Aliens vs Predator 2010 (avp 3 / avp 2010) - hacks & hacking

[paraxxxito::]

old news this is what i get 7326F1 90 90 90 90 90 this is what i nop 7326F1 who needs the other five lol .but still with the laters updates this mother fucker [7326F1] first byte when set to nop crash the game for me after 1 min. what im doing is set two hotkeys 1 for nop the other to set it back to normal value like i said i can set it up to nop but if remains to long active lets say 1 min game crashes i dont know what kind of issues ppl getting related to this problem. it only crash the game for you when you press tab? cause if that u case you're str8 mine crashes game after nop active 4 like a min. yo Sethioz try to nop you new breakpoint im pretty sure you'll get the crash even without touching tab or anything

guys search theses values with predator


float value type
nomal vision= 0.7999999523
heat vision= 1.999999583e-002

freeze normal vision value 0.7999999523 then change to heat vision and notice the color

[TeamRetox]

When you nop something you need to nop the full instruction, not just the first byte o__O
God ch00bs these days...

[paraxxxito::]

When you nop something you need to nop the full instruction, not just the first byte o__O
God ch00bs these days...

no comments

[Sethioz]

When you nop something you need to nop the full instruction, not just the first byte o__O
God ch00bs these days...

just nothing to say .. but that .. TR read the fucking topic. "full function" contains a lot more than full function, it contains more and it causes INSTANT crash. read the thing, it only works when you NOP first byte.
i know you are not stupid TR, but don't post shit if you haven't tested it yourself.
same thing applys in NFS carbon with NOS. only first byte or you crash it. I did test with olly too and talked to Luigi about it and sometimes it shows too much or less.
if it comes to Luigi and TR, then there is no doubt that i trust what Luigi says, specially if its about debugging.

anyways, solution is here:
maybe they finally added some check ( i need to confirm it )
i think that you simply press TAB and crash (or whatever button gives you objectives).
just do what i did in Resident Evil 5, instead of nopping the function, make a easy write script that adds like 99999999999 energy instead of nopping. my RE5 trainer does this, it freezes + adds and other button goes back to normal, so you press ON, shoot and then press OFF.
but again, i highly doubt, im sure that it is not crashing.

UPDATE:
confirmed, it does crash.
i have to also add that before it crashed in loading places if you had it nopped.
TR, its your time to show your 'skills' then, Nooblet said its fine to use his account, ill PM it to you.
for now ppl can use the method i used in RE5, as said before, don't nop, add crazy amount of energy.

[TeamRetox]

full instruction, as in the full set of bytes(there are no 1 byte instructions besides retn/ret).
most instructions are between 2 bytes(mov's with no absulte addresses) to 5 bytes(mov with absolute address)

e.g. mov eax, 0xAABBCCDD would be 0x56 0xDD 0xCC 0xBB 0xAA, 0x56 being eax(not sure of that one, think it was 0x56)
mov eax,ebx would be like 0x56 0x52 where 56 is eax and 52 ebx

[Sethioz]

so how exactly it's gonna work ?
i can get it working, but for others, they don't know what is EAX and so on. or you saying that you should nop 2 bytes ?

[paraxxxito::]

yo sethioz can you post you cave code to write 400 to the address?

[Sethioz]

yes i am working on the easy write script for ya guys.

[Sethioz]

done, but you don't need script.
all you do, is nop more. problem is same as with move type. olly solved it all.
so my breakpoint i get is 7333E1 and Tsearch says "7333E1 90 90 90 90 90" but what you do is here:
"7333DF 90 90 90 90 90 90 90 90"
this works, however when i clicked escape, my game froze, so simply disable after shooting it out :) ill update once i do it, but for now use the same easy write script as i showed for move type. it uses same function/s, so it should work. just replace the addresses properly.


EDIT:
still seem to be crashing upon new objectives or something. TR fix it, i can't be bothered with it right now. however it should work perfectly in multiplayer, because there's no objectives or loading places, just remember to disable it when match ends.

- added new hack into first post "Vision brightness", it works with all characters and address does not seem to be changing at all. thanks paraxxxito:: for the vision thing values.

here's also my cheat list from Tsearch.
NOTE - it DOES NOT work with your game !!! you are required to change all of the addresses/breakpoints in order to get them working, you can just use this as scheme, because i have hotkeys set. you only need to find your own breakpoints and change them and all hotkeys will work for you.

