API tools faq
paste
TheRouletteBoi

sprx_cracking

TheRouletteBoi
Oct 3rd, 2022 (edited)
417
1
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
C++ 89.13 KB | None | 1 0
raw download clone embed print report
  1. AW_Paradox.h
  2. --------------
  3.  
  4. /*
  5.  
  6.  
  7. process_analyzing_paradox_aw
  8. // write process that nulls out a function
  9. SetNop(0x32CAEB4); // null do_auth function
  10. SetNop(0x32CAF08); // null do_auth function part 2
  11.  
  12. SetNop(0x32CAF78); // null do_auth function
  13. SetNop(0x32CAFCC); // null do_auth function part 2
  14.  
  15. SetNop(0x32CB4B8); // null do_auth function
  16. SetNop(0x32CB50C); // null do_auth function part 2
  17.  
  18. SetNop(0x32CB814); // null do_auth function
  19. SetNop(0x32CB868); // null do_auth function part 2
  20.  
  21. //SetNop(0x32CCA20); // decrypt entry
  22. //SetNop(0x32CCA74); // decrypt entry part 2
  23.  
  24.  
  25.  
  26.  
  27.  
  28. SetNop(0x32CABA4); // read license key nop
  29. SetBlr(0x32C4198); // stop reading key
  30.  
  31. SetUint(0x32F0AA0, 0xD00279A0); // licene key check
  32. SetUint(0x10031560, 0x4AFA2C);  // hook check
  33. SetNop(0x32CBD0C); // update module
  34. SetUint(0x10021590, 0x244); // socket handle check for connect
  35. SetNop(0x32CAD24); // stop connect to paradox.sh
  36. SetUint(0x32F0AA4, 0x12B344); // auth send recv check
  37.  
  38. SetNop(0x32CB8C4); // thread get admin commands
  39. SetNop(0x32CA9E0); // admin command to shutdown console
  40.  
  41.  
  42. // socket send trampoline
  43. SetNop(0x32CAE8C); // send an encrypted string
  44. SetNop(0x32CB2E0);
  45. SetNop(0x32CB310);
  46. SetNop(0x32CB36C); // socket send trampoline psid
  47. SetNop(0x32CB5C4);
  48. SetNop(0x32E6ACC);
  49. SetNop(0x32E6BC0);
  50.  
  51. // socket recv
  52. SetNop(0x32CAF50);
  53. SetNop(0x32CB554);
  54. SetNop(0x32CB5F4);
  55. SetNop(0x32E6B00);
  56. SetNop(0x32E6BF0);
  57.  
  58.  
  59.  
  60. unsigned int hook1_bytes[] = { 0x3D60032E, 0x396BE9F4, 0x7D6903A6, 0x4E800420 };
  61. WriteGameProcessMemory(0x4CAC9C, (const void *)&hook1_bytes, sizeof(hook1_bytes));
  62.  
  63. unsigned int hook1_orginal_bytes[] = { 0x3D60004D, 0x396BACAC, 0x7D6903A6, 0xF821FF91, 0x7C0802A6, 0xF8010080, 0x8083001C, 0x4E800420, };
  64. WriteGameProcessMemory(0x32DE42C, (const void *)&hook1_orginal_bytes, sizeof(hook1_orginal_bytes));
  65.  
  66.  
  67. unsigned int hook2_bytes[] = { 0x3D60032E, 0x396B0500, 0x7D6903A6, 0x4E800420 };
  68. WriteGameProcessMemory(0x1D0490, (const void *)&hook2_bytes, sizeof(hook2_bytes));
  69.  
  70. unsigned int hook2_orginal_bytes[] = { 0x3D60001D, 0x396B04A0, 0x7D6903A6, 0xF821FC81, 0x7C0802A6, 0xF8010390, 0xDBE10378, 0x4E800420 };
  71. WriteGameProcessMemory(0x32E04B4, (const void *)&hook2_orginal_bytes, sizeof(hook2_orginal_bytes));
  72.  
  73.  
  74. unsigned int hook3_bytes[] = { 0x3D60032E, 0x396BED14, 0x7D6903A6, 0x4E800420 };
  75. WriteGameProcessMemory(0x2390E0, (const void *)&hook3_bytes, sizeof(hook3_bytes));
  76.  
  77. unsigned int hook3_orginal_bytes[] = { 0x3D600024, 0x396B90F0, 0x7D6903A6, 0xF821FF91, 0x7C0802A6, 0xF8010080, 0x3C800004, 0x4E800420 };
  78. WriteGameProcessMemory(0x32DECEC, (const void *)&hook3_orginal_bytes, sizeof(hook3_orginal_bytes));
  79.  
  80.  
  81. unsigned int hook4_bytes[] = { 0x3D60032E, 0x396B5DC0, 0x7D6903A6, 0x4E800420 };
  82. WriteGameProcessMemory(0x779CE8, (const void *)&hook4_bytes, sizeof(hook4_bytes));
  83.  
  84. unsigned int hook4_orginal_bytes[] = { 0x3D600078, 0x396B9CF8, 0x7D6903A6, 0x39800000, 0x658C009C, 0x818C0830, 0xF8410028, 0x4E800420 };
  85. WriteGameProcessMemory(0x32E5D98, (const void *)&hook4_orginal_bytes, sizeof(hook4_orginal_bytes));
  86.  
  87.  
  88.  
  89.  
  90.  
  91.  
  92.  
  93.  
  94.  
  95.  
  96.  
  97.  
  98.  
  99.  
  100. process_cracking_AW_Paradox_Sep_24TH_2019 first one
  101. SetReturnTrue(0x32CABA4);
  102. //SetNop(0x32CABA4); // read license key nop
  103.  
  104. uint32_t license_and_auth_vars[] = { 0xD00279A0, 0x0012B344, 0x01000000, 0x00050000 };
  105. SetUintArray(0x32F0AA0, license_and_auth_vars, sizeof(license_and_auth_vars));
  106.  
  107. SetUint(0x330041C, 0x000003F2); // spoof socket handle
  108. SetUint(0x10021590, 0x000003F2); // spoof socket handle check
  109. SetNop(0x32CAD24); // stop connect to paradox.sh
  110.  
  111.  
  112. SetNop(0x32CAE8C); // send an encrypted string
  113. SetNop(0x32CAEB4); // null do_auth function
  114. SetNop(0x32CAF08); // null do_auth function part 2
  115. SetNop(0x32CAF50); // socket recv something
  116. SetNop(0x32CAF78); // null do_auth function
  117. SetNop(0x32CAFCC); // null do_auth function part 2
  118. SetNop(0x32CB2E0); // send something
  119. SetNop(0x32CB310); // send something
  120. SetNop(0x32CB36C); // send psid
  121. SetNop(0x32CB4B8); // null do_auth function
  122. SetNop(0x32CB50C); // null do_auth function part 2
  123. SetNop(0x32CB554); // recv something
  124. SetNop(0x32CB5C4); // send something
  125. SetNop(0x32CB5F4); // recv something
  126. SetNop(0x32CB608); // no notify incase we crash bc of empty buffer??
  127. SetNop(0x32CB7A8); // no snprintf incase we crash bc of empty buffer?
  128. SetNop(0x32CB7B4); // no notify incase we crash bc of empty buffer?
  129.  
