Prestige : 0x295C66d
XP (Experience) : 0x295C709
Score : 0x295C746
Kills : 0x295C71E
Deaths : 0x295C6F5
Wins : 0x295C772
Losses : 0x295C725
Time Played : 0x295C762
Games Played : 0x295C70D
Stat Entry: 0x295C664
Unlock All: 0x2961DA0
Class Interval: 0x80
Class 1 Name: 0x2961449
Class 2 Name: 0x29614C9
Class 3 Name: 0x2961549
Class 4 Name: 0x29615C9
Class 5 Name: 0x2961649
Class 6 Name: 0x29616C9
Class 7 Name: 0x2961749
Class 8 Name: 0x29617C9
Class 9 Name: 0x2961849
Class 10 Name: 0x29618C9
byte[] buffer = new byte[0x1770];
for (int i = 0; i < 0x1770; i++)
{
buffer[i] = 0xFE;
}
PS3.SetMemory(0x2961DA0, buffer);
Calling Card Offset: 0x2965713
Clan Card #1: 0xD6
Clan Card #2: 0xD7
Clan Card #3: 0xD8
Clan Card #4: 0xD9
Clan Card #5: 0xDA
Clan Card #6: 0xDB
Checkerbox: 0xDC
Name: 0x28E60E0
Clan Tag: 0xD6E946
Client Interval for both Party Name & Party Clan Tag: 0x378
Party Name Client 0: 0xD7DE58
Party Name Client 1: 0xD7E1D0
Party Name Client 2: 0xD7E548
Party Name Client 3: 0xD7E8C0
Party Name Client 4: 0xD7EC38
Party Name Client 5: 0xD7EFB0
Party Name Client 6: 0xD7F328
Party Name Client 7: 0xD7F6A0
Party Name Client 8: 0xD7FA18
Party Name Client 9: 0xD7FD90
Party Name Client 10: 0xD80108
Party Name Client 11: 0xD80480
Party Clan Tag Client 0: 0xD7DE78
Party Clan Tag Client 1: 0xD7E1F0
Party Clan Tag Client 2: 0xD7E568
Party Clan Tag Client 3: 0xD7E8E0
Party Clan Tag Client 4: 0xD7EC58
Party Clan Tag Client 5: 0xD7EFD0
Party Clan Tag Client 6: 0xD7F348
Party Clan Tag Client 7: 0xD7F6C0
Party Clan Tag Client 8: 0xD7FA38
Party Clan Tag Client 9: 0xD7FDB0
Party Clan Tag Client 10: 0xD80128
Party Clan Tag Client 11: 0xD804A0
Credits to MegaMister & Eddie Mac
Advanced UAV: 0x18DB73 On: 0x00 Off: 0x01
No Recoil: 0x20C8FC On: 0x60, 0x00, 0x00, 0x00 Off: 0x4B, 0xF6, 0x16, 0x5D
Red Boxes: 0x0019610B On: 0x01 Off: 0x00
Green Players: 0x005D60D3 On: 0x01 Off: 0x00
Red Laser: 0x001FF703 On: 0x01 Off: 0x00
Steady Aim: 0x0016E96F On: 0x00 Off: 0x02
Ghost Players: 0x5D62EF On: 0x01 Off: 0x00
No Gun Sound: 0x20C72B On: 0x01 Off: 0x00
Player Outline Color: 0x01FF6F3 Normal: 0x00 Red: 0x04 Green: 0x06 Cyan: 0x08 Yellow: 0x0C
Real Wallhack: 0x01C3424 On: 0x38, 0xC0, 0x00, 0x09 Off: 0x63, 0xC6, 0x00, 0x00
Wallhack: 0x02598BEC On: 0x42 Off: 0x40
Third Person: 0x025B502C On: 0x01 Off: 0x00
compassMaxRange: 0x025B580C On: 0x45, 0x2F Off: 0x44, 0xBB
cg_fov: 0x025B607C On: 0x42, 0xD2 Off: 0x42, 0x82
//Credits to SC58
Heat Vision: (Must overwrite by a tool or bin file otherwise you will freeze; Make sure to set both of these addresses)
0x1F130C - On: 0x60, 0x00, 0x00, 0x00 Off: 0x41, 0x82, 0x00, 0x8c
0x1F1314 - On: 0x60, 0x00, 0x00, 0x00 Off: 0x41, 0x82, 0x00, 0x50
0x19DF7C - Draw Weapons
0x19E840 - Draw Grenades
0x19EF1C - Draw Objects
0x19F16C - Draw Objects 2
0x1C45A4 - Draw Dead Body
0x1C3424 - Draw Players
Outline Colors:
Normal: 0x38, 0xC0, 0x00, 0x00
Black: 0x38, 0xC0, 0x00, 0x02
Red: 0x38, 0xC0, 0x00, 0x04
Green: 0x38, 0xC0, 0x00, 0x06
Cyan: 0x38, 0xC0, 0x00, 0x08
Basic: 0x38, 0xC0, 0x00, 0x08
Orange: 0x38, 0xC0, 0x00, 0x0A
Yellow: 0x38, 0xC0, 0x00, 0x0C
Blue: 0x38, 0xC0, 0x00, 0x0E
Filled Color (Filled In):
Normal: 0x38, 0xC0, 0x00, 0x00
Red: 0x38, 0xC0, 0x00, 0x12
RedBold: 0x38, 0xC0, 0x00, 0x14
Green: 0x38, 0xC0, 0x00, 0x16
Cyan: 0x38, 0xC0, 0x00, 0x18
Orange: 0x38, 0xC0, 0x00, 0x1A
Yellow: 0x38, 0xC0, 0x00, 0x1C
Blue: 0x38, 0xC0, 0x00, 0x1E
Jump Height: 0x025B5ECC
Walk Speed: 0x002F0E44
Knockback: 0x025BBDDC
Floating Bodies: 0x025B8434
G_Client Address: 0x1950880 Client Interval: 0x4180
Red Boxes: G_Client + 0x5F On: 0x10 Off: 0x00
Heat Vision: G_Client + 0x5F On: 0x1C Off: 0x00
Invisibility: G_Client + 0x5B On: 0xF3 Off: 0x00
Ping: G_Client + 0x58 On: 0x01 Off: 0x00
No Recoil: G_Client + 0x562 On: 0x04 Off: 0x00
Disable Weapons: G_Client + 0x0562 Remove: 0x00 0x80 Give Back: 0x00 0x00
Primary Akimbo: G_Client + 0x3E5 On: 0x90 Off: 0x00
Secondary Akimbo: G_Client + 0x3AD On: 0x90 Off: 0x00
Laser: G_Client + 0x59 On: 0x01 Off: 0x00
Red Laser: G_Client + 0xD On: 0x00
Yellow Laser Color: G_Client + 0xD On: 0x01
Blue Laser Color: G_Client + 0xD On: 0x04
Scrambler: G_Client + 0x59 On: 0x40 Off: 0x00
mFlag: G_Client + 0x3da7 Normal: 0x00 No Clip: 0x01 UFO Mode: 0x02 Freeze: 0x04
System Hack: G_Client + 0x38C9 On: 0x01 Off: 0x00
Third Person: G_Client + 0x5F On: 0x07 Off: 0x00
Heat Chams: G_Client + 0x5F On: 0x1F Off: 0x00
Player Speed: G_Client + 0x3ADC Normal: 0x3F, 0x88 Fast: 0x3F, 0xFF Slow: 0x3F, 0x00
No Friction (Skate Mod): G_Client + 0x56 On: 0x01 Off: 0x00
In-Game Name: G_Client + 0x3B3C
In-Game Clan Tag: G_Client + 0x3BA0
Advanced UAV: G_Client + 0x3C2F On: 0x01 G_Client + 0x3C3F On: 0x00 Off: 0x01
FoV: G_Client + 0x3940 Normal: 0x3F, 0x80
Infinite Ammo:
G_Client + 0x58F On: 0xFF, 0xFF Off: 0x00, 0x00
G_Client + 0x5A6 On: 0xFF, 0xFF Off: 0x00, 0x00
G_Client + 0x65A On: 0xFF, 0xFF Off: 0x00, 0x00
G_Client + 0x642 On: 0xFF, 0xFF Off: 0x00, 0x00
Exo Cloak: G_Client + 0x58 On: 0x11 Off: 0x00
Kill Client: G_Client + 0x3ADC Kill: 0xFF, 0xFF
Fake Lag: G_Client + 0x3A1B On: 0x00 Off: 0x02
Kick Client: G_Client + 0x5A Kick: 0x3F
Invisible Gun: G_Client + 0x3AE1 On: 0x01 Off: 0x00
Exo Screen: G_Client + 0x3880 On: 0x01 Off: 0x00
Instant Drop: G_Client + 0x54 On: 0x01 Off: 0x00
Injured Breathing: G_Client + 0x3AC9 On: 0x01 Off: 0x00
Exo Stim: G_Client + 0x323 On: 0x01 Off: 0x02
Gun View: G_Client + 0x563 Default: 0x00 Launcher: 0x02
Rabbit Man: G_Client + 0x3ADC On: 0x2F, 0x88 Off: 0x3F 0x88
Fake Blood: G_Client + 0x1F3 On: 0xFF Off: 0x64
Stuck in Mud: G_Client + 0x3ADC On: 0x3D, 0x88 Off: 0x3F, 0x88
UAV: G_Client + 0x3948 On: 0x01 Off: 0x00
Border Screen: G_Client + 0x3850 On: 0x01 Off: 0x00
Missile Vision: G_Client + 0x380B On: 0x01 Off: 0x00
Goliath Vision: G_Client + 0x38E8 On: 0x01 Off: 0x02
In-Game Leaderboard spoof: Prestige: G_Client + 0x30C3 Rank: G_Client + 0x30BF Kills: G_Client + 0x3C1B Deaths: G_Client + 0x3C1D Objective: G_Client + 0x3C21 Defends: G_Client + 0x3C23 Score: G_Client + 0x3C19 Assists: G_Client + 0x3C1F
G_Entity Address: 0x1860880 Client Interval: 0x280
Godmode: G_Entity + 0x1AC On: 0x00, 0x00, 0xFF, 0xFF Off: 0x00, 0x00, 0x00, 0x00
Pointer to G_Client: G_Entity + 0x158
//Credits to Swiss
TOC Address = 00994F68
Stats Entry = 00295C664
G_Client = 001950880
G_Client_size = 0x4180
G_Entity = 001860880
G_Entity_size = 0x280
G_Spawn = 00366A24
SV_SetClientStats = 004322C0
G_Speed: 002F0E44
Add_Ammo = 003101C0
G_SpawnTurret = 0037B4F8
G_GivePlayerWeapon = 0036A6A0
G_SetFog: 00306AD4
BG_FindWeaponIndexForName = 00168074
G_GetWeaponIndexForName = 0036B3C4
SV_SetConfigString = 0042ECD0
G_Hudelems = 0017B9670
Hudelem_Alloc = 0030CAD0
G_LocalizedStringIndex = 0004C9A8
ui_debugmode = 0048D148
Dvar_GetBool: 004BF0F8
Com_Sprintf = 004C7548
SV_GameSendServerCommand = 0042D9A4
Cbuf_AddText = 0038AEA4
R_SetFrameFog = 005FCBF0
SV_SetClientViewAngles = 002F4530
Scr_GetInt = 003E299C
Scr_SpawnFX = 00349568
FPSText = 0079924C
//Thanks to Lebigkilleur
Com_ERROR = 003ACAA8
SV_SetupIgnoreEntParams = 00449F78
Dvar_FindVar = 0x4BEFC4
HECmd_SetClock(scr_entref_t entref) = 0x30EE54
HECmd_SetClock_Internal(scr_entref_t entref, he_type_t type, const char *cmdName) = 0x30EB08
G_MaterialIndex(const char *name) = 0x47BA8
G_ModelIndex(const char *name) = 0x47BEC
G_ModelName(int index) = 0x47C6C
G_ShellShockIndex(const char *name) = 0x47D10
Dvar_FindMalleableVar = 0x4BD528
public class RPC
{
static uint function_address = 0x5FCBF0; // R_SetFrameFog
public static int Init()
{
if (function_address == 0) return -1;
Enable_RPC();
return 0;
}
public static void Enable_RPC()
{
PS3.SetMemory(function_address, new byte[] { 0x4E, 0x80, 0x00, 0x20 });
System.Threading.Thread.Sleep(20);
