Character ID: 217AF2C (Byte)
"Hands" ID: 2301F7C (Byte)
Increase/Decrease the value with 1 to change the model.
zombie_health_increase - 11BDB9A6
zombie_health_increase_multiplier - 11BDB9D2
zombie_health_start - 11BDB98B
zombie_spawn_delay - 11BDB9E9
zombie_new_runner_interval - 11BDBA0B
zombie_max_ai - 11BDBA50
zombie_intermission_time - 11BDBBD2
starting_lives - 11BDB95D
zombie_score_kill_4player - 11BDBBEF
zombie_score_kill_3player - 11BDBBEF
zombie_score_damage_normal - 11BDBA0B
zombie_score_bonus_melee - 11BDB988
zombie_score_bonus_head - 11BDBBEF
zombie_score_bonus_neck - 11BDBD71
zombie_score_bonus_torso - 11BDBA0B
zombie_flame_dmg_point_delay - 11BDBAD8
zombie_perk_juggernaut_health - 11BDBDC3
zombie_powerup_insta_kill_time - 11BDBBB6
zombie_powerup_point_doubler_time - 11BDBBB6
zombie_powerup_drop_increment - 11BDBFFF
zombie_powerup_drop_max_per_round - 11BDC026
zombie_move_speed_multiplier - 11BDBA2D
zombie_ai_per_player - 11BDBA2B
You must change their before map is loaded. Also after editing some of these parameters, i get power up from every zombie.
Some funny shit
Last edited by dtx12; 09-04-2013 at 07:21 AM.
Character ID: 217AF2C (Byte)
"Hands" ID: 2301F7C (Byte)
Increase/Decrease the value with 1 to change the model.
Coper (06-27-2015)
Example of use:
Code:typedef int (__cdecl * tBg_GetPerkIndexByName)(char *a1); tBg_GetPerkIndexByName Bg_GetPerkIndexByName_ = (tBg_GetPerkIndexByName)0x562540; void setPerk(int client, char *Perk) { int PerkIndex = Bg_GetPerkIndexByName_(Perk); int Client = 0x22fca98 + client * 0x57f8; __asm { pushad mov eax,Client mov ecx,PerkIndex mov esi,PerkIndex sar esi,5 and ecx,0x1f mov edx,1 shl edx,CL add esi,esi add esi,esi OR DWORD PTR DS:[ESI+EAX+0x548],EDX MOV EDI,Client OR DWORD PTR DS:[ESI+EDI+0x5594],EDX popad } } ---------------------------------------------------------- setPerk(0,"specialty_rof");
Last edited by dtx12; 09-06-2013 at 04:27 PM.
Zombies 4D1
G_Client 1
22FCA98
G_Client 2
2302290
G_Client 3
2307A88
G_Client 4
230D280
G_Client 1 + 0x18 = GodMode value = 4
22FCAB0
G_Client 2 + 0x18 = GodMode value = 4
23022A8
G_Client 3 + 0x18 = GodMode value = 4
2307AA0
G_Client 4 + 0x18 = GodMode value = 4
230D298
G_Client 1 + 0x1EC = NoSpread value = 2
22FCC84
G_Client 2 + 0x1EC = NoSpread value = 2
230247C
G_Client 3 + 0x1EC = NoSpread value = 2
2307C74
G_Client 4 + 0x1EC = NoSpread value = 2
230D46C
G_Client 1 + 0x5534 = Player1Name
2301FCC
G_Client 2 + 0x5534 = Player2Name
23077C4
G_Client 3 + 0x5534 = Player3Name
230CFBC
G_Client 4 + 0x5534 = Player4Name
23127B4
G_Client 1 + 0x4C = Rapidfire
22FCAE4
G_Client 2 + 0x4C = Rapidfire
23022DC
G_Client 3 + 0x4C = Rapidfire
2307AD4
G_Client 4 + 0x4C = Rapidfire
230D2CC
cg_drawBigFPS value = 1
029CD7E0
cg_drawlagometer value = 1
029CD840
BeDeveloper
029CEC80
cg_gun_x
029D5C50
029D5C40
cg_gun_y
029D5CB0
029D5CA0
cg_gun_z
029D5D00
029D5D10
CG_FOV
02AF2F68
cg_thirdperson value = 1
2E490D1C
sv_cheats 1 value = 1
029AA680
sv_cheats 2 value = 1
029BE600
g_gravity
029B66E0
Low Poly Mesh
013A6CE4
g_speed
029ABB20
//////!!!!\\\\\
If there are any wrong adresses tell me
spawn - 0083AA00
cann you give me a litle example how i can use that?
