Post: Interesting new dev_cheats in 1.13
09-17-2011, 02:31 PM #1
BriceC
Computer Programmer
(adsbygoogle = window.adsbygoogle || []).push({}); Scroll down a little to see what im talking about Smile if you dont know how to mod eboots then you probably dont get this.

Originally posted by another user
.text:824F9968 sub_824F9968: # CODE XREF: sub_824F9C58+C8*p
.text:824F9968
.text:824F9968 .set var_F0, -0xF0
.text:824F9968 .set var_EC, -0xEC
.text:824F9968 .set var_E8, -0xE8
.text:824F9968 .set var_E4, -0xE4
.text:824F9968 .set var_E0, -0xE0
.text:824F9968 .set var_DC, -0xDC
.text:824F9968 .set var_D8, -0xD8
.text:824F9968 .set var_D4, -0xD4
.text:824F9968 .set var_D0, -0xD0
.text:824F9968 .set var_CC, -0xCC
.text:824F9968 .set var_C8, -0xC8
.text:824F9968 .set var_C4, -0xC4
.text:824F9968 .set var_C0, -0xC0
.text:824F9968 .set var_BC, -0xBC
.text:824F9968 .set var_B8, -0xB8
.text:824F9968 .set var_B4, -0xB4
.text:824F9968 .set var_B0, -0xB0
.text:824F9968 .set var_AC, -0xAC
.text:824F9968 .set var_A8, -0xA8
.text:824F9968 .set var_A4, -0xA4
.text:824F9968
.text:824F9968 mfspr %r12, LR
.text:824F996C bl __savegprlr_14
.text:824F9970 stwu %sp, -0x140(%sp)
.text:824F9974 lis %r21, ((sv_MakeMeHost+0x10000)@h)
.text:824F9978 mr %r18, %r3
.text:824F997C lis %r20, sv_DisableTheatre@h
.text:824F9980 lis %r16, sv_BigHeadMode@h
.text:824F9984 lis %r11, player_sustainAmmo@h
.text:824F9988 lis %r10, ((sv_EnableDevCheats+0x10000)@h)
.text:824F998C lwz %r22, sv_MakeMeHost@l(%r21)
.text:824F9990 lis %r9, sv_NoClip@h
.text:824F9994 lis %r8, sv_FullAmmo@h
.text:824F9998 lwz %r21, sv_DisableTheatre@l(%r20)
.text:824F999C lis %r7, ((sv_InfiniteSprint+0x10000)@h)
.text:824F99A0 lwz %r20, sv_BigHeadMode@l(%r16)
.text:824F99A4 lis %r6, ((sv_RadarAlwaysOn+0x10000)@h)
.text:824F99A8 lwz %r11, player_sustainAmmo@l(%r11)
.text:824F99AC lis %r5, ((sv_Invisible+0x10000)@h)
.text:824F99B0 lwz %r10, sv_EnableDevCheats@l(%r10)
.text:824F99B4 lis %r4, ((sv_SuperPenetrate+0x10000)@h)
.text:824F99B8 lwz %r9, sv_NoClip@l(%r9)
.text:824F99BC lis %r3, sv_TripleBullet@h
.text:824F99C0 lwz %r8, sv_FullAmmo@l(%rCool Man (aka Tustin)
.text:824F99C4 lis %r30, ((sv_QuickHealthRecharge+0x10000)@h)
.text:824F99C8 lwz %r7, sv_InfiniteSprint@l(%r7)
.text:824F99CC lis %r29, ((sv_InstantReload+0x10000)@h)
.text:824F99D0 lwz %r6, sv_RadarAlwaysOn@l(%r6)
.text:824F99D4 lis %r28, sv_3xEXP@h
.text:824F99D8 lwz %r5, sv_Invisible@l(%r5)
.text:824F99DC lis %r27, ((sv_UnlockAllIntel+0x10000)@h)
.text:824F99E0 lwz %r4, sv_SuperPenetrate@l(%r4)
.text:824F99E4 lis %r26, sv_UnlockAllSlots@h
.text:824F99E8 lwz %r3, sv_TripleBullet@l(%r3)
.text:824F99EC lis %r25, sv_DoubleCodPoints@h
.text:824F99F0 lwz %r30, sv_QuickHealthRecharge@l(%r30)
.text:824F99F4 lis %r24, ((sv_SetAllFree+0x10000)@h)
.text:824F99F8 lwz %r29, sv_InstantReload@l(%r29)
.text:824F99FC lis %r23, sv_EnableSuperuser@h
.text:824F9A00 lwz %r28, sv_3xEXP@l(%r2Cool Man (aka Tustin)
.text:824F9A04 lis %r31, ((byte_84199AF8+0x10000)@h)
.text:824F9A08 lwz %r27, sv_UnlockAllIntel@l(%r27)
.text:824F9A0C lwz %r26, sv_UnlockAllSlots@l(%r26)
.text:824F9A10 lis %r15, ((party_connectToOthers+0x10000)@h)
.text:824F9A14 lwz %r25, sv_DoubleCodPoints@l(%r25)