byte[] func = new byte[] { 0x7C, 0x08, 0x02, 0xA6, 0xF8, 0x01, 0x00, 0x80, 0x3C, 0x60, 0x10, 0x05, 0x81, 0x83, 0x00, 0x4C, 0x2C, 0x0C, 0x00, 0x00, 0x41, 0x82, 0x00, 0x64, 0x80, 0x83, 0x00, 0x04, 0x80, 0xA3, 0x00, 0x08, 0x80, 0xC3, 0x00, 0x0C, 0x80, 0xE3, 0x00, 0x10, 0x81, 0x03, 0x00, 0x14, 0x81, 0x23, 0x00, 0x18, 0x81, 0x43, 0x00, 0x1C, 0x81, 0x63, 0x00, 0x20, 0xC0, 0x23, 0x00, 0x24, 0xC0, 0x43, 0x00, 0x28, 0xC0, 0x63, 0x00, 0x2C, 0xC0, 0x83, 0x00, 0x30, 0xC0, 0xA3, 0x00, 0x34, 0xC0, 0xC3, 0x00, 0x38, 0xC0, 0xE3, 0x00, 0x3C, 0xC1, 0x03, 0x00, 0x40, 0xC1, 0x23, 0x00, 0x48, 0x80, 0x63, 0x00, 0x00, 0x7D, 0x89, 0x03, 0xA6, 0x4E, 0x80, 0x04, 0x21, 0x3C, 0x80, 0x10, 0x05, 0x38, 0xA0, 0x00, 0x00, 0x90, 0xA4, 0x00, 0x4C, 0x80, 0x64, 0x00, 0x50, 0xE8, 0x01, 0x00, 0x80, 0x7C, 0x08, 0x03, 0xA6, 0x38, 0x21, 0x00, 0x70, 0x4E, 0x80, 0x00, 0x20 };
PS3.SetMemory(function_address + 0x4, func);
PS3.SetMemory(0x10050000, new byte[0x2854]);
PS3.SetMemory(function_address, new byte[] { 0xF8, 0x21, 0xFF, 0x91 });
}
public static int Call(uint func_address, params object[] parameters)
{
int num_params = parameters.Length;
uint num_floats = 0;
for (uint i = 0; i < num_params; i++)
{
if (parameters[i] is int)
{
byte[] val = BitConverter.GetBytes((int)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, val);
}
else if (parameters[i] is uint)
{
byte[] val = BitConverter.GetBytes((uint)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, val);
}
else if (parameters[i] is string)
{
byte[] str = Encoding.UTF8.GetBytes(Convert.ToString(parameters[i]) + "\0");
PS3.SetMemory(0x10050054 + i * 0x400, str);
uint addr = 0x10050054 + i * 0x400;
byte[] address = BitConverter.GetBytes(addr);
Array.Reverse(address);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, address);
}
else if (parameters[i] is float)
{
num_floats++;
byte[] val = BitConverter.GetBytes((float)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050024 + ((num_floats - 1) * 0x4), val);
}
}
byte[] fadd = BitConverter.GetBytes(func_address);
Array.Reverse(fadd);
PS3.SetMemory(0x1005004C, fadd);
System.Threading.Thread.Sleep(20);
byte[] ret = PS3.GetMemory(0x10050050, 4);
Array.Reverse(ret);
return BitConverter.ToInt32(ret, 0);
}
}
class Buttons
{
public static class Buttonz
{
public static Int32
Cross = 1024,
Square = 48,
Crouch = 512,
Prone = 256,
Start = 8388608,
L1 = 526336,
L2 = 32768,
L3 = 8194,
R1 = 1,
R2 = 16384,
R3 = 67108868;
}
public static bool ButtonPressed(int client, int Buttons)
{
if (PS3.Extension.ReadInt32(G_Client + 0x3DB4 + ((uint)client * 0x4180)) == Buttons)
return true;
else return false;
}
public void JetPack(int client)
{
float jH = PS3.Extension.ReadFloat(G_Client + ((uint)client * 0x4180));
jH += 100;
PS3.Extension.WriteFloat(G_Client + ((uint)client * 0x4180), jH);
}
//How to use it in a timer or backgroundworker
if(ButtonPressed(0, Buttons.Cross))
{
JetPack(0);
}
{
string[] Achievements = new string[50];
Achievements[0] = "4 CARMA";
Achievements[1] = "4 CAMPAIGN_COMPLETE";
Achievements[2] = "4 CAMPAIGN_HARDENED";
Achievements[3] = "4 CAMPAIGN_VETERAN";
Achievements[4] = "4 BOOST_DASH_STOMP";
Achievements[5] = "4 GRENADE_DODGE";
Achievements[6] = "4 SONIC_KILL";
Achievements[7] = "4 OVERDRIVE_KILL";
Achievements[8] = "4 SMART_GRENADE_KILL";
Achievements[9] = "4 THREAT_GRENADE_KILL";
Achievements[10] = "4 EMP_DRONE";
Achievements[11] = "4 EMP_AST";
Achievements[12] = "4 INTEL_HALF";
Achievements[13] = "4 INTEL_ALL";
Achievements[14] = "4 COVER_DRONE_KILL";
Achievements[15] = "4 EXO_UPGRADE";
Achievements[16] = "4 EXO_UPGRADE_10";
Achievements[17] = "4 EXO_UPGRADE_20";
Achievements[18] = "4 EXO_UPGRADE_FULL";
Achievements[19] = "4 LEVEL_1";
Achievements[20] = "4 LEVEL_1A";
Achievements[21] = "4 LEVEL_2A";
Achievements[22] = "4 LEVEL_2B";
Achievements[23] = "4 LEVEL_2";
Achievements[24] = "4 LEVEL_3A";
Achievements[25] = "4 LEVEL_3";
Achievements[26] = "4 LEVEL_4A";
Achievements[27] = "4 LEVEL_4";
Achievements[28] = "4 LEVEL_5";
Achievements[29] = "4 LEVEL_5A";
Achievements[30] = "4 LEVEL_6A";
Achievements[31] = "4 LEVEL_6";
Achievements[32] = "4 LEVEL_7";
Achievements[33] = "4 LEVEL_8A";
Achievements[34] = "4 LEVEL_8";
Achievements[35] = "4 LEVEL_9";
Achievements[36] = "4 LEVEL_10A";
Achievements[37] = "4 LEVEL_10";
Achievements[38] = "4 LEVEL_11";
Achievements[39] = "4 LEVEL_12A";
Achievements[40] = "4 LEVEL_12";
Achievements[41] = "4 LEVEL_13A";
Achievements[42] = "4 LEVEL_13";
Achievements[43] = "4 LEVEL_14A";
Achievements[44] = "4 LEVEL_14";
Achievements[45] = "4 COOP_VETERAN";
Achievements[46] = "4 COOP_WARFARE";
Achievements[47] = "4 COOP_UNDEAD_SURVIVOR";
Achievements[48] = "4 COOP_EXO_SURVIVOR";
Achievements[49] = "4 COOP_FLIP_FLOP";
for (int i = 0; i < 50; i++)
{
RPC.Call(0x42D9A4, -1, 1, Achievements[i]);
System.Threading.Thread.Sleep(25);
RPC.Call(0x42D9A4, -1, 1, Achievements[i]);
}
}
public static void ClonePlayer(int clientIndex)
{
RPC.Call(0x38AEA4, new object[] { clientIndex });
}
uint kb_Result = 0x030D0E22;
uint kb_cb = 0x00989068;
uint keyboardPrompt = 0x498828;
uint kb_active = 0x030D0AE4;
string KeyBoard(string title = "Your title", string presetText = "text here", int maxLength = 20)
{
RPC.Call(keyboardPrompt, new object[] { 0, title, presetText, maxLength, 0, 0, kb_cb });
System.Threading.Thread.Sleep(10);
while (PS3.Extension.ReadInt32(kb_active) == 0)
continue;
return PS3.Extension.ReadString(kb_Result);
}
Prestige : 0x29CDC6D
XP (Experience) : 0x029cdd0a
Score : 0x29CDD46
Kills : 0x029cdd1d
Deaths : 0x29CDCF5
Wins : 0x29CDD72
Losses : 0x29CDD25
Time Played : 0x29CDD62
Games Played : 0x29CDD0D
Stat Entry: 0x29CDC64
Unlock All: 0x29D33A0
Class Interval: 0x80
Class 1 Name: 0x29d2a49
Class 2 Name: 0x29d2ac9
Class 3 Name: 0x29d2b29
Class 4 Name: 0x29d2bc9
Class 5 Name: 0x29d2c49
Class 6 Name: 0x29d2cc9
Class 7 Name: 0x29d2d49
Class 8 Name: 0x29d2dc9
Class 9 Name: 0x29d2e49
Class 10 Name: 0x29d2ec9
byte[] buffer = new byte[0x1770];
for (int i = 0; i < 0x1770; i++)
{
buffer[i] = 0xFE;
}
PS3.SetMemory(0x29D33A0, buffer);
Calling Card Offset: 0x29D6D13
Clan Card #1: 0xD6
Clan Card #2: 0xD7
Clan Card #3: 0xD8
Clan Card #4: 0xD9
Clan Card #5: 0xDA
Clan Card #6: 0xDB
Checkerbox: 0xDC
Name: 0x029672e0
Clan Tag: 0xD82046
Client Interval for both Party Name & Party Clan Tag: 0x378
Party Name 0 0xd915bc
Party name 1 0xd9193c
Party name 2 0xD91CBC
Party name 3 0xD9203C
Party name 4 0xD923BC
Party name 5 0xD9273C
Party name 6 0xD92ABC
Party name 7 0xD92E3C
Party name 8 0xD931BC
Party name 9 0xD9353C
Party name 10 0xD938BC
Party name 11 0xD93C3C
Party Clan 0 0xd915dc
Party Clan 1 0xd9195c
Party Clan 2 0xD91CDC
Party Clan 3 0xD9205C
Party Clan 4 0xD923DC
Party Clan 5 0xD9275C
Party Clan 6 0xD92ADC
Party Clan 7 0xD92E5C
Party Clan 8 0xD931DC
Party Clan 9 0xD9355C
Party Clan 10 0xD938DC
Party Clan 11 0xD93C5C
Credits to MegaMister & Eddie Mac(finding) + 1Austin112 & RatchetBooty(Updating)
Advanced UAV: 0x1813DB On: 0x00 Off: 0x01
No Recoil: 0021018C On: 0x60, 0x00, 0x00, 0x00 Off: 0x4B, 0xF6, 0x16, 0x5D
Red Boxes: 0x00199923 On: 0x01 Off: 0x00
Red Laser: 0x202F93 On: 0x01 Off: 0x00
Steady Aim: 0x1720DF On: 0x00 Off: 0x02
Ghost Players: 0x5DC9EF On: 0x01 Off: 0x00
No Gun Sound: 0x20FFBB On: 0x01 Off: 0x00
Player Outline Color: 0x1C6C28 Normal: 0x00 Red: 0x04 Green: 0x06 Cyan: 0x08 Yellow: 0x0C
Real Wallhack: 0x1C6C28 On: 0x38, 0xC0, 0x00, 0x09 Off: 0x63, 0xC6, 0x00, 0x00
Wallhack: 0x2619D7C On: 0x42 Off: 0x40
Third Person: 0x026364d4 On: 0x01 Off: 0x00
compassMaxRange: 0x02636cb4 On: 0x45, 0x2F Off: 0x44, 0xBB
cg_fov: 0x02637524 On: 0x42, 0xD2 Off: 0x42, 0x82
//Credits to SC58(Finding) + 1Austin112(Updating)
Heat Vision: (Must overwrite by a tool or bin file otherwise you will freeze; Make sure to set both of these addresses)
0x1F4B54 - On: 0x60, 0x00, 0x00, 0x00 Off: 0x41, 0x82, 0x00, 0x8C
0x1F4B5C - On: 0x60, 0x00, 0x00, 0x00 Off: 0x41, 0x82, 0x00, 0x50
0x1A1784 - Draw Weapons
0x1A2048 - Draw Grenades
0x1A2724 - Draw Objects
0x1A2724 - Draw Objects 2
0x1C7DE4 - Draw Dead Body
0x1C6C28 - Draw Players
Outline Colors:
Normal: 0x38, 0xC0, 0x00, 0x00
Black: 0x38, 0xC0, 0x00, 0x02
Red: 0x38, 0xC0, 0x00, 0x04
Green: 0x38, 0xC0, 0x00, 0x06
Cyan: 0x38, 0xC0, 0x00, 0x08
Basic: 0x38, 0xC0, 0x00, 0x08
Orange: 0x38, 0xC0, 0x00, 0x0A
