[SPRX] Writing into CoD locations [non host stuff]

07-26-2014, 10:59 PM #1

EnVatoHD

Haxor!

43

Posts

1,909

Reputation

0

Credits

Member

Apr 2014

NextGenUpdate

(adsbygoogle = window.adsbygoogle || []).push({}); Hello guys , today i wanna release a func to write into cod locations so you can use laser redboxes and all this stuff Smile

i worked rllllly hard like 3 days !! Yep if u dont use this an try to set it without the sys call your sprx will crash / freeze so i am rlly happy that it works ! enjoy guys

Function: [its a sys call]

    int32_t write_process(uint64_t ea, const void * data, uint32_t size)

	{

		// 905 = sys_call number

                //sys_process_getpid() = pid

                // ea = offset

               // size = lenght of the bytes

               //data = bytes

		system_call_4(905, (uint64_t)sys_process_getpid(), ea, size, (uint64_t)data);

		return_to_user_prog(int32_t);

	}

How to use: [red boxes]

    

                                uint32_t bytes[1]; // uint32_t = Uint32[]

				bytes[0] = 0x38C0FFFF; // bytes for red boxes = 0x38,0xC0,0xFF,0xFF

				write_process(0x000834D0, &bytes, 4); // first argutment = offset │ second are the variable │ thiird the 

//lenght of the bytes so 0x38 will be 1 and 0x0F0F will be 2

Credits:
Me -
BlackPanther
PS3Wiki - Syscalls

(adsbygoogle = window.adsbygoogle || []).push({});

The following 7 users say thank you to EnVatoHD for this useful post:

-JM-, Arrow_Modz, LaRip8, John, Notorious, VezahMoDz, xPAQz

07-26-2014, 11:08 PM #2

seb5594

Proud Former Admin

2,723

Posts

64,924

Reputation

182

Credits

NextGenUpdate Elite

Jul 2008

NextGenUpdate

Originally posted by EnVatoHD

Hello guys , today i wanna release a func to write into cod locations so you can use laser redboxes and all this stuff Smile

i worked rllllly hard like 3 days !! Yep if u dont use this an try to set it without the sys call your sprx will crash / freeze so i am rlly happy that it works ! enjoy guys

Function: [its a sys call]

    int32_t write_process(uint64_t ea, const void * data, uint32_t size)

	{

		// 905 = sys_call number

                //sys_process_getpid() = pid

                // ea = offset

               // size = lenght of the bytes

               //data = bytes

		system_call_4(905, (uint64_t)sys_process_getpid(), ea, size, (uint64_t)data);

		return_to_user_prog(int32_t);

	}

How to use: [red boxes]

    

                                uint32_t bytes[1]; // uint32_t = Uint32[]

				bytes[0] = 0x38C0FFFF; // bytes for red boxes = 0x38,0xC0,0xFF,0xFF

				write_process(0x000834D0, &bytes, 4); // first argutment = offset │ second are the variable │ thiird the 

//lenght of the bytes so 0x38 will be 1 and 0x0F0F will be 2

Credits:
Me - making it

you worked 3 days on it? Drack

    

*(int*)0x000834D0 = 0x38C0FFFF;

The following 7 users say thank you to seb5594 for this useful post:

hacking247, hotfix, SC58, Sticky, VezahMoDz, Fatality, xPAQz

07-26-2014, 11:20 PM #3

Citadel

Samurai Poster

2,553

Posts

16,842

Reputation

0

Credits

Member

Apr 2013

NextGenUpdate

Originally posted by seb5594

you worked 3 days on it? Drack

    

*(int*)0x000834D0 = 0x38C0FFFF;

Lol not everyone is german and has good knowledge in everything :troll:

The following user thanked Citadel for this useful post:

EnVatoHD

07-26-2014, 11:29 PM #4

EnVatoHD

Haxor!

43

Posts

1,909

Reputation

0

Credits

Member

Apr 2014

NextGenUpdate

Originally posted by seb5594

you worked 3 days on it? Drack

    

*(int*)0x000834D0 = 0x38C0FFFF;

mhh i hate u xD <3

07-27-2014, 03:27 AM #5

BaSs_HaXoR

Hurah!

691

Posts

20,615

Reputation

185

Credits

Member

Sep 2012

NextGenUpdate

Originally posted by seb5594

you worked 3 days on it? Drack

    

*(int*)0x000834D0 = 0x38C0FFFF;

You like being hated?

07-27-2014, 04:34 AM #6

Shark

Retired.