.text:824F9A18 lis %r17, ((cg_playerState+0x10000)@h)
.text:824F9A1C lwz %r24, sv_SetAllFree@l(%r24)
.text:824F9A20 li %r19, 0
.text:824F9A24 lwz %r23, sv_EnableSuperuser@l(%r23)
.text:824F9A28 lbz %r14, byte_84199AF8@l(%r31)
.text:824F9A2C lwz %r16, party_connectToOthers@l(%r15)
.text:824F9A30 cmplwi cr6, %r14, 0
.text:824F9A34 stw %r11, 0x140+var_F0(%sp)
.text:824F9A38 stw %r10, 0x140+var_EC(%sp)
.text:824F9A3C stw %r9, 0x140+var_E8(%sp)
.text:824F9A40 stw %r8, 0x140+var_E4(%sp)
.text:824F9A44 stw %r7, 0x140+var_E0(%sp)
.text:824F9A48 stw %r6, 0x140+var_DC(%sp)
.text:824F9A4C stw %r5, 0x140+var_D8(%sp)
.text:824F9A50 stw %r4, 0x140+var_D4(%sp)
.text:824F9A54 stw %r3, 0x140+var_D0(%sp)
.text:824F9A58 stw %r30, 0x140+var_CC(%sp)
.text:824F9A5C stw %r29, 0x140+var_C8(%sp)
.text:824F9A60 stw %r28, 0x140+var_C4(%sp)
.text:824F9A64 stw %r27, 0x140+var_C0(%sp)
.text:824F9A68 stw %r26, 0x140+var_BC(%sp)
.text:824F9A6C stw %r25, 0x140+var_B8(%sp)
.text:824F9A70 stw %r24, 0x140+var_B4(%sp)
.text:824F9A74 stw %r23, 0x140+var_B0(%sp)
.text:824F9A78 stw %r22, 0x140+var_AC(%sp)
.text:824F9A7C stw %r21, 0x140+var_A8(%sp)
.text:824F9A80 stw %r20, 0x140+var_A4(%sp)
.text:824F9A84 bne cr6, loc_824F9AD8
.text:824F9A88 mr %r3, %r18
.text:824F9A8C bl sub_824F7578
.text:824F9A90 clrlwi %r11, %r3, 24
.text:824F9A94 cmplwi cr6, %r11, 0
.text:824F9A98 beq cr6, loc_824F9AD8
.text:824F9A9C lwz %r11, cg_playerState@l(%r17)
.text:824F9AA0 lwz %r4, 0x18(%r11)
.text:824F9AA4 cmpwi cr6, %r4, 0
.text:824F9AA8 ble cr6, loc_824F9AD8
.text:824F9AAC li %r11, 1
.text:824F9AB0 li %r5, 1
.text:824F9AB4 stb %r11, byte_84199AF8@l(%r31)
.text:824F9AB8 li %r3, 0x12
.text:824F9ABC bl sub_824B8308
.text:824F9AC0 li %r4, 0
.text:824F9AC4 lwz %r3, cg_playerState@l(%r17)
.text:824F9AC8 bl sub_823E4978
.text:824F9ACC li %r4, 1
.text:824F9AD0 mr %r3, %r18
.text:824F9AD4 bl GamerProfile_UpdateProfileFromDvars
.text:824F9AD8
.text:824F9AD8 loc_824F9AD8: # CODE XREF: sub_824F9968+11C*j
.text:824F9AD8 # sub_824F9968+130*j ...
.text:824F9AD8 lis %r11, ((dword_8286CD04+0x10000)@h)
.text:824F9ADC lwz %r11, dword_8286CD04@l(%r11)
.text:824F9AE0 cmplwi cr6, %r11, 0
.text:824F9AE4 beq cr6, loc_824F9B1C
.text:824F9AE8 lbz %r11, 0x18(%r11)
.text:824F9AEC cmplwi cr6, %r11, 0
.text:824F9AF0 beq cr6, loc_824F9B1C
.text:824F9AF4 lbz %r10, byte_84199AF8@l(%r31)
.text:824F9AF8 cmplwi cr6, %r10, 0
.text:824F9AFC bne cr6, loc_824F9B1C
.text:824F9B00 li %r11, 1
.text:824F9B04 li %r5, 1
.text:824F9B08 stb %r11, byte_84199AF8@l(%r31)
.text:824F9B0C li %r4, 1
.text:824F9B10 li %r3, 0x12
.text:824F9B14 li %r19, 1
.text:824F9B18 bl sub_824B8308
.text:824F9B1C
.text:824F9B1C loc_824F9B1C: # CODE XREF: sub_824F9968+17C*j
.text:824F9B1C # sub_824F9968+188*j ...
.text:824F9B1C lis %r11, ((dword_8286CCF8+0x10000)@h)
.text:824F9B20 lwz %r11, dword_8286CCF8@l(%r11)
.text:824F9B24 cmplwi cr6, %r11, 0
.text:824F9B28 beq cr6, loc_824F9B60
.text:824F9B2C lbz %r11, 0x18(%r11)
.text:824F9B30 cmplwi cr6, %r11, 0
.text:824F9B34 beq cr6, loc_824F9B60
.text:824F9B38 lbz %r10, byte_84199AF8@l(%r31)
.text:824F9B3C cmplwi cr6, %r10, 0
.text:824F9B40 bne cr6, loc_824F9B60
.text:824F9B44 li %r11, 1
.text:824F9B48 li %r5, 1