Yellow: 0x38, 0xC0, 0x00, 0x0C
Blue: 0x38, 0xC0, 0x00, 0x0E
Filled Color (Filled In):
Normal: 0x38, 0xC0, 0x00, 0x00
Red: 0x38, 0xC0, 0x00, 0x12
RedBold: 0x38, 0xC0, 0x00, 0x14
Green: 0x38, 0xC0, 0x00, 0x16
Cyan: 0x38, 0xC0, 0x00, 0x18
Orange: 0x38, 0xC0, 0x00, 0x1A
Yellow: 0x38, 0xC0, 0x00, 0x1C
Blue: 0x38, 0xC0, 0x00, 0x1E
Jump Height: 0x02637374
Walk Speed: 0x002F58CC
Knockback: 0x0263d314
Floating Bodies: 0x026398de
G_Client Address: 0x1987980 Client Interval: 0x4180
Red Boxes: G_Client + 0x5F On: 0x10 Off: 0x00
Heat Vision: G_Client + 0x5F On: 0x1C Off: 0x00
Invisibility: G_Client + 0x5B On: 0xF3 Off: 0x00
Ping: G_Client + 0x58 On: 0x01 Off: 0x00
No Recoil: G_Client + 0x562 On: 0x04 Off: 0x00
Disable Weapons: G_Client + 0x0562 Remove: 0x00 0x80 Give Back: 0x00 0x00
Primary Akimbo: G_Client + 0x3E5 On: 0x90 Off: 0x00
Secondary Akimbo: G_Client + 0x3AD On: 0x90 Off: 0x00
Laser: G_Client + 0x59 On: 0x01 Off: 0x00
Red Laser: G_Client + 0xD On: 0x00
Yellow Laser Color: G_Client + 0xD On: 0x01
Blue Laser Color: G_Client + 0xD On: 0x04
Scrambler: G_Client + 0x59 On: 0x40 Off: 0x00
mFlag: G_Client + 0x3da7 Normal: 0x00 No Clip: 0x01 UFO Mode: 0x02 Freeze: 0x04
System Hack: G_Client + 0x38C9 On: 0x01 Off: 0x00
Third Person: G_Client + 0x5F On: 0x07 Off: 0x00
Heat Chams: G_Client + 0x5F On: 0x1F Off: 0x00
Player Speed: G_Client + 0x3ADC Normal: 0x3F, 0x88 Fast: 0x3F, 0xFF Slow: 0x3F, 0x00
No Friction (Skate Mod): G_Client + 0x56 On: 0x01 Off: 0x00
In-Game Name: G_Client + 0x3B3C
In-Game Clan Tag: G_Client + 0x3BA0
Advanced UAV: G_Client + 0x3C2F On: 0x01 G_Client + 0x3C3F On: 0x00 Off: 0x01
FoV: G_Client + 0x3940 Normal: 0x3F, 0x80
Infinite Ammo:
G_Client + 0x58F On: 0xFF, 0xFF Off: 0x00, 0x00
G_Client + 0x5A6 On: 0xFF, 0xFF Off: 0x00, 0x00
G_Client + 0x65A On: 0xFF, 0xFF Off: 0x00, 0x00
G_Client + 0x642 On: 0xFF, 0xFF Off: 0x00, 0x00
Exo Cloak: G_Client + 0x58 On: 0x11 Off: 0x00
Kill Client: G_Client + 0x3ADC Kill: 0xFF, 0xFF
Fake Lag: G_Client + 0x3A1B On: 0x00 Off: 0x02
Kick Client: G_Client + 0x5A Kick: 0x3F
Invisible Gun: G_Client + 0x3AE1 On: 0x01 Off: 0x00
Exo Screen: G_Client + 0x3880 On: 0x01 Off: 0x00
Instant Drop: G_Client + 0x54 On: 0x01 Off: 0x00
Injured Breathing: G_Client + 0x3AC9 On: 0x01 Off: 0x00
Exo Stim: G_Client + 0x323 On: 0x01 Off: 0x02
Gun View: G_Client + 0x563 Default: 0x00 Launcher: 0x02
Rabbit Man: G_Client + 0x3ADC On: 0x2F, 0x88 Off: 0x3F 0x88
Fake Blood: G_Client + 0x1F3 On: 0xFF Off: 0x64
Stuck in Mud: G_Client + 0x3ADC On: 0x3D, 0x88 Off: 0x3F, 0x88
UAV: G_Client + 0x3948 On: 0x01 Off: 0x00
Border Screen: G_Client + 0x3850 On: 0x01 Off: 0x00
Missile Vision: G_Client + 0x380B On: 0x01 Off: 0x00
Goliath Vision: G_Client + 0x38E8 On: 0x01 Off: 0x02
In-Game Leaderboard spoof: Prestige: G_Client + 0x30C3 Rank: G_Client + 0x30BF Kills: G_Client + 0x3C1B Deaths: G_Client + 0x3C1D Objective: G_Client + 0x3C21 Defends: G_Client + 0x3C23 Score: G_Client + 0x3C19 Assists: G_Client + 0x3C1F
G_Entity Address: 0x1897980 Client Interval: 0x280
Godmode: G_Entity + 0x1AC On: 0x00, 0x00, 0xFF, 0xFF Off: 0x00, 0x00, 0x00, 0x00
Pointer to G_Client: G_Entity + 0x158
//Credits to Swiss
TOC Address = 009A5080
Stats Entry = 029CDC64
G_Client = 001950880
G_Client_size = 0x4180
G_Entity = 001860880
G_Entity_size = 0x280
0036F6F4 - BG_TakePlayerWeapon(playerState_s *ps, unsigned int weaponIndex, int takeAwayAmmo)
0036B518 - G_Spawn(void)
0043738C - SV_SetClientStat(int clientNum, int index, int value)
00314C60 - Add_Ammo(gentity_s *ent, unsigned int weaponIndex, char weaponModel, int count, int fillClip)
003801B0 - G_SpawnTurret(gentity_s *,char const *)
0036F34C - G_GivePlayerWeapon(playerState_s *pPS, int iWeaponIndex, char altModelIndex)
0030B594 - G_setfog(const char *fogstring)
002AEFB0 - G_RadiusDamage(const float *origin, gentity_s *inflictor, gentity_s *attacker, float fInnerDamage, float fOuterDamage, float radius, float coneAngleCos, float *coneDirection, gentity_s *ignore, int mod, int weapon)
0031EAD0 - TeleportPlayer(gentity_s *player, float *origin, float *angles)
0016B7E4 - BG_FindWeaponIndexForName(const char *name)
00370070 - G_GetWeaponIndexForName(const char *name)
0036BEA0 - G_AddEvent(gentity_s *ent, int event, unsigned int eventParm)
0036BD54 - G_TempEntity(const float *origin, int event)
00048AFC - G_EffectIndex(const char *name)
00433EF0 - SV_SetConfigstring(int,char const *)
0043206C - SV_AddServerCommand(client_s *client, svscmd_type type, const char *cmd) //
004C1260 - SV_ClientCommand(client_s *cl, msg_t *msg)
0044DB80 - SV_LinkEntity(gentity_s *gEnt)
0044DB00 - SV_UnlinkEntity(gentity_s *gEnt)
0042C4D4 - SV_KickClient(client_s *cl, char *playerName, int maxPlayerNameLen)
0042C060 - SV_MapRestart(int fast_restart)
0031DC70 - G_LocationalTrace(trace_t *results, const float *start, const float *end, int passEntityNum, int contentmask, char *priorityMap)
00387398 - Trace_GetEntityHitId(trace_t *trace)
004C4C20 - Dvar_GetBool(const char *dvarName)
004C4D68 - Dvar_GetString(const char *dvarName)
004C4C9C - Dvar_GetInt(const char *dvarName)
004C4D68 - Dvar_GetString(const char *dvarName)
004C3050 - Dvar_FindMalleableVar(const char *dvarName)
00360198 - SP_script_brushmodel(gentity_s *self)
00319E28 - G_SpawnString(SpawnVar *spawnVar, const char *key, const char *defaultString, const char **out)
017F02F0 - G_HudElems
00311570 - HudElem_Alloc(int,int)
0004DE08 - G_LocalizedStringIndex(const char *string)
0181F300 - leveltime
06ACAD8 - strchr
030DBF0 - player_die(gentity_s *self, gentity_s *inflictor, gentity_s *attacker, int damage, int meansOfDeath, int iWeapon, const float *vDir, hitLocation_t hitLoc, int psTimeOffset)
00492298 - ui_debugmode
003220F8 - G_ExplodeMissile(gentity_s *ent)
00328028 - G_FireGrenade(gentity_s *parent, float *start, float *dir, int grenadeWPID, char grenModel, int rotate, int time)
003283E8 - G_FireRocket(gentity_s *parent, unsigned int weaponIndex, float *start, float *dir, const float *gunVel, gentity_s *target, const float *targetOffset)
003801B0 - G_SpawnTurret(gentity_s *self, const char *weaponinfoname)
004C4C20 - Dvar_GetBool(char const *)
004CCFA8 - Com_sprintf(char *dest, int size, const char *fmt)
0042D780 - SV_SendDisconnect(client_s *client, int state, const char *reason)
00432BCC - SV_GameSendServerCommand(int,svscmd_type,char const *)
0038FBDC - Cbuf_AddText(int localClientNum, const char *text)
006032D0 - R_SetFrameFog(GfxCmdBufInput *)
002F8FB8 - SetClientViewAngle(gentity_s *ent, const float *angle)
003E7C2C - Scr_GetInt(unsigned int index)
0034DFF8 - Scr_SpawnFX
007A07DC - FPS
002F58CC - G_Speed
0003E2530 - Scr_Error(char const *)
00432E6C - SV_SetBrushModel(gentity_s *ent)
0037A964 - G_VehiclesInit(int restarting)
003B1E58 - Com_Error(errorParm_t code, const char *fmt)
003728BC - G_SetOrigin(gentity_s *ent, const float *origin)
00366C54 - G_CallSpawn
public class RPC
{
static uint function_address = 006032D0; // R_SetFrameFog
public static int Init()
{
if (function_address == 0) return -1;
Enable_RPC();
return 0;
}
public static void Enable_RPC()
{
PS3.SetMemory(function_address, new byte[] { 0x4E, 0x80, 0x00, 0x20 });
System.Threading.Thread.Sleep(20);
byte[] func = new byte[] { 0x7C, 0x08, 0x02, 0xA6, 0xF8, 0x01, 0x00, 0x80, 0x3C, 0x60, 0x10, 0x05, 0x81, 0x83, 0x00, 0x4C, 0x2C, 0x0C, 0x00, 0x00, 0x41, 0x82, 0x00, 0x64, 0x80, 0x83, 0x00, 0x04, 0x80, 0xA3, 0x00, 0x08, 0x80, 0xC3, 0x00, 0x0C, 0x80, 0xE3, 0x00, 0x10, 0x81, 0x03, 0x00, 0x14, 0x81, 0x23, 0x00, 0x18, 0x81, 0x43, 0x00, 0x1C, 0x81, 0x63, 0x00, 0x20, 0xC0, 0x23, 0x00, 0x24, 0xC0, 0x43, 0x00, 0x28, 0xC0, 0x63, 0x00, 0x2C, 0xC0, 0x83, 0x00, 0x30, 0xC0, 0xA3, 0x00, 0x34, 0xC0, 0xC3, 0x00, 0x38, 0xC0, 0xE3, 0x00, 0x3C, 0xC1, 0x03, 0x00, 0x40, 0xC1, 0x23, 0x00, 0x48, 0x80, 0x63, 0x00, 0x00, 0x7D, 0x89, 0x03, 0xA6, 0x4E, 0x80, 0x04, 0x21, 0x3C, 0x80, 0x10, 0x05, 0x38, 0xA0, 0x00, 0x00, 0x90, 0xA4, 0x00, 0x4C, 0x80, 0x64, 0x00, 0x50, 0xE8, 0x01, 0x00, 0x80, 0x7C, 0x08, 0x03, 0xA6, 0x38, 0x21, 0x00, 0x70, 0x4E, 0x80, 0x00, 0x20 };