  130. SetUint(0x32F0764, 0x000022FD); // addresses var check
  131.  
  132. unsigned int address_data[] = {
  133.     0x0000000B, 0x003D9920, 0x009D5530, 0x001BBD50, 0x009D5530, 0x004EB158,
  134.     0x009D5530, 0x00244BB0, 0x009D5530, 0x005EEC20, 0x009D5530, 0x005FB288,
  135.     0x009D5530, 0x005FAD38, 0x009D5530, 0x005FAFD0, 0x009D5530, 0x00010D90,
  136.     0x009D5530, 0x003FF4A0, 0x009D5530, 0x0022B810, 0x009D5530, 0x006E2768,
  137.     0x009D5530, 0x006E25F0, 0x009D5530, 0x00232658, 0x009D5530, 0x003AF41C,
  138.     0x009D5530, 0x00227318, 0x009D5530, 0x00187830, 0x009D5530, 0x001B2CB0,
  139.     0x009D5530, };
  140. WriteGameProcessMemory(0x32F07B4, (const void *)&address_data, sizeof(address_data));
  141.  
  142. SetNop(0x32CB7D0); // request addresses from server maybe
  143. SetNop(0x32CB814); // null do_auth function
  144. SetNop(0x32CB868); // null do_auth function part 2
  145. SetNop(0x32CB8C4); // thread get admin commands
  146. SetNop(0x32CBD0C); // update module
  147.  
  148.  
  149. SetBranch(0x32CABB0, 0x32CACD8); // skip the bullshit
  150. SetBranch(0x32CAD28, 0x32CB7B8); // skip the bullshit
  151. SetBranch(0x32CB8D0, 0x32CBE9C); // skip the bullshit
  152.  
  153. */
  154.  
  155.  
  156. void process_cracking_AW_Paradox_Sep_24TH_2019()
  157. {
  158.     SetReturnTrue(0x32CABA4); // read license key return true
  159.     uint32_t license_and_auth_vars[] = { 0xD00279A0, 0x0012B344, 0x01000000, 0x00050000 };
  160.     SetUintArray(0x32F0AA0, license_and_auth_vars, sizeof(license_and_auth_vars));
  161.     SetNop(0x32CAD24); // stop connect to paradox.sh
  162.  
  163.     uint32_t address_data[] = {
  164.         0x0000000B, 0x003D9920, 0x009D5530, 0x001BBD50, 0x009D5530, 0x004EB158,
  165.         0x009D5530, 0x00244BB0, 0x009D5530, 0x005EEC20, 0x009D5530, 0x005FB288,
  166.         0x009D5530, 0x005FAD38, 0x009D5530, 0x005FAFD0, 0x009D5530, 0x00010D90,
  167.         0x009D5530, 0x003FF4A0, 0x009D5530, 0x0022B810, 0x009D5530, 0x006E2768,
  168.         0x009D5530, 0x006E25F0, 0x009D5530, 0x00232658, 0x009D5530, 0x003AF41C,
  169.         0x009D5530, 0x00227318, 0x009D5530, 0x00187830, 0x009D5530, 0x001B2CB0,
  170.         0x009D5530, };
  171.     SetUintArray(0x32F07B4, address_data, sizeof(address_data)); // addresses loaded from server
  172.  
  173.     SetNop(0x32CB7D0); // request addresses from server maybe
  174.     SetNop(0x32CB8C4); // thread get admin commands
  175.     SetNop(0x32CBD0C); // update module
  176.     SetBranch(0x32CABB0, 0x32CACD8);  // skip the bullshit
  177.     SetBranch(0x32CAD28, 0x32CB7B8);  // skip the bullshit
  178.     SetBranch(0x32CB8D0, 0x32CBE9C);  // skip the bullshit
  179. }
  180.  
  181.  
  182.  
  183.  
  184.  
  185.  
  186.  
  187.  
  188.  
  189.  
  190. BO1_Paradox.h
  191. --------------
  192.  
  193.  
  194. // add 0x20000   for it to work with 2 sprx's, only if the paradox is the second one loaded
  195. void process_cracking_BO1_Paradox_Sep_26TH_2019()
  196. {
  197.     //uint32_t sprx_base_address1 = 0x028F0000;
  198.     //uint32_t sprx_base_address2 = 0x02910000;
  199.     //uint32_t next_base_address_size = sprx_base_address2 - sprx_base_address1; // 0x20000
  200.     //uint32_t next_base_address_size = 0x20000;
  201.  
  202.     SetReturnTrue(0x28F7CEC); // read license key return true
  203.     uint32_t license_and_auth_vars[] = { 0xD0025720, 0x000EAAA5, 0x01000000, 0x00050000 };
  204.     SetUintArray(0x29109F0, license_and_auth_vars, sizeof(license_and_auth_vars));
  205.     SetNop(0x28F7E6C); // stop connect to paradox.sh
  206.  
  207.     uint32_t address_data[] = { 0x00D223C4, 0x00C3DFB8, 0x00C3DFBC, 0x00C3DFC0 };
  208.     SetUintArray(0x291EBDC, address_data, sizeof(address_data)); // addresses loaded from server
  209.  
  210.     uint32_t address_data2[] = {
  211.         0x004C4FF0, 0x00B576E8, 0x00754B48, 0x00B576E8,
  212.         0x00399CC8, 0x00B576E8, 0x007A21E0, 0x00B576E8,
  213.         0x001B74F0, 0x00B576E8, 0x007458D8, 0x00B576E8,
  214.         0x00734350, 0x00B576E8, 0x00751940, 0x00B576E8,
  215.         0x00754410, 0x00B576E8, 0x0055A098, 0x00B576E8,
  216.         0x00559E98, 0x00B576E8, 0x000F4BC8, 0x00B576E8,
  217.         0x000FD7F0, 0x00B576E8, 0x00734570, 0x00B576E8,
  218.         0x005B99C8, 0x00B576E8, 0x003A5650, 0x00B576E8,
  219.         0x001A1C98, 0x00B576E8,
  220.     };
  221.  
  222.     SetUintArray(0x29107B0, address_data2, sizeof(address_data2)); // addresses loaded from server
  223.  
  224.  
  225.     SetNop(0x28F8918); // request addresses from server
  226.     SetNop(0x28F8A0C); // thread get admin commands
  227.     SetNop(0x28F8E54); // update module
  228.  
  229.     SetBranch(0x28F7CF0, 0x28F7E20);  // skip the bullshit
  230.     SetBranch(0x28F7E70, 0x28F8900);  // skip the bullshit
  231.     SetBranch(0x28F8A18, 0x28F8FE4);  // skip the bullshit
  232. }
  233.  
  234.  
  235.  
  236.  
  237.  
  238.  