[paraxxxito::]

np bro gonna keep digging on visions and weapon damage lets see if we can find out something usefull thnks alot for the cheatlist and the info.
lol we have the same address for pred energy 7333E1 witch displays value 17 right ? what does de pred vision lock does? cause im looking forward to have all visions modes from the first level i find out thoses visions values that i post cause im trying to find the addy that holds the value for visions and then freeze alien vision mode to see if i can get to work on the first level we may need another addy that holds the offset 1/0 remember avp2 wallwalk where we needed two addies the ability and the 1/0 on/off ?

[TeamRetox]

Some interesting stuff:
function: IsLocalPlayerTalking
0x005A3560

function: IsEndingGame
0x005A5800

function: GetPlayerName
0x005A7980

function: Party->GetNumPlayers
0x005AF770

[Sethioz]

ill try to find something weapon related, like ammo or something.

TR, you are making a big mess, even i dont understand what you are trying to say. 99% of ppl have no idea what you are saying, plz some examples and what does it do. are you like able to see number of players online ? or are you able to end game in multiplay ? look at my first post and give examples like this.

[paraxxxito::]

visions

here's the laters guys i spend yesterday more than 3 hours of search after crashes and tryouts didnt find a god damn thing but the brightness addies 4bytes 8 double and float. so dont waste time looking there lol

[Sethioz]

do what i suggested, do a ranged from 0 to like 1000 or 10000. most of the good stuff is in that range and most likely float. like this weapon thing i found. somehow i just get tired of it so fast and just pfff :S

[paraxxxito::]

yeah range way better than unknown. if we cant hack the damage at leats lets try the fire rate! yo sethioz witch gun has the faster fire rate smartgun or pulse?
i thing smartgun does but i dont really see much diference between both looking the counter. i remember i found an addy in avp2 that when set up over normal value witch was 20 you could fire an entire clip in 1 second lol . basically it would be the same as having damage rate alterated cause we pullin a helluva fire looks like the flamethrower has a pretty fast fire rate too

well i dont know bout that animation thing heres the method

4bytes search type

harrison search value 4 change to lightpred search value 3 repeat the process untill you get 20 addies change to rykov and switch to pulse look close the addy that displays value 20 or 19 i dont remember right the exact value we talking 5 years ago anyways pick up the one that displays thoses values and change it to 78
now fire you pulse rifle and notice 1 clip went out in 2 seconds lol


yo sethioz you still have avp2 installed?

[Ritterkreuzträger]

Its anim-based like in AvP2. Ive done it once - dont fire - float 0, fire - float increased, then you found out the correct one try to set it to like 1ms before actually shoot.

[Sethioz]

i don't think it would work like this, but you can always try.
i have better idea, ill test it out soon. find the ammo in clip, freeze and make sure its right address, then go to that memory location and take a look around. lot of games store other weapon related things there too, like ..rate of fire lets say ? or vectors per round, max clip size...etc. its very easy to spot, because smartgun has 150 in clip (96 hex) and pulse has 99 (63 in hex). this is how ive made lot of hacks in other games, specially my unique and famous RE4 and RE5 weapon hacks.

guys this aint about avp2, plz stay in topic.

[PinPoint]

predators alien vision was coming up with a value of 0 on 4 bytes

[Sethioz]

predators alien vision was coming up with a value of 0 on 4 bytes

specify plz, don't really understand what you mean. like ... search this, then that ..etc.

[paraxxxito::]

predators alien vision was coming up with a value of 0 on 4 bytes

yeah keep it up! are you sure is coming with value 0 ? lol no wonder why i cant find the stupid alien vision. ill check out right now. also i know it dosent boost much but if you set up the breakpoint of Vision brightness to 0 you'll get really nice vision modes. im trying to locate vectors 4 marine weapons cause we really need a boost on weapons. the abilities of predators and aliens are ridiculous every attack is a 100% acurate hit. the autoaim system totally ruined this game on multiplayer. and the marine weapons dont compensate i wont get back online until i get my shit str8. also once located the value for alien vision mode freeze it and change to heat or normal vision if it dont change you know you got the addy that locks visions.beacuse that value 0 you getting on alien vision mode could be alot things

[Sethioz]

I found something more interesting.
Clip size. yes indeed, i can load like 5000 bullets into a pistol clip, you ened to reload many times to get that, because it loads 999 bullets at a time.
very easy to make, i will update first post anyways, but here it is:
search for your ammo in clip. if address is like this:

Code: Select all

4A6370D0

then clip size address will be this:

Code: Select all

4A6370D4

it is very common in games that 4 bytes are allocated. i am going thru the memory manually and im sure i will find more insteresting and unique things.

[Sethioz]

here we go baby ! Sethioz have done it once again, i found tons of stuff with my method.
bullets/grenades per shot
clip size
ammo left
max grenades

i call it "customizing weapons", because there is no point to make them seperate hacks. check first post for details, but here's the addresses and the values you need to add/substract in order to get the right one.