typedef int* (__cdecl* tspawn)(int a1, int a2, char* a3);
static tspawn spawn_ = (tspawn)0x083AA00;
or idk how sry but please write back
G_Client.cs
Code:class G_client { public static int g_client(int Client) { return 0x22FCA98+ Client * 0x57f8; } public static int g_client_Model(int Client) { return 0x22FCA98 - 0x181B6C + (Client * 0x31C); } public static int ClientWeapIndex = 0x1B8; public static int ClientVelocity = 0x34; public static int ClientFriction = 0xC;//do stuff public static int ClientFreeze = 0x5694; public static int ClientViewModel = 0x54F4; public static int ClientButtonMonitoring = 0x569C; public static int ClientPlayerName = 0x5534; public static int ClientAngles = 0x56BC; public static int ClientTeam = 0x5504;//dont work i think public static int ClientIsAlive = 0x55D0; public static int ClientStance = 0xFC; public static int ClientGodMode = 0x18; public static int ClientSpread = 0x1EC;//if 2 then 1e8 = spread to set public static int ClientSetSpread = 0x1E8; public static int ClientPerks = 0x548; public static int ClientPrimaryCamo = 0x2D8; public static int ClientSecondaryCamo = 0x2BC; public static int ClientTactical = 0x30C; public static int ClientLethal = 0x2F0; public static int ClientKillstreak1 = 0x42B; public static int ClientKillstreak2 = 0x430; public static int ClientKillstreak3 = 0x434; public static int PrimaryAmmo = 0x43C; public static int SecondaryAmmo = 0x438; public static int LethalAmmo = 0x440; public static int TacticalAmmo = 0x444; public static int LocationSelectorMap = 0x4B0; public static int LocationSelectorType = 0x4B4; public static int ClientSpectatorMode = 0x5410;//using for noclip public static int ClientThermal = 0x19; public static int ClientPositionX =0x2C; public static int ClientPositionY =0x28; public static int ClientPositionZ = 0x40; public static int ClientSpeed = 0x54E0; public static int Frezze = 0x5684; public static int ConnectionState = 0x5428; public static int bytes = 0; public enum sessionState_t : int { SESS_STATE_PLAYING, SESS_STATE_DEAD, SESS_STATE_SPECTATOR, SESS_STATE_INTERMISSION }; public static string getConnectionState(int client) { byte[] buffer = new byte[4]; int bytesread; ReadProcessMemory(ProcessHandle, (IntPtr)g_client(client) + 0x5428, buffer, 4, bytes); bytesread = BitConverter.ToInt32(buffer, 0); return Convert.ToString((sessionState_t)bytesread); } public enum connectionState_t : int { CON_DISCONNECTED, CON_CONNECTING, CON_CONNECTED }; }
Player.cs
hope you likeCode:class Player { public static void SetClientSpeed(int client, float value) { WriteProcessMemory(ProcessHandle, (IntPtr)G_client.g_client(client) + G_client.ClientSpeed, BitConverter.GetBytes(value), (uint)1, bytes); } public static void setSpread(int state, int client, int value) { if (state == 1) { WriteProcessMemory(ProcessHandle, (IntPtr)G_client.g_client(client) + G_client.ClientSpread, BitConverter.GetBytes(2), (uint)4, bytes); WriteProcessMemory(ProcessHandle, (IntPtr)G_client.g_client(client) + G_client.ClientSetSpread, BitConverter.GetBytes(value), (uint)4, bytes); } else { WriteProcessMemory(ProcessHandle, (IntPtr)G_client.g_client(client) + G_client.ClientSpread, BitConverter.GetBytes(0), (uint)4, bytes); } } public static void GiveKillStreaks(int client, int Amount) { WriteProcessMemory(ProcessHandle, (IntPtr)G_client.g_client(client) + 