  239. BO2_Paradox.h
  240. ------------------------
  241.  
  242.  
  243.  
  244. void process_cracking_BO2_Paradox_Sep_24TH_2019()
  245. {
  246. #ifdef enable_debugging
  247.  
  248.     // all this will cause the sprx to say that there is an update avaliable but the functions will not be nulled. also no auth success
  249.     SetNop(0x30FC894); // null decrypt_functions
  250.     SetNop(0x30FC8E8);
  251.  
  252.     SetNop(0x30FB0EC); // null do_auth
  253.     SetNop(0x30FB140);
  254.  
  255.     SetNop(0x30FB1B0); // null do_auth
  256.     SetNop(0x30FB204);
  257.  
  258.     SetNop(0x30FB6F0); // null do_auth
  259.     SetNop(0x30FB744);
  260.  
  261.     SetNop(0x311DB2C); // null do_auth
  262.     SetNop(0x311DB80);
  263.  
  264.     SetNop(0x3124BE4); // null trampoline_function
  265.     SetNop(0x3124C38);
  266.  
  267.     SetNop(0x3124C78); // null menu setup
  268.     SetNop(0x3124CCC);
  269.  
  270.     SetNop(0x3124D0C); // null paradox_init
  271.     SetNop(0x3124D60);
  272.  
  273.     SetNop(0x3124DA0); // null trampoline_create_thread
  274.     SetNop(0x3124DF4);
  275.  
  276.     SetNop(0x311D2C0); // null hook function start
  277.     SetNop(0x311D314);
  278.  
  279.     SetNop(0x311D354); // null setup hooks
  280.     SetNop(0x311D3A8);
  281.  
  282.     SetNop(0x311D3E8); // null trampoline_hook_function_start
  283.     SetNop(0x311D43C);
  284.  
  285.  
  286. #elif enable_cracking
  287.  
  288.     sleep(500); // recently added to fix freezing
  289.  
  290.     SetReturnTrue(0x30FADB8); // read license key return true
  291.     //uint32_t license_and_auth_vars[] = { 0x140CF261, 0xD0025C50, 0x001337EA, 0x01000000 };
  292.     uint32_t license_and_auth_vars[] = { 0x1CC1D99A, 0xD0025C50, 0x001337EA, 0x01000000 };
  293.     SetUintArray(0x3140E40, license_and_auth_vars, sizeof(license_and_auth_vars));
  294.     SetNop(0x30FAF5C); // stop connect to paradox.sh
  295.  
  296.  
  297.     uint32_t xor_addresses[] = {
  298.         /*
  299.         0x14DA7BB9, 0x14EEDD79, 0x14EEDD7D, 0x14EEDD41, 0x1408DDA9, 0x141D9745,
  300.         0x147AC041, 0x147950A1, 0x147A5189, 0x147A5B71, 0x14493CF9, 0x14493CA1,
  301.         0x140DABE9, 0x140DA569, 0x14441F09, 0x14086541, 0x143DCE79, 0x147A5625,
  302.         0x140A5FF9, 0x140A5FAD, 0x141C2671, 0x14315B29, 0x14315449, 0x14795159,
  303.         0x147957B1, 0x1453FBA9, 0x144ADC55, 0x1408A499
  304.         */
  305.  
  306.         0x1C175042, 0x1C23F682, 0x1C23F686, 0x1C23F6BA, 0x1CC5F652, 0x1CD0BCBE,
  307.         0x1CB7EBBA, 0x1CB47B5A, 0x1CB77A72, 0x1CB7708A, 0x1C841702, 0x1C84175A,
  308.         0x1CC08012, 0x1CC08E92, 0x1C8934F2, 0x1CC54EBA, 0x1CF0E582, 0x1CB77DDE,
  309.         0x1CC77402, 0x1CC77456, 0x1CD10D8A, 0x1CFC70D2, 0x1CFC7FB2, 0x1CB47AA2,
  310.         0x1CB47C4A, 0x1C9ED052, 0x1C87F7AE, 0x1CC58F62
  311.     };
  312.  
  313.     uint32_t malloc_0x70_address = GetGameProcessUint32(0x3130094); // 0x100189E0
  314.     //printf("malloc_0x70_address: 0x%X\n", malloc_0x70_address);
  315.     if (malloc_0x70_address != 0)
  316.         SetUintArray(malloc_0x70_address, xor_addresses, sizeof(xor_addresses)); // fill up xor address array
  317.  
  318.     uint32_t server_data[] = {
  319.         0x00000000, 0x00000004, 0x00000008, 0x0000000C, 0x00000010, 0x00000000,
  320.         0x00000014, 0x00000000, 0x00000018, 0x00000000, 0x0000001C, 0x00000000,
  321.         0x00000020, 0x00000000, 0x00000024, 0x00000000, 0x00000028, 0x00000000,
  322.         0x0000002C, 0x00000000, 0x00000030, 0x00000000, 0x00000034, 0x00000000,
  323.         0x00000038, 0x00000000, 0x0000003C, 0x00000000, 0x00000040, 0x00000000,
  324.         0x00000044, 0x00000000, 0x00000048, 0x00000000, 0x0000004C, 0x00000000,
  325.         0x00000050, 0x00000000, 0x00000054, 0x00000000, 0x00000058, 0x00000000,
  326.         0x0000005C, 0x00000000, 0x00000060, 0x00000000, 0x00000064, 0x00000000,
  327.         0x00000068, 0x00000000, 0x0000006C
  328.     };
  329.     SetUintArray(0x3150EF0, server_data, sizeof(server_data)); // offsets for '0x100189E0' structure
  330.  
  331.  
  332.     //SetNop(0x30FAD58); // request addresses from server. actually needed bc the function inside uses malloc
  333.     SetNop(0x30FBB2C); // update module
  334.     SetBranch(0x30FADC4, 0x30FAEEC);  // skip the bullshit
  335.     SetBranch(0x30FAF60, 0x30FB800);  // skip the bullshit
  336.     SetBranch(0x30FAB04, 0x30FAD40);  // skip the bullshit
  337.     SetBranch(0x312525C, 0x31255B0);  // skip everything except for malloc
  338.  
  339.     //SetUint(0x3130094, 0x100189E0); // force malloc address
  340.     //SetUint(0x3130090, 0x10018990); // force malloc address
  341.  
  342.     // other malloc addresses
  343.     // malloc_0x70_address: 0x100189B0
  344.     // malloc_0x20_address: 0x10018960
  345.  
  346.     //uint32_t malloc_0x20_address = GetGameProcessUint32(0x3130090); // 0x10018990
  347.     //printf("malloc_0x20_address: 0x%X\n", malloc_0x20_address);
  348.  
  349.  
  350.     SetUint(0x10021594, 0xDE7BBE46); // xor value 2
  351.  
  352.  
  353.     //SetUint(0x31507E8, 0x312A240); // do_auth param  crashes game
  354.  
  355.     SetBranch(0x311DBAC, 0x311DC24);  // skip thread exit  // crashes sometimes if load too quickly or too slowly
  356.  