PS3.SetMemory(function_address + 0x4, func);
PS3.SetMemory(0x10050000, new byte[0x2854]);
PS3.SetMemory(function_address, new byte[] { 0xF8, 0x21, 0xFF, 0x91 });
}
public static int Call(uint func_address, params object[] parameters)
{
int num_params = parameters.Length;
uint num_floats = 0;
for (uint i = 0; i < num_params; i++)
{
if (parameters[i] is int)
{
byte[] val = BitConverter.GetBytes((int)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, val);
}
else if (parameters[i] is uint)
{
byte[] val = BitConverter.GetBytes((uint)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, val);
}
else if (parameters[i] is string)
{
byte[] str = Encoding.UTF8.GetBytes(Convert.ToString(parameters[i]) + "\0");
PS3.SetMemory(0x10050054 + i * 0x400, str);
uint addr = 0x10050054 + i * 0x400;
byte[] address = BitConverter.GetBytes(addr);
Array.Reverse(address);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, address);
}
else if (parameters[i] is float)
{
num_floats++;
byte[] val = BitConverter.GetBytes((float)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050024 + ((num_floats - 1) * 0x4), val);
}
}
byte[] fadd = BitConverter.GetBytes(func_address);
Array.Reverse(fadd);
PS3.SetMemory(0x1005004C, fadd);
System.Threading.Thread.Sleep(20);
byte[] ret = PS3.GetMemory(0x10050050, 4);
Array.Reverse(ret);
return BitConverter.ToInt32(ret, 0);
}
}
class Buttons
{
public static class Buttonz
{
public static Int32
Cross = 1024,
Square = 48,
Crouch = 512,
Prone = 256,
Start = 8388608,
L1 = 526336,
L2 = 32768,
L3 = 8194,
R1 = 1,
R2 = 16384,
R3 = 67108868;
}
public static bool ButtonPressed(int client, int Buttons)
{
if (PS3.Extension.ReadInt32(G_Client + 0x3DB4 + ((uint)client * 0x4180)) == Buttons)
return true;
else return false;
}
public void JetPack(int client)
{
float jH = PS3.Extension.ReadFloat(G_Client + ((uint)client * 0x4180));
jH += 100;
PS3.Extension.WriteFloat(G_Client + ((uint)client * 0x4180), jH);
}
//How to use it in a timer or backgroundworker
if(ButtonPressed(0, Buttons.Cross))
{
JetPack(0);
}
{
string[] Achievements = new string[50];
Achievements[0] = "4 CARMA";
Achievements[1] = "4 CAMPAIGN_COMPLETE";
Achievements[2] = "4 CAMPAIGN_HARDENED";
Achievements[3] = "4 CAMPAIGN_VETERAN";
Achievements[4] = "4 BOOST_DASH_STOMP";
Achievements[5] = "4 GRENADE_DODGE";
Achievements[6] = "4 SONIC_KILL";
Achievements[7] = "4 OVERDRIVE_KILL";
Achievements[8] = "4 SMART_GRENADE_KILL";
Achievements[9] = "4 THREAT_GRENADE_KILL";
Achievements[10] = "4 EMP_DRONE";
Achievements[11] = "4 EMP_AST";
Achievements[12] = "4 INTEL_HALF";
Achievements[13] = "4 INTEL_ALL";
Achievements[14] = "4 COVER_DRONE_KILL";
Achievements[15] = "4 EXO_UPGRADE";
Achievements[16] = "4 EXO_UPGRADE_10";
Achievements[17] = "4 EXO_UPGRADE_20";
Achievements[18] = "4 EXO_UPGRADE_FULL";
Achievements[19] = "4 LEVEL_1";
Achievements[20] = "4 LEVEL_1A";
Achievements[21] = "4 LEVEL_2A";
Achievements[22] = "4 LEVEL_2B";
Achievements[23] = "4 LEVEL_2";
Achievements[24] = "4 LEVEL_3A";
Achievements[25] = "4 LEVEL_3";
Achievements[26] = "4 LEVEL_4A";
Achievements[27] = "4 LEVEL_4";
Achievements[28] = "4 LEVEL_5";
Achievements[29] = "4 LEVEL_5A";
Achievements[30] = "4 LEVEL_6A";
Achievements[31] = "4 LEVEL_6";
Achievements[32] = "4 LEVEL_7";
Achievements[33] = "4 LEVEL_8A";
Achievements[34] = "4 LEVEL_8";
Achievements[35] = "4 LEVEL_9";
Achievements[36] = "4 LEVEL_10A";
Achievements[37] = "4 LEVEL_10";
Achievements[38] = "4 LEVEL_11";
Achievements[39] = "4 LEVEL_12A";
Achievements[40] = "4 LEVEL_12";
Achievements[41] = "4 LEVEL_13A";
Achievements[42] = "4 LEVEL_13";
Achievements[43] = "4 LEVEL_14A";
Achievements[44] = "4 LEVEL_14";
Achievements[45] = "4 COOP_VETERAN";
Achievements[46] = "4 COOP_WARFARE";
Achievements[47] = "4 COOP_UNDEAD_SURVIVOR";
Achievements[48] = "4 COOP_EXO_SURVIVOR";
Achievements[49] = "4 COOP_FLIP_FLOP";
for (int i = 0; i < 50; i++)
{
RPC.Call(0x432BCC, -1, 1, Achievements[i]);
System.Threading.Thread.Sleep(25);
RPC.Call(0x432BCC, -1, 1, Achievements[i]);
}
}
public static void ClonePlayer(int clientIndex)
{
RPC.Call(0x38AEA4, new object[] { clientIndex });
}
uint kb_Result = 0x03080E22;
uint kb_cb = 0x0999150 ;
uint keyboardPrompt = 0x049D980 ;
uint kb_active = 0x09AACA0 ;
string runKeyboard(string title = "Your title", string presetText = "text here", int maxLength = 20)
{
RPC.Call(keyboardPrompt, new object[] { 0, title, presetText, maxLength, 0, 0, kb_cb });
System.Threading.Thread.Sleep(10);
while (PS3.Extension.ReadInt32(kb_active) == 0) { }
return PS3.Extension.ReadString(kb_Result);
}
void FastRestart()
{
RPC.Call(0x42C31;
}
Prestige : 0x295C66d
XP (Experience) : 0x295C709
Score : 0x295C746
Kills : 0x295C71E
Deaths : 0x295C6F5
Wins : 0x295C772
Losses : 0x295C725
Time Played : 0x295C762
Games Played : 0x295C70D
Stat Entry: 0x295C664
Unlock All: 0x2961DA0
Class Interval: 0x80
Class 1 Name: 0x2961449
Class 2 Name: 0x29614C9
Class 3 Name: 0x2961549
Class 4 Name: 0x29615C9
Class 5 Name: 0x2961649
Class 6 Name: 0x29616C9
Class 7 Name: 0x2961749
Class 8 Name: 0x29617C9
Class 9 Name: 0x2961849
Class 10 Name: 0x29618C9
byte[] buffer = new byte[0x1770];
for (int i = 0; i < 0x1770; i++)
{
buffer[i] = 0xFE;
}
PS3.SetMemory(0x2961DA0, buffer);
Calling Card Offset: 0x2965713
Clan Card #1: 0xD6
Clan Card #2: 0xD7
Clan Card #3: 0xD8
Clan Card #4: 0xD9
Clan Card #5: 0xDA
Clan Card #6: 0xDB
Checkerbox: 0xDC
Name: 0x28E60E0
Clan Tag: 0xD6E946
Client Interval for both Party Name & Party Clan Tag: 0x378
Party Name Client 0: 0xD7DE58
Party Name Client 1: 0xD7E1D0
Party Name Client 2: 0xD7E548
Party Name Client 3: 0xD7E8C0
Party Name Client 4: 0xD7EC38
Party Name Client 5: 0xD7EFB0
Party Name Client 6: 0xD7F328
Party Name Client 7: 0xD7F6A0
Party Name Client 8: 0xD7FA18
Party Name Client 9: 0xD7FD90
Party Name Client 10: 0xD80108
Party Name Client 11: 0xD80480
Party Clan Tag Client 0: 0xD7DE78
Party Clan Tag Client 1: 0xD7E1F0
Party Clan Tag Client 2: 0xD7E568
Party Clan Tag Client 3: 0xD7E8E0
Party Clan Tag Client 4: 0xD7EC58
Party Clan Tag Client 5: 0xD7EFD0
Party Clan Tag Client 6: 0xD7F348
Party Clan Tag Client 7: 0xD7F6C0
Party Clan Tag Client 8: 0xD7FA38
Party Clan Tag Client 9: 0xD7FDB0
Party Clan Tag Client 10: 0xD80128
Party Clan Tag Client 11: 0xD804A0
Credits to MegaMister & Eddie Mac
Advanced UAV: 0x18DB73 On: 0x00 Off: 0x01
No Recoil: 0x20C8FC On: 0x60, 0x00, 0x00, 0x00 Off: 0x4B, 0xF6, 0x16, 0x5D
Red Boxes: 0x0019610B On: 0x01 Off: 0x00
Green Players: 0x005D60D3 On: 0x01 Off: 0x00
Red Laser: 0x001FF703 On: 0x01 Off: 0x00
Steady Aim: 0x0016E96F On: 0x00 Off: 0x02
Ghost Players: 0x5D62EF On: 0x01 Off: 0x00
No Gun Sound: 0x20C72B On: 0x01 Off: 0x00
Player Outline Color: 0x01FF6F3 Normal: 0x00 Red: 0x04 Green: 0x06 Cyan: 0x08 Yellow: 0x0C
Real Wallhack: 0x01C3424 On: 0x38, 0xC0, 0x00, 0x09 Off: 0x63, 0xC6, 0x00, 0x00
Wallhack: 0x02598BEC On: 0x42 Off: 0x40
Third Person: 0x025B502C On: 0x01 Off: 0x00
compassMaxRange: 0x025B580C On: 0x45, 0x2F Off: 0x44, 0xBB
cg_fov: 0x025B607C On: 0x42, 0xD2 Off: 0x42, 0x82
//Credits to SC58
Heat Vision: (Must overwrite by a tool or bin file otherwise you will freeze; Make sure to set both of these addresses)
0x1F130C - On: 0x60, 0x00, 0x00, 0x00 Off: 0x41, 0x82, 0x00, 0x8c
0x1F1314 - On: 0x60, 0x00, 0x00, 0x00 Off: 0x41, 0x82, 0x00, 0x50
0x19DF7C - Draw Weapons
0x19E840 - Draw Grenades
0x19EF1C - Draw Objects
0x19F16C - Draw Objects 2
0x1C45A4 - Draw Dead Body
0x1C3424 - Draw Players
Outline Colors:
Normal: 0x38, 0xC0, 0x00, 0x00
Black: 0x38, 0xC0, 0x00, 0x02
Red: 0x38, 0xC0, 0x00, 0x04
Green: 0x38, 0xC0, 0x00, 0x06
Cyan: 0x38, 0xC0, 0x00, 0x08
Basic: 0x38, 0xC0, 0x00, 0x08
Orange: 0x38, 0xC0, 0x00, 0x0A
Yellow: 0x38, 0xC0, 0x00, 0x0C
Blue: 0x38, 0xC0, 0x00, 0x0E
Filled Color (Filled In):
Normal: 0x38, 0xC0, 0x00, 0x00
Red: 0x38, 0xC0, 0x00, 0x12
RedBold: 0x38, 0xC0, 0x00, 0x14
Green: 0x38, 0xC0, 0x00, 0x16
Cyan: 0x38, 0xC0, 0x00, 0x18
Orange: 0x38, 0xC0, 0x00, 0x1A