4A6370D0 ammo in clip
4A6370D4 +4 clip size
4A637110 +40 bullets per shot
4A58F404 - A7CCC ammo left
4A458100 -1DEFD0 grenades in clip
4A458104 -1DEFCC max grenades

UPDATE:
i have updated first post, see details in there. problem with "bullets/grenades per shot" is that it does not seem to make more damage, it is just ammo counter that goes faster. also pulse rifle gets stuck on single shot if you change it to anything else, but 1. i tried to find "infinite" ammo, but got annoyed :) pistol has infinite ammo bar and obviously something tells the game that ammo left is infinite. i found the pulse's ammo left and tried to do the math, but that memory location for pistol is empty.

[PinPoint]

yea the value for alien vision mode with pred is 0.

heat vision mode...63
alien vision mode....0
normal vision mode....0

on 4 bytes

i was trying to see if i could get marine with vision sets or find the value for smart gun or sniper scope. but because you cant change your character mid game the address gets reset when you launch into a new game so its making it aq bit difficult

[Sethioz]

you guys are confusing me, this is the same thing that i have in first post. it is the same vision "texture". you can like make it really weird. it is texture for heat vision only, alien vision has something else obviously. it is like texture +- brightness.

[paraxxxito::]

thats what im saying there's no way in hell vision modes addy display the value 0 gotta be a highter value lol. i just tested sethioz addresses and pulse seems to shoot alot bullets but it dosent do more damage either with the clip set up on 5000 or with the bullets per shot addy set to 40. fuck!

[Sethioz]

nah it is 0, it is the same thing i had alreayd. i guess PinPoint missed it on my first post :)
its this textures for visions, i have video up too about it. makes nice stuff, but crashes if you do it with breakpoint and switch to alien vision.

yeah, i noted it, that it doesn't do more damage. i just got annoyed, i demonstrated that it's possible. im sure that if you go thru all that memory range where pulse is stored, then you will find a lot.
you need to do it without loading tho. also checkpoints will fuck up memory.

[Ritterkreuzträger]

Sethioz, you are awesome :D
Ive just checked AvP3 again, and well your method is really nice, i was never expecting such way before
Also, +24 - Bullets spread, set it to 0 and you always will be shooting directly to the point on ur cross.
Thats totally awesome, i think in this way is possible to find loads of things.

[paraxxxito::]

are you saying 4A6370D0+ 24 gives the addy that holds bullet spread like no recoil? have you tested? yeah sethioz saved the day today the addresses map he posted its really usefull. fact is and is well know by ppl that has being in the hacking scene 4 long time that if you find an addy that holds the value you looking chances are you will find something useful goin up or down 3 or 4 addies. but what he pointed today demostrated we gotta use the brain lol and not just brute force lol

[Ritterkreuzträger]

Yes i tested it.
Im alaways imagined what "useful" memory addresses always very far from each one...
Also, bullets per shot DOES damage, but u havent to add +40, you have to +38. I tested it in SP, works perfect.
UPD: omg looks like its changes after every restart too, so... You need to set in CE at "Search options" tab addresses range. Like if address 40ADB16 then u choice 40AD000 to 41ADB00. M41A bullets per shoot - 10. Cant remember flamethrower"s one.

[PinPoint]

ah no way. you got the post before me. i found the no spread too last night but computer just turned off on me before i came to forum.

nice one though.

looks like plasma pulse is well en route :)

[Sethioz]

fuck i fucked it up.
grenades can not be found by ammo in clip, grenade "barrel" is totally different weapon and cannot be found like this, consider it as a whole new weapon. you need to find grenades in clip first, then from there you can go on. i edited first post.

no spread works and +38 is the fucking rate of fire !!! that is some crazy hell storm !!! i made a video too. ill update this post or reply when i have more. this is really SICK ! reminds me old good avp2 days already.

yo also guys, if you change clip size, it will be saved with the savegame ! so does max grenades. not sure about level change, but when i loaded game today, i had the same values as when i quit yesterday.

[Ritterkreuzträger]

Have you any luck with nade? Ive just tried to change its fire rate, but im failed.
Also i think its have to be mentioned what everything related to weapon stuff works in MP.