  357. #endif
  358. }
  359.  
  360.  
  361.  
  362.  
  363.  
  364.  
  365.  
  366.  
  367.  
  368.  
  369. BO2_sprxio.h
  370. ------------------
  371.  
  372.  
  373. bool run_once_sprxio = true;
  374.  
  375. void process_cracking_BO2_Sprxio_Nov_2ND_2019()
  376. {
  377. #ifdef enable_debugging
  378.  
  379.     // temp to debug it
  380.     //SetNop(0x3102D24); // stop the memset from being call to see whats in the buffer
  381.     //SetNop(0x310A2CC); // free
  382.     //SetNop(0x310A54C); // free 2
  383.     //SetNop(0x3109A50); // memset
  384.  
  385.     SetBlr(0x3102D24);
  386.    
  387.    
  388.  
  389.  
  390. #elif enable_cracking
  391.  
  392.  
  393.     SetBlr(0x3101A34); // block read license key
  394.     SetBlr(0x3101CBC); // block updates
  395.     SetBlr(0x3101C28); // block get psid
  396.     SetBlr(0x3101E7C); // block auth sprx
  397.     SetBlr(0x3102190); // block auth welcome
  398.     SetUint(0x313D224, 0x00000001); // has auth success
  399.     /*
  400.  
  401.     0x311C52C = 1001D140 1001D3A0 1001CEE0
  402.     0x311c550 = 00000002
  403.     0x311C88C  10021990 00D49540 5DBE770C
  404.  
  405. 1001C948  00000000 00000000 00000000 00000000 00000000 00000000
  406. 1001C960  00000000 00000000 00000000 00000000 00000000 00000000
  407. 1001C978  6348BE58 00000053 1001C978 50726F20 4D6F6400 00000000
  408. 1001C990  1001014C 00000007 0000000F 0310D1AD 0311CB60 00000000
  409. 1001C9A8  00000000 00000005 00000000 1002028D 96583400 00000000
  410. 1001C9C0  00000000 00000000 6348BE58 00000013 00D495E0 00D67E98
  411. 1001C9D8  6348BE58 00000013 00D49600 00D67E98 6348BE58 00000053
  412. 1001C9F0  00000000 4368616D 73000000 00000000 00000000 00000005
  413. 1001CA08  0000000F 0310D1AD 0311CB68 00000000 00000000 00000002
  414. 1001CA20  1002028C 00000000 000076BD 9C0076BD A0001FCC 8C0052DF
  415. 1001CA38  6348BE58 00000023 10020A10 10020A60 10020AB0 10020B00
  416. 1001CA50  10020B50 10020BA0 6348BE58 00000053 5400313C 4368616E
  417. 1001CA68  6765204E 616D6500 180002F4 0000000B 0000000F 0310D1B4
  418. 1001CA80  030076A9 10003155 AC00349F 00000000 00000000 00000000
  419. 1001CA98  00001185 BC0077E1 2C0075A3 380015F0 6348BE58 00000053
  420. 1001CAB0  C0005EFF 456E6420 47616D65 00000E9F BC00052A 00000008
  421. 1001CAC8  0000000F 0310D1AD 0311CB70 00000000 00000000 00000000
  422. 1001CAE0  00000000 00000000 00003DA6 28007632 20000000 00000000
  423. 1001CAF8  6348BE58 00000053 00000000 43726173 68204761 6D650000
  424. 1001CB10  00000000 0000000A 0000000F 0310D1AD 0311CB78 00000000
  425. 1001CB28  00000000 00000000 00000000 00000000 00000000 00000000
  426. 1001CB40  00000000 00000000 6348BE58 00000043 00000000 100202E0
  427. 1001CB58  10020314 10020314 00000000 41696D62 6F74204D 656E7500
  428. 1001CB70  00000000 0000000B 0000000F 00000000 00000000 00000000
  429. 1001CB88  6348BE58 00000053 00000000 456E6162 6C656400 00000000
  430. 1001CBA0  00000000 00000007 0000000F 0310D144 03000000 00000000
  431. 1001CBB8  00000000 00000002 1002028E 00000000 00000000 00000000
  432. 1001CBD0  00000000 00000000 6348BE58 00000053 00000000 41696D62
  433. 1001CBE8  6F74204B 65790000 00000000 0000000A 0000000F 0310D1AD
  434. 1001CC00  0311CB88 00000000 00000000 00000003 0311C4C4 10020298
  435. 1001CC18  04000000 00000000 00000000 00000000 6348BE58 00000053
  436. 1001CC30  00000000 54617267 65742042 6F6E6500 00000000 0000000B
  437. 1001CC48  0000000F 0310D1AD 0311CB80 00000000 00000000 00000003
  438. 1001CC60  0311C4D8 10020295 07000000 00000000 00000000 00000000
  439. 1001CC78  6348BE58 00000053 65000000 53696C65 6E74204D 6F646500
  440. 1001CC90  F7000000 0000000B 0000000F 0310D144 03000000 37000000 ...............D....7...
  441. 1001CCA8  D3000000 00000002 1002028F 00000000 00000000 B0000000 ........................
  442. 1001CCC0  D7000000 D5000000 6348BE58 00000053 FD000000 4175746F ........cH.X...S....Auto
  443. 1001CCD8  2053686F 6F740000 DA000000 0000000A 0000000F 0310D144  Shoot.................D
  444. 1001CCF0  03000000 B9000000 02000000 00000002 10020291 00000000 ........................
  445. 1001CD08  00000000 66000000 E0000000 AA000000 6348BE58 00000053 ....f...........cH.X...S
  446. 1001CD20  B8000000 4175746F 2057616C 6C000000 2A000000 00000009 ....Auto Wall...*.......
  447. 1001CD38  0000000F 0310D144 03000000 6D000000 89BC7C56 00000002 .......D....m.....|V....
  448. 1001CD50  10020292 00000000 00000000 00000000 00000000 00000000 ........................
  449. 1001CD68  6348BE58 00000053 00000000 4E6F2053 70726561 64000000 cH.X...S....No Spread...
  450. 1001CD80  00000000 00000009 0000000F 0310D144 03000000 00000000 ...............D........
  451. 1001CD98  00000000 00000002 10020290 00000000 00000000 00000000 ........................
  452. 1001CDB0  00000000 00000000 6348BE58 00000023 1001D210 1001CB50 ........cH.X...#.......P
  453. 1001CDC8  10020410 10020800 10020BF0 10021310 6348BE58 00000013 ................cH.X....
  454. 1001CDE0  00D49560 00D67E98 6348BE58 00000053 00000000 456E6162 ...`..~.cH.X...S....Enab
  455. 1001CDF8  6C652041 6E746920 41696D00 0000000F 0000000F 0310D144 le Anti Aim............D
  456. 1001CE10  03BC7C56 187F0000 10000000 00000002 10020293 00000000 ..|V....................