Yellow: 0x38, 0xC0, 0x00, 0x1C
Blue: 0x38, 0xC0, 0x00, 0x1E
Jump Height: 0x025B5ECC
Walk Speed: 0x002F0E44
Knockback: 0x025BBDDC
Floating Bodies: 0x025B8434
G_Client Address: 0x1950880 Client Interval: 0x4180
Red Boxes: G_Client + 0x5F On: 0x10 Off: 0x00
Heat Vision: G_Client + 0x5F On: 0x1C Off: 0x00
Invisibility: G_Client + 0x5B On: 0xF3 Off: 0x00
Ping: G_Client + 0x58 On: 0x01 Off: 0x00
No Recoil: G_Client + 0x562 On: 0x04 Off: 0x00
Disable Weapons: G_Client + 0x0562 Remove: 0x00 0x80 Give Back: 0x00 0x00
Primary Akimbo: G_Client + 0x3E5 On: 0x90 Off: 0x00
Secondary Akimbo: G_Client + 0x3AD On: 0x90 Off: 0x00
Laser: G_Client + 0x59 On: 0x01 Off: 0x00
Red Laser: G_Client + 0xD On: 0x00
Yellow Laser Color: G_Client + 0xD On: 0x01
Blue Laser Color: G_Client + 0xD On: 0x04
Scrambler: G_Client + 0x59 On: 0x40 Off: 0x00
mFlag: G_Client + 0x3da7 Normal: 0x00 No Clip: 0x01 UFO Mode: 0x02 Freeze: 0x04
System Hack: G_Client + 0x38C9 On: 0x01 Off: 0x00
Third Person: G_Client + 0x5F On: 0x07 Off: 0x00
Heat Chams: G_Client + 0x5F On: 0x1F Off: 0x00
Player Speed: G_Client + 0x3ADC Normal: 0x3F, 0x88 Fast: 0x3F, 0xFF Slow: 0x3F, 0x00
No Friction (Skate Mod): G_Client + 0x56 On: 0x01 Off: 0x00
In-Game Name: G_Client + 0x3B3C
In-Game Clan Tag: G_Client + 0x3BA0
Advanced UAV: G_Client + 0x3C2F On: 0x01 G_Client + 0x3C3F On: 0x00 Off: 0x01
FoV: G_Client + 0x3940 Normal: 0x3F, 0x80
Infinite Ammo:
G_Client + 0x58F On: 0xFF, 0xFF Off: 0x00, 0x00
G_Client + 0x5A6 On: 0xFF, 0xFF Off: 0x00, 0x00
G_Client + 0x65A On: 0xFF, 0xFF Off: 0x00, 0x00
G_Client + 0x642 On: 0xFF, 0xFF Off: 0x00, 0x00
Exo Cloak: G_Client + 0x58 On: 0x11 Off: 0x00
Kill Client: G_Client + 0x3ADC Kill: 0xFF, 0xFF
Fake Lag: G_Client + 0x3A1B On: 0x00 Off: 0x02
Kick Client: G_Client + 0x5A Kick: 0x3F
Invisible Gun: G_Client + 0x3AE1 On: 0x01 Off: 0x00
Exo Screen: G_Client + 0x3880 On: 0x01 Off: 0x00
Instant Drop: G_Client + 0x54 On: 0x01 Off: 0x00
Injured Breathing: G_Client + 0x3AC9 On: 0x01 Off: 0x00
Exo Stim: G_Client + 0x323 On: 0x01 Off: 0x02
Gun View: G_Client + 0x563 Default: 0x00 Launcher: 0x02
Rabbit Man: G_Client + 0x3ADC On: 0x2F, 0x88 Off: 0x3F 0x88
Fake Blood: G_Client + 0x1F3 On: 0xFF Off: 0x64
Stuck in Mud: G_Client + 0x3ADC On: 0x3D, 0x88 Off: 0x3F, 0x88
UAV: G_Client + 0x3948 On: 0x01 Off: 0x00
Border Screen: G_Client + 0x3850 On: 0x01 Off: 0x00
Missile Vision: G_Client + 0x380B On: 0x01 Off: 0x00
Goliath Vision: G_Client + 0x38E8 On: 0x01 Off: 0x02
In-Game Leaderboard spoof: Prestige: G_Client + 0x30C3 Rank: G_Client + 0x30BF Kills: G_Client + 0x3C1B Deaths: G_Client + 0x3C1D Objective: G_Client + 0x3C21 Defends: G_Client + 0x3C23 Score: G_Client + 0x3C19 Assists: G_Client + 0x3C1F
G_Entity Address: 0x1860880 Client Interval: 0x280
Godmode: G_Entity + 0x1AC On: 0x00, 0x00, 0xFF, 0xFF Off: 0x00, 0x00, 0x00, 0x00
Pointer to G_Client: G_Entity + 0x158
//Credits to Swiss
TOC Address = 00994F68
Stats Entry = 00295C664
G_Client = 001950880
G_Client_size = 0x4180
G_Entity = 001860880
G_Entity_size = 0x280
G_Spawn = 00366A24
SV_SetClientStats = 004322C0
G_Speed: 002F0E44
Add_Ammo = 003101C0
G_SpawnTurret = 0037B4F8
G_GivePlayerWeapon = 0036A6A0
G_SetFog: 00306AD4
BG_FindWeaponIndexForName = 00168074
G_GetWeaponIndexForName = 0036B3C4
SV_SetConfigString = 0042ECD0
G_Hudelems = 0017B9670
Hudelem_Alloc = 0030CAD0
G_LocalizedStringIndex = 0004C9A8
ui_debugmode = 0048D148
Dvar_GetBool: 004BF0F8
Com_Sprintf = 004C7548
SV_GameSendServerCommand = 0042D9A4
Cbuf_AddText = 0038AEA4
R_SetFrameFog = 005FCBF0
SV_SetClientViewAngles = 002F4530
Scr_GetInt = 003E299C
Scr_SpawnFX = 00349568
FPSText = 0079924C
//Thanks to Lebigkilleur
Com_ERROR = 003ACAA8
SV_SetupIgnoreEntParams = 00449F78
Dvar_FindVar = 0x4BEFC4
HECmd_SetClock(scr_entref_t entref) = 0x30EE54
HECmd_SetClock_Internal(scr_entref_t entref, he_type_t type, const char *cmdName) = 0x30EB08
G_MaterialIndex(const char *name) = 0x47BA8
G_ModelIndex(const char *name) = 0x47BEC
G_ModelName(int index) = 0x47C6C
G_ShellShockIndex(const char *name) = 0x47D10
Dvar_FindMalleableVar = 0x4BD528
public class RPC
{
static uint function_address = 0x5FCBF0; // R_SetFrameFog
public static int Init()
{
if (function_address == 0) return -1;
Enable_RPC();
return 0;
}
public static void Enable_RPC()
{
PS3.SetMemory(function_address, new byte[] { 0x4E, 0x80, 0x00, 0x20 });
System.Threading.Thread.Sleep(20);
byte[] func = new byte[] { 0x7C, 0x08, 0x02, 0xA6, 0xF8, 0x01, 0x00, 0x80, 0x3C, 0x60, 0x10, 0x05, 0x81, 0x83, 0x00, 0x4C, 0x2C, 0x0C, 0x00, 0x00, 0x41, 0x82, 0x00, 0x64, 0x80, 0x83, 0x00, 0x04, 0x80, 0xA3, 0x00, 0x08, 0x80, 0xC3, 0x00, 0x0C, 0x80, 0xE3, 0x00, 0x10, 0x81, 0x03, 0x00, 0x14, 0x81, 0x23, 0x00, 0x18, 0x81, 0x43, 0x00, 0x1C, 0x81, 0x63, 0x00, 0x20, 0xC0, 0x23, 0x00, 0x24, 0xC0, 0x43, 0x00, 0x28, 0xC0, 0x63, 0x00, 0x2C, 0xC0, 0x83, 0x00, 0x30, 0xC0, 0xA3, 0x00, 0x34, 0xC0, 0xC3, 0x00, 0x38, 0xC0, 0xE3, 0x00, 0x3C, 0xC1, 0x03, 0x00, 0x40, 0xC1, 0x23, 0x00, 0x48, 0x80, 0x63, 0x00, 0x00, 0x7D, 0x89, 0x03, 0xA6, 0x4E, 0x80, 0x04, 0x21, 0x3C, 0x80, 0x10, 0x05, 0x38, 0xA0, 0x00, 0x00, 0x90, 0xA4, 0x00, 0x4C, 0x80, 0x64, 0x00, 0x50, 0xE8, 0x01, 0x00, 0x80, 0x7C, 0x08, 0x03, 0xA6, 0x38, 0x21, 0x00, 0x70, 0x4E, 0x80, 0x00, 0x20 };
PS3.SetMemory(function_address + 0x4, func);
PS3.SetMemory(0x10050000, new byte[0x2854]);
PS3.SetMemory(function_address, new byte[] { 0xF8, 0x21, 0xFF, 0x91 });
}
public static int Call(uint func_address, params object[] parameters)
{
int num_params = parameters.Length;
uint num_floats = 0;
for (uint i = 0; i < num_params; i++)
{
if (parameters[i] is int)
{
byte[] val = BitConverter.GetBytes((int)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, val);
}
else if (parameters[i] is uint)
{
byte[] val = BitConverter.GetBytes((uint)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, val);
}
else if (parameters[i] is string)
{
byte[] str = Encoding.UTF8.GetBytes(Convert.ToString(parameters[i]) + "\0");
PS3.SetMemory(0x10050054 + i * 0x400, str);
uint addr = 0x10050054 + i * 0x400;
byte[] address = BitConverter.GetBytes(addr);
Array.Reverse(address);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, address);
}
else if (parameters[i] is float)
{
num_floats++;
byte[] val = BitConverter.GetBytes((float)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050024 + ((num_floats - 1) * 0x4), val);
}
}
byte[] fadd = BitConverter.GetBytes(func_address);
Array.Reverse(fadd);
PS3.SetMemory(0x1005004C, fadd);
System.Threading.Thread.Sleep(20);
byte[] ret = PS3.GetMemory(0x10050050, 4);
Array.Reverse(ret);
return BitConverter.ToInt32(ret, 0);
}
}
class Buttons
{
public static class Buttonz
{
public static Int32
Cross = 1024,
Square = 48,
Crouch = 512,
Prone = 256,
Start = 8388608,
L1 = 526336,
L2 = 32768,
L3 = 8194,
R1 = 1,
R2 = 16384,
R3 = 67108868;
}
public static bool ButtonPressed(int client, int Buttons)
{
if (PS3.Extension.ReadInt32(G_Client + 0x3DB4 + ((uint)client * 0x4180)) == Buttons)
return true;
else return false;
}
public void JetPack(int client)
{
float jH = PS3.Extension.ReadFloat(G_Client + ((uint)client * 0x4180));
jH += 100;
PS3.Extension.WriteFloat(G_Client + ((uint)client * 0x4180), jH);
}
//How to use it in a timer or backgroundworker
if(ButtonPressed(0, Buttons.Cross))
{
JetPack(0);
}
{
string[] Achievements = new string[50];
Achievements[0] = "4 CARMA";
Achievements[1] = "4 CAMPAIGN_COMPLETE";
Achievements[2] = "4 CAMPAIGN_HARDENED";
Achievements[3] = "4 CAMPAIGN_VETERAN";
Achievements[4] = "4 BOOST_DASH_STOMP";
Achievements[5] = "4 GRENADE_DODGE";
Achievements[6] = "4 SONIC_KILL";
Achievements[7] = "4 OVERDRIVE_KILL";
Achievements[8] = "4 SMART_GRENADE_KILL";
Achievements[9] = "4 THREAT_GRENADE_KILL";
Achievements[10] = "4 EMP_DRONE";
Achievements[11] = "4 EMP_AST";
Achievements[12] = "4 INTEL_HALF";
Achievements[13] = "4 INTEL_ALL";
Achievements[14] = "4 COVER_DRONE_KILL";
Achievements[15] = "4 EXO_UPGRADE";
Achievements[16] = "4 EXO_UPGRADE_10";
Achievements[17] = "4 EXO_UPGRADE_20";
