1. ## Some addresses for Spec Ops

Code:
```Ammo Addresses:
Tactical (flashbang, smoke, etc) - 0x137E6B0
Lethal (semtex, frag, etc) - 0x137E6A4
Secondary Stock - 0x137E638
Secondary Clip - 0x137E6BC
Primary Stock - 0x137E620
Primary Clip - 0x137E698
Claymores - 0x137E6C8
C4 (and attachments?) - 0x137E6D4

Write 0x0 (byte) to 0x53A9D6 (disables perk checking).
Read the value from 0x1D33D80 as an integer (because it's a pointer) and then add 0xC to that value you read.
Write 0.01 (float) to the final result
In C++ this can be written as *(float*)(*(int*)0x1D33D80 + 0xC) = 0.01f; (assuming that you've injected into the game)
In Cheat Engine, click 'Add Address Manually' and tick the Pointer box.
Put in 1D33D80 on the left box and C in the right box.
Make sure to select Float from the Type box.

No Recoil:
Write 0xEB (byte) to 0x4292EA.

Write 0xEB, 0x21 to 0x64717F and then write 0x90, 0x90 to 0x6471BE.
Read the value from 0x1D33DC0 as an integer (because it's a pointer) and then add 0xC to that value you read.
Write 0.01 (float) to the final result.
In C++ this can be written as *(float*)(*(int*)0x1D33DC0 + 0xC) = 0.01f; (assuming that you've injected into the game)
In Cheat Engine, click 'Add Address Manually' and tick the Pointer box.
Put in 1D36D00 on the left box and C in the right box.
Make sure to select Float from the Type box.

Write 0x0 (byte) to 0x471EB9.
Read the value from 0x1D33D84 as an integer (because it's a pointer) and then add 0xC to that value you read.
Write 10 (float) to the final result.
In C++ this can be written as *(float*)(*(int*)0x1C5A8D4 + 0xC) = 10f; (assuming that you've injected into the game)
In Cheat Engine, click 'Add Address Manually' and tick the Pointer box.
Put in 1C5A8D4 on the left box and C in the right box.
Make sure to select Float from the Type box.

Rapid Fire:
Write 0x0 (integer/4 bytes) to 0x137E4C8 and 0x981D08 in a loop (timer).

Health:
Write whatever you want (integer) to 0x11941A8.

Dvars:
Make sure to do this before attempting to use the addresses:
- Read the address (as an integer) next to each dvar name and then add 0xC to it.
- Then, write whatever value you want to the final address with the type indicated between the [ and ]

g_gravity - 0x1D313C4 [float]
jump_height - 0x1D2FF68 [float]
bg_viewBobMax (sway) - 0x1D33D40 [float]
bg_weaponBobMax (sway) - 0x1D31404 [float]
cg_fov - 0xA73098 [float]
sv_znear (wallhack thingy, stand close to a wall and see through) - 0xA73048 [float]
g_speed - 0x1354000 [integer/4 bytes]

Scan Range: 0x1A00000 - 0x1BFFFFF
Pattern: 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x06, 0xF6, 0x17, 0x00
Cheat Engine Friendly: ?? ?? ?? ?? ?? ?? 06 F6 17 00

Scan Range: 0x1A00000 - 0x1BFFFFF
Pattern: 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x06, 0xD7, 0x3E, 0x00
Cheat Engine Friendly: ?? ?? ?? ?? ?? ?? 06 D7 3E 00

Scan Range: 0x1A00000 - 0x1BFFFFF
Pattern: 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x06, 0xA6, 0x4F, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00
Cheat Engine Friendly: ?? ?? ?? ?? ?? ?? 06 A6 4F 00 ?? ?? ?? ?? 00 00```
These are for the latest version of SP btw. Note that the patterns need to be refreshed every round/game. If you use any of these, make sure to give credits to me, thanks!

2. ## The Following 11 Users Say Thank You to master131 For This Useful Post:

0x01337 (05-16-2012),barata55 (04-27-2012),distiny (02-27-2012),jorricks (05-24-2012),lolbie (11-15-2011),mjsic666 (06-06-2012),qwerty129 (12-01-2011),rawr im a tiger (08-23-2012),remi06 (04-02-2012),Slirpa (02-10-2012),Womanizer` (05-17-2012)

3. So now you tell everyone, not when i asked.

4. Originally Posted by TomAllMighty
So now you tell everyone, not when i asked.
Hehehehe. I expected you to do it yourself.

5. nice release man

only if I had a pattern scanner

6. Patterns have been updated for the latest version of SP, enjoy guys. The addresses remain the same because all they probably did is shift the base of iw5sp.exe. Also added Cheat Engine friendly patterns for usage in 'Array of byte' search option in CE.

7. Originally Posted by master131
Code:
```Tactical (flashbang, smoke, etc) - iw5sp.exe+EA9928
Lethal (semtex, frag, etc) - iw5sp.exe+EA991C
Secondary Stock - iw5sp.exe+EA98B0
Secondary Clip - iw5sp.exe+EA9934
Primary Stock - iw5sp.exe+EA9898
Primary Clip - iw5sp.exe+EA9910
Claymores - iw5sp.exe+EA9940
C4 (and attachments?) - iw5sp.exe+EA994C

Scan Range: 0x1A00000 - 0x1AFFFFF
Pattern: 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x06, 0xF6, 0x17, 0x00
Cheat Engine Friendly: ?? ?? ?? ?? ?? ?? 06 F6 17 00

Scan Range: 0x1900000 - 0x1AFFFFF
Pattern: 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x06, 0xD7, 0x3E, 0x00
Cheat Engine Friendly: ?? ?? ?? ?? ?? ?? 06 D7 3E 00

Scan Range: 0x1A00000 - 0x1AFFFFF
Pattern: 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x06, 0x94, 0x4E, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00
Cheat Engine Friendly: ?? ?? ?? ?? ?? ?? 06 94 4E 00 ?? ?? ?? ?? 00 00```
Have fun, might work for SP too. These are for version 1.4 of SP btw. Note that the patterns need to be refreshed every round/game. If you use any of these, make sure to give credits to me, thanks!
I changed everything to 999 while in the barrack but i dont see any changes in the game

8. This is for Spec Ops... Anyway, what's changing ammo got to do with Barracks?

9. ## The Following User Says Thank You to master131 For This Useful Post:

hamed2011 (12-05-2011)

10. well these address doesn't do anything for me sorry

11. Originally Posted by master131
This is for Spec Ops... Anyway, what's changing ammo got to do with Barracks?
i got a question to ask,

is it possible for you to make a trainer?

like

unlimited ammo
unlimited money
god

(i would make one, but idk how to code so yeah)

12. I really can't be bothered actively updating a trainer for Spec Ops but if I get enough demand I might, of course you could always use M-efti's trainers.

13. Originally Posted by master131
I really can't be bothered actively updating a trainer for Spec Ops but if I get enough demand I might, of course you could always use M-efti's trainers.
ya but they crash for me :S i posted on his thread, asking for help

14. So how much demand do you need to update the spec ops trainer?

15. Updated offsets/addresses. Patterns are still working.

Note for SP/Spec Ops hack devs, all offsets have shifted upwards by 0x1000.

16. /updated main post

All offsets have shifted upwards by 0x80 for SP/Spec Ops. The scan ranges have also changed a little for the patterns.

17. Hii

Infinite Health: 010C04A8
XP: 01D26750