> NOTE: after several updates, lot of these hacks and exploits does not work, i have not had chance to test myself. i only know that ppl have told me. Luigi also confirmed that all of his exploits have been fixed.
> For video demonstrations, see my youtube channel and search for avp2010
> Ammo trainer < changes max ammo and ammo in clip to 1mil (read included readme or follow the topic for details)
> Paraxxxito::'s Aliens vs Predator 2010 hacks blog < take a look here, if you want to see his research and what he have found
VAC is now enabled on AvP, it should not detect my hacks if you are not keeping them on more than 1-2 seconds. follow thread for more information, but use on your own risk !
///////////////////////////////////////////////////////////////////////////////////
Available hacks:
1. Unlimited:
- - ammo without reload for all human weapons
- stims/shards
- grenades for pulse rifle
3. Unlimited predator energy
4. Speed type
5. Vision customizing
6. Weapon customizing
- - clip size
- bullets per shot
- rate of fire (10 default for pulse)
- ammo left
- grenades in clip
- max grenades
- grenades per shot
- bullet spread
- ammo type
- vectors per round
8. Cloak
9. See cloaked predators/enemys
///////////////////////////////////////////////////////////////////////////////////
How to extract .ASR (asura) files
- you need quickbms
- then you need asura script, depending on what type of asura file it is (XLB, TXT ..etc)
- to find out what type of file it is, open the .asr file with text or hex editor and look at the beginning of file which says something like this:
Code: Select all
Asura HTXTCode: Select all
AsuraZlbor download it here: (contains asuraxlb script too) ///////////////////////////////////////////////////////////////////////////////////
If you do not know how to use memory tools, then read the following tutorials:
> How to hack / get unlimited ammo in single player games
> Basic game hacking tutorial & Toolz for it
///////////////////////////////////////////////////////////////////////////////////
1. unlimited:
- ammo without reload for all human weapons
- stims/pred health kits
- grenades for pulse rifle
///////////////////////////////////////////////////////////////////////////////////
Works online !
NOTE - in multiplayer, when switch picking up weapons, then it will crash your game
search for the ammo you see on screen. for example if your pistol has 18 bullets, search for it, use "Float" search type (very important).
now shoot some bullets and filter for whatever you have (shoot 3 bullets and filter for 15).
keep doing that until you end up about 4-10 addresses. only ONE of them is correct, find it.
then use debugger (tsearch's debugger or olly..or any other you like) to find the breakpoint.
then you add 3 addresses into the list and make hotkeys for them.
note, you will end up with 2 breakpoints, second one should be right. if you use wrong one, you will simply crash your game.
once you nop out the function, you will have all things mentioned above, it is because game uses same function for all.
detailed info on how to do the things mentioned above, is in the tutorials that i listed. if you still do not understand, feel free to ask more info, but before you post, read the things !
///////////////////////////////////////////////////////////////////////////////////
2. Unlimited health
///////////////////////////////////////////////////////////////////////////////////
- you need to use cheat engine for this one (Tsearch doesn't work on some reason)
- olly debugger works fine too
- select marine and select easy difficulty
- search for 128 float
- get hit and do "decreased value"
- keep filtering correspondingly to what happens to health, until you end up with 2-10 addresses
- freeze them one by one to find right one (make sure its not visible, but actualy health, make sure you dont die).
- right click the right address
- select "find out what writes to this address"
- now go get hit and you should see 2 breakpoints popping up (or one) one is for increasing health and other is for decreasing
- right click the right one and "replace with code that does nothing (nop)"
- make sure you got right breakpoint
you are done in CE, now restart avp.exe and start Tsearch
add all those 5 addresses into cheat list (1 breakpoint on 5 bytes)
it is explained in the tutorials mentioned above, so read it.
in short, you add 5 addresses that you get. for example to me i did this:
5463FC
5463FD
5463FE
5463FF
546400
all on 1 byte, then i made hotkey to set all values to 144 (144 in dec is 90 HEX = NULL value aka NOP function). as i said, its all explained in the tutorials mentioned above.
Works online if you are host of the game
NOTE: it has to be marine and easy, in other difficultys it is not 128. also if you do filtering, you can not search for 128 exact again, cuz it will be 128.900342 something, so exact will fail, exact can only be done on first search.