Achievements[18] = "4 EXO_UPGRADE_FULL";
Achievements[19] = "4 LEVEL_1";
Achievements[20] = "4 LEVEL_1A";
Achievements[21] = "4 LEVEL_2A";
Achievements[22] = "4 LEVEL_2B";
Achievements[23] = "4 LEVEL_2";
Achievements[24] = "4 LEVEL_3A";
Achievements[25] = "4 LEVEL_3";
Achievements[26] = "4 LEVEL_4A";
Achievements[27] = "4 LEVEL_4";
Achievements[28] = "4 LEVEL_5";
Achievements[29] = "4 LEVEL_5A";
Achievements[30] = "4 LEVEL_6A";
Achievements[31] = "4 LEVEL_6";
Achievements[32] = "4 LEVEL_7";
Achievements[33] = "4 LEVEL_8A";
Achievements[34] = "4 LEVEL_8";
Achievements[35] = "4 LEVEL_9";
Achievements[36] = "4 LEVEL_10A";
Achievements[37] = "4 LEVEL_10";
Achievements[38] = "4 LEVEL_11";
Achievements[39] = "4 LEVEL_12A";
Achievements[40] = "4 LEVEL_12";
Achievements[41] = "4 LEVEL_13A";
Achievements[42] = "4 LEVEL_13";
Achievements[43] = "4 LEVEL_14A";
Achievements[44] = "4 LEVEL_14";
Achievements[45] = "4 COOP_VETERAN";
Achievements[46] = "4 COOP_WARFARE";
Achievements[47] = "4 COOP_UNDEAD_SURVIVOR";
Achievements[48] = "4 COOP_EXO_SURVIVOR";
Achievements[49] = "4 COOP_FLIP_FLOP";
for (int i = 0; i < 50; i++)
{
RPC.Call(0x42D9A4, -1, 1, Achievements[i]);
System.Threading.Thread.Sleep(25);
RPC.Call(0x42D9A4, -1, 1, Achievements[i]);
}
}
public static void ClonePlayer(int clientIndex)
{
RPC.Call(0x38AEA4, new object[] { clientIndex });
}
uint kb_Result = 0x030D0E22;
uint kb_cb = 0x00989068;
uint keyboardPrompt = 0x498828;
uint kb_active = 0x030D0AE4;
string KeyBoard(string title = "Your title", string presetText = "text here", int maxLength = 20)
{
RPC.Call(keyboardPrompt, new object[] { 0, title, presetText, maxLength, 0, 0, kb_cb });
System.Threading.Thread.Sleep(10);
while (PS3.Extension.ReadInt32(kb_active) == 0)
continue;
return PS3.Extension.ReadString(kb_Result);
}
Prestige : 0x29CDC6D
XP (Experience) : 0x029cdd0a
Score : 0x29CDD46
Kills : 0x029cdd1d
Deaths : 0x29CDCF5
Wins : 0x29CDD72
Losses : 0x29CDD25
Time Played : 0x29CDD62
Games Played : 0x29CDD0D
Stat Entry: 0x29CDC64
Unlock All: 0x29D33A0
Class Interval: 0x80
Class 1 Name: 0x29d2a49
Class 2 Name: 0x29d2ac9
Class 3 Name: 0x29d2b29
Class 4 Name: 0x29d2bc9
Class 5 Name: 0x29d2c49
Class 6 Name: 0x29d2cc9
Class 7 Name: 0x29d2d49
Class 8 Name: 0x29d2dc9
Class 9 Name: 0x29d2e49
Class 10 Name: 0x29d2ec9
byte[] buffer = new byte[0x1770];
for (int i = 0; i < 0x1770; i++)
{
buffer[i] = 0xFE;
}
PS3.SetMemory(0x29D33A0, buffer);
Calling Card Offset: 0x29D6D13
Clan Card #1: 0xD6
Clan Card #2: 0xD7
Clan Card #3: 0xD8
Clan Card #4: 0xD9
Clan Card #5: 0xDA
Clan Card #6: 0xDB
Checkerbox: 0xDC
Name: 0x029672e0
Clan Tag: 0xD82046
Client Interval for both Party Name & Party Clan Tag: 0x378
Party Name 0 0xd915bc
Party name 1 0xd9193c
Party name 2 0xD91CBC
Party name 3 0xD9203C
Party name 4 0xD923BC
Party name 5 0xD9273C
Party name 6 0xD92ABC
Party name 7 0xD92E3C
Party name 8 0xD931BC
Party name 9 0xD9353C
Party name 10 0xD938BC
Party name 11 0xD93C3C
Party Clan 0 0xd915dc
Party Clan 1 0xd9195c
Party Clan 2 0xD91CDC
Party Clan 3 0xD9205C
Party Clan 4 0xD923DC
Party Clan 5 0xD9275C
Party Clan 6 0xD92ADC
Party Clan 7 0xD92E5C
Party Clan 8 0xD931DC
Party Clan 9 0xD9355C
Party Clan 10 0xD938DC
Party Clan 11 0xD93C5C
Credits to MegaMister & Eddie Mac(finding) + 1Austin112 & RatchetBooty(Updating)
Advanced UAV: 0x1813DB On: 0x00 Off: 0x01
No Recoil: 0021018C On: 0x60, 0x00, 0x00, 0x00 Off: 0x4B, 0xF6, 0x16, 0x5D
Red Boxes: 0x00199923 On: 0x01 Off: 0x00
Red Laser: 0x202F93 On: 0x01 Off: 0x00
Steady Aim: 0x1720DF On: 0x00 Off: 0x02
Ghost Players: 0x5DC9EF On: 0x01 Off: 0x00
No Gun Sound: 0x20FFBB On: 0x01 Off: 0x00
Player Outline Color: 0x1C6C28 Normal: 0x00 Red: 0x04 Green: 0x06 Cyan: 0x08 Yellow: 0x0C
Real Wallhack: 0x1C6C28 On: 0x38, 0xC0, 0x00, 0x09 Off: 0x63, 0xC6, 0x00, 0x00
Wallhack: 0x2619D7C On: 0x42 Off: 0x40
Third Person: 0x026364d4 On: 0x01 Off: 0x00
compassMaxRange: 0x02636cb4 On: 0x45, 0x2F Off: 0x44, 0xBB
cg_fov: 0x02637524 On: 0x42, 0xD2 Off: 0x42, 0x82
//Credits to SC58(Finding) + 1Austin112(Updating)
Heat Vision: (Must overwrite by a tool or bin file otherwise you will freeze; Make sure to set both of these addresses)
0x1F4B54 - On: 0x60, 0x00, 0x00, 0x00 Off: 0x41, 0x82, 0x00, 0x8C
0x1F4B5C - On: 0x60, 0x00, 0x00, 0x00 Off: 0x41, 0x82, 0x00, 0x50
0x1A1784 - Draw Weapons
0x1A2048 - Draw Grenades
0x1A2724 - Draw Objects
0x1A2724 - Draw Objects 2
0x1C7DE4 - Draw Dead Body
0x1C6C28 - Draw Players
Outline Colors:
Normal: 0x38, 0xC0, 0x00, 0x00
Black: 0x38, 0xC0, 0x00, 0x02
Red: 0x38, 0xC0, 0x00, 0x04
Green: 0x38, 0xC0, 0x00, 0x06
Cyan: 0x38, 0xC0, 0x00, 0x08
Basic: 0x38, 0xC0, 0x00, 0x08
Orange: 0x38, 0xC0, 0x00, 0x0A
Yellow: 0x38, 0xC0, 0x00, 0x0C
Blue: 0x38, 0xC0, 0x00, 0x0E
Filled Color (Filled In):
Normal: 0x38, 0xC0, 0x00, 0x00
Red: 0x38, 0xC0, 0x00, 0x12
RedBold: 0x38, 0xC0, 0x00, 0x14
Green: 0x38, 0xC0, 0x00, 0x16
Cyan: 0x38, 0xC0, 0x00, 0x18
Orange: 0x38, 0xC0, 0x00, 0x1A
Yellow: 0x38, 0xC0, 0x00, 0x1C
Blue: 0x38, 0xC0, 0x00, 0x1E
Jump Height: 0x02637374
Walk Speed: 0x002F58CC
Knockback: 0x0263d314
Floating Bodies: 0x026398de
G_Client Address: 0x1987980 Client Interval: 0x4180
Red Boxes: G_Client + 0x5F On: 0x10 Off: 0x00
Heat Vision: G_Client + 0x5F On: 0x1C Off: 0x00
Invisibility: G_Client + 0x5B On: 0xF3 Off: 0x00
Ping: G_Client + 0x58 On: 0x01 Off: 0x00
No Recoil: G_Client + 0x562 On: 0x04 Off: 0x00
Disable Weapons: G_Client + 0x0562 Remove: 0x00 0x80 Give Back: 0x00 0x00
Primary Akimbo: G_Client + 0x3E5 On: 0x90 Off: 0x00
Secondary Akimbo: G_Client + 0x3AD On: 0x90 Off: 0x00
Laser: G_Client + 0x59 On: 0x01 Off: 0x00
Red Laser: G_Client + 0xD On: 0x00
Yellow Laser Color: G_Client + 0xD On: 0x01
Blue Laser Color: G_Client + 0xD On: 0x04
Scrambler: G_Client + 0x59 On: 0x40 Off: 0x00
mFlag: G_Client + 0x3da7 Normal: 0x00 No Clip: 0x01 UFO Mode: 0x02 Freeze: 0x04
System Hack: G_Client + 0x38C9 On: 0x01 Off: 0x00
Third Person: G_Client + 0x5F On: 0x07 Off: 0x00
Heat Chams: G_Client + 0x5F On: 0x1F Off: 0x00
Player Speed: G_Client + 0x3ADC Normal: 0x3F, 0x88 Fast: 0x3F, 0xFF Slow: 0x3F, 0x00
No Friction (Skate Mod): G_Client + 0x56 On: 0x01 Off: 0x00
In-Game Name: G_Client + 0x3B3C
In-Game Clan Tag: G_Client + 0x3BA0
Advanced UAV: G_Client + 0x3C2F On: 0x01 G_Client + 0x3C3F On: 0x00 Off: 0x01
FoV: G_Client + 0x3940 Normal: 0x3F, 0x80
Infinite Ammo:
G_Client + 0x58F On: 0xFF, 0xFF Off: 0x00, 0x00
G_Client + 0x5A6 On: 0xFF, 0xFF Off: 0x00, 0x00
G_Client + 0x65A On: 0xFF, 0xFF Off: 0x00, 0x00
G_Client + 0x642 On: 0xFF, 0xFF Off: 0x00, 0x00
Exo Cloak: G_Client + 0x58 On: 0x11 Off: 0x00
Kill Client: G_Client + 0x3ADC Kill: 0xFF, 0xFF
Fake Lag: G_Client + 0x3A1B On: 0x00 Off: 0x02
Kick Client: G_Client + 0x5A Kick: 0x3F
Invisible Gun: G_Client + 0x3AE1 On: 0x01 Off: 0x00
Exo Screen: G_Client + 0x3880 On: 0x01 Off: 0x00
Instant Drop: G_Client + 0x54 On: 0x01 Off: 0x00
Injured Breathing: G_Client + 0x3AC9 On: 0x01 Off: 0x00
Exo Stim: G_Client + 0x323 On: 0x01 Off: 0x02
Gun View: G_Client + 0x563 Default: 0x00 Launcher: 0x02
Rabbit Man: G_Client + 0x3ADC On: 0x2F, 0x88 Off: 0x3F 0x88
Fake Blood: G_Client + 0x1F3 On: 0xFF Off: 0x64
Stuck in Mud: G_Client + 0x3ADC On: 0x3D, 0x88 Off: 0x3F, 0x88
UAV: G_Client + 0x3948 On: 0x01 Off: 0x00
Border Screen: G_Client + 0x3850 On: 0x01 Off: 0x00
Missile Vision: G_Client + 0x380B On: 0x01 Off: 0x00
Goliath Vision: G_Client + 0x38E8 On: 0x01 Off: 0x02
In-Game Leaderboard spoof: Prestige: G_Client + 0x30C3 Rank: G_Client + 0x30BF Kills: G_Client + 0x3C1B Deaths: G_Client + 0x3C1D Objective: G_Client + 0x3C21 Defends: G_Client + 0x3C23 Score: G_Client + 0x3C19 Assists: G_Client + 0x3C1F
G_Entity Address: 0x1897980 Client Interval: 0x280
Godmode: G_Entity + 0x1AC On: 0x00, 0x00, 0xFF, 0xFF Off: 0x00, 0x00, 0x00, 0x00
Pointer to G_Client: G_Entity + 0x158
//Credits to Swiss
TOC Address = 009A5080
Stats Entry = 029CDC64
G_Client = 001950880
G_Client_size = 0x4180
G_Entity = 001860880
G_Entity_size = 0x280
