0x2A3Cool Man (aka Tustin)) != "";
    }

    public static Boolean IsAlive(Int32 clientIndex)
    {
    return (Lib.ReadByte(0x0139793b + ((uint)clientIndex * 0x2A3Cool Man (aka Tustin)) == 0);
    }

    public static Boolean isSameTeam(Int32 Owner, Int32 Victim)
    {
    return Lib.ReadInt32(0x01397894 + ((uint)Owner * 0x2A3Cool Man (aka Tustin)) == Lib.ReadInt32(0x01397894 + ((uint)Victim * 0x2A3Cool Man (aka Tustin));
    }
    public static Single GetDistance3D(Single[] p1, Single[] p2)
    {
    float[] numArray3 = new float[] { p2[0] - p1[0], p2[1] - p1[1], p2[2] - p1[2] };
    return ((numArray3[0] * numArray3[0]) + (numArray3[1] * numArray3[1])) + (numArray3[2] * numArray3[2]);
    }
    public static int GetNearestClientFromAttacker(int You)
    {
    int CIndex = -1;
    double Closest = 1E+08f;
    for (int i = 0; i < 12; i++)
    {
    if (((Exists(i) && IsAlive(i) && !isSameTeam(You, i))))
    {
    double Bla = GetDistance3D(getOrigin((uint)You), getOrigin((uint)i));
    if (Bla < Closest)
    {
    CIndex = i;
    Closest = Bla;
    }
    }
    }
    return CIndex;
    }


    //The Real Aimbot Code-----

    //function to convert a vector to angles
    public static Single[] vectoangles(Int32 clientIndex, Int32 secondPlayer)
    {
    Single[] numArray1 = getOrigin((uint)clientIndex);
    Single[] numArray2 = getOrigin((uint)secondPlayer);
    Single[] Angles = {(numArray2[0] - numArray1[0]), (numArray2[1] - numArray1[1]), (numArray2[2] - numArray1[2])};
    Single num2;
    Single num3;
    Single[] numArray = new Single[3];
    if ((Angles[1] == 0f) && (Angles[0] == 0f))
    {
    num2 = 0f;
    if (Angles[2] > 0f)
    num3 = 90f;
    else
    num3 = 270f;
    }
    else
    {
    if (Angles[0] != -1f)
    num2 = (Single)((Math.Atan2((Double)Angles[1], (Double)Angles[0]) * 180.0) / 3.1415926535897931);
    else if (Angles[1] > 0f)
    num2 = 90f;
    else
    num2 = 270f;
    if (num2 < 0f)
    num2 += 360f;
    Single num = (Single)Math.Sqrt((Double)((Angles[0] * Angles[0]) + (Angles[1] * Angles[1])));
    num3 = (Single)((Math.Atan2((Double)Angles[2], (Double)num) * 180.0) / 3.1415926535897931);
    if (num3 < 0f)
    num3 += 360f;
    }
    numArray[0] = -num3;
    numArray[1] = num2;
    return numArray;
    }
    //Set Set the clients angles
    public static void SetClientViewAngles(Int32 clientIndex, Int32 Victim)
    {
    Single[] angles = vectoangles(clientIndex, Victim);
    Lib.WriteSingle(0x10040000, angles);
    RPC.Call(0x2C1E38, new Object[] { Addresses.G_Entity((uint)clientIndex), 0x10040000 });
    }
    //Just Aimbot Threads and Bools
    public static bool[] AimbotStatus = new bool[12];
    public static Thread[] AimbotThread = new Thread[12];
    public static bool[] UnfairAimbot = new bool[12];

    //This is what starts the Aimbot
    public static void StartAimbot(int clientIndex)
    {
    ThreadStart start = null;
    if (!AimbotStatus[clientIndex])
    {
    Thread.Sleep(100);
    AimbotStatus[clientIndex] = true;
    if (start == null)
    {
    start = () => InitializeAimbot(clientIndex);
    }
    AimbotThread[clientIndex] = new Thread(start);
    AimbotThread[clientIndex].IsBackground = true;
    AimbotThread[clientIndex].Start();
    }
    else
    {
    AimbotStatus[clientIndex] = false;
    AimbotThread[clientIndex].Abort();
    }
    }
    //Main Aimbot Code
    private static void InitializeAimbot(int client)
    {
    PS3.Reconnect();
    while (AimbotThread[client].IsAlive)
    {
    int nearestPlayer = GetNearestClientFromAttacker(client);
    if (nearestPlayer != client)
    {
    if (ButtonPress.ButtonPressed(client, 03) || ButtonPress.ButtonPressed(client, 04))
    {
    SetClientViewAngles(client, nearestPlayer);
    }
    }
    }
    }
    #endregion

    //Example:

    Aimbot.StartAimbot(int client);


    Cbuf_AddText
    Spoiler:


    public void cBuf_AddText(int localClient,string command)
    {
    RPC.Call(0x00399CC8, localClient, command);
    }


    cl_ingame
    Spoiler:


    #region inGame
    public static bool Dvar_GetBool(string DVAR)
    {
    bool State;
    uint Value = (uint)RPC.Call(0x4C7BF0, DVAR);
    if (Value == 1)
    State = true;
    else
    State = false;
    return State;
    }
    public static Boolean cl_inGame()
    {
    bool es;
    if (Dvar_GetBool("cl_ingame") == true)
    {
    es = true;
    }
    else
    {
    es = false;
    }
    return es;
    }
    #endregion
    // Thanks Chris for the original Dvar_GetBool function from his mw3 script and sc58 the correct address


    Unlock All
    Spoiler:


    public void UnlockAll()
    {
    PS3.SetMemory(0x02094990, new byte[] { 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF });
    }


    SV_GameSendServerCommand
    Spoiler:


    public void SV_GameSendServerCommand(int client, string command)
    {
    RPC.Call(0x003E95F0, client, 1, command);
    }


    G_SetModel
    Spoiler:


    public void SetModel(int client, string model)
    {
    RPC.Call(0x003701D8, (uint)(0x012ab290 + client * 0x2FCool Man (aka Tustin), model);
    }


    FPS RPC (By Jo-Milk)
    Spoiler:


    private void JM_RPC()
    {
    PS3.SetMemory(0x00466299, new byte[] { 0x9A });//RPC OFF
    PS3.SetMemory(0x4667B4, new byte[] { 0x3F, 0x80, 0x10, 0x05, 0x81, 0x9C, 0x00, 0x48, 0x2C, 0x0C, 0x00, 0x00, 0x41, 0x82, 0x00, 0x64, 0x80, 0x7C, 0x00, 0x00, 0x80, 0x9C, 0x00, 0x04, 0x80, 0xBC, 0x00, 0x08, 0x80, 0xDC, 0x00, 0x0C, 0x80, 0xFC, 0x00, 0x10, 0x81, 0x1C, 0x00, 0x14, 0x81, 0x3C, 0x00, 0x18, 0x81, 0x5C, 0x00, 0x1C, 0x81, 0x7C, 0x00, 0x20, 0xC0, 0x3C, 0x00, 0x24, 0xC0, 0x5C, 0x00, 0x28, 0xC0, 0x7C, 0x00, 0x2C, 0xC0, 0x9C, 0x00, 0x30, 0xC0, 0xBC, 0x00, 0x34, 0xC0, 0xDC, 0x00, 0x38, 0xC0, 0xFC, 0x00, 0x3C, 0xC1, 0x1C, 0x00, 0x40, 0xC1, 0x3C, 0x00, 0x44, 0x7D, 0x89, 0x03, 0xA6, 0x4E, 0x80, 0x04, 0x21, 0x38, 0x80, 0x00, 0x00, 0x90, 0x9C, 0x00, 0x48, 0x90, 0x7C, 0x00, 0x4C, 0xD0, 0x3C, 0x00, 0x50, 0x48, 0x00, 0x00, 0x40 });//RPC CODE
    PS3.SetMemory(0x10050000, new byte[0x2854]);//RPC arguments
    PS3.SetMemory(0x00466299, new byte[] { 0x00 });//RPC ON
    }

    public static Int32 Call(UInt32 address, params Object[] parameters)//this is VezahHFH MW3 Call function I used same place to store the arguments because I'm Lazy and I don't feel like making that function since I code in C++ but I might optimize this function
    {
    Int32 length = parameters.Length;
    Int32 index = 0;
    UInt32 count = 0;
    UInt32 Strings = 0;
    UInt32 Single = 0;
    UInt32 Array = 0;
    while (index < length)
    {
    if (parameters[index] is Int32)
    {
    WriteInt32(0x10050000 + (count * 4), (Int32)parameters[index]);
    count++;
    }
    else if (parameters[index] is UInt32)
    {
    WriteUInt32(0x10050000 + (count * 4), (UInt32)parameters[index]);
    count++;
    }
    else if (parameters[index] is Int16)
    {
    WriteInt16(0x10050000 + (count * 4), (Int16)parameters[index]);
    count++;
    }
    else if (parameters[index] is UInt16)
    {
    WriteUInt16(0x10050000 + (count * 4), (UInt16)parameters[index]);
    count++;
    }
    else if (parameters[index] is Byte)
    {
    WriteByte(0x10050000 + (count * 4), (Byte)parameters[index]);
    count++;
    } //Should work now Happy let me try
    else
    {
    UInt32 pointer;
    if (parameters[index] is String)
    {
    pointer = 0x10052000 + (Strings * 0x400);
    WriteString(pointer, Convert.ToString(parameters[index]));
    WriteUInt32(0x10050000 + (count * 4), pointer);
    count++;
    Strings++;
    }
    else if (parameters[index] is Single)
    {
    WriteSingle(0x10050024 + (Single * 4), (Single)parameters[index]);
    Single++;
    }
    else if (parameters[index] is Single[])
    {
    Single[] Args = (Single[])parameters[index];
    pointer = 0x10051000 + Array * 4;
    WriteSingle(pointer, Args);
    WriteUInt32(0x10050000 + count * 4, pointer);
    count++;
    Array += (UInt32)Args.Length;
    }