  457. 1001CE28  003400D4 187F0000 514483A9 E780FFFF 6348BE58 00000053 .4......QD......cH.X...S
  458. 1001CE40  10BC7C56 5820416E 74692041 696D204D 6F646500 0000000F ..|VX Anti Aim Mode.....
  459. 1001CE58  0000000F 0310D144 03000000 00000000 C9000000 00000003 .......D................
  460. 1001CE70  0311C4F8 1002029A 04000000 00000000 AFBB7C56 187F0000 ..................|V....
  461. 1001CE88  6348BE58 00000053 00000000 5920416E 74692041 696D204D cH.X...S....Y Anti Aim M
  462. 1001CEA0  6F646500 0000000F 0000000F 0310D144 03000000 00000000 ode............D........
  463. 1001CEB8  00000000 00000003 0311C50C 1002029B 03000000 00000000 ........................
  464. 1001CED0  005DBE77 86000000 6348BE58 00000263 0000001C 00000091 .].w....cH.X...c........
  465. 1001CEE8  00000065 00000096 0000004B 00000095 000000F7 000000BF ...e.......K............
  466. 1001CF00  0000000F 00000011 00000036 00000037 000000D3 00000085 ...........6...7........
  467. 1001CF18  00000027 000000E7 00000029 000000B0 000000D7 000000D5 ...'.......)............
  468. 1001CF30  0000000E 000000AD 000000FD 0000003E 0000004A 0000005C ...............>...J...\
  469. 1001CF48  000000DA 00000097 000000CF 00000088 00000012 000000B9 ........................
  470. 1001CF60  00000002 000000FF 000000F8 000000E6 000000DD 00000066 .......................f
  471. 1001CF78  000000E0 000000AA 00000067 0000001A 000000B8 000000E4 ...........g............
  472. 1001CF90  000000CA 00000098 0000002A 00000025 000000C8 000000F5 ...........*...%........
  473. 1001CFA8  00000019 0000006D 00000089 380015F0 800048ED 6800306C .......m....8.....H.h.0l
  474. 1001CFC0  C0005EFF C00045CE 98005EFE 18000E9F BC00052A BC000497 ..^...E...^........*....
  475. 1001CFD8  20003DA9 480077DD 840005A4 80005F34 AC00370E 88003711  .=.H.w......._4..7...7.
  476. 1001CFF0  7C0075A2 C000606F 08003DA6 28007632 20000000 00000000 |.u...`o..=.(.v2 .......
  477. 1001D008  00000000 00000000 00000000 00000000 00000000 00000000 ........................
  478. 1001D020  00000000 00000000 00000000 00000000 00000000 00000000 ........................
  479. 1001D038  00000000 00000000 00000000 00000000 00000000 00000000 ........................
  480. 1001D050  00000000 00000000 00000000 00000000 00000000 00000000 ........................
  481. 1001D068  00000000 00000000 00000000 00000000 00000000 00000000 ........................
  482. 1001D080  00000000 00000000 00000000 00000000 00000000 00000000 ........................
  483. 1001D098  00000000 00000000 00000000 00000000 00000000 00000000 ........................
  484. 1001D0B0  00000000 00000000 00000000 00000000 00000000 00000000 ........................
  485. 1001D0C8  00000000 00000000 00000000 00000000 00000000 00000000 ........................
  486. 1001D0E0  00000000 00000000 00000000 00000000 00000000 00000000 ........................
  487. 1001D0F8  00000000 00000000 00000000 00000000 00000000 00000000 ........................
  488. 1001D110  00000000 00000000 00000000 00000000 00000000 00000000 ........................
  489. 1001D128  00000000 00000000 00000000 00000000 6348BE58 000000D3 ................cH.X....
  490. 1001D140  1001D210 00000000 1001CDC0 1001CDD8 1001CDD8 43C30000 ....................C...
  491. 1001D158  42C80000 44020000 42700000 1001E1E0 00000000 3EE4E26C B...D...Bp..........>..l
  492. 1001D170  3F7EFDC8 3F800000 41200000 40D5708D 00000000 00000000 ?~..?...A ..@.p.........
  493. 1001D188  00000000 00000000 00000000 00000000 00000000 00000000 ........................
  494. 1001D1A0  00000000 00000000 00000000 00000000 00000000 00000000 ........................
  495. 1001D1B8  00000000 00000000 00000000 00000000 00000000 00000000 ........................
  496. 1001D1D0  00000000 00000000 00000000 00000000 00000000 00000000 ........................
  497. 1001D1E8  00000000 00000000 00000000 00000000 00000000 00000000 ........................
  498. 1001D200  00000000 00000000 6348BE58 00000043 00000000 1001D370 ........cH.X...C.......p
  499. 1001D218  1001D390 1001D394 00000000 4D697363 204D656E 75000000 ............Misc Menu...
  500. 1001D230  00000000 00000009 0000000F 00000000 00000000 00000000 ........................
  501. 1001D248  6348BE58 00000013 00D495A0 00D67E98 6348BE58 00000053 cH.X..........~.cH.X...S
  502. 1001D260  00000000 55415600 00000000 00000000 00000000 00000003 ....UAV.................
  503. 1001D278  0000000F 0310D1AD 0311CB48 00000000 00000000 00000002 ...........H............
  504. 1001D290  10020289 00000000 00000000 00000000 00000000 00000000 ........................
  505. 1001D2A8  6348BE58 00000013 00D49540 00D67E98 6348BE58 00000053 cH.X.......@..~.cH.X...S
  506. 1001D2C0  00000000 4E6F2052 65636F69 6C000000 00000000 00000009 ....No Recoil...........
  507. 1001D2D8  0000000F 0310D1AD 0311CB50 00000000 00000000 00000002 ...........P............
  508. 1001D2F0  1002028A 00000000 00000000 00000000 00000000 00000000 ........................
  509. 1001D308  6348BE58 00000013 00D49580 00D67E98 6348BE58 00000053 cH.X..........~.cH.X...S
  510. 1001D320  00000000 4E6F2053 77617900 00000000 00000000 00000007 ....No Sway.............
  511. 1001D338  0000000F 0310D1AD 0311CB58 00000000 00000000 00000002 ...........X............
  512. 1001D350  1002028B 00000000 00000000 00000000 00000000 00000000 ........................
  513. 1001D368  6348BE58 00000033 1001D260 1001D2C0 1001D320 1001C980 cH.X...3...`....... ....
  514. 1001D380  1001C9F0 1001CA60 1001CAB0 1001CB00 1001D308 10010044 .......`...............D
  515. 1001D398  6348BE58 00000043 1001D3F0 1001D410 00000000 00000035 cH.X...C...............5
  516. 1001D3B0  000000FF 00000000 1001D420 1001E1D0 1001E1D0 10018960 ........... ...........`
  517. 1001D3C8  1001D3E0 10018970 10018980 00000000 6348BE58 00000013 .......p........cH.X....
  518. 1001D3E0  00000000 0000002D 6348BE58 00000023 00000000 00000000 .......-cH.X...#........