0036F6F4 - BG_TakePlayerWeapon(playerState_s *ps, unsigned int weaponIndex, int takeAwayAmmo)
0036B518 - G_Spawn(void)
0043738C - SV_SetClientStat(int clientNum, int index, int value)
00314C60 - Add_Ammo(gentity_s *ent, unsigned int weaponIndex, char weaponModel, int count, int fillClip)
003801B0 - G_SpawnTurret(gentity_s *,char const *)
0036F34C - G_GivePlayerWeapon(playerState_s *pPS, int iWeaponIndex, char altModelIndex)
0030B594 - G_setfog(const char *fogstring)
002AEFB0 - G_RadiusDamage(const float *origin, gentity_s *inflictor, gentity_s *attacker, float fInnerDamage, float fOuterDamage, float radius, float coneAngleCos, float *coneDirection, gentity_s *ignore, int mod, int weapon)
0031EAD0 - TeleportPlayer(gentity_s *player, float *origin, float *angles)
0016B7E4 - BG_FindWeaponIndexForName(const char *name)
00370070 - G_GetWeaponIndexForName(const char *name)
0036BEA0 - G_AddEvent(gentity_s *ent, int event, unsigned int eventParm)
0036BD54 - G_TempEntity(const float *origin, int event)
00048AFC - G_EffectIndex(const char *name)
00433EF0 - SV_SetConfigstring(int,char const *)
0043206C - SV_AddServerCommand(client_s *client, svscmd_type type, const char *cmd) //
004C1260 - SV_ClientCommand(client_s *cl, msg_t *msg)
0044DB80 - SV_LinkEntity(gentity_s *gEnt)
0044DB00 - SV_UnlinkEntity(gentity_s *gEnt)
0042C4D4 - SV_KickClient(client_s *cl, char *playerName, int maxPlayerNameLen)
0042C060 - SV_MapRestart(int fast_restart)
0031DC70 - G_LocationalTrace(trace_t *results, const float *start, const float *end, int passEntityNum, int contentmask, char *priorityMap)
00387398 - Trace_GetEntityHitId(trace_t *trace)
004C4C20 - Dvar_GetBool(const char *dvarName)
004C4D68 - Dvar_GetString(const char *dvarName)
004C4C9C - Dvar_GetInt(const char *dvarName)
004C4D68 - Dvar_GetString(const char *dvarName)
004C3050 - Dvar_FindMalleableVar(const char *dvarName)
00360198 - SP_script_brushmodel(gentity_s *self)
00319E28 - G_SpawnString(SpawnVar *spawnVar, const char *key, const char *defaultString, const char **out)
017F02F0 - G_HudElems
00311570 - HudElem_Alloc(int,int)
0004DE08 - G_LocalizedStringIndex(const char *string)
0181F300 - leveltime
06ACAD8 - strchr
030DBF0 - player_die(gentity_s *self, gentity_s *inflictor, gentity_s *attacker, int damage, int meansOfDeath, int iWeapon, const float *vDir, hitLocation_t hitLoc, int psTimeOffset)
00492298 - ui_debugmode
003220F8 - G_ExplodeMissile(gentity_s *ent)
00328028 - G_FireGrenade(gentity_s *parent, float *start, float *dir, int grenadeWPID, char grenModel, int rotate, int time)
003283E8 - G_FireRocket(gentity_s *parent, unsigned int weaponIndex, float *start, float *dir, const float *gunVel, gentity_s *target, const float *targetOffset)
003801B0 - G_SpawnTurret(gentity_s *self, const char *weaponinfoname)
004C4C20 - Dvar_GetBool(char const *)
004CCFA8 - Com_sprintf(char *dest, int size, const char *fmt)
0042D780 - SV_SendDisconnect(client_s *client, int state, const char *reason)
00432BCC - SV_GameSendServerCommand(int,svscmd_type,char const *)
0038FBDC - Cbuf_AddText(int localClientNum, const char *text)
006032D0 - R_SetFrameFog(GfxCmdBufInput *)
002F8FB8 - SetClientViewAngle(gentity_s *ent, const float *angle)
003E7C2C - Scr_GetInt(unsigned int index)
0034DFF8 - Scr_SpawnFX
007A07DC - FPS
002F58CC - G_Speed
0003E2530 - Scr_Error(char const *)
00432E6C - SV_SetBrushModel(gentity_s *ent)
0037A964 - G_VehiclesInit(int restarting)
003B1E58 - Com_Error(errorParm_t code, const char *fmt)
003728BC - G_SetOrigin(gentity_s *ent, const float *origin)
00366C54 - G_CallSpawn
public class RPC
{
static uint function_address = 006032D0; // R_SetFrameFog
public static int Init()
{
if (function_address == 0) return -1;
Enable_RPC();
return 0;
}
public static void Enable_RPC()
{
PS3.SetMemory(function_address, new byte[] { 0x4E, 0x80, 0x00, 0x20 });
System.Threading.Thread.Sleep(20);
byte[] func = new byte[] { 0x7C, 0x08, 0x02, 0xA6, 0xF8, 0x01, 0x00, 0x80, 0x3C, 0x60, 0x10, 0x05, 0x81, 0x83, 0x00, 0x4C, 0x2C, 0x0C, 0x00, 0x00, 0x41, 0x82, 0x00, 0x64, 0x80, 0x83, 0x00, 0x04, 0x80, 0xA3, 0x00, 0x08, 0x80, 0xC3, 0x00, 0x0C, 0x80, 0xE3, 0x00, 0x10, 0x81, 0x03, 0x00, 0x14, 0x81, 0x23, 0x00, 0x18, 0x81, 0x43, 0x00, 0x1C, 0x81, 0x63, 0x00, 0x20, 0xC0, 0x23, 0x00, 0x24, 0xC0, 0x43, 0x00, 0x28, 0xC0, 0x63, 0x00, 0x2C, 0xC0, 0x83, 0x00, 0x30, 0xC0, 0xA3, 0x00, 0x34, 0xC0, 0xC3, 0x00, 0x38, 0xC0, 0xE3, 0x00, 0x3C, 0xC1, 0x03, 0x00, 0x40, 0xC1, 0x23, 0x00, 0x48, 0x80, 0x63, 0x00, 0x00, 0x7D, 0x89, 0x03, 0xA6, 0x4E, 0x80, 0x04, 0x21, 0x3C, 0x80, 0x10, 0x05, 0x38, 0xA0, 0x00, 0x00, 0x90, 0xA4, 0x00, 0x4C, 0x80, 0x64, 0x00, 0x50, 0xE8, 0x01, 0x00, 0x80, 0x7C, 0x08, 0x03, 0xA6, 0x38, 0x21, 0x00, 0x70, 0x4E, 0x80, 0x00, 0x20 };
PS3.SetMemory(function_address + 0x4, func);
PS3.SetMemory(0x10050000, new byte[0x2854]);
PS3.SetMemory(function_address, new byte[] { 0xF8, 0x21, 0xFF, 0x91 });
}
public static int Call(uint func_address, params object[] parameters)
{
int num_params = parameters.Length;
uint num_floats = 0;
for (uint i = 0; i < num_params; i++)
{
if (parameters[i] is int)
{
byte[] val = BitConverter.GetBytes((int)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, val);
}
else if (parameters[i] is uint)
{
byte[] val = BitConverter.GetBytes((uint)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, val);
}
else if (parameters[i] is string)
{
byte[] str = Encoding.UTF8.GetBytes(Convert.ToString(parameters[i]) + "\0");
PS3.SetMemory(0x10050054 + i * 0x400, str);
uint addr = 0x10050054 + i * 0x400;
byte[] address = BitConverter.GetBytes(addr);
Array.Reverse(address);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, address);
}
else if (parameters[i] is float)
{
num_floats++;
byte[] val = BitConverter.GetBytes((float)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050024 + ((num_floats - 1) * 0x4), val);
}
}
byte[] fadd = BitConverter.GetBytes(func_address);
Array.Reverse(fadd);
PS3.SetMemory(0x1005004C, fadd);
System.Threading.Thread.Sleep(20);
byte[] ret = PS3.GetMemory(0x10050050, 4);
Array.Reverse(ret);
return BitConverter.ToInt32(ret, 0);
}
}
class Buttons
{
public static class Buttonz
{
public static Int32
Cross = 1024,
Square = 48,
Crouch = 512,
Prone = 256,
Start = 8388608,
L1 = 526336,
L2 = 32768,
L3 = 8194,
R1 = 1,
R2 = 16384,
R3 = 67108868;
}
public static bool ButtonPressed(int client, int Buttons)
{
if (PS3.Extension.ReadInt32(G_Client + 0x3DB4 + ((uint)client * 0x4180)) == Buttons)
return true;
else return false;
}
public void JetPack(int client)
{
float jH = PS3.Extension.ReadFloat(G_Client + ((uint)client * 0x4180));
jH += 100;
PS3.Extension.WriteFloat(G_Client + ((uint)client * 0x4180), jH);
}
//How to use it in a timer or backgroundworker
if(ButtonPressed(0, Buttons.Cross))
{
JetPack(0);
}
{
string[] Achievements = new string[50];
Achievements[0] = "4 CARMA";
Achievements[1] = "4 CAMPAIGN_COMPLETE";
Achievements[2] = "4 CAMPAIGN_HARDENED";
Achievements[3] = "4 CAMPAIGN_VETERAN";
Achievements[4] = "4 BOOST_DASH_STOMP";
Achievements[5] = "4 GRENADE_DODGE";
Achievements[6] = "4 SONIC_KILL";
Achievements[7] = "4 OVERDRIVE_KILL";
Achievements[8] = "4 SMART_GRENADE_KILL";
Achievements[9] = "4 THREAT_GRENADE_KILL";
Achievements[10] = "4 EMP_DRONE";
Achievements[11] = "4 EMP_AST";
Achievements[12] = "4 INTEL_HALF";
Achievements[13] = "4 INTEL_ALL";
Achievements[14] = "4 COVER_DRONE_KILL";
Achievements[15] = "4 EXO_UPGRADE";
Achievements[16] = "4 EXO_UPGRADE_10";
Achievements[17] = "4 EXO_UPGRADE_20";
Achievements[18] = "4 EXO_UPGRADE_FULL";
Achievements[19] = "4 LEVEL_1";
Achievements[20] = "4 LEVEL_1A";
Achievements[21] = "4 LEVEL_2A";
Achievements[22] = "4 LEVEL_2B";
Achievements[23] = "4 LEVEL_2";
Achievements[24] = "4 LEVEL_3A";
Achievements[25] = "4 LEVEL_3";
Achievements[26] = "4 LEVEL_4A";
Achievements[27] = "4 LEVEL_4";
Achievements[28] = "4 LEVEL_5";
Achievements[29] = "4 LEVEL_5A";
Achievements[30] = "4 LEVEL_6A";
Achievements[31] = "4 LEVEL_6";
Achievements[32] = "4 LEVEL_7";
Achievements[33] = "4 LEVEL_8A";