[Sethioz]

yeah same with nades, but i know what is the problem, just annoyed :)
same with pistol. there is a value that says if it is rapid fire or single shot. it means that if you keep button down, will it keep shooting or will it shoot one shot and stops. I also found the 3 shots for pistol (think i did), but it had no effect at all.

also, somebody take a look, im sure that ammo is in there. instead you can just put nades into pulse.
here's what somebody should do:

make a screenshot of memory location where pulse is stored (bullet barrel).
now find grenades and replace the memory location, it is hard, because most is in FLOAT. try using artmoney.
this should turn pulse bullet barrel into a grenade barrel.

i also tried predator weapons, but it totally fucked up lmao. i got like 3rd hand in middle of screen and was unable to move and then i crashed game by chaning energy.
it is so weird, that you are not able to change predator's energy. maybe its wrong address after all, because you cant freeze or change it or you will crash game and breakpointing it, will crash when you try to see objectives and while loading. must be wrong place.

i update first post too, but here's the awesome super pulse video:
Aliens vs Predator 2010 (avp3) - hack - super pulse rifle

[Ritterkreuzträger]

This addresses are changing even after you dies... Ive tried to made EasyWrite code based based on Sethioz"s one(Movement's speed hack), first time its takes weird effect (its has spread but it was shooting like 1 bullet per mouse click).The second time, ive thought it can accuires coz of value and setted it to smth lower then 12, but after this ive got game crashed.
So, in MP its takes huge time to activate at least 1 hack based on "Weapons customization" , in 90% times you will die during this and you have to try it again...

[Sethioz]

mine is simply PoC (proof of concept) not an actual trainer. it only demonstrates what can be done. you can't really find bp because value never changes, however it's still possible, i just have never done this.
SoftIce should find it without any hassle. or olly too, you just need to get the function.

[PinPoint]

This addresses are changing even after you dies... Ive tried to made EasyWrite code based based on Sethioz"s one(Movement's speed hack), first time its takes weird effect (its has spread but it was shooting like 1 bullet per mouse click).The second time, ive thought it can accuires coz of value and setted it to smth lower then 12, but after this ive got game crashed.
So, in MP its takes huge time to activate at least 1 hack based on "Weapons customization" , in 90% times you will die during this and you have to try it again...

the one bullet per mouse click thing. once youve changes the spread you need to change the rate of fire back to normal or more.

anytime i tried it anytime i changed spread to something big it made the rate of fire go to 0

[PinPoint]

i think i found the breakpoint for it. spread.

once youve got the spread address enable autohack and open autohack window.
click autohack on the address in the cheattable then go into the autohack window,
go into the edit options and choose set breakpoint and enter the address youve got in the cheat table in the box that comes up.
have it set on 1bpm and on read/write

a breakpoint should appear and it should be the right one
nop it out and the crosshair doesnt get any bigger

now if you go ingame and fire, another will appear and im pretty ure that thats `the actual spread breakpoint. when its set to 144 the spread goes wider but when i try to set it to something ither than nop it crashes

i found it trying to make the dma static.


the unlimited health hack, making others immortall too can be fixed. i found a tutorial about it. ill post after ive confirmd it works.

[Sethioz]

yeah you can find the breakpoint on read, but that aint same. i can change spread bigger with it, but not smaller. you need to find out what writes to this address.

[paraxxxito::]

niceeeeeee work! ok but the rate of fire and spread are poweful hacks keep it on the low guys we dont want every 1 putting a hell uva fire and ruining games its too early for that. yeah i had fun yesterday with leaderboards check survivor leaderboard lol:)

[Sethioz]

im sure that noobs doesn't even understand how to make it.
anyways i think i found a way to get spread and rate of fire without searching. you can reverse engineer address out of a breakpoint. if you can get the ammo in clip from a breakpoint, not by searching, then you can simply add 38 to that address and get rate of fire.

nah. only thing im not posting here is the leaderboard fun, it isn't really my hack anyways.
its very easy actually, lets just say that .. it is under the radar. however im quite sure that you can hack steam.exe or game.exe with a memory tool and search for your statistics too.

[paraxxxito::]

we really need to take fire rate hack online it would be pure ownage! .after trials and errors of 300 addys wow! vision address dosent wanted to show up either
[double value type] i wont perform no more searchs on visions better luck to other ppl trying to locate it. just 4 the record i searched 1,2,4,float,and double value types


Magnify values

normal = 0
zoom 3 = 2.350988702e-038

[Ritterkreuzträger]

Just tried to do it. Im not well in OllyDBG so i didnt found anything(its spotted one "write" breakpoint but its crashed the game), About "reverse enginneering", well thats sound weird for me. Ist one breakpoint affects LOADS of addresses? Thats just cant work in my understanding of all this memory stuff, so anyways ive tested it, but still same.
About ammo - why everyone thinks what there are "ammo" in game at all? Its can be just weapons without any "barrels" and "ammos" like it was in AvP2.
Also i think if someone can realise the way to make this things (weapon customization) way more faster, i think we are able to crash servers then (Well, its based on mine AvP2 experience). Theoreticlly, then you shoot you are sending packets to server and after this its sending it to players (im not sure is it possible to do via commviewer in AvP3), so prooly you can set refire rate and stuff to like 999999999999999 and server prooly get overloaded. This was one of the ways to crash servers in AvP2, but anyways, other engine, other all.