  519. 1001D3F8  00000000 00000000 00000000 00000000 6348BE58 00000013 ................cH.X....
  520. 1001D410  0014B1E6 6B966D7D 6348BE58 00000DC3 00000000 00000000 ....k.m}cH.X............
  521. 1001D428  00000000 00000000 00000000 00000000 00000000 00000000 ........................
  522.  
  523. */
  524.  
  525. /*
  526.     uint32_t all_data_buffer[] = {
  527.         0x311CD88, 0x00000000, 0x0311CCE0, 0x00000001, 0x0311CCE8, 0x00000002,
  528.         0x311CCF0, 0x00000003, 0x0311CCF8, 0x00000004, 0x0311CD00, 0x00000005,
  529.         0x311CD08, 0x00000006, 0x0311CD10, 0x00000007, 0x0311CD18, 0x00000008,
  530.         0x311CD20, 0x00000009, 0x0311CCB8, 0x0000000A
  531.     };
  532.  
  533.     uint32_t get_all_data_buffer = GetGameProcessUint32(0x313D470);
  534.     if (get_all_data_buffer)
  535.     {
  536.         printf("get_all_data_buffer: 0x%X\n", get_all_data_buffer);
  537.         SetUintArray(get_all_data_buffer, all_data_buffer, sizeof(all_data_buffer)); // trampolines check
  538.     }
  539.  
  540.  
  541.     uint32_t dword_311C52C = GetGameProcessUint32(0x311C52C);
  542.     if (dword_311C52C)
  543.     {
  544.         printf("dword_311C52C: 0x%X\n", dword_311C52C);
  545.     }
  546.  
  547.     uint32_t dword_311C530 = GetGameProcessUint32(0x311C530);
  548.     if (dword_311C530)
  549.     {
  550.         printf("dword_311C530: 0x%X\n", dword_311C530);
  551.     }
  552.  
  553.  
  554.     uint32_t dword_311C534_data[] = {
  555.         0x00000055, 0x000000A8, 0x000000BD, 0x000000A7, 0x00000090, 0x000000E1,
  556.         0x00000028, 0x00000072, 0x0000005B, 0x00000078, 0x00000042, 0x0000009F,
  557.         0x00000035, 0x0000004F, 0x00000032, 0x00000051, 0x000000E6, 0x000000EE,
  558.         0x00000007, 0x00000040, 0x0000000E, 0x0000005F, 0x0000008D, 0x000000D4,
  559.         0x000000BB, 0x0000006F, 0x0000005A, 0x00000044, 0x000000B9, 0x00000049,
  560.         0x0000005C, 0x000000E5, 0x00000064, 0x000000F6, 0x00000094, 0x000000FD,
  561.         0x00000002, 0x000000C5, 0x000000D7, 0x000000DE, 0x0000009E, 0x000000AD,
  562.         0x00000066, 0x0000008C, 0x000000DC, 0x0000006A, 0x00000000, 0x000000CE,
  563.         0x000000C1, 0x00000003, 0x0000008F, 0x00000089, 0x000000AB, 0x380015F0,
  564.         0x800048ED, 0x6800306C, 0xC0005EFF, 0xC00045CE, 0x98005EFE, 0x18000E9F,
  565.         0xBC00052A, 0xBC000497, 0x20003DA9, 0x480077DD, 0x840005A4, 0x80005F34,
  566.         0xAC00370E, 0x88003711, 0x7C0075A2, 0xC000606F, 0x08003DA6, 0x28007632,
  567.         0x20000000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00000000
  568.     };
  569.  
  570.  
  571.     uint32_t dword_311C534 = GetGameProcessUint32(0x311C534);
  572.     if (dword_311C534)
  573.     {
  574.         printf("dword_311C534: 0x%X\n", dword_311C534);
  575.         SetUintArray(dword_311C534, dword_311C534_data, sizeof(dword_311C534_data));
  576.     }
  577.        
  578.     */
  579.  
  580.  
  581. #endif
  582. }
  583.  
  584.  
  585.  
  586.  
  587.  
  588.  
  589.  
  590.  
  591.  
  592.  
  593. Ghost_Paradox.h
  594. ------------------------
  595.  
  596. // add 0x20000   for it to work with 2 sprx's, only if the paradox is the second one loaded
  597. void process_cracking_Ghost_Paradox_Sep_29TH_2019()
  598. {
  599.     //uint32_t sprx_base_address1 = 0x2970000;
  600.     //uint32_t sprx_base_address2 = 0x2990000;
  601.     //uint32_t next_base_address_size = sprx_base_address2 - sprx_base_address1; // 0x20000
  602.     //uint32_t next_base_address_size = 0x20000;
  603.  
  604.     SetNop(0x297B7D0); // stop downloading address from the server
  605.     SetNop(0x297AD24); // stop connection to the server
  606.     SetNop(0x297B8C4); // stop the admin thread
  607.     SetNop(0x297BD0C); // stop the auto update
  608.  
  609.     uint32_t auth_data_1[] = {
  610.         0xD00189A0, 0x0012B344, 0x01000000, 0x000C0000
  611.     };
  612.     SetUintArray(0x29A0E60, auth_data_1, sizeof(auth_data_1));
  613.  
  614.     uint32_t auth_data_2[] = {
  615.         0x0036DA70, 0x00A7F3C8, 0x006D2D08, 0x00A7F3C8,
  616.         0x0046540C, 0x00A7F3C8, 0x00459C6C, 0x00A7F3C8,
  617.         0x00472E78, 0x00A7F3C8, 0x00153680, 0x00A7F3C8,
  618.         0x004731B8, 0x00A7F3C8, 0x005BB454, 0x00A7F3C8,
  619.         0x002BB688, 0x00A7F3C8, 0x002D9394, 0x00A7F3C8,
  620.         0x002D894C, 0x00A7F3C8, 0x002B1C14, 0x00A7F3C8,
  621.         0x002E2374, 0x00A7F3C8, 0x00473658, 0x00A7F3C8,
  622.         0x00787434, 0x00A7F3C8, 0x007872BC, 0x00A7F3C8,
  623.         0x0056B1D4, 0x00A7F3C8, 0x002B32C8, 0x00A7F3C8,
  624.         0x0056ABCC, 0x00A7F3C8, 0x006D9638, 0x00A7F3C8,
  625.         0x00121550, 0x00A7F3C8, 0x007EFB84, 0x00A7F3C8,
  626.         0x0014C018, 0x00A7F3C8
  627.     };
  628.     SetUintArray(0x29A07D0, auth_data_2, sizeof(auth_data_2));
  629.  
  630.     SetBranch(0x297ABA8, 0x297ACD8); // skip the bullshit
  631.     SetBranch(0x297AD28, 0x297B7B8); // skip the bullshit
  632. }
  633.  
  634.  
  635.  
  636.  
  637.  
  638.  
  639.  
  640.  
  641.  
  642.  
  643. GTA_Conqueror.h
  644. -----------------------
  645. /*
  646. responses:
  647.  
  648.  
  649.  
