[Looking for Info] I'm new at BO...

[seaplusplus]

Okay, so I recently have gotten into hacking Black Ops. I used to code for Combat Arms, which was based of of FEAR SDK. It uses CShell.dll to store most of it's addresses. Now, could someone tell me the file I will need to dump to find the addresses for Black Ops? Like the ones you guys have been posting. Also, what engine is Black Ops made with? Third, could someone give me a working Console Command function?

Thanks, and I will do my best to contribute to the community!

[rowan112]

Okay, so I recently have gotten into hacking Black Ops. I used to code for Combat Arms, which was based of of FEAR SDK. It uses CShell.dll to store most of it's addresses. Now, could someone tell me the file I will need to dump to find the addresses for Black Ops? Like the ones you guys have been posting. Also, what engine is Black Ops made with? Third, could someone give me a working Console Command function?

Thanks, and I will do my best to contribute to the community!

well black ops uses same engine as cod 5, and cod 5 is a modified version of cod 4 engine so it must be quake 3 engine

[seaplusplus]

well black ops uses same engine as cod 5, and cod 5 is a modified version of cod 4 engine so it must be quake 3 engine

k thanks man.

[lolbie]

uhm i want to tell you this
but if you inject a hack or edit memory or something you are banned in 2 weeks to 2 months

so you are making a detected hack already
if I am right

[seaplusplus]

uhm i want to tell you this
but if you inject a hack or edit memory or something you are banned in 2 weeks to 2 months

so you are making a detected hack already
if I am right

then what are the hacks people have made?
and will i still be banned if i'm playing solo?

[Skyline.]

solo hacks = no ban
mp hacks = external overlays = no bans

[[MPGH]master131]

Black Ops also uses CShell.dll to store its addresses.

the easiest method is using it like this

typedef void (*SendConsoleCommand_)(int a1, char *command);
SendConsoleCommand_ SendConsoleCommand = (SendConsoleCommand_)0x457290;

then call it in your renderer like this

SendConsoleCommand(0, "god\n");

However, I believe 0x457290 is not the correct address.

Here is how to find the correct address for most COD games (example from COD4):

SendCommandToConsole:

Search for string "stoprecord" or "screenshot silent" or "quit" or "pb_sv_guidrelax".

0046C90F   68 400E6D00    PUSH iw3mp.006D0E40  ; ASCII "screenshot silent"
0046C914   6A 00                PUSH 0
0046C916   6A 00                PUSH 0
0046C918   E8 93D10800    CALL iw3mp.004F9AB0 '<<<--- SendCommandToConsole function offset'
0046C91D   83C4 0C                ADD ESP,0C

#define OFFSET_SENDCOMMAND 0x4F9AB0

[seaplusplus]

Black Ops also uses CShell.dll to store its addresses.



However, I believe 0x457290 is not the correct address.

Here is how to find the correct address for most COD games (example from COD4):

directly from black ops

005BAAC0  |. E8 5BD4F9FF    |CALL BlackOps.00557F20
005BAAC5  |. 8B14B5 2450060>|MOV EDX,DWORD PTR DS:[ESI*4+3065024]
005BAACC  |. 52             |PUSH EDX
005BAACD  |. 57             |PUSH EDI
005BAACE  |. E8 4DD4F9FF    |CALL BlackOps.00557F20

that gives me 0x5baac0...

[[MPGH]master131]

Wouldn't it be the address that is called, not the address that calls it?
I think it's 0x557F20 since I believe that is where the function resides according to your assembly output....

directly from black ops

005BAAC0  |. E8 5BD4F9FF    |CALL BlackOps.00557F20
005BAAC5  |. 8B14B5 2450060>|MOV EDX,DWORD PTR DS:[ESI*4+3065024]
005BAACC  |. 52             |PUSH EDX
005BAACD  |. 57             |PUSH EDI
005BAACE  |. E8 4DD4F9FF    |CALL BlackOps.00557F20

that gives me 0x5baac0...

I don't think you looked at the example carefully.
Probably have to ask Melodia, Hell_Demon, cardoow or King-Orgy to help as I don't know enough Reverse Engineering to call myself a 'pro'.

[seaplusplus]

Wouldn't it be the address that is called, not the address that calls it?
I think it's 0x557F20 since I believe that is where the function resides according to your assembly output....



I don't think you looked at the example carefully.
Probably have to ask Melodia, Hell_Demon, cardoow or King-Orgy to help as I don't know enough Reverse Engineering to call myself a 'pro'.

Well thanks anyway! cardoow and King-Orgy said 0x5baad0 was correct...

----------------------

typedef void (*SendConsoleCommand_)(int a1, char *command);
SendConsoleCommand_ SendConsoleCommand = (SendConsoleCommand_)TheAddy;

what is a1 used for?
SendConsoleCommand(?, "cg_drawFPS 1");