[Sethioz]

zoom didn't work. i only got the predator's zoom vision stuck on screen, but zoom was still same.

i haven't done much assembly and reverse engineering so i might be wrong here, but here's how it should be:

for example if it says [ESI+40], then you have to see what is the ESI register value and add 40 to it and get the address. for example if ammo's breakpoint would be like 30000 [ESI+40},EAX then it would mean that it is stored on the ESI+40 address. it is determined by what is in the ESI register. and EAX is the ammo value itself, if you like assembling it and put 30000 [ESI+40},0x64 then it would write 100 instead of EAX. so ammo would be 100.

[paraxxxito::]

custom texture
find you vision brightness -10 should give you right addy example my vision brightness addy 48DDCA0 -10 48DDC90 change it to float and set value to -0.1
notice the wireframe like texture you can keep playing with values to get different effects and shit

ill keep searching on that range cause we may be able to hightlight skin texturex like little details on map and hight detail texture on skins it would be extreme useful to easly detect movement and enemies

[Sethioz]

looks like i have opened a Pandora's box in avp 2010 :)
this method is good indeed, however you need to be patient in trying, which im not lately.

EDIT:
you know whats weird ? my vision brightness is still same, whenever i tried it out first (look the post times when it was made).

that vision -10 only works with heat vision and it adds highlight to light or how to say it. like those glowing places start glowing a lot. contrast i would say. added into first post.

UPDATE:
yo guys, check out the cheat engine's "pointer scan to this address". it gave tons of results, but you might find right breakpoint with it.

[paraxxxito::]

brightness addy and the -10 one are totally different it affects you normal vision to the point where you see things like wireframe and shit it also affects pred contrast visions another thing is brightness addy no matter how hight or low the value is the brightness always reach certain point and thats it the -10 addy basically if you set the value too hight you wont see shit lol :) in my opinion i think we cant locate the visions addy cause it works in this particular game totally different than in previous versions where 1 addy used to control all vision modes thats why you can only find textures and not the addy that controls all vision modes. same shit applies for weapons vision in the past weeks ive being able to locate the vision mode of smartgun but when i lock it and use it on other weapons cant see anemies behind walls or anythings so there is 1 addy for vision types on weapons 1addy witch give you wallhack and 1 for autoaim
and dont be surprised if smartgun wallhack value is diferent to the sniper rifle wallhack
rebellion code is pretty fuck up i remember avp gold from 1997 when ammo value lets say 95 in clip was stored in memory as 94 and life value 100 was stored as 198883720038 just to give you and example. so basically you can expect the most ridiculous things on this game from creating a cheat doing the most stupid things to totally fail using the most logical tactics to locate you'r value

[Sethioz]

to me, nothing changed, but the contrast of heat vision. i decreased and increasd it, but always the same. contrast also only increased on heat vision. why am i only one making videos and screenshots ???
and i agree, this engine is messed up. uses float for ammo and also that zoom and visions are chaotic. first its like 0.5, then 9.2 and then 2.3 for example, makes no sense, but i opened the door, now ppl just have to walk thru it and find what there is to find.

i think i know how to crash servers, i need somebody to test with me. who's up for it, message me in msn.

[paraxxxito::]

i cant belive u cant see the effect i also tested it yesterday online im gonna make a video of this shit. also what tool do you use to make videos ? im using fraps but the output of the file is huge. ok here is what you should get when value's set up to -0.1

<----------------------marine

<-----------------------predvision

<-----------------------another video

<----------------------and heres the winning video of all guys you really need to check out

[Sethioz]

nope, not for me. i took brightness address and substracted 10, nothing, but the contrast.
i use fraps too, but you need to compress the file, fraps makes uncompressed. i use camtasia for that purpose.
plz no further discussion about video or screenshot tools here.

[Sethioz]

hey guys, help us out. somebody test this heat vision contrast, because for me, it is only contrast, but for paraxxxito:: it turns everything upside down, like total chaos. he made a video too, very similiar to my avp2 wireframes hack, only that this one is client side only.
my guess was that it is because of ATI, im on nVidia, but he uses ATI. somebody test it out and post results and also what card you have, ati or nvidia.