  650. 104.27.181.166
  651.  
  652.  
  653. m.justformodding.com/athrz.php?key=PPPPPPPPPPPPPPPPPPP&mac=A8:A8:A8:A8:A8:A8
  654. respons:     Bienvenue rapha99 ! Votre application Conqueror Sprx est activ\303\251. Bon jeu \303\240 vous sur Grand Theft Auto V. Pour toutes informations, visitez notre boutique : www.JustForModding.com
  655.  
  656.  
  657. */
  658.  
  659.  
  660.  
  661.  
  662.  
  663. GTA_Extortion.h
  664. ----------------------
  665.  
  666.  
  667. /*
  668. responses:
  669.  
  670.  
  671.  
  672.  
  673. 3.7
  674. ---------
  675. 104.27.162.84
  676.  
  677. m.extortiondev.com/Login3.php?key=PPPPPPPPPPPPPPPPPPP&mac=A8:A8:A8:A8:A8:A8&ver=3.7
  678. respons:    Welcome to Extortion GTA v3.7\nYou are using Latest Update!
  679.  
  680.  
  681.  
  682.  
  683.  
  684.  
  685.  
  686. 4.0.1
  687. -------
  688.  
  689.  
  690. m.extortiondev.com/Login7?Hex=009
  691.  
  692. 000a/dev_hdd0/tmp/Extortion.key#001a%s%02X:%02X:%02X:%02X:%02X:%02X#002a&key=#003a&mac=#004a009#005aNO#006aExtortionGTA#007aip-api.com#
  693.  
  694.  
  695.  
  696.  
  697. m.extortiondev.com/Login7?Hex=009&key=PPPPPPPPPPPPPPPPPPP&mac=A8:A8:A8:A8:A8:A8&d=N
  698.  
  699. 000a29801856#001a29802664#002a29801320#003a29803824#004a29801128#005a25702736#006a29820896#&d=N
  700.  
  701.  
  702.  
  703.  
  704. m.extortiondev.com/Login7?Hex=009&key=PPPPPPPPPPPPPPPPPPP&mac=A8:A8:A8:A8:A8:A8&s=N
  705.  
  706. 000a0001a0002a0003a0004a0005a0006a0007a0008a0009a0010a0011a0012a0013a0014a0015a0016aFUCK\000
  707.  
  708.  
  709.  
  710.  
  711. m.extortiondev.com/Login7?Hex=009&key=PPPPPPPPPPPPPPPPPPP&mac=A8:A8:A8:A8:A8:A8
  712.  
  713. 0006078112#00118#00233976268#00333389968#00433978079#005&complete=YES#
  714.  
  715.  
  716.  
  717.  
  718. m.extortiondev.com/Login7?Hex=009&key=PPPPPPPPPPPPPPPPPPP&mac=A8:A8:A8:A8:A8:A8&complete=YES
  719.  
  720.  
  721. 000~HUD_COLOUR_RADAR_DAMAGE~#001~HUD_COLOUR_FRANKLIN_DARK~#002~s~#003~n~#004Extortion GTA Menu#005~BLIP_CRIM_HOLDUPS~Main Mods#006~BLIP_GUN_SHOP~Player#007~BLIP_GANG_VEHICLE~Vehicle#008~BLIP_GARAGE~Spawn Vehicle#009~BLIP_FAIRGROUND~Spawn Objects#010~BLIP_FLIGHT_SCHOOL~Teleport#011~BLIP_DEATHMATCH~Lobby Mods#012~BLIP_UGC_MISSION~Recovery#013~BLIP_CLOTHES_STORE~Model Changer#014~BLIP_CINEMA~Animations#015~BLIP_SHRINK~Weather#016~BLIP_TATTOO~Spawn Peds#017~BLIP_RANDOM_CHARACTER~Miscellaneous#
  722. \r\n
  723. Welcome to Extortion GTA v4.0.1\n
  724. You are using Latest Update!\000
  725.  
  726.  
  727.  
  728. */
  729.  
  730.  
  731. unsigned char main_menus_bytes[] = {
  732.     0x00, 0x00, 0x00, 0x00, 0x7E, 0x48, 0x55, 0x44, 0x5F, 0x43, 0x4F, 0x4C, 0x4F, 0x55, 0x52, 0x5F, 0x52, 0x41, 0x44, 0x41,
  733.     0x52, 0x5F, 0x44, 0x41, 0x4D, 0x41, 0x47, 0x45, 0x7E, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  734.     0x00, 0x00, 0x00, 0x00, 0x7E, 0x48, 0x55, 0x44, 0x5F, 0x43, 0x4F, 0x4C, 0x4F, 0x55, 0x52, 0x5F, 0x46, 0x52, 0x41, 0x4E,
  735.     0x4B, 0x4C, 0x49, 0x4E, 0x5F, 0x44, 0x41, 0x52, 0x4B, 0x7E, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  736.     0x00, 0x00, 0x00, 0x00, 0x7E, 0x73, 0x7E, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  737.     0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  738.     0x00, 0x00, 0x00, 0x00, 0x7E, 0x6E, 0x7E, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  739.     0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  740.     0x00, 0x00, 0x00, 0x00, 0x45, 0x78, 0x74, 0x6F, 0x72, 0x74, 0x69, 0x6F, 0x6E, 0x20, 0x47, 0x54, 0x41, 0x20, 0x4D, 0x65,
  741.     0x6E, 0x75, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  742.     0x00, 0x00, 0x00, 0x00, 0x7E, 0x42, 0x4C, 0x49, 0x50, 0x5F, 0x43, 0x52, 0x49, 0x4D, 0x5F, 0x48, 0x4F, 0x4C, 0x44, 0x55,
  743.     0x50, 0x53, 0x7E, 0x20, 0x4D, 0x61, 0x69, 0x6E, 0x20, 0x4D, 0x6F, 0x64, 0x73, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  744.     0x00, 0x00, 0x00, 0x00, 0x7E, 0x42, 0x4C, 0x49, 0x50, 0x5F, 0x47, 0x55, 0x4E, 0x5F, 0x53, 0x48, 0x4F, 0x50, 0x7E, 0x20,
  745.     0x50, 0x6C, 0x61, 0x79, 0x65, 0x72, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  746.     0x00, 0x00, 0x00, 0x00, 0x7E, 0x42, 0x4C, 0x49, 0x50, 0x5F, 0x47, 0x41, 0x4E, 0x47, 0x5F, 0x56, 0x45, 0x48, 0x49, 0x43,
  747.     0x4C, 0x45, 0x7E, 0x20, 0x56, 0x65, 0x68, 0x69, 0x63, 0x6C, 0x65, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  748.     0x00, 0x00, 0x00, 0x00, 0x7E, 0x42, 0x4C, 0x49, 0x50, 0x5F, 0x47, 0x41, 0x52, 0x41, 0x47, 0x45, 0x7E, 0x20, 0x53, 0x70,