    }
    index++;
    }
    WriteUInt32(0x10050048, address);
    Thread.Sleep(20);
    return ReadInt32(0x1005004c);
    //or you could return a float pointer if the function that is called return one just check at the offset 0x10050050
    }


    RPC (By SC58 And Choco )
    Spoiler:


    using System;
    using System.Collections.Generic;
    using System.Linq;
    using System.Text;
    using System.Threading.Tasks;

    namespace BOIMPRPC
    {
    public class PS3
    {
    static uint processID;

    private static uint GetProcessID()
    {
    uint[] ProcessIDs;
    PS3_TMAPI.GetProcessList(0, out ProcessIDs);
    return ProcessIDs[0];
    }

    public static void SetMemory(uint address, byte[] memory)
    {
    PS3_TMAPI.ProcessSetMemory(0, PS3_TMAPI.UnitType.PPU, processID, 0, address, memory);
    }

    public static byte[] GetMemory(uint address, int length)
    {
    byte[] bytes = new byte[length];
    PS3_TMAPI.ProcessGetMemory(0, PS3_TMAPI.UnitType.PPU, processID, 0, address, ref bytes);
    return bytes;
    }

    public static int Init()
    {
    processID = GetProcessID();
    return RPC.Init();
    }
    }

    public class RPC
    {
    static uint function_address;

    public static int Init()
    {
    function_address = Get_func_address();
    if (function_address == 0) return -1;
    Enable_RPC();
    return 0;
    }

    public static uint Get_func_address()
    {
    for (uint i = 0x7A21D4; i < 0x1000000; i += 4)
    {
    byte[] bytes = PS3.GetMemory(i, Cool Man (aka Tustin);
    if (((bytes[0] == 0x4B) && (bytes[1] == 0xFF) && (bytes[2] == 0xBE) && (bytes[3] == 0x05) && (bytes[4] == 0x4B) && (bytes[5] == 0xFF) && (bytes[6] == 0xFC) && (bytes[7] == 0x9Cool Man (aka Tustin)))
    {
    return i + 0xC;
    }
    }
    return 0;
    }

    public static void Enable_RPC()
    {
    PS3.SetMemory(function_address, new byte[] { 0x4E, 0x80, 0x00, 0x20 });
    System.Threading.Thread.Sleep(20);
    byte[] func = new byte[] { 0x7C, 0x08, 0x02, 0xA6, 0xF8, 0x01, 0x00, 0x80, 0x3C, 0x60, 0x10, 0x05, 0x81, 0x83, 0x00, 0x4C, 0x2C, 0x0C, 0x00, 0x00, 0x41, 0x82, 0x00, 0x64, 0x80, 0x83, 0x00, 0x04, 0x80, 0xA3, 0x00, 0x08, 0x80, 0xC3, 0x00, 0x0C, 0x80, 0xE3, 0x00, 0x10, 0x81, 0x03, 0x00, 0x14, 0x81, 0x23, 0x00, 0x18, 0x81, 0x43, 0x00, 0x1C, 0x81, 0x63, 0x00, 0x20, 0xC0, 0x23, 0x00, 0x24, 0xC0, 0x43, 0x00, 0x28, 0xC0, 0x63, 0x00, 0x2C, 0xC0, 0x83, 0x00, 0x30, 0xC0, 0xA3, 0x00, 0x34, 0xC0, 0xC3, 0x00, 0x38, 0xC0, 0xE3, 0x00, 0x3C, 0xC1, 0x03, 0x00, 0x40, 0xC1, 0x23, 0x00, 0x48, 0x80, 0x63, 0x00, 0x00, 0x7D, 0x89, 0x03, 0xA6, 0x4E, 0x80, 0x04, 0x21, 0x3C, 0x80, 0x10, 0x05, 0x38, 0xA0, 0x00, 0x00, 0x90, 0xA4, 0x00, 0x4C, 0x80, 0x64, 0x00, 0x50, 0xE8, 0x01, 0x00, 0x80, 0x7C, 0x08, 0x03, 0xA6, 0x38, 0x21, 0x00, 0x70, 0x4E, 0x80, 0x00, 0x20, 0x60, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x60, 0x00, 0x00, 0x00 };
    PS3.SetMemory(function_address + 0x4, func);
    PS3.SetMemory(0x10050000, new byte[0x2854]);
    PS3.SetMemory(function_address, new byte[] { 0xF8, 0x21, 0xFF, 0x91 });
    }

    public static int Call(uint func_address, params object[] parameters)
    {
    int num_params = parameters.Length;
    uint num_floats = 0;
    for (uint i = 0; i < num_params; i++)
    {
    if (parameters is int)
    {
    byte[] val = BitConverter.GetBytes((int)parameters);
    Array.Reverse(val);
    PS3.SetMemory(0x10050000 + (i + num_floats) * 4, val);
    }
    else if (parameters is uint)
    {
    byte[] val = BitConverter.GetBytes((uint)parameters);
    Array.Reverse(val);
    PS3.SetMemory(0x10050000 + (i + num_floats) * 4, val);
    }
    else if (parameters is string)
    {
    byte[] str = Encoding.UTF8.GetBytes(Convert.ToString(parameters) + "\0");
    PS3.SetMemory(0x10050054 + i * 0x400, str);
    uint addr = 0x10050054 + i * 0x400;
    byte[] address = BitConverter.GetBytes(addr);
    Array.Reverse(address);
    PS3.SetMemory(0x10050000 + (i + num_floats) * 4, address);
    }
    else if (parameters is float)
    {
    num_floats++;
    byte[] val = BitConverter.GetBytes((float)parameters);
    Array.Reverse(val);
    PS3.SetMemory(0x10050024 + ((num_floats - 1) * 0x4), val);
    }
    }
    byte[] fadd = BitConverter.GetBytes(func_address);
    Array.Reverse(fadd);
    PS3.SetMemory(0x1005004C, fadd);
    System.Threading.Thread.Sleep(20);
    byte[] ret = PS3.GetMemory(0x10050050, 4);
    Array.Reverse(ret);
    return BitConverter.ToInt32(ret, 0);
    }


    Buttons
    Spoiler:

    Buttons Monitoring (by seb5594)
    Spoiler:


    public class Buttons
    {
    public static UInt32
    X = 2104320,
    O = 512,
    Square = 67108864,
    Triangle = 8,
    L3 = 1074003968,
    R3 = 536870912,
    L2 = 72704,
    R2 = 131072,
    L1 = 1048704,
    R1 = 2147483648,
    Crouch = 4194304,
    Prone = 8388608,
    StartButton = 4;
    }
    public Boolean ButtonPressed(Int32 clientIndex, UInt32 Button)
    {
    if (BO1TMAPI.PS3.Extension.ReadUInt32((UInt32)G_Client(clientIndex) + 0x271Cool Man (aka Tustin) == Button)
    return true;
    else return false;
    }
    public Int32 G_Client(Int32 clientIndex)
    {
    return (Int32)0x13950C8 + 0x2A38 * clientIndex;
    }
    public UInt32 ReadUInt32(uint offset)
    {
    Byte[] YoLo = GetMemory(offset, 4);
    Array.Reverse(YoLo, 0, 4);
    return BitConverter.ToUInt32(YoLo, 0);
    }
    public byte[] GetMemory(uint address, int length)
    {
    byte[] buffer = new byte[length];
    BO1TMAPI.PS3.GetMemory(address, buffer);
    return buffer;
    }

    //Example how to use:

    if(ButtonPressed(0,Buttons.L1))
    {
    // Mods/functions here
    }


    Local Client Buttons Monitoring (by xPAQz )
    Spoiler:


    private static UInt32 LocalButtons = 0xd19800;
    public enum Buttons
    {
    DpadUp = 0x1FF,
    DpadDown = 0x20F,
    DpadRight = 0x21F,
    DpadLeft = -0xC47E5F,
    R3 = 0x1CF,
    Square = 0xEF,
    Cross = 0xCF,
    LeftCursorUp = 0x27F,
    LeftCursorLeft = 0x29F,
    LeftCursorRight = 0x2AF,
    LeftCursorDown = 0x28F,
    R2 = 0x1EF,
    L2 = 0x1DF,
    Select = 0x1AF,
    Start = 0x19F
    }
    public static Boolean ButtonPressed(Buttons Button)
    {
    return Convert.ToBoolean(PS3.Extension.ReadByte(LocalButtons + (UInt32)Button) == 1);
    }



    FPS (By SC58 )
    Spoiler:


    0x00466298 - Turn on/off FPS
    40 00 - ON
    40 9A - OFF

    0x0091C860 - Text For Menu
    0x0091BF38 - Text Position
    0x0091BF34 - Text Size


    Unlock All Trophys (by SC58 )
    Spoiler:


    public void TrophyUnlocks_MP()
    {
    string[] Achievements = new string[75];
    Achievements[0] = "8 SP_WIN_CUBA";
    Achievements[1] = "8 SP_WIN_VORKUTA";
    Achievements[2] = "8 SP_WIN_PENTAGON";
    Achievements[3] = "8 SP_WIN_FLASHPOINT";
    Achievements[4] = "8 SP_WIN_KHE_SANH";
    Achievements[5] = "8 SP_WIN_HUE_CITY";
    Achievements[6] = "8 SP_WIN_KOWLOON";
    Achievements[7] = "8 SP_WIN_RIVER";
    Achievements[8] = "8 SP_WIN_FULLAHEAD";
    Achievements[9] = "8 SP_WIN_INTERROGATION_ESCAPE";
    Achievements[10] = "8 SP_WIN_UNDERWATERBASE";
    Achievements[11] = "8 SP_VWIN_FLASHPOINT";
    Achievements[12] = "8 SP_VWIN_HUE_CITY";
    Achievements[13] = "8 SP_VWIN_RIVER";
    Achievements[14] = "8 SP_VWIN_FULLAHEAD";
    Achievements[15] = "8 SP_VWIN_UNDERWATERBASE";
    Achievements[16] = "8 SP_LVL_CUBA_CASTRO_ONESHOT";
    Achievements[17] = "8 SP_LVL_VORKUTA_VEHICULAR";
    Achievements[18] = "8 SP_LVL_VORKUTA_SLINGSHOT";
    Achievements[19] = "8 SP_LVL_KHESANH_MISSILES";
    Achievements[20] = "8 SP_LVL_HUECITY_AIRSUPPORT";
    Achievements[21] = "8 SP_LVL_HUECITY_DRAGON";
    Achievements[22] = "8 SP_LVL_CREEK1_DESTROY_MG";
    Achievements[23] = "8 SP_LVL_CREEK1_KNIFING";
    Achievements[24] = "8 SP_LVL_KOWLOON_DUAL";
    Achievements[25] = "8 SP_LVL_RIVER_TARGETS";
    Achievements[26] = "8 SP_LVL_WMD_RSO";
    Achievements[27] = "8 SP_LVL_WMD_RELAY";
    Achievements[28] = "8 SP_LVL_POW_HIND";
    Achievements[29] = "8 SP_LVL_POW_FLAMETHROWER";
    Achievements[30] = "8 SP_LVL_FULLAHEAD_2MIN";
    Achievements[31] = "8 SP_LVL_REBIRTH_MONKEYS";
    Achievements[32] = "8 SP_LVL_REBIRTH_NOLEAKS";
    Achievements[33] = "8 SP_LVL_UNDERWATERBASE_MINI";
    Achievements[34] = "8 SP_LVL_FRONTEND_CHAIR";
    Achievements[35] = "8 SP_LVL_FRONTEND_ZORK";
    Achievements[36] = "8 SP_GEN_MASTER";
    Achievements[37] = "8 SP_GEN_FRAGMASTER";
    Achievements[38] = "8 SP_GEN_ROUGH_ECO";
    Achievements[39] = "8 SP_GEN_CROSSBOW";
    Achievements[40] = "8 SP_GEN_FOUNDFILMS";
    Achievements[41] = "8 SP_ZOM_COLLECTOR";
    Achievements[42] = "8 SP_ZOM_NODAMAGE";
    Achievements[43] = "8 SP_ZOM_TRAPS";
    Achievements[44] = "8 SP_ZOM_SILVERBACK";
    Achievements[45] = "8 SP_ZOM_CHICKENS";
    Achievements[46] = "8 SP_ZOM_FLAMINGBULL";
    Achievements[47] = "8 MP_FILM_CREATED";
    Achievements[48] = "8 MP_WAGER_MATCH";
    Achievements[49] = "8 MP_PLAY";
    Achievements[50] = "8 DLC1_ZOM_OLDTIMER";
    Achievements[51] = "8 DLC1_ZOM_HARDWAY";
    Achievements[52] = "8 DLC1_ZOM_PISTOLERO";
    Achievements[53] = "8 DLC1_ZOM_BIGBADDABOOM";
    Achievements[54] = "8 DLC1_ZOM_NOLEGS";
    Achievements[55] = "8 DLC2_ZOM_PROTECTEQUIP";
    Achievements[56] = "8 DLC2_ZOM_LUNARLANDERS";
    Achievements[57] = "8 DLC2_ZOM_FIREMONKEY";
    Achievements[58] = "8 DLC2_ZOM_BLACKHOLE";
    Achievements[59] = "8 DLC2_ZOM_PACKAPUNCH";
    Achievements[60] = "8 DLC3_ZOM_STUNTMAN";
    Achievements[61] = "8 DLC3_ZOM_SHOOTING_ON_LOCATION";
    Achievements[62] = "8 DLC3_ZOM_QUIET_ON_THE_SET";
    Achievements[63] = "8 DLC4_ZOM_TEMPLE_SIDEQUEST";
    Achievements[64] = "8 DLC5_ZOM_CRYOGENIC_PARTY";
    Achievements[65] = "8 DLC5_ZOM_BIG_BANG_THEORY";
    Achievements[66] = "8 DLC5_ZOM_GROUND_CONTROL";
    Achievements[67] = "8 DLC5_ZOM_ONE_SMALL_HACK";
    Achievements[68] = "8 DLC5_ZOM_ONE_GIANT_LEAP";
    Achievements[69] = "8 DLC5_ZOM_PERKS_IN_SPACE";
    Achievements[70] = "8 DLC5_ZOM_FULLY_ARMED";
    Achievements[71] = "8 DLC4_ZOM_ZOMB_DISPOSAL";
    Achievements[72] = "8 DLC4_ZOM_MONKEY_SEE_MONKEY_DONT";
    Achievements[73] = "8 DLC4_ZOM_BLINDED_BY_THE_FRIGHT";
    Achievements[74] = "8 DLC4_ZOM_SMALL_CONSOLATION";




    byte[] FT111 = new byte[] { 0x41 };
    byte[] FT11 = new byte[] { 0x40 };
    byte[] RPCON1 = new byte[] { 0x38, 0x60, 0xFF, 0xFF, 0x38, 0x80, 0x00, 0x00, 0x3C, 0xA0, 0x02, 0x00, 0x30, 0xA5, 0x50, 0x00, 0x4B, 0xF8, 0x2E, 0x2D, 0x4B, 0xFF, 0xFB, 0x78 };
    byte[] RPCOFF1 = new byte[] { 0x82, 0xB9, 0x00, 0x00, 0x3C, 0xE0, 0x00, 0xD7, 0x3D, 0x80, 0x00, 0x92, 0x56, 0xA4, 0x38, 0x30, 0x56, 0xBB, 0x18, 0x38, 0x3B, 0x87, 0x9D, 0x04 };




    for (int i = 0; i < 75; i++)
    {
    PS3.SetMemory(0x2005000, Encoding.ASCII.GetBytes(Achievements + "\0"));
    PS3.SetMemory(0x466298, FT111);
    PS3.SetMemory(0x4667B4, RPCON1);
    System.Threading.Thread.Sleep(15);
    PS3.SetMemory(0x466298, FT11);
    PS3.SetMemory(0x4667B4, RPCOFF1);
    }
    }



    Addresses (by SC58 )
    Spoiler:


    0x003E95F0 - sv_gamesendservercommand(int clientNum, svscmd_type type, const char *text)
    0x00370638 - G_LocalizedStringIndex(const char *string)
    0x004C4FF0 - Dvar_GetBool(const char *dvarName)
    0x00399CC8 - CBUF_AddText(int localClientNum, const char *text)
    0x003F62A8 - Sv_SendClientSnapshot(client_s *client)
    0x002D85E0 - Player_Die(unsigned int *self, unsigned int *inflictor, unsigned int *attacker, int damage, int meansOfDeath, int iWeapon, const float *vDir, unsigned int hitLoc, int psTimeOffset)
    0x0007B720 - BG_GetPerkIndexForName(char *perkName)
    0x00377208 - G_GivePlayerWeapon(playerState_s *pPS, int iWeaponIndex, char altModelIndex)
    0x002D2D98 - G_InitializeAmmo(gentity_s *pSelf, int weaponIndex, char weaponModel, int hadWeapon)
    0x00356BE0 - G_CallSpawnEntity(gentity_s *ent)
    0x0036FFA0 - G_ModelIndex(const char *name)
    0x00370238 - HudElem_Alloc(int clientNum, int teamNum)
    0x003DFD90 - Sv_KickClient(client_s *cl, char *playerName, int maxPlayerNameLen)
    0x003376C8 - SP_script_model(gentity_s *pSelf)
    0x012ab290 - g_entity
    0x003705D0 - G_MaterialIndex(const char *name)
    0x003701D8 - G_SetModel(gentity_s *ent, const char *modelName)
    0x00373488 - G_Spawn(void)
    0x011F2738 - G_Hudelem
    0x00375548 - G_GetWeaponIndexForName(const char *name)
    0x0037FE50 - G_SpawnTurret(gentity_s *self, const char *weaponinfoname)
    0x003EED08 - Sv_AddServerCommand
    0x003E5200 - Sv_SendClientGameState(Client_s *)
    0x002D4BA0 - G_Say(gentity_s *ent, gentity_s *target, int mode, const char *chatText)
    0x002CA520 - PlayerCmd_SayAll
    0x002CA608 - PlayerCmd_SayTeam
    0x003E0848 - Sv_FastRestart_f
    0x003E0660 - Sv_Maprestart(int fast_restart)
    0x003E7528 - Sv_Addtestclient(void)
    0x00310470 - GScr_AddTestClient
    0x003E47B8 - SV_ClientCommand(client_s *cl, msg_t *msg)
    0x003E1B60 - SV_ExecuteClientCommand(client_s *cl, const char *s, int clientOK)
    0x0039B6C0 - SV_Cmd_TokenizeString(const char *text_in)
    0x002D6140 - ClientCommand(int clientNum)
    0x003996E8 - SV_Cmd_EndTokenizedString(void)
    0x000C0A98 - BG_GetWeaponDef(unsigned int weaponIndex)
    0x00356DF0 - G_Callspawn
    0x00357500 - G_SpawnEntitiesFromString(void)
    0x003EAD98 - SV_SetConfigstring(int index, const char *val)
    0x005CF9B0 - Scr_GetVector(unsigned int index, float *vectorValue)
    0x4C7370 - Dvar_GetString




    Zombies
    Spoiler:

    Name And Motd
    Spoiler:


    Lobby Name Offset: 0x01C33DB0
    Message of the day Offset: 0x01c8004c


    Client Offsets Interval: 0x1d30
    Spoiler:

    In-Game Name

    Offset: 0x011008B8

    Godmode

    Bytes: 0x08,0x88,0x08,0x88 for On, 0x00,0x00,0x00,0x64 for Off
    Offset: 0x01100840

    Dead Ops Arcade Godmode

    Offset: 0x010FED8F

    Unlimited Ammo

    Bytes: 15,0xff,0xff,0xff for On
    Offset 1: 0x010FF138
    Offset 2: 0x010FF148
    Offset 3: 0x010FF160
    Offset 4: 0x010FF140
    Offset 5: 0x010FF168
    Offset 6: 0x010FF150

    mFlags

    Bytes: 0x01 for noclip,0x02 for ufo, 0x04 for frozen
    Offset: 0x0110098F

    Weapons

    Primary Weapon: 0x010fef6f
    Secondary Weapon: 0x010fef9f

    Dead Ops Arcade Weapon

    Bytes: FlameThrower- 0A ShotGun- 0E RayGun- 0B RegularGun- 0C MiniGun- 0D GranadeLuancher- 0F
    Offset: 0x010FEF57

    Modes

    Bytes: 0x01 for notarget, 0x02 for spectator,0x00 for default
    Offset: 0x0110079B

    In-Game Stats

    Score/Money Offset: 0x0110090C
    Kills Offset: 0x01100910
    Headshots Offset: 0x01100930
    Revives Offset: 0x0110092C
    Downs Offset: 0x01100928

    Speed

    Bytes: 0x40, 0x74 for super,0x00, 0x00 for freeze,0x3f, 0x80 for default
    Offset: 0x01100854


    Scripts
    Spoiler:

    SV_GameSendServerCommand
    Spoiler:


    public void SV_GameSendServerCommand(int client, string command)
    {
    RPC.Call(0x003C33A8, client, 1, command);
    }


    Round Skip
    Spoiler:


    First add timer then a button,
    add this to the button:

    Cbuf_AddText(0,"set timescale 10");
    timer1.Start();

    Then this to the timer and set the interval 200/500 otherwise the game can crash.