.text:824F9B4C stb %r11, byte_84199AF8@l(%r31)
.text:824F9B50 li %r4, 1
.text:824F9B54 li %r3, 0x12
.text:824F9B58 li %r19, 1
.text:824F9B5C bl sub_824B8308
.text:824F9B60
.text:824F9B60 loc_824F9B60: # CODE XREF: sub_824F9968+1C0*j
.text:824F9B60 # sub_824F9968+1CC*j ...
.text:824F9B60 addi %r29, %sp, 0x140+var_F0
.text:824F9B64 li %r30, 0x14
.text:824F9B68
.text:824F9B68 loc_824F9B68: # CODE XREF: sub_824F9968+240*j
.text:824F9B68 lwz %r11, 0(%r29)
.text:824F9B6C lbz %r10, 0x18(%r11)
.text:824F9B70 cmplwi cr6, %r10, 0
.text:824F9B74 beq cr6, loc_824F9BA0
.text:824F9B78 lbz %r10, byte_84199AF8@l(%r31)
.text:824F9B7C cmplwi cr6, %r10, 0
.text:824F9B80 bne cr6, loc_824F9BA0
.text:824F9B84 li %r11, 1
.text:824F9B88 li %r5, 1
.text:824F9B8C stb %r11, byte_84199AF8@l(%r31)
.text:824F9B90 li %r4, 1
.text:824F9B94 li %r3, 0x12
.text:824F9B98 li %r19, 1
.text:824F9B9C bl sub_824B8308
.text:824F9BA0
.text:824F9BA0 loc_824F9BA0: # CODE XREF: sub_824F9968+20C*j
.text:824F9BA0 # sub_824F9968+218*j
.text:824F9BA0 addic. %r30, %r30, -1
.text:824F9BA4 addi %r29, %r29, 4
.text:824F9BA8 bne loc_824F9B68
.text:824F9BAC lbz %r11, 0x18(%r16)
.text:824F9BB0 cmplwi cr6, %r11, 0
.text:824F9BB4 bne cr6, loc_824F9BE0
.text:824F9BB8 lbz %r10, byte_84199AF8@l(%r31)
.text:824F9BBC cmplwi cr6, %r10, 0
.text:824F9BC0 bne cr6, loc_824F9BE0
.text:824F9BC4 li %r11, 1
.text:824F9BC8 li %r5, 1
.text:824F9BCC stb %r11, byte_84199AF8@l(%r31)
.text:824F9BD0 li %r4, 1
.text:824F9BD4 li %r3, 0x12
.text:824F9BD8 li %r19, 1
.text:824F9BDC bl sub_824B8308
.text:824F9BE0
.text:824F9BE0 loc_824F9BE0: # CODE XREF: sub_824F9968+24C*j
.text:824F9BE0 # sub_824F9968+258*j
.text:824F9BE0 clrlwi %r11, %r19, 24
.text:824F9BE4 cmplwi cr6, %r11, 0
.text:824F9BE8 beq cr6, loc_824F9C50
.text:824F9BEC slwi %r11, %r18, 3
.text:824F9BF0 lis %r10, ((qword_841987D0+0x10000)@h)
.text:824F9BF4 add %r9, %r18, %r11
.text:824F9BF8 addi %r8, %r10, -0x7830 # qword_841987D0
.text:824F9BFC slwi %r7, %r9, 3
.text:824F9C00 lwzx %r6, %r7, %r8
.text:824F9C04 cmpwi cr6, %r6, 0
.text:824F9C08 bgt cr6, loc_824F9C14
.text:824F9C0C li %r11, 0
.text:824F9C10 b loc_824F9C28
.text:824F9C14 # ---------------------------------------------------------------------------
.text:824F9C14
.text:824F9C14 loc_824F9C14: # CODE XREF: sub_824F9968+2A0*j
.text:824F9C14 mr %r3, %r18
.text:824F9C18 bl j_XamUserGetSigninState
.text:824F9C1C addi %r11, %r3, -2
.text:824F9C20 cntlzw %r10, %r11
.text:824F9C24 extrwi %r11, %r10, 1,26
.text:824F9C28
.text:824F9C28 loc_824F9C28: # CODE XREF: sub_824F9968+2A8*j
.text:824F9C28 clrlwi %r11, %r11, 24
.text:824F9C2C cmplwi cr6, %r11, 0
.text:824F9C30 bne cr6, loc_824F9C50
.text:824F9C34 lwz %r3, cg_playerState@l(%r17)
.text:824F9C38 lwz %r11, 0x18(%r3)
.text:824F9C3C addi %r4, %r11, 1
.text:824F9C40 bl sub_823E4978
.text:824F9C44 li %r4, 1
.text:824F9C48 mr %r3, %r18
.text:824F9C4C bl GamerProfile_UpdateProfileFromDvars
.text:824F9C50
.text:824F9C50 loc_824F9C50: # CODE XREF: sub_824F9968+280*j
.text:824F9C50 # sub_824F9968+2C8*j
.text:824F9C50 addi %sp, %sp, 0x140
.text:824F9C54 b __restgprlr_14
.text:824F9C54 # End of function sub_824F9968
(adsbygoogle = window.adsbygoogle || []).push({});