NOTE2: there also seem to be some weird shit going on, like Nooblet mentioned, all will become invincible, but i was able to kill alien as marine without special finish move, so i guess it still is possible to kill em, but as alien, i was not able to kill marine without using special finishing move, so try and test and shit.
///////////////////////////////////////////////////////////////////////////////////
3. Unlimited Predator Energy
///////////////////////////////////////////////////////////////////////////////////
use float type
1 bar of energy = 5
so if you have 10 bars of energy, then you search for 50
9 bars = 45
if you filter 2 times, it's enought.
you will end up with 3 addresses. you can not freeze or change the value, it will crash.
so what you do, is use Tsearch's "autohack"
you will take the middle address (it should be right) and put into autohack
then shoot, if you get 2 breakpoints, then its wrong.
if you shoot, then you need to get one breakpoint
once you find it, highlight it and then click on "tmk" button and then button script.
you will see this:
Code: Select all
Patched script:
Poke 730CC1 90 90 90 90 90 90here's what you do:
if your bp is 730CC1, then you need 8 bytes in total. you take few bytes before what Tsearch shows, like so:
Code: Select all
730CBF 90 90 90 90 90 90 90 90NOTE: you need to disblae it when you get new objective, pause game or check the objectives, foolow the thread to find out more about this ! work in progress, this game is not so debug friendly and uses very weird functions.
///////////////////////////////////////////////////////////////////////////////////
4. Speed type
///////////////////////////////////////////////////////////////////////////////////
here's the values to search for:
Alien:
stop - 0
walk - 0.5
run - 1
sprint - 2
once you have found the right address (you end up with 2 or 3), breakpoint it.
on my case it is 6A9741.
now substract 2 from it (in hex).
so i get 6A973F
now open up "easy write" in Tsearch and write your code in there:
this goes into upper window (on)
Code: Select all
offset 0x10DD7
mov dword ptr ds:[esi+10],0x41200000
ret
offset 0x6A973F
call 0x10DD7Code: Select all
offset 0x6A973F
hex F30F114E10- 0x10DD7 > this is empty memory location where i wrote my own code
- 0x6A973F > this is my breakpoint example (use yours what you found)
- 0x41200000 > value to set it to, you need some converting skills for this. (41200000 is 10 in float)
now make hotkey for this script and you are done.
///////////////////////////////////////////////////////////////////////////////////
5. Vision customizing
///////////////////////////////////////////////////////////////////////////////////
- Brightness
byte search
63 - heat vision
0 - normal
you can play around with it, once you find breakpoint you can nop the line, so it never turns to blue, but you will still see the aura around humans, haven't tested with alien vision yet.
user this as a base address, go to that memory location in hex view (memory dump) and look for the other addresses.
- Brightness 2
float
nomal vision = 0.7999999523
heat vision = 1.999999583e-002
alien vision = 0.5
marine vision = 1.5
- Contrast on heat vision
float
normal vision = 0.75
heat vision = 1.200000048
alien vision = 0.75
- Brightness for all characters
float
marine = 7
pred normal = 7
pred heat = 10
pred alien = 7
alien = 9
in menus = 10
- Clear / Blue vision modes
float
heat vision = 1
normal vision = 0
alien vision = 0 (do not use this for searching)
you will end up around 6 addresses, but you only need one.
set value to 2 for dark blue and red heat vision
set value to 0 for clear heat vision with highlighting
for more info, follow the topic and paraxxxito's posts (page 5-6)
make hotkey, to add and substract 0.1 - 1 from/to value. you can increased/decrease easily then. brightness works with all 3 vision modes, it does not give much boost to visions, but it is extremely useful on alien vision, because you are able to see things way brighter than normal. same with normal vision.
brightness works with all races, but doesn't have much effect on marine.
Brightness for all characters is the most interesting, it actually gives you 2 extra vision modes or 3. one is very bright (value of 0.1), then other is blindingly bright (0) and then the negative, which looks so cool (-0.1 or below).
Contrast seem to be working only with heat vision.