    Cbuf_AddText(0,"ai axis delete");


    Cbuf_AddText
    Spoiler:


    public void Cbuf_AddText(int localClient,string command)
    {
    RPC.Call(0x00395BA8,localClient,command);
    }


    SetModel
    Spoiler:


    public void SetModel(int client, string model)
    {
    RPC.Call(0x00305940, (uint)(0xFA805C + client * 0x34C), model);
    }



    Aim Assist (By me)
    Spoiler:


    public void Give_AimAssist(int client)
    {
    SV_SendServerCommand(client, "v aim_lockon_region_height 480");
    SV_SendServerCommand(client, "v aim_lockon_region_width 640");
    SV_SendServerCommand(client, "v aim_lockon_enabled 1");
    Thread.Sleep(10);
    SV_SendServerCommand(client, "v aim_lockon_strength 1");
    SV_SendServerCommand(client, "v aim_lockon_deflection 0");
    SV_SendServerCommand(client, "v aim_autoaim_enabled 1");
    Thread.Sleep(10);
    SV_SendServerCommand(client, "v aim_autoaim_region_height 480");
    SV_SendServerCommand(client, "v aim_autoaim_region_width 640");
    SV_SendServerCommand(client, "v aim_slowdown_yaw_scale_ads 0");
    Thread.Sleep(10);
    SV_SendServerCommand(client, "v aim_slowdown_yaw_scale 0");
    SV_SendServerCommand(client, "v aim_slowdown_pitch_scale 0");
    SV_SendServerCommand(client, "v aim_slowdown_pitch_scale_ads 0");
    Thread.Sleep(10);
    SV_SendServerCommand(client, "v aim_slowdown_region_height 0");
    SV_SendServerCommand(client, "v aim_slowdown_region_width 0");
    SV_SendServerCommand(client, "v aim_slowdown_enabled 1");
    Thread.Sleep(10);
    SV_SendServerCommand(client, "v aim_aimAssistRangeScale 2");
    SV_SendServerCommand(client, "v aim_autoAimRangeScale 2");
    }


    FPS (by SC58 )
    Spoiler:


    0x00407554 - Turn on/off FPS
    40 00 - ON
    40 9A - OFF

    0x00827950 - Text Position
    0x0082794c - Text Size
    0x008283a8 - Text For Menu


    All Clients Buttons Monitoring (By AlmightySo )
    Spoiler:


    public static class Buttonz
    {
    public static Int32
    L1 = 1048704,
    L2 = 72704,
    L3 = 1074003968,
    R1 = -2147483648,
    R2 = 131072,
    R3 = 536870912,
    Square = 67108864,
    Cross = 2104320,
    Crouch = 4194304,
    Prone = 8388608,
    Triangle = 8;
    }
    public static bool ButtonPressed(int client, int Button)
    {
    if (Convert.ToInt32(Debug.ReadInt32(0x11007E8 + ((uint)client * 0x104Cool Man (aka Tustin))) == Button)
    return true;
    else return false;
    }


    Local Clients Buttons Monitoring (by SC58 )
    Spoiler:


    Offset for Client 0: 0x00B4EB60
    Interval: 4392


    Jetpack (by AlmightySo )
    Spoiler:


    public uint findPS(int client)
    {
    return 0x10FEDB0 + ((uint)client * 0x104Cool Man (aka Tustin);
    }

    public void JetPack(int client)
    {
    float jH = Debug.ReadFloat(findPS(client));
    jH += 70;
    PS3.Extension.WriteFloat(findPS(client), jH);
    }
    //Use JetPack(); in a timer with button handling.



    Addresses (by SC58 )
    Spoiler:


    0x00304BA0 - G_LocalizedStringIndex(const char *string)
    0x00304B38 - G_MaterialIndex(const char *name)
    0x00452280 - Dvar_GetBool(const char *dvarName)
    0x003C33A8 - SV_GameSendServerCommand(int clientNum, svscmd_type type, const char *text)
    0x00395BA8 - CBUF_AddText(int localClientNum, const char *text)
    0x00309E30 - G_GetWeaponIndexForName(const char *name)
    0x00305940 - SetModel(gentity_s *ent, const char *modelName)
    0x00305650 - G_ModelIndex(const char *name)
    0x00EE7BF2 - G_Hudelem
    0x000A4968 - BG_GetWeaponDef(unsigned int weaponIndex)
    0x002FD098 - G_Callspawn
    0x002FD9C8 - G_SpawnEntitiesFromString(void)
    0x00073A88 - BG_GetPerkIndexForName(const char *perkName)
    0x004BE508 - SV_ExecuteClientCommand(client_s *cl, const char *s, int clientOK)
    0x003066E0 - G_Spawn(void)
    0x002DDFF8 - SP_script_model(gentity_s *pSelf)


    Useful Dvars (You can use these even when not host using cbuf_addtext)
    Spoiler:


    noclip - you can fly Happy
    ufo - you can also fly with this Happy
    god - godmode (unlimited health..)
    notarget - zombies can't see you
    give <item here> - you can give weapons/perks
    give all - gives you all weapons
    take all - takes all your stuff
    cg_thirdPerson - thirdperson (values: 1 or 0)
    cg_fov - field of view (any value between 1-200)
    ai axis delete - kills all zombies
    cg_drawfps - fps in the corner (values: 1 or 0)
    dropweapon - drops your current weapon


    Non-Host Offsets
    Spoiler:

    No Recoil

    Bytes: ON 0x60, 0x00, 0x00, 0x00 ,OFF 0x4B, 0xF3, 0xFF, 0x89
    Offset: 0x15A320

    Super Steady Aim

    Bytes: ON 2F 80 00 00, OFF 2F 80 00 02
    Offset: 0x91014




    Credits
    SC58
    AlmightySo
    Choco
    Jo-Milk
    Seb5594
    primetime43
    xPAQz
    DexModderFTW
    Eddie Mac
    iNDMx - Here is also his good thread: You must login or register to view this content.
    Anera
    Me =D

    I will update the thread soon!
    Last edited by makeabce ; 04-25-2016 at 03:56 PM. Reason: added fps rpc to mp scripts

  2. The Following 31 Users Say Thank You to makeabce For This Useful Post:

    , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

  3. 07-04-2014, 03:34 PM
    Mango_Knife's Avatar
    Mango_Knife
    In my man cave
    Mango_Knife's Avatar
    Mango_Knife
    In my man cave
    3,599
    Posts
    38,751
    Reputation
    Sep 2012
    NextGenUpdate
    Cool.
  4. 07-04-2014, 06:03 PM
    xPAQz's Avatar
    xPAQz
    Bounty hunter
    xPAQz's Avatar
    xPAQz
    Bounty hunter
    155
    Posts
    1,830
    Reputation
    Dec 2013
    NextGenUpdate
    you could maybe add these NON-Host Offsets
    Chrome Players:
    0x131144
    value: 38 C0 FF FF [ON]
    value: FC C0 F8 90 [OFF]

    Super Sleight of Hand:
    0xBBC2E8
    value: 02 [ON]
    value: 01[OFF]

    Wall Hack:
    0x131144
    value: 38 C0 F0 03 [ON]
    value: FC C0 F8 90 [OFF]

    Super Rapid Fire:
    0xBBC2EC
    value: 02 [ON]
    value: 01 [OFF]
  5. 07-04-2014, 07:14 PM
    makeabce's Avatar
    makeabce
    I defeated!
    makeabce's Avatar
    makeabce
    I defeated!
    614
    Posts
    5,882
    Reputation
    Feb 2013
    NextGenUpdate
    Originally Posted by xPAQz View Post
    you could maybe add these NON-Host Offsets
    Chrome Players:
    0x131144
    value: 38 C0 FF FF [ON]
    value: FC C0 F8 90 [OFF]

    Super Sleight of Hand:
    0xBBC2E8
    value: 02 [ON]
    value: 01[OFF]

    Wall Hack:
    0x131144
    value: 38 C0 F0 03 [ON]
    value: FC C0 F8 90 [OFF]

    Super Rapid Fire:
    0xBBC2EC
    value: 02 [ON]
    value: 01 [OFF]

    Added Smile Thanks, and i added u in credits
  6. The Following User Thanked makeabce For This Useful Post:


  7. 07-05-2014, 12:16 AM
    Hori_By_Nature's Avatar
    Hori_By_Nature
    Space Ninja
    Hori_By_Nature's Avatar
    Hori_By_Nature
    Space Ninja
    802
    Posts
    2,439
    Reputation
    May 2013
    NextGenUpdate
    Originally Posted by makeabce View Post
    Hello guys, here is my offsets thread! The old one was okay,but littlebit messy and here is more stuff. Smile
    Multiplayer
    Spoiler:

    Name and Stats
    Spoiler:


    Name Offset: 0x02000934
    Class Name Offset: 0x01c3896f (Class # 1-5) & 0x01c43cf4 (Class # 6-10)
    COD Points Offset: 0x020942d1
    Time Played Offset: 0x02094731
    Total Wins Offset: 0x0209475d
    Total Losses Offset: 0x020944dd
    Prestige Offset: 0x020946dd
    Rank Offset (score basically): 0x020946e5
    Kills Offset: 0x02094429
    Deaths Offset: 0x020942f5
    Assists Offset: 0x02094291
    Kill/Death Ratio In Weapons Offset: 0x02094425
    Wins/Loss Ration In Career Offset: 0x02094761
    Headshots Offset: 0x0209440d
    Amount Spent In Contracts Offset: 0x020942dd
    Contracts Purchased Offset: 0x020942e1
    XP Award In Contracts Offset: 0x020942e5
    Return On Investment Contracts Offset (This is also amount earned) : 0x020942d9
    Games Played Offset: 0x020938b1
    Wager Match Earnings Offset: 0x020944d9
    Unlock All Offset: 0x02094990 (Unlock All Bytes: https://pastebin.com/MxmMrR22)


    Non-Host Offsets
    Spoiler:

    Super Sleight of Hand

    Bytes: 0x02 for on, 0x01 for off
    Offset: 0xBBC2E8

    Chrome Players

    Bytes: 0x38, 0xC0, 0xFF, 0xFF for On, 0xFC, 0xC0, 0xF8, 0x90 for Off
    Offset: 0x131144

    Wallhack

    Bytes: 0x38, 0xC0, 0xF0, 0x03 for On,0xFC, 0xC0, 0xF8, 0x90 for Off
    Offset: 0x131144

    Rapid Fire

    Bytes: 0x02 for On, 0x01 for Off
    Offset: 0xBBC2EC

    Redboxes

    Bytes: 0x60,0x00,0x00,0x00 for both, and when off then change redboxes offset with these: 0x41, 0x86, 0x02, 0x78
    Perk Check Offset: 0x001206C8
    Redboxes Offset: 0x001205C0

    Blackbird

    Bytes: 0x40, 0x9A, 0x00, 0xC4 for On, 0x41, 0x9A, 0x00, 0xC4 for Off
    Offset: 0xEBDF4

    Super Steady Aim

    Bytes: 0x60,0x00,0x00,0x00 for On, 0x2F, 0x80, 0x00, 0x02 for Off
    Offset: 0xAB8EC

    No Recoil

    Bytes: 0x60,0x00,0x00,0x00 for On, 0x4B, 0xF1, 0x84, 0xCD for Off
    Offset: 0x19B244


    Client Offsets Interval: 0x2A38
    Spoiler:

    In-Game Name

    Offset: 0x139784C

    Godmode

    Offset: 0x12AB424
    Interval: 0x760

    mFlags

    Bytes: 0x01 for noclip,0x02 for ufo
    Offset: 0x13979BF

    Unlimited Ammo

    Bytes: 15,0xff,0xff,0xff for unlimited
    Offset 1 : 0x013954CB
    Offset 2 : 0x01395453
    Offset 3 : 0x013954C3
    Offset 4 : 0x0139544B
    Offset 5 : 0x013954D3
    Offset 6 : 0x013954DB

    Blackbird

    Bytes: 0x01 On, 0x00 Off
    Offset: 0x1397AEB

    Reconplane

    Bytes: 0x03 for On, 0x00 for Off
    Offset: 0x1397967

    Second Chance

    Bytes: 0x01 for On
    Offset: 0x1397AEC

    Speed

    Bytes: 0x40,0x40 for super, 0x3F 0x80 for default, 0x00,0x00 for freeze
    Offset: 0x01397881

    In-Game Camo

    Bytes: 60 for gold, 10 for ice,13 for red,10 for olive,20 for nevada,0x18 for sahara
    Offset: 0x013952E0

    Teleport

    Offset: 0x13950f0


    Scripts
    Spoiler:

    Aimbot (By Seb5594 & DexModderFTW & Eddie mac)
    Spoiler:


    public class Aimbot
    {

    #region Aimbot
    //All of the getting info etc.
    public static uint G_Entity(uint client)
    {
    return 0x012ab290 + (client * 0x2FCool Man (aka Tustin);
    }
    public static float[] getOrigin(uint clientNum)
    {
    float[] origin = new float[3];
    origin[0] = Lib.ReadSingle(0x013950c8 + 0x2A38 * clientNum + 0x24);
    origin[1] = Lib.ReadSingle(0x013950c8 + 0x2A38 * clientNum + 0x24 + 0x4);
    origin[2] = Lib.ReadSingle(0x013950c8 + 0x2A38 * clientNum + 0x24 + 0xCool Man (aka Tustin);
    return origin;
    }
    public static UInt32 G_Entity(Int32 ClientIndex)
    {
    return 0x16B7920 + ((UInt32)ClientIndex * 0x31C);
    }

    public static int GetHost()
    {
    string str = Lib.ReadString(0x172a58Cool Man (aka Tustin);
    for (int i = 0; i < 0x12; i++)
    {
    string str2 = Lib.ReadString((uint)(0xf1651c + (i * 0x3600)));
    if (str == str2)
    {
    return i;
    }
    }
    return -1;
    }
    public static Boolean Exists(Int32 clientIndex)
    {
    return Lib.ReadString(0x013978d0 + ((uint)clientIndex * 0x2A3Cool Man (aka Tustin)) != "";
    }

    public static Boolean IsAlive(Int32 clientIndex)
    {
    return (Lib.ReadByte(0x0139793b + ((uint)clientIndex * 0x2A3Cool Man (aka Tustin)) == 0);
    }

    public static Boolean isSameTeam(Int32 Owner, Int32 Victim)
    {
    return Lib.ReadInt32(0x01397894 + ((uint)Owner * 0x2A3Cool Man (aka Tustin)) == Lib.ReadInt32(0x01397894 + ((uint)Victim * 0x2A3Cool Man (aka Tustin));
    }
    public static Single GetDistance3D(Single[] p1, Single[] p2)
    {
    float[] numArray3 = new float[] { p2[0] - p1[0], p2[1] - p1[1], p2[2] - p1[2] };
    return ((numArray3[0] * numArray3[0]) + (numArray3[1] * numArray3[1])) + (numArray3[2] * numArray3[2]);
    }
    public static int GetNearestClientFromAttacker(int You)
    {
    int CIndex = -1;
    double Closest = 1E+08f;
    for (int i = 0; i < 12; i++)
    {
    if (((Exists(i) && IsAlive(i) && !isSameTeam(You, i))))
    {
    double Bla = GetDistance3D(getOrigin((uint)You), getOrigin((uint)i));
    if (Bla < Closest)
    {
    CIndex = i;
    Closest = Bla;
    }
    }
    }
    return CIndex;
    }


    //The Real Aimbot Code-----

    //function to convert a vector to angles
    public static Single[] vectoangles(Int32 clientIndex, Int32 secondPlayer)
    {
    Single[] numArray1 = getOrigin((uint)clientIndex);
    Single[] numArray2 = getOrigin((uint)secondPlayer);
    Single[] Angles = {(numArray2[0] - numArray1[0]), (numArray2[1] - numArray1[1]), (numArray2[2] - numArray1[2])};
    Single num2;
    Single num3;
    Single[] numArray = new Single[3];
    if ((Angles[1] == 0f) && (Angles[0] == 0f))
    {
    num2 = 0f;
    if (Angles[2] > 0f)
    num3 = 90f;
    else
    num3 = 270f;
    }
    else
    {
    if (Angles[0] != -1f)
    num2 = (Single)((Math.Atan2((Double)Angles[1], (Double)Angles[0]) * 180.0) / 3.1415926535897931);
    else if (Angles[1] > 0f)
    num2 = 90f;
    else
    num2 = 270f;
    if (num2 < 0f)
    num2 += 360f;
    Single num = (Single)Math.Sqrt((Double)((Angles[0] * Angles[0]) + (Angles[1] * Angles[1])));
    num3 = (Single)((Math.Atan2((Double)Angles[2], (Double)num) * 180.0) / 3.1415926535897931);
    if (num3 < 0f)
    num3 += 360f;
    }
    numArray[0] = -num3;
    numArray[1] = num2;
    return numArray;
    }
    //Set Set the clients angles
    public static void SetClientViewAngles(Int32 clientIndex, Int32 Victim)
    {
    Single[] angles = vectoangles(clientIndex, Victim);
    Lib.WriteSingle(0x10040000, angles);
    RPC.Call(0x2C1E38, new Object[] { Addresses.G_Entity((uint)clientIndex), 0x10040000 });
    }
    //Just Aimbot Threads and Bools
    public static bool[] AimbotStatus = new bool[12];
    public static Thread[] AimbotThread = new Thread[12];
    public static bool[] UnfairAimbot = new bool[12];

    //This is what starts the Aimbot
    public static void StartAimbot(int clientIndex)
    {
    ThreadStart start = null;
    if (!AimbotStatus[clientIndex])
    {
    Thread.Sleep(100);
    AimbotStatus[clientIndex] = true;
    if (start == null)
    {
    start = () => InitializeAimbot(clientIndex);
    }
    AimbotThread[clientIndex] = new Thread(start);
    AimbotThread[clientIndex].IsBackground = true;
    AimbotThread[clientIndex].Start();
    }
    else
    {
    AimbotStatus[clientIndex] = false;
    AimbotThread[clientIndex].Abort();
    }
    }
    //Main Aimbot Code
    private static void InitializeAimbot(int client)
    {
    PS3.Reconnect();
    while (AimbotThread[client].IsAlive)
    {
    int nearestPlayer = GetNearestClientFromAttacker(client);
    if (nearestPlayer != client)
    {
    if (ButtonPress.ButtonPressed(client, 03) || ButtonPress.ButtonPressed(client, 04))
    {
    SetClientViewAngles(client, nearestPlayer);
    }
    }
    }
    }
    #endregion

    //Example:

    Aimbot.StartAimbot(int client);


    Cbuf_AddText
    Spoiler:


    public void cBuf_AddText(int localClient,string command)
    {
    RPC.Call(0x00399CC8, localClient, command);
    }


    SV_GameSendServerCommand
    Spoiler:


    public void SV_GameSendServerCommand(int client, string command)
    {
    RPC.Call(0x003E95F0, client, 1, command);
    }