The following 13 users say thank you to BriceC for this useful post:

iTruceFret, AMNE, Brentdevent, BuC-ShoTz, daniel54_43, DinoFreak, Fuser's Hoe, lbalancel, Rainbow Gravity, SAMCRO, the_hack, xVz
09-29-2011, 01:02 PM #38
eazynow82
Are you high?
Originally posted by The1337Hacker View Post
They aren't, some are but the point is devs have new dvars Smile that we could activate but prolly get banned, I might send the 1.13 elf to max and see what he can do


would it be possible for a copy ?
im not downgrading to 3.41 to do the decryption so would really appreciate it if u can
thanks
09-29-2011, 03:26 PM #39
Originally posted by .Choco View Post
Lots of these were in there previously, but thanks for posting anyways Smile Some of them are new.




can these codes be put in 2 a normal 1.13 bo eboot then do a data transfer 2 a normal online ps3 will mods work ..... or is this just 4 cfw ps3s?
10-03-2011, 02:58 PM #40
sarrek
Keeper
not possible :s
10-03-2011, 07:57 PM #41
Originally posted by j8hnb View Post
can these codes be put in 2 a normal 1.13 bo eboot then do a data transfer 2 a normal online ps3 will mods work ..... or is this just 4 cfw ps3s?


The EBOOT is encrypted with the latest firmware NPDRM key.
10-30-2011, 10:44 PM #42
IDontbreak
Cake is a lie
So there is a 1.13 coming 100%? Gaspkay:
10-31-2011, 07:51 PM #43
donny_boy1189
DiRTY HARRY
Originally posted by TheEliteSoldier View Post

Yes some people didn't pay attention, a while back Graf_chokolo released some files to decrypt ndprm that he used on some game I can't remember what game, but it works but u do need a Mac to use them.


I thought that actually needed linux and could only do keys upto 3.41, isnt blops 3.55. Then you need a second tool cant remember what it was called, to rebuild it into a workable elf...... BTW this program had a very bad success rate, most of what it spat out never really worked.
10-31-2011, 08:10 PM #44
Top_Dog_Uk
Gym leader
where will this lead lol.max where are you son you the man on black ops.
not forgetting FlamedHD
10-31-2011, 08:27 PM #45
DlBSY993
There's 0nly 1..
It is possible to sign the EBOOT. with the latest keys.. They're is a way. You guys just don't know how. However If you must look towards the .ff its not as hard as you think to get the keys you just need be able to add some basic function calls and some common sense the tools to retrieving the keys are already out there.. *cough* Dump the *cough* into the HDD *cough* and make sure to look at some of the dev tools released. TheUnkn0wn has accomplished in getting them.. So its not impossible, and tbh if youre that bothered its almost as easy to get the keys for the .ff as modding the EBOOT. And going back to what unkn0wn said you can use the .ff for zombie modifications. I haven't got the keys myself, but thanks to some other members who shared the hint to this.. so if youre that bothered to mod black ops go after the keys and not the EBOOT files.. Btw you need no hardware mods to get to them..
11-01-2011, 02:46 PM #46
this sum good shit maybe reverse might work to encrypt the elf back into bin
i also knew another method of how to decrpyt eboot but cygwin is need idk if that method works with the new eboot i cant try ti becasue its on my computer which got effed up

Copyright © 2026, NextGenUpdate.
All Rights Reserved.

Gray NextGenUpdate Logo