0x42E, BitConverter.GetBytes(Amount), (uint)4, bytes); WriteProcessMemory(ProcessHandle, (IntPtr)G_client.g_client(client) + 0x432, BitConverter.GetBytes(Amount), (uint)4, bytes); WriteProcessMemory(ProcessHandle, (IntPtr)G_client.g_client(client) + 0x437, BitConverter.GetBytes(Amount), (uint)4, bytes); } public static void position(int client, float X, float Y, float Z) { WriteProcessMemory(ProcessHandle, (IntPtr)G_client.g_client(client) + G_client.ClientPositionX, BitConverter.GetBytes(X), (uint)4, bytes); WriteProcessMemory(ProcessHandle, (IntPtr)G_client.g_client(client) + G_client.ClientPositionY, BitConverter.GetBytes(Y), (uint)4, bytes); WriteProcessMemory(ProcessHandle, (IntPtr)G_client.g_client(client) + G_client.ClientPositionZ, BitConverter.GetBytes(Z), (uint)4, bytes); } public static void Thermal_vision(int client, int state) { if (state == 1) { WriteProcessMemory(ProcessHandle, (IntPtr)G_client.g_client(client) + G_client.ClientThermal, new byte[] { 0x16 }, (uint)1, bytes); } else { WriteProcessMemory(ProcessHandle, (IntPtr)G_client.g_client(client) + G_client.ClientThermal, new byte[] { 0x00 }, (uint)1, bytes); } } }
icebolt9 (07-13-2014)
PlusOps2 GunPosition
XP and Prestige (Probably already posted)Code:cg_gun_x: 25D98E0 | Float (Best = 3-5) cg_gun_y: 25D9940 | Float (10 for left handed) cg_gun_z: 25D99A0 | Float (-3 for CoD4 Style)
Code:XP: 2B1ECFC | 4 Bytes Prestige: 2B1ECE4 | 4 Bytes
HACKCHOOB (09-05-2014)
Redacted MP:
Unlimited Ammo Assembly script (Cheat Engine)
(Primary, Secondary, Granades, Tacticals.)
---Code:[ENABLE] //code from here to '[DISABLE]' will be used to enable the cheat alloc(newmem,2048) label(returnhere) label(originalcode) label(exit) newmem: mov [eax](int),499 originalcode: mov ecx,[eax] add ecx,edi xor edx,edx exit: jmp returnhere "t6mp.exe"+1B6791: jmp newmem nop returnhere: [DISABLE] //code from here till the end of the code will be used to disable the cheat dealloc(newmem) "t6mp.exe"+1B6791: mov ecx,[eax] add ecx,edi xor edx,edx //Alt: db 8B 08 03 CF 33 D2
Redacted / PlusOps2 ZM:
PLAYER 1:
Ammo 1 (probably Primary) : 022FCEC4
Ammo 2 (probably Secondary) : 022FCED0
Ammo 3 (I dont know) : 022FCEC0
Ammo 4 (i dont know) : 022FCECC
Granades/Semtex : 022FCEC8
Money : 02302060
PLAYER 2:
Ammo 1 (probably Primary) : 023026BC
Ammo 2 (probably Secondary) : 023026C4
Ammo 3 (i dont know) : 023026B8
Ammo 4 (I dont Know) : 023026C8
Granades/Semtex : 023026C0
Money: 02307858
Redacted BO2 MP:
Unlimted Ammo Remade Assembly scipt (Cheat Engine)
Primary clip
Primary mag
Secondary clip
Secondary mag
Killstreaks
Code:[ENABLE] //code from here to '[DISABLE]' will be used to enable the cheat alloc(newmem,2048) label(returnhere) label(originalcode) label(exit) alloc(newmem2,2048) label(returnhere2) label(originalcode2) label(exit2) newmem: mov [esi+ecx*4+000003EC],(int)1023 originalcode: mov eax,[esi+ecx*4+000003EC] exit: jmp returnhere "t6mp.exe"+236391: jmp newmem nop nop returnhere: newmem2: mov [esi+ecx*4+00000428],(int)1023 originalcode2: mov eax,[esi+ecx*4+00000428] exit2: jmp returnhere2 "t6mp.exe"+2F0C51: jmp newmem2 nop nop returnhere2: [DISABLE] //code from here till the end of the code will be used to disable the cheat dealloc(newmem) "t6mp.exe"+236391: mov eax,[esi+ecx*4+000003EC] //Alt: db 8B 84 8E EC 03 00 00 //code from here till the end of the code will be used to disable the cheat dealloc(newmem2) "t6mp.exe"+2F0C51: mov eax,[esi+ecx*4+00000428] //Alt: db 8B 84 8E 28 04 00 00