    G_SetModel
    Spoiler:


    public void SetModel(int client, string model)
    {
    RPC.Call(0x003701D8, (uint)(0x012ab290 + client * 0x2FCool Man (aka Tustin), model);
    }


    RPC (By SC58 And Choco )
    Spoiler:


    using System;
    using System.Collections.Generic;
    using System.Linq;
    using System.Text;
    using System.Threading.Tasks;

    namespace BOIMPRPC
    {
    public class PS3
    {
    static uint processID;

    private static uint GetProcessID()
    {
    uint[] ProcessIDs;
    PS3_TMAPI.GetProcessList(0, out ProcessIDs);
    return ProcessIDs[0];
    }

    public static void SetMemory(uint address, byte[] memory)
    {
    PS3_TMAPI.ProcessSetMemory(0, PS3_TMAPI.UnitType.PPU, processID, 0, address, memory);
    }

    public static byte[] GetMemory(uint address, int length)
    {
    byte[] bytes = new byte[length];
    PS3_TMAPI.ProcessGetMemory(0, PS3_TMAPI.UnitType.PPU, processID, 0, address, ref bytes);
    return bytes;
    }

    public static int Init()
    {
    processID = GetProcessID();
    return RPC.Init();
    }
    }

    public class RPC
    {
    static uint function_address;

    public static int Init()
    {
    function_address = Get_func_address();
    if (function_address == 0) return -1;
    Enable_RPC();
    return 0;
    }

    public static uint Get_func_address()
    {
    for (uint i = 0x7A21D4; i < 0x1000000; i += 4)
    {
    byte[] bytes = PS3.GetMemory(i, Cool Man (aka Tustin);
    if (((bytes[0] == 0x4B) && (bytes[1] == 0xFF) && (bytes[2] == 0xBE) && (bytes[3] == 0x05) && (bytes[4] == 0x4B) && (bytes[5] == 0xFF) && (bytes[6] == 0xFC) && (bytes[7] == 0x9Cool Man (aka Tustin)))
    {
    return i + 0xC;
    }
    }
    return 0;
    }

    public static void Enable_RPC()
    {
    PS3.SetMemory(function_address, new byte[] { 0x4E, 0x80, 0x00, 0x20 });
    System.Threading.Thread.Sleep(20);
    byte[] func = new byte[] { 0x7C, 0x08, 0x02, 0xA6, 0xF8, 0x01, 0x00, 0x80, 0x3C, 0x60, 0x10, 0x05, 0x81, 0x83, 0x00, 0x4C, 0x2C, 0x0C, 0x00, 0x00, 0x41, 0x82, 0x00, 0x64, 0x80, 0x83, 0x00, 0x04, 0x80, 0xA3, 0x00, 0x08, 0x80, 0xC3, 0x00, 0x0C, 0x80, 0xE3, 0x00, 0x10, 0x81, 0x03, 0x00, 0x14, 0x81, 0x23, 0x00, 0x18, 0x81, 0x43, 0x00, 0x1C, 0x81, 0x63, 0x00, 0x20, 0xC0, 0x23, 0x00, 0x24, 0xC0, 0x43, 0x00, 0x28, 0xC0, 0x63, 0x00, 0x2C, 0xC0, 0x83, 0x00, 0x30, 0xC0, 0xA3, 0x00, 0x34, 0xC0, 0xC3, 0x00, 0x38, 0xC0, 0xE3, 0x00, 0x3C, 0xC1, 0x03, 0x00, 0x40, 0xC1, 0x23, 0x00, 0x48, 0x80, 0x63, 0x00, 0x00, 0x7D, 0x89, 0x03, 0xA6, 0x4E, 0x80, 0x04, 0x21, 0x3C, 0x80, 0x10, 0x05, 0x38, 0xA0, 0x00, 0x00, 0x90, 0xA4, 0x00, 0x4C, 0x80, 0x64, 0x00, 0x50, 0xE8, 0x01, 0x00, 0x80, 0x7C, 0x08, 0x03, 0xA6, 0x38, 0x21, 0x00, 0x70, 0x4E, 0x80, 0x00, 0x20, 0x60, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x60, 0x00, 0x00, 0x00 };
    PS3.SetMemory(function_address + 0x4, func);
    PS3.SetMemory(0x10050000, new byte[0x2854]);
    PS3.SetMemory(function_address, new byte[] { 0xF8, 0x21, 0xFF, 0x91 });
    }

    public static int Call(uint func_address, params object[] parameters)
    {
    int num_params = parameters.Length;
    uint num_floats = 0;
    for (uint i = 0; i < num_params; i++)
    {
    if (parameters is int)
    {
    byte[] val = BitConverter.GetBytes((int)parameters);
    Array.Reverse(val);
    PS3.SetMemory(0x10050000 + (i + num_floats) * 4, val);
    }
    else if (parameters is uint)
    {
    byte[] val = BitConverter.GetBytes((uint)parameters);
    Array.Reverse(val);
    PS3.SetMemory(0x10050000 + (i + num_floats) * 4, val);
    }
    else if (parameters is string)
    {
    byte[] str = Encoding.UTF8.GetBytes(Convert.ToString(parameters) + "\0");
    PS3.SetMemory(0x10050054 + i * 0x400, str);
    uint addr = 0x10050054 + i * 0x400;
    byte[] address = BitConverter.GetBytes(addr);
    Array.Reverse(address);
    PS3.SetMemory(0x10050000 + (i + num_floats) * 4, address);
    }
    else if (parameters is float)
    {
    num_floats++;
    byte[] val = BitConverter.GetBytes((float)parameters);
    Array.Reverse(val);
    PS3.SetMemory(0x10050024 + ((num_floats - 1) * 0x4), val);
    }
    }
    byte[] fadd = BitConverter.GetBytes(func_address);
    Array.Reverse(fadd);
    PS3.SetMemory(0x1005004C, fadd);
    System.Threading.Thread.Sleep(20);
    byte[] ret = PS3.GetMemory(0x10050050, 4);
    Array.Reverse(ret);
    return BitConverter.ToInt32(ret, 0);
    }


    Buttons
    Spoiler:

    Buttons Monitoring (by seb5594)
    Spoiler:


    public class Buttons
    {
    public static UInt32
    X = 2104320,
    O = 512,
    Square = 67108864,
    Triangle = 8,
    L3 = 1074003968,
    R3 = 536870912,
    L2 = 72704,
    R2 = 131072,
    L1 = 1048704,
    R1 = 2147483648,
    Crouch = 4194304,
    Prone = 8388608,
    StartButton = 4;
    }
    public Boolean ButtonPressed(Int32 clientIndex, UInt32 Button)
    {
    if (BO1TMAPI.PS3.Extension.ReadUInt32((UInt32)G_Client(clientIndex) + 0x271Cool Man (aka Tustin) == Button)
    return true;
    else return false;
    }
    public Int32 G_Client(Int32 clientIndex)
    {
    return (Int32)0x13950C8 + 0x2A38 * clientIndex;
    }
    public UInt32 ReadUInt32(uint offset)
    {
    Byte[] YoLo = GetMemory(offset, 4);
    Array.Reverse(YoLo, 0, 4);
    return BitConverter.ToUInt32(YoLo, 0);
    }
    public byte[] GetMemory(uint address, int length)
    {
    byte[] buffer = new byte[length];
    BO1TMAPI.PS3.GetMemory(address, buffer);
    return buffer;
    }

    //Example how to use:

    if(ButtonPressed(0,Buttons.L1))
    {
    // Mods/functions here
    }


    Local Client Buttons Monitoring (by SC58 )
    Spoiler:


    Offset for Client 0: 0x00D198AC
    Interval: 4392



    FPS (By SC58 )
    Spoiler:


    0x00466298 - Turn on/off FPS
    40 00 - ON
    40 9A - OFF

    0x0091C860 - Text For Menu
    0x0091BF38 - Text Position
    0x0091BF34 - Text Size


    Unlock All Trophys (by SC58 )
    Spoiler:


    public void TrophyUnlocks_MP()
    {
    string[] Achievements = new string[75];
    Achievements[0] = "8 SP_WIN_CUBA";
    Achievements[1] = "8 SP_WIN_VORKUTA";
    Achievements[2] = "8 SP_WIN_PENTAGON";
    Achievements[3] = "8 SP_WIN_FLASHPOINT";
    Achievements[4] = "8 SP_WIN_KHE_SANH";
    Achievements[5] = "8 SP_WIN_HUE_CITY";
    Achievements[6] = "8 SP_WIN_KOWLOON";
    Achievements[7] = "8 SP_WIN_RIVER";
    Achievements[8] = "8 SP_WIN_FULLAHEAD";
    Achievements[9] = "8 SP_WIN_INTERROGATION_ESCAPE";
    Achievements[10] = "8 SP_WIN_UNDERWATERBASE";
    Achievements[11] = "8 SP_VWIN_FLASHPOINT";
    Achievements[12] = "8 SP_VWIN_HUE_CITY";
    Achievements[13] = "8 SP_VWIN_RIVER";
    Achievements[14] = "8 SP_VWIN_FULLAHEAD";
    Achievements[15] = "8 SP_VWIN_UNDERWATERBASE";
    Achievements[16] = "8 SP_LVL_CUBA_CASTRO_ONESHOT";
    Achievements[17] = "8 SP_LVL_VORKUTA_VEHICULAR";
    Achievements[18] = "8 SP_LVL_VORKUTA_SLINGSHOT";
    Achievements[19] = "8 SP_LVL_KHESANH_MISSILES";
    Achievements[20] = "8 SP_LVL_HUECITY_AIRSUPPORT";
    Achievements[21] = "8 SP_LVL_HUECITY_DRAGON";
    Achievements[22] = "8 SP_LVL_CREEK1_DESTROY_MG";
    Achievements[23] = "8 SP_LVL_CREEK1_KNIFING";
    Achievements[24] = "8 SP_LVL_KOWLOON_DUAL";
    Achievements[25] = "8 SP_LVL_RIVER_TARGETS";
    Achievements[26] = "8 SP_LVL_WMD_RSO";
    Achievements[27] = "8 SP_LVL_WMD_RELAY";
    Achievements[28] = "8 SP_LVL_POW_HIND";
    Achievements[29] = "8 SP_LVL_POW_FLAMETHROWER";
    Achievements[30] = "8 SP_LVL_FULLAHEAD_2MIN";
    Achievements[31] = "8 SP_LVL_REBIRTH_MONKEYS";
    Achievements[32] = "8 SP_LVL_REBIRTH_NOLEAKS";
    Achievements[33] = "8 SP_LVL_UNDERWATERBASE_MINI";
    Achievements[34] = "8 SP_LVL_FRONTEND_CHAIR";
    Achievements[35] = "8 SP_LVL_FRONTEND_ZORK";
    Achievements[36] = "8 SP_GEN_MASTER";
    Achievements[37] = "8 SP_GEN_FRAGMASTER";
    Achievements[38] = "8 SP_GEN_ROUGH_ECO";
    Achievements[39] = "8 SP_GEN_CROSSBOW";
    Achievements[40] = "8 SP_GEN_FOUNDFILMS";
    Achievements[41] = "8 SP_ZOM_COLLECTOR";
    Achievements[42] = "8 SP_ZOM_NODAMAGE";
    Achievements[43] = "8 SP_ZOM_TRAPS";
    Achievements[44] = "8 SP_ZOM_SILVERBACK";
    Achievements[45] = "8 SP_ZOM_CHICKENS";
    Achievements[46] = "8 SP_ZOM_FLAMINGBULL";
    Achievements[47] = "8 MP_FILM_CREATED";
    Achievements[48] = "8 MP_WAGER_MATCH";
    Achievements[49] = "8 MP_PLAY";
    Achievements[50] = "8 DLC1_ZOM_OLDTIMER";
    Achievements[51] = "8 DLC1_ZOM_HARDWAY";
    Achievements[52] = "8 DLC1_ZOM_PISTOLERO";
    Achievements[53] = "8 DLC1_ZOM_BIGBADDABOOM";
    Achievements[54] = "8 DLC1_ZOM_NOLEGS";
    Achievements[55] = "8 DLC2_ZOM_PROTECTEQUIP";
    Achievements[56] = "8 DLC2_ZOM_LUNARLANDERS";
    Achievements[57] = "8 DLC2_ZOM_FIREMONKEY";
    Achievements[58] = "8 DLC2_ZOM_BLACKHOLE";
    Achievements[59] = "8 DLC2_ZOM_PACKAPUNCH";
    Achievements[60] = "8 DLC3_ZOM_STUNTMAN";
    Achievements[61] = "8 DLC3_ZOM_SHOOTING_ON_LOCATION";
    Achievements[62] = "8 DLC3_ZOM_QUIET_ON_THE_SET";
    Achievements[63] = "8 DLC4_ZOM_TEMPLE_SIDEQUEST";
    Achievements[64] = "8 DLC5_ZOM_CRYOGENIC_PARTY";
    Achievements[65] = "8 DLC5_ZOM_BIG_BANG_THEORY";
    Achievements[66] = "8 DLC5_ZOM_GROUND_CONTROL";
    Achievements[67] = "8 DLC5_ZOM_ONE_SMALL_HACK";
    Achievements[68] = "8 DLC5_ZOM_ONE_GIANT_LEAP";
    Achievements[69] = "8 DLC5_ZOM_PERKS_IN_SPACE";
    Achievements[70] = "8 DLC5_ZOM_FULLY_ARMED";
    Achievements[71] = "8 DLC4_ZOM_ZOMB_DISPOSAL";
    Achievements[72] = "8 DLC4_ZOM_MONKEY_SEE_MONKEY_DONT";
    Achievements[73] = "8 DLC4_ZOM_BLINDED_BY_THE_FRIGHT";
    Achievements[74] = "8 DLC4_ZOM_SMALL_CONSOLATION";




    byte[] FT111 = new byte[] { 0x41 };
    byte[] FT11 = new byte[] { 0x40 };
    byte[] RPCON1 = new byte[] { 0x38, 0x60, 0xFF, 0xFF, 0x38, 0x80, 0x00, 0x00, 0x3C, 0xA0, 0x02, 0x00, 0x30, 0xA5, 0x50, 0x00, 0x4B, 0xF8, 0x2E, 0x2D, 0x4B, 0xFF, 0xFB, 0x78 };
    byte[] RPCOFF1 = new byte[] { 0x82, 0xB9, 0x00, 0x00, 0x3C, 0xE0, 0x00, 0xD7, 0x3D, 0x80, 0x00, 0x92, 0x56, 0xA4, 0x38, 0x30, 0x56, 0xBB, 0x18, 0x38, 0x3B, 0x87, 0x9D, 0x04 };




    for (int i = 0; i < 75; i++)
    {
    PS3.SetMemory(0x2005000, Encoding.ASCII.GetBytes(Achievements + "\0"));
    PS3.SetMemory(0x466298, FT111);
    PS3.SetMemory(0x4667B4, RPCON1);
    System.Threading.Thread.Sleep(15);
    PS3.SetMemory(0x466298, FT11);
    PS3.SetMemory(0x4667B4, RPCOFF1);
    }
    }



    Addresses (by SC58 )
    Spoiler:


    0x003E95F0 - sv_gamesendservercommand(int clientNum, svscmd_type type, const char *text)
    0x00370638 - G_LocalizedStringIndex(const char *string)
    0x004C4FF0 - Dvar_GetBool(const char *dvarName)
    0x00399CC8 - CBUF_AddText(int localClientNum, const char *text)
    0x003F62A8 - Sv_SendClientSnapshot(client_s *client)
    0x002D85E0 - Player_Die(unsigned int *self, unsigned int *inflictor, unsigned int *attacker, int damage, int meansOfDeath, int iWeapon, const float *vDir, unsigned int hitLoc, int psTimeOffset)
    0x0007B720 - BG_GetPerkIndexForName(char *perkName)
    0x00377208 - G_GivePlayerWeapon(playerState_s *pPS, int iWeaponIndex, char altModelIndex)
    0x002D2D98 - G_InitializeAmmo(gentity_s *pSelf, int weaponIndex, char weaponModel, int hadWeapon)
    0x00356BE0 - G_CallSpawnEntity(gentity_s *ent)
    0x0036FFA0 - G_ModelIndex(const char *name)
    0x00370238 - HudElem_Alloc(int clientNum, int teamNum)
    0x003DFD90 - Sv_KickClient(client_s *cl, char *playerName, int maxPlayerNameLen)
    0x003376C8 - SP_script_model(gentity_s *pSelf)
    0x012ab290 - g_entity
    0x003705D0 - G_MaterialIndex(const char *name)
    0x003701D8 - G_SetModel(gentity_s *ent, const char *modelName)
    0x00373488 - G_Spawn(void)
    0x011F2738 - G_Hudelem
    0x00375548 - G_GetWeaponIndexForName(const char *name)
    0x0037FE50 - G_SpawnTurret(gentity_s *self, const char *weaponinfoname)
    0x003EED08 - Sv_AddServerCommand
    0x003E5200 - Sv_SendClientGameState(Client_s *)
    0x002D4BA0 - G_Say(gentity_s *ent, gentity_s *target, int mode, const char *chatText)
    0x002CA520 - PlayerCmd_SayAll
    0x002CA608 - PlayerCmd_SayTeam
    0x003E0848 - Sv_FastRestart_f
    0x003E0660 - Sv_Maprestart(int fast_restart)
    0x003E7528 - Sv_Addtestclient(void)
    0x00310470 - GScr_AddTestClient
    0x003E47B8 - SV_ClientCommand(client_s *cl, msg_t *msg)
    0x003E1B60 - SV_ExecuteClientCommand(client_s *cl, const char *s, int clientOK)
    0x0039B6C0 - SV_Cmd_TokenizeString(const char *text_in)
    0x002D6140 - ClientCommand(int clientNum)
    0x003996E8 - SV_Cmd_EndTokenizedString(void)
    0x000C0A98 - BG_GetWeaponDef(unsigned int weaponIndex)
    0x00356DF0 - G_Callspawn
    0x00357500 - G_SpawnEntitiesFromString(void)
    0x003EAD98 - SV_SetConfigstring(int index, const char *val)
    0x005CF9B0 - Scr_GetVector(unsigned int index, float *vectorValue)




    Zombies
    Spoiler:

    Name And Motd
    Spoiler:


    Lobby Name Offset: 0x01C33DB0
    Message of the day Offset: 0x01c8004c


    Client Offsets Interval: 0x1d30
    Spoiler:

    In-Game Name

    Offset: 0x011008B8

    Godmode

    Bytes: 0x08,0x88,0x08,0x88 for On, 0x00,0x00,0x00,0x64 for Off
    Offset: 0x01100840

    Unlimited Ammo

    Bytes: 15,0xff,0xff,0xff for On
    Offset 1: 0x010FF138
    Offset 2: 0x010FF148
    Offset 3: 0x010FF160
    Offset 4: 0x010FF140
    Offset 5: 0x010FF168
    Offset 6: 0x010FF150

    mFlags

    Bytes: 0x01 for noclip,0x02 for ufo, 0x04 for frozen
    Offset: 0x0110098F

    Weapons

    Primary Weapon: 0x010fef6f
    Secondary Weapon: 0x010fef9f

    Modes

    Bytes: 0x01 for notarget, 0x02 for spectator,0x00 for default
    Offset: 0x0110079B

    In-Game Stats

    Score/Money Offset: 0x0110090C
    Kills Offset: 0x01100910
    Headshots Offset: 0x01100930
    Revives Offset: 0x0110092C
    Downs Offset: 0x01100928

    Speed

    Bytes: 0x40, 0x74 for super,0x00, 0x00 for freeze,0x3f, 0x80 for default
    Offset: 0x01100854


    Scripts
    Spoiler:

    SV_GameSendServerCommand
    Spoiler:


    public void SV_GameSendServerCommand(int client, string command)
    {
    RPC.Call(0x003C33A8, client, 1, command);
    }