1,140

Posts

61,429

Reputation

197

Credits

Former Staff

Apr 2010

NextGenUpdate

Originally posted by EnVatoHD

Hello guys , today i wanna release a func to write into cod locations so you can use laser redboxes and all this stuff Smile

i worked rllllly hard like 3 days !! Yep if u dont use this an try to set it without the sys call your sprx will crash / freeze so i am rlly happy that it works ! enjoy guys

Function: [its a sys call]

    int32_t write_process(uint64_t ea, const void * data, uint32_t size)

	{

		// 905 = sys_call number

                //sys_process_getpid() = pid

                // ea = offset

               // size = lenght of the bytes

               //data = bytes

		system_call_4(905, (uint64_t)sys_process_getpid(), ea, size, (uint64_t)data);

		return_to_user_prog(int32_t);

	}

How to use: [red boxes]

    

                                uint32_t bytes[1]; // uint32_t = Uint32[]

				bytes[0] = 0x38C0FFFF; // bytes for red boxes = 0x38,0xC0,0xFF,0xFF

				write_process(0x000834D0, &bytes, 4); // first argutment = offset │ second are the variable │ thiird the 

//lenght of the bytes so 0x38 will be 1 and 0x0F0F will be 2

Credits:
Me -
BlackPanther
PS3Wiki - Syscalls

inb4 everyone asks what a process id is tears

07-27-2014, 06:57 AM #7

Shark

Retired.

1,140

Posts

61,429

Reputation

197

Credits

Former Staff

Apr 2010

NextGenUpdate

Originally posted by EnVatoHD

Hello guys , today i wanna release a func to write into cod locations so you can use laser redboxes and all this stuff Smile

i worked rllllly hard like 3 days !! Yep if u dont use this an try to set it without the sys call your sprx will crash / freeze so i am rlly happy that it works ! enjoy guys

Function: [its a sys call]

    int32_t write_process(uint64_t ea, const void * data, uint32_t size)

	{

		// 905 = sys_call number

                //sys_process_getpid() = pid

                // ea = offset

               // size = lenght of the bytes

               //data = bytes

		system_call_4(905, (uint64_t)sys_process_getpid(), ea, size, (uint64_t)data);

		return_to_user_prog(int32_t);

	}

How to use: [red boxes]

    

                                uint32_t bytes[1]; // uint32_t = Uint32[]

				bytes[0] = 0x38C0FFFF; // bytes for red boxes = 0x38,0xC0,0xFF,0xFF

				write_process(0x000834D0, &bytes, 4); // first argutment = offset │ second are the variable │ thiird the 

//lenght of the bytes so 0x38 will be 1 and 0x0F0F will be 2

Credits:
Me -
BlackPanther
PS3Wiki - Syscalls

    

char bytes[] = { 0x38, 0x60, 0x00, 0x01 };

write_process(0x783E0, &bytes, 4);

use a character array instead of an unsigned interger array because with a character array you can do as many different bytes as you want without having to make a bunch of different arrays and join them all together so example

char[] lotsofbytes = { 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01 };

which would write a bunch of 0x01's so yea :p

The following user thanked Shark for this useful post:

hotfix

07-27-2014, 10:06 AM #8

EnVatoHD

Haxor!

43

Posts

1,909

Reputation

0

Credits

Member

Apr 2014

NextGenUpdate

Originally posted by Shark

    

char bytes[] = { 0x38, 0x60, 0x00, 0x01 };

write_process(0x783E0, &bytes, 4);

use a character array instead of an unsigned interger array because with a character array you can do as many different bytes as you want without having to make a bunch of different arrays and join them all together so example

char[] lotsofbytes = { 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01 };

which would write a bunch of 0x01's so yea :p

Rlly? I tried it and he setted just "00 00 00 2C" instead of "2C 03 00 01" but thx Smile

07-27-2014, 10:22 AM #9

EnVatoHD

Haxor!

43

Posts

1,909

Reputation

0

Credits

Member

Apr 2014

NextGenUpdate

Originally posted by Citadel

Lol not everyone is german and has good knowledge in everything :troll:

Yeah i am german too buts thats not the problem Enzo

The following user thanked EnVatoHD for this useful post:

xPAQz

07-27-2014, 10:02 PM #10

_L0st_my_Gh0st_

Banned

140

Posts

290

Reputation

48

Credits

Banned

Sep 2013

NextGenUpdate

Originally posted by EnVatoHD

Yeah i am german too buts thats not the problem Enzo

er meinte seb Winky Winky