Zombie V39 Addresses:
I = Integer (or 4 Bytes)
F = Float
Health = 21C1568 (I)
Rapid fire = 23427EC (I) - freeze it at 0
Rapid fire (double tap - perk_weapRateMultiplier) = 29FF5C0 (F) - set it at 0.001, default value is 0.75
Ammo addresses (I) = 2342BC4, 2342BCC, 2342BD0, 2342BD4, 2342BD8, 2342BC8, 2342BC0, 2342BDC
Speed = 29F1820 (I) - default value = 190
Melee range = 29FBBA0 (F) - default value = 55
Gravity = 29FC4A0 (F) - default value = 800
Money = 2347D68 (I)
Jump height = C506FC (F) - default value = 39
FOV = 2A13420 (F) - default value = 65
Timescale = 2A045A0 (F) - default value = 1
Give weapon 1st slot = 2342A04 (I), mob of the dead address = 23429E8
Give weapon 2nd slot = 2342A3C (I), mob of the dead address = 2342A20
Give weapon 3rd slot = 2342A58 (I), mob of the dead address = 2342A74
Unlimited paralyzer (I) = 2342A0C, 2342A44, 2342A60 - freeze them at 0
No recoil = 4AA863 (Byte) - ON = 117, OFF = 116
Current weapon id (I) = 21C1420
Third person (I) = 2E490D1C
Zombies don't attack (I) (works only on Buried) = 23303F8
Always prone (I) = 2347F90
X (F) = 23427C8
Y (F) = 23427C8 + 4
Z (F) = 23427C8 + 8
Name (String) = 2347CD4
Perk1 (I) = 2342CE8
Perk2 (I) = 2342CEC
Give double tap = perk2 + 1048576
Give mule kick = perk + 1
Give speed cola = perk + 1048576
Give jugger = perk + 4
Give vulture-aid = perk2 + 512
Give unlimited sprint = perk2 + 1073741824
Give no fall damage = perk + 16384
To find the addresses of the other players you have to do:
Player1 address + [0x57F8 * (PlayerNumber - 1)], for example player 2 money address = 0x2347D68 + [0x57F8 * (2 - 1)]
For the health address you have to add 0x31C instead of 0x57F8.
JackyPlaxer11 (10-21-2020),KingX735 (01-10-2015)
Anyone have the new timescale offset?
TimeScale Included(Someone Asked it)
Virus Scan:VirusTotal
This table includes a list with ID's Of Zombie Weapons!
Process Name: ("pt6zm")
!!(Weapon slot 2/3 is buggy) So when you select a weapon add some Ammo from the table.
Enjoy <3
Last edited by Coper; 06-28-2015 at 04:58 AM.
YOU ONLY LIVE ONCE
Baofu (02-16-2019)
NameFake!
<?xml version="1.0" encoding="utf-8"?>
<CheatTable>
<CheatEntries>
<CheatEntry>
<ID>55</ID>
<Description>"Name Changer"</Description>
<LastState Activated="0" RealAddress="64538BB8"/>
<Color>80000008</Color>
<VariableType>String</VariableType>
<Length>13</Length>
<Unicode>0</Unicode>
<ZeroTerminate>1</ZeroTerminate>
<Address>pt6.dll+B8BB8</Address>
</CheatEntry>
</CheatEntries>
</CheatTable>
Last edited by Coper; 06-28-2015 at 09:23 AM.
YOU ONLY LIVE ONCE
Code://OFFSETS >>>>> Redacted <<<<< VSAT: t6mpv43.exe+ 1F7637C | 2E4911D4 // 4Bytes INGAME NAME CHANGE: t6mpv43.exe+1F760D4 | 023760D4 //String
¬Included
1:Health
2:Ammo
3:Money
4:No Recoil/116 off 117 on
5:Rapid Fire/Freeze to Zero
6:Melee Range/55 Default
7:Gravity/800 Default
8:Jump Height/39 Default
9:FOV/65 Default
10:TimeScale/1 Default
11:Speed/190 Default
12:3RD Person/1 On 0 Off
13:Give Weapon slot/1,2,3
https://www.virustotal.com/en/file/8...is/1478424631/
https://virusscan.jotti.org/en-US/fi...job/fy4fmino4s
Last edited by Silent; 11-06-2016 at 02:35 AM. Reason: Added virus scans
YOU ONLY LIVE ONCE
pistakilla (01-20-2020),r3aper11 (08-07-2017)