Achievements[34] = "4 LEVEL_8";
Achievements[35] = "4 LEVEL_9";
Achievements[36] = "4 LEVEL_10A";
Achievements[37] = "4 LEVEL_10";
Achievements[38] = "4 LEVEL_11";
Achievements[39] = "4 LEVEL_12A";
Achievements[40] = "4 LEVEL_12";
Achievements[41] = "4 LEVEL_13A";
Achievements[42] = "4 LEVEL_13";
Achievements[43] = "4 LEVEL_14A";
Achievements[44] = "4 LEVEL_14";
Achievements[45] = "4 COOP_VETERAN";
Achievements[46] = "4 COOP_WARFARE";
Achievements[47] = "4 COOP_UNDEAD_SURVIVOR";
Achievements[48] = "4 COOP_EXO_SURVIVOR";
Achievements[49] = "4 COOP_FLIP_FLOP";
for (int i = 0; i < 50; i++)
{
RPC.Call(0x432BCC, -1, 1, Achievements[i]);
System.Threading.Thread.Sleep(25);
RPC.Call(0x432BCC, -1, 1, Achievements[i]);
}
}
public static void ClonePlayer(int clientIndex)
{
RPC.Call(0x38AEA4, new object[] { clientIndex });
}
uint kb_Result = 0x03080E22;
uint kb_cb = 0x0999150 ;
uint keyboardPrompt = 0x049D980 ;
uint kb_active = 0x09AACA0 ;
string runKeyboard(string title = "Your title", string presetText = "text here", int maxLength = 20)
{
RPC.Call(keyboardPrompt, new object[] { 0, title, presetText, maxLength, 0, 0, kb_cb });
System.Threading.Thread.Sleep(10);
while (PS3.Extension.ReadInt32(kb_active) == 0) { }
return PS3.Extension.ReadString(kb_Result);
}
void FastRestart()
{
RPC.Call(0x42C31;
}
0x36B5E8 == G_Spawn
0x38FCAC == CbufAddText
0x4DE08 == G_LocalizedString
0x43745C == SV_SetClientStat(int clientNum, int index, int value)
0x314D30 == Add_Ammo(gentity_s *ent, unsigned int weaponIndex, char weaponModel, int count, int fillClip)
0x380280 == G_SpawnTurret(gentity_s *,char const *)
0x36F41C == G_GivePlayerWeapon(playerState_s *pPS, int iWeaponIndex, char altModelIndex)
0x30B664 == G_setfog(const char *fogstring)
0x2AF080 == G_RadiusDamage(const float *origin, gentity_s *inflictor, gentity_s *attacker, float fInnerDamage, float fOuterDamage, float radius, float coneAngleCos, float *coneDirection, gentity_s *ignore, int mod, int weapon)
0x31E64 == TeleportPlayer(gentity_s *player, float *origin, float *angles)
0x16B804 == BG_FindWeaponIndexForName(const char *name)
0x370140 == G_GetWeaponIndexForName(const char *name)
0x36BF70 == G_AddEvent(gentity_s *ent, int event, unsigned int eventParm)
0x36BE24 == G_TempEntity(const float *origin, int event)
0x48AFC == G_EffectIndex(const char *name)
0x433FC0 == SV_SetConfigstring(int,char const *)
0x4C139C == SV_ClientCommand(client_s *cl, msg_t *msg)
0x44DC50 == SV_LinkEntity(gentity_s *gEnt)
0x44DBD0 == SV_UnlinkEntity(gentity_s *gEnt)
0x42C5A4 == SV_KickClient(client_s *cl, char *playerName, int maxPlayerNameLen)
0x42C130 == SV_MapRestart(int fast_restart)
0x31DBBC == G_LocationalTrace(trace_t *results, const float *start, const float *end, int passEntityNum, int contentmask, char *priorityMap)
0x387468 == Trace_GetEntityHitId(trace_t *trace)
0x4C4D60 == Dvar_GetBool(const char *dvarName)
0x4C4EA8 == Dvar_GetString(const char *dvarName)
0x4C4DDC == Dvar_GetInt(const char *dvarName)
0x4C3190 == Dvar_FindMalleableVar(const char *dvarName)
0x360268 == SP_script_brushmodel(gentity_s *self)
0x319EF8 == G_SpawnString(SpawnVar *spawnVar, const char *key, const char *defaultString, const char **out)
0x603470 == R_SetFrameFog(GfxCmdBufInput *)
0x17F02F0 == G_HudElems
0x0489D8 == G_MaterialIndex
0x311630 == HudElem_Alloc(int,int)
0x181F300 == leveltime
0x30DCC0 == player_die(gentity_s *self, gentity_s *inflictor, gentity_s *attacker, int damage, int meansOfDeath, int iWeapon, const float *vDir, hitLocation_t hitLoc, int psTimeOffset)
0x00492368 == ui_debugmode
0x3221C8 == G_ExplodeMissile(gentity_s *ent)
0x3280F8 == G_FireGrenade(gentity_s *parent, float *start, float *dir, int grenadeWPID, char grenModel, int rotate, int time)
0x3284B8 == G_FireRocket(gentity_s *parent, unsigned int weaponIndex, float *start, float *dir, const float *gunVel, gentity_s *target, const float *targetOffset)
0x42D850 == SV_SendDisconnect(client_s *client, int state, const char *reason)
0x432C9C == SV_GameSendServerCommand(int,svscmd_type,char const *)
0x2F9088 == SetClientViewAngle(gentity_s *ent, const float *angle)
0x3E7CFC == Scr_GetInt(unsigned int index)
0x3E2600 == Scr_Error(char const *)
0x432F3C == SV_SetBrushModel(gentity_s *ent)
0x37AA34 == G_VehiclesInit(int restarting)
0x3B1F28 == Com_Error(errorParm_t code, const char *fmt)
0x0037298C == G_SetOrigin(gentity_s *ent, const float *origin)
0x366D24 == G_CallSpawn
0x49DA50 == KeyBordPrompt
FPS Texte = 0x007A09BC
Enable = 0x004A55A4 ( enable with 01 https://prntscr.com/5pr5ev)
Humm But not found , size/position and stuff sorry , but adresse in not on IDA :hmm:
Sorry
0x36B5E8 == G_Spawn
0x38FCAC == CbufAddText
0x4DE08 == G_LocalizedString
0x43745C == SV_SetClientStat(int clientNum, int index, int value)
0x314D30 == Add_Ammo(gentity_s *ent, unsigned int weaponIndex, char weaponModel, int count, int fillClip)
0x380280 == G_SpawnTurret(gentity_s *,char const *)
0x36F41C == G_GivePlayerWeapon(playerState_s *pPS, int iWeaponIndex, char altModelIndex)
0x30B664 == G_setfog(const char *fogstring)
0x2AF080 == G_RadiusDamage(const float *origin, gentity_s *inflictor, gentity_s *attacker, float fInnerDamage, float fOuterDamage, float radius, float coneAngleCos, float *coneDirection, gentity_s *ignore, int mod, int weapon)
0x31E64 == TeleportPlayer(gentity_s *player, float *origin, float *angles)
0x16B804 == BG_FindWeaponIndexForName(const char *name)
0x370140 == G_GetWeaponIndexForName(const char *name)
0x36BF70 == G_AddEvent(gentity_s *ent, int event, unsigned int eventParm)
0x36BE24 == G_TempEntity(const float *origin, int event)
0x48AFC == G_EffectIndex(const char *name)
0x433FC0 == SV_SetConfigstring(int,char const *)
0x4C139C == SV_ClientCommand(client_s *cl, msg_t *msg)
0x44DC50 == SV_LinkEntity(gentity_s *gEnt)
0x44DBD0 == SV_UnlinkEntity(gentity_s *gEnt)
0x42C5A4 == SV_KickClient(client_s *cl, char *playerName, int maxPlayerNameLen)
0x42C130 == SV_MapRestart(int fast_restart)
0x31DBBC == G_LocationalTrace(trace_t *results, const float *start, const float *end, int passEntityNum, int contentmask, char *priorityMap)
0x387468 == Trace_GetEntityHitId(trace_t *trace)
0x4C4D60 == Dvar_GetBool(const char *dvarName)
0x4C4EA8 == Dvar_GetString(const char *dvarName)
0x4C4DDC == Dvar_GetInt(const char *dvarName)
0x4C3190 == Dvar_FindMalleableVar(const char *dvarName)
0x360268 == SP_script_brushmodel(gentity_s *self)
0x319EF8 == G_SpawnString(SpawnVar *spawnVar, const char *key, const char *defaultString, const char **out)
0x603470 == R_SetFrameFog(GfxCmdBufInput *)
0x17F02F0 == G_HudElems
0x0489D8 == G_MaterialIndex
0x311630 == HudElem_Alloc(int,int)
0x181F300 == leveltime
0x30DCC0 == player_die(gentity_s *self, gentity_s *inflictor, gentity_s *attacker, int damage, int meansOfDeath, int iWeapon, const float *vDir, hitLocation_t hitLoc, int psTimeOffset)
0x00492368 == ui_debugmode
0x3221C8 == G_ExplodeMissile(gentity_s *ent)
0x3280F8 == G_FireGrenade(gentity_s *parent, float *start, float *dir, int grenadeWPID, char grenModel, int rotate, int time)
0x3284B8 == G_FireRocket(gentity_s *parent, unsigned int weaponIndex, float *start, float *dir, const float *gunVel, gentity_s *target, const float *targetOffset)
0x42D850 == SV_SendDisconnect(client_s *client, int state, const char *reason)
0x432C9C == SV_GameSendServerCommand(int,svscmd_type,char const *)
0x2F9088 == SetClientViewAngle(gentity_s *ent, const float *angle)
0x3E7CFC == Scr_GetInt(unsigned int index)
0x3E2600 == Scr_Error(char const *)
0x432F3C == SV_SetBrushModel(gentity_s *ent)
0x37AA34 == G_VehiclesInit(int restarting)
0x3B1F28 == Com_Error(errorParm_t code, const char *fmt)
0x0037298C == G_SetOrigin(gentity_s *ent, const float *origin)
0x366D24 == G_CallSpawn
0x49DA50 == KeyBordPrompt
FPS Texte = 0x007A09BC
Enable = 0x004A55A4 ( enable with 01 https://prntscr.com/5pr5ev)
Humm But not found , size/position and stuff sorry , but adresse in not on IDA :hmm:
Sorry
Copyright © 2024, NextGenUpdate.
All Rights Reserved.