    Cbuf_AddText
    Spoiler:


    public void Cbuf_AddText(int localClient,string command)
    {
    RPC.Call(0x00395BA8,localClient,command);
    }


    SetModel
    Spoiler:


    public void SetModel(int client, string model)
    {
    RPC.Call(0x00305940, (uint)(0xFA805C + client * 0x34C), model);
    }



    Aim Assist (By me)
    Spoiler:


    public void Give_AimAssist(int client)
    {
    SV_SendServerCommand(client, "v aim_lockon_region_height 480");
    SV_SendServerCommand(client, "v aim_lockon_region_width 640");
    SV_SendServerCommand(client, "v aim_lockon_enabled 1");
    Thread.Sleep(10);
    SV_SendServerCommand(client, "v aim_lockon_strength 1");
    SV_SendServerCommand(client, "v aim_lockon_deflection 0");
    SV_SendServerCommand(client, "v aim_autoaim_enabled 1");
    Thread.Sleep(10);
    SV_SendServerCommand(client, "v aim_autoaim_region_height 480");
    SV_SendServerCommand(client, "v aim_autoaim_region_width 640");
    SV_SendServerCommand(client, "v aim_slowdown_yaw_scale_ads 0");
    Thread.Sleep(10);
    SV_SendServerCommand(client, "v aim_slowdown_yaw_scale 0");
    SV_SendServerCommand(client, "v aim_slowdown_pitch_scale 0");
    SV_SendServerCommand(client, "v aim_slowdown_pitch_scale_ads 0");
    Thread.Sleep(10);
    SV_SendServerCommand(client, "v aim_slowdown_region_height 0");
    SV_SendServerCommand(client, "v aim_slowdown_region_width 0");
    SV_SendServerCommand(client, "v aim_slowdown_enabled 1");
    Thread.Sleep(10);
    SV_SendServerCommand(client, "v aim_aimAssistRangeScale 2");
    SV_SendServerCommand(client, "v aim_autoAimRangeScale 2");
    }


    FPS (by SC58 )
    Spoiler:


    0x00407554 - Turn on/off FPS
    40 00 - ON
    40 9A - OFF

    0x00827950 - Text Position
    0x0082794c - Text Size
    0x008283a8 - Text For Menu


    All Clients Buttons Monitoring (By AlmightySo )
    Spoiler:


    public static class Buttonz
    {
    public static Int32
    L1 = 1048704,
    L2 = 72704,
    L3 = 1074003968,
    R1 = -2147483648,
    R2 = 131072,
    R3 = 536870912,
    Square = 67108864,
    Cross = 2104320,
    Crouch = 4194304,
    Prone = 8388608,
    Triangle = 8;
    }
    public static bool ButtonPressed(int client, int Button)
    {
    if (Convert.ToInt32(Debug.ReadInt32(0x11007E8 + ((uint)client * 0x104Cool Man (aka Tustin))) == Button)
    return true;
    else return false;
    }


    Local Clients Buttons Monitoring (by SC58 )
    Spoiler:


    Offset for Client 0: 0x00B4EB60
    Interval: 4392


    Jetpack (by AlmightySo )
    Spoiler:


    public uint findPS(int client)
    {
    return 0x10FEDB0 + ((uint)client * 0x104Cool Man (aka Tustin);
    }

    public void JetPack(int client)
    {
    float jH = Debug.ReadFloat(findPS(client));
    jH += 70;
    PS3.Extension.WriteFloat(findPS(client), jH);
    }
    //Use JetPack(); in a timer with button handling.



    Addresses (by SC58 )
    Spoiler:


    0x00304BA0 - G_LocalizedStringIndex(const char *string)
    0x00304B38 - G_MaterialIndex(const char *name)
    0x00452280 - Dvar_GetBool(const char *dvarName)
    0x003C33A8 - SV_GameSendServerCommand(int clientNum, svscmd_type type, const char *text)
    0x00395BA8 - CBUF_AddText(int localClientNum, const char *text)
    0x00309E30 - G_GetWeaponIndexForName(const char *name)
    0x00305940 - SetModel(gentity_s *ent, const char *modelName)
    0x00305650 - G_ModelIndex(const char *name)
    0x00EE7BF2 - G_Hudelem
    0x000A4968 - BG_GetWeaponDef(unsigned int weaponIndex)
    0x002FD098 - G_Callspawn
    0x002FD9C8 - G_SpawnEntitiesFromString(void)
    0x00073A88 - BG_GetPerkIndexForName(const char *perkName)
    0x004BE508 - SV_ExecuteClientCommand(client_s *cl, const char *s, int clientOK)
    0x003066E0 - G_Spawn(void)
    0x002DDFF8 - SP_script_model(gentity_s *pSelf)




    Credits
    SC58
    AlmightySo
    Choco
    Seb5594
    primetime
    xPAQz
    DexModderFTW
    Eddie Mac
    iNDMx - Here is also his good thread: You must login or register to view this content.
    Anera

    I will update the thread soon!


    I thought you might want to add this as well since I didn't see it on there.
     VSAT 0xEBDF4   ON { 0x40, 0x9A, 0x00, 0xC4};
    VSAT 0xEBDF4 OFF{ 0x41, 0x9A, 0x00, 0xC4 };
  8. 07-05-2014, 07:22 AM
    xPAQz's Avatar
    xPAQz
    Bounty hunter
    xPAQz's Avatar
    xPAQz
    Bounty hunter
    155
    Posts
    1,830
    Reputation
    Dec 2013
    NextGenUpdate
    Originally Posted by Nature View Post


    I thought you might want to add this as well since I didn't see it on there.
     VSAT 0xEBDF4   ON { 0x40, 0x9A, 0x00, 0xC4};
    VSAT 0xEBDF4 OFF{ 0x41, 0x9A, 0x00, 0xC4 };


    Blackbird = VSAT = SR71
  9. 07-06-2014, 02:12 PM
    Eddie Mac's Avatar
    Eddie Mac
    At least I can fight
    Eddie Mac's Avatar
    Eddie Mac
    At least I can fight
    2,089
    Posts
    43,419
    Reputation
    Feb 2011
    NextGenUpdate
    Originally Posted by makeabce View Post
    Added Smile Thanks, and i added u in credits


    Even tho no of those were found by him lol, anyways who cares i guess.
    Also here is some zombies stuff.

    Arcade Mode
    ---------------
    Spec God Mode
    0x010FED8F player-1
    0x01100ABF player-2
    0x011027EF player-3
    0x0110451F player-4
    Speed
    0x01100854 player-1
    0x01102584 player-2
    0x011042B4 player-3
    0x01105FE4 player-4
    Noclip
    0x0110098F player-1
    0x011026BF player-2
    0x011043EF player-3
    0x0110611F player-4
    Score
    0x0110090C player-1
    0x0110263C player-2
    0x0110436C player-3
    0x0110609C player-4
    Kills
    0x01100910 player-1
    0x01102640 player-2
    0x01104370 player-3
    0x011060A0 player-4
    Weapon
    0x010FEF57 player-1
    0x01100C87 player-2
    0x011029B7 player-3
    0x011046E7 player-4
    FlameThrower- 0A ShotGun- 0E RayGun- 0B RegularGun- 0C MiniGun- 0D GranadeLuancher- 0F
  10. The Following User Thanked Eddie Mac For This Useful Post:


  11. The Following User Groaned Eddie Mac For This Awful Post:


  12. 07-06-2014, 02:43 PM
    makeabce's Avatar
    makeabce
    I defeated!
    makeabce's Avatar
    makeabce
    I defeated!
    614
    Posts
    5,882
    Reputation
    Feb 2013
    NextGenUpdate
    Originally Posted by 00 View Post
    Even tho no of those were found by him lol, anyways who cares i guess.
    Also here is some zombies stuff.

    Arcade Mode
    ---------------
    Spec God Mode
    0x010FED8F player-1
    0x01100ABF player-2
    0x011027EF player-3
    0x0110451F player-4
    Speed
    0x01100854 player-1
    0x01102584 player-2
    0x011042B4 player-3
    0x01105FE4 player-4
    Noclip
    0x0110098F player-1
    0x011026BF player-2
    0x011043EF player-3
    0x0110611F player-4
    Score
    0x0110090C player-1
    0x0110263C player-2
    0x0110436C player-3
    0x0110609C player-4
    Kills
    0x01100910 player-1
    0x01102640 player-2
    0x01104370 player-3
    0x011060A0 player-4
    Weapon
    0x010FEF57 player-1
    0x01100C87 player-2
    0x011029B7 player-3
    0x011046E7 player-4
    FlameThrower- 0A ShotGun- 0E RayGun- 0B RegularGun- 0C MiniGun- 0D GranadeLuancher- 0F


    Lol,you are in credits already. Thanks for the offsets Smile
    Last edited by makeabce ; 07-06-2014 at 02:46 PM.

  13. The Following User Thanked makeabce For This Useful Post:


  14. 07-06-2014, 02:49 PM
    Eddie Mac's Avatar
    Eddie Mac
    At least I can fight
    Eddie Mac's Avatar
    Eddie Mac
    At least I can fight
    2,089
    Posts
    43,419
    Reputation
    Feb 2011
    NextGenUpdate
    Originally Posted by makeabce View Post
    Lol,you are in credits already. Thanks for the offsets Smile


    I know that :p I'm just saying i don't get why he post offsets from other people and did not say who they were from, oh well.

    And I'm not sure i only played Arcade once to grab those. But you can subtract player 2 from player 1 and get the interval.
  15. 07-06-2014, 02:56 PM
    makeabce's Avatar
    makeabce
    I defeated!
    makeabce's Avatar
    makeabce
    I defeated!
    614
    Posts
    5,882
    Reputation
    Feb 2013
    NextGenUpdate
    Originally Posted by 00 View Post
    I know that :p I'm just saying i don't get why he post offsets from other people and did not say who they were from, oh well.

    And I'm not sure i only played Arcade once to grab those. But you can subtract player 2 from player 1 and get the interval.

    Kk. Can i btw add you in skype? :fa:
    Lol. If you got anymore offsets (non-host or anything) I'm happy to use them Cool Troll