///////////////////////////////////////////////////////////////////////////////////
6. Weapon customizing
///////////////////////////////////////////////////////////////////////////////////
all addresses must be on FLOAT type.
here's how to find the first thing, clip size:
first find the ammo in clip (look hack number 1)
if your ammo in clip address is like this:
Code: Select all
4A637D00Code: Select all
4A637D04- 4A6370D0 ammo in clip
4A6370D4 [+ 4] clip size
4A6370F8 [+ 28] bullet spread
4A637110 [+ 40] bullets per shot
4A637104 [+ 34] weapon range
4A637108 [+ 38] rate of fire (10 default for pulse)
cannot be calculated - ammo left
4A458100 grenades in clip
4A458104 [+4] max grenades
4A458140 [+40] grenades per shot
- avp2010memoryview.JPG (50.04 KiB) Viewed 265656 times
I will keep ammo type and vectors per round as secret for now, otherwise some dumb shit like TH steals it and says that he made it all. lets see if this noob th (technological hatred) can figure it out, he is such a "hot shot".
NOTES:
- consider grenades as a stand alone weapon. if you want max grenades for example, then you need to find grenades in clip first (the on screen value)
- if you save game with like 8000 grenades, then it will be saved, but i don't think it goes on to the next level.
How to get it working without searching
ready ? sure ? because this is in genius :)
mov DWORD PTR DS:[ECX+10],0x4CBEBC20 < this function will set your ammo in clip to 999999 or so.
fire rate is also in ECX register, but 38 bytes seperate from ammo in clip. what you do, is very easy:
mov DWORD PTR DS:[ECX+38],0x43FA0000 < this sets your fire rate for any weapon to 500
noticed the +38 part ? this is the "magic" part. you just calculate, just like you need to do in order to find the address for spread, rate of fire ..etc. spread would be +28 in the function.
these are examples, use your mathematic skills that you learned in 1st grade.
values are behind "0x". like "0xyour_value_here"
it is in FLOAT and reversed, google if you don't know how to get it, or read page 6.
in hex, 500 float will look like this > 00 00 FA 43 and into easy write you put this > 43FA0000
get it ? reversed bytes.
don't use tsearch to get the breakpoint. it breaks in middle of the fucking function and makes a mess. use olly. however if you get breakpoint with tsearch, then just go that breakpoint in olly.
///////////////////////////////////////////////////////////////////////////////////
7. Crosshairs
///////////////////////////////////////////////////////////////////////////////////
4bytes
1 on the crosshair you like
0 on other weapons
short explanation how it works:
game allocates 1 address for each weapon. like so:
pulse 1000
pistol 2000
shotgun 3000
etc..
if you have shotgun out, then shotgun address' value is 1 and rest 0. if you take pulse rifle out, then pulse address' value is 1 and rest 0.
once you find address (about 4, pick out one that freezes it, you will have 2 crosshairs stuck on screen)
then find breakpoint and nop the function while you have your favorite crosshair (weapon) out.
you can also have multiple crosshairs stacked on top of eachother.
- how to disable crosshair
once you have breakpointed it in Tsearch. select the breakpoint and go to disassembler tab
right click on first line and select "register"
go to register tab
select EAX from drop down box and thick the checkbox
replace value with 0
- how to enable all crosshairs at once (really cool effect)
same as disabling, but you replace with value of 1
///////////////////////////////////////////////////////////////////////////////////
8. Cloak
///////////////////////////////////////////////////////////////////////////////////
only for pred, for now.. read page 7 for more info about it and see progress.
float
1 - cloaked
0 - uncloaked
///////////////////////////////////////////////////////////////////////////////////
9. See cloaked predators / enemys
///////////////////////////////////////////////////////////////////////////////////
do hack number 8 first.
once you have found the address, put a breakpoint on it.
you should get 4-5 breakpoints.
add them into "cheat list" under 1 byte
all that has value of 20, change value to something else, like 10.
now predators will become white and cloaked predators will be blinking white.
NOTE - it will crash a game if it is enabled in an loading point or if you press escape.
///////////////////////////////////////////////////////////////////////////////////
Leaderboard fun
///////////////////////////////////////////////////////////////////////////////////
just a proof that it is possible, not going to post it here or everybody will start doing it. ///////////////////////////////////////////////////////////////////////////////////
anyways my goal is to get back all the hacks i had/have in avp2.
Special thanks to:
Nooblet9000
paraxxxito::
Luigi Auriemma