  749.     0x61, 0x77, 0x6E, 0x20, 0x56, 0x65, 0x68, 0x69, 0x63, 0x6C, 0x65, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  750.     0x00, 0x00, 0x00, 0x00, 0x7E, 0x42, 0x4C, 0x49, 0x50, 0x5F, 0x46, 0x41, 0x49, 0x52, 0x47, 0x52, 0x4F, 0x55, 0x4E, 0x44,
  751.     0x7E, 0x20, 0x53, 0x70, 0x61, 0x77, 0x6E, 0x20, 0x4F, 0x62, 0x6A, 0x65, 0x63, 0x74, 0x73, 0x00, 0x00, 0x00, 0x00, 0x00,
  752.     0x00, 0x00, 0x00, 0x00, 0x7E, 0x42, 0x4C, 0x49, 0x50, 0x5F, 0x46, 0x4C, 0x49, 0x47, 0x48, 0x54, 0x5F, 0x53, 0x43, 0x48,
  753.     0x4F, 0x4F, 0x4C, 0x7E, 0x20, 0x54, 0x65, 0x6C, 0x65, 0x70, 0x6F, 0x72, 0x74, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  754.     0x00, 0x00, 0x00, 0x00, 0x7E, 0x42, 0x4C, 0x49, 0x50, 0x5F, 0x44, 0x45, 0x41, 0x54, 0x48, 0x4D, 0x41, 0x54, 0x43, 0x48,
  755.     0x7E, 0x20, 0x4C, 0x6F, 0x62, 0x62, 0x79, 0x20, 0x4D, 0x6F, 0x64, 0x73, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  756.     0x00, 0x00, 0x00, 0x00, 0x7E, 0x42, 0x4C, 0x49, 0x50, 0x5F, 0x55, 0x47, 0x43, 0x5F, 0x4D, 0x49, 0x53, 0x53, 0x49, 0x4F,
  757.     0x4E, 0x7E, 0x20, 0x52, 0x65, 0x63, 0x6F, 0x76, 0x65, 0x72, 0x79, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  758.     0x00, 0x00, 0x00, 0x00, 0x7E, 0x42, 0x4C, 0x49, 0x50, 0x5F, 0x43, 0x4C, 0x4F, 0x54, 0x48, 0x45, 0x53, 0x5F, 0x53, 0x54,
  759.     0x4F, 0x52, 0x45, 0x7E, 0x20, 0x4D, 0x6F, 0x64, 0x65, 0x6C, 0x20, 0x43, 0x68, 0x61, 0x6E, 0x67, 0x65, 0x72, 0x00, 0x00,
  760.     0x00, 0x00, 0x00, 0x00, 0x7E, 0x42, 0x4C, 0x49, 0x50, 0x5F, 0x43, 0x49, 0x4E, 0x45, 0x4D, 0x41, 0x7E, 0x20, 0x41, 0x6E,
  761.     0x69, 0x6D, 0x61, 0x74, 0x69, 0x6F, 0x6E, 0x73, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  762.     0x00, 0x00, 0x00, 0x00, 0x7E, 0x42, 0x4C, 0x49, 0x50, 0x5F, 0x53, 0x48, 0x52, 0x49, 0x4E, 0x4B, 0x7E, 0x20, 0x57, 0x65,
  763.     0x61, 0x74, 0x68, 0x65, 0x72, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  764.     0x00, 0x00, 0x00, 0x00, 0x7E, 0x42, 0x4C, 0x49, 0x50, 0x5F, 0x54, 0x41, 0x54, 0x54, 0x4F, 0x4F, 0x7E, 0x20, 0x53, 0x70,
  765.     0x61, 0x77, 0x6E, 0x20, 0x50, 0x65, 0x64, 0x73, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  766.     0x00, 0x00, 0x00, 0x00, 0x7E, 0x42, 0x4C, 0x49, 0x50, 0x5F, 0x52, 0x41, 0x4E, 0x44, 0x4F, 0x4D, 0x5F, 0x43, 0x48, 0x41,
  767.     0x52, 0x41, 0x43, 0x54, 0x45, 0x52, 0x7E, 0x20, 0x4D, 0x69, 0x73, 0x63, 0x65, 0x6C, 0x6C, 0x61, 0x6E, 0x65, 0x6F, 0x75,
  768.     0x73, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  769. };
  770.  
  771.  
  772.  
  773. void processSprxLoadCracker()
  774. {
  775.     sys_prx_id_t prx_id = sys_prx_get_module_id_by_name("temp", NULL, NULL);
  776.     stop_unload(prx_id);
  777.     load_start("/dev_hdd0/tmp/Extortion_3_9_5.sprx");
  778. }
  779.  
  780. void process_cracking_GTA_Extortion_3_9_3()
  781. {
  782.     //thier auth was too fast so we had to make an edit on thier sprx to increase the auth time
  783.  
  784.     //3.9.3
  785.  
  786.     //block from writing into sprx
  787.     unsigned int fs_write001_address = Global_BaseAddressGTA + 0x370;
  788.     WriteGameProcessMemory(fs_write001_address, &NOP, sizeof(NOP));
  789.  
  790.     unsigned int fs_write002_address = Global_BaseAddressGTA + 0x3A8;
  791.     WriteGameProcessMemory(fs_write002_address, &NOP, sizeof(NOP));
  792.  
  793.     unsigned int fs_write003_address = Global_BaseAddressGTA + 0x19194;
  794.     WriteGameProcessMemory(fs_write003_address, &NOP, sizeof(NOP));
  795.  
  796.  
  797.     unsigned char auth_data[] = {
  798.     0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  799.     0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x12, 0x00, 0x3E, 0x3A, 0x20, 0x02, 0x06, 0x6F, 0xCC,
  800.     0x02, 0x06, 0x76, 0xDF, 0x01, 0xFD, 0x7D, 0x90,
  801.     };
  802.  
  803.     /*
  804.  
  805.     //increase sleep time
  806.     4A4C4 = 3C 60 00 00 60 63 C3 50;
  807.  
  808.     //nop auto update
  809.     370 = nop;
  810.     3A8 = nop;
  811.     19194 = nop;
  812.  
  813.     //replace some values from 3.7
  814.     4DDA8 = nop;
  815.     4DDAC = 3C 60 02 06 60 63 6F CC;
  816.  
  817.     4DDC4 = nop;
  818.     4DDC8 = 3C 60 02 06 60 63 6F CC;
  819.  
  820.     4DD68 = 3C 80 02 06 60 84 76 DF;
  821.     4DDE4 = 3C 80 02 06 60 84 76 DF;
  822.  
  823.  
  824.     //hook address
  825.     4AB20 = nop;
  826.     4AB24 = 3C 60 00 3E 60 63 3A 20;
  827.  
  828.  
  829.     //replace some values from 3.7
  830.     154F4 = 3C 60 01 FD 60 63 7D 90;
  831.  
  832.     //replace all
  833.     3C 60 00 06 80 63 22 58 = 3C 60 00 00 60 63 00 12;
  834.  
  835.     //bools
  836.     4AB18 = 2C 03 00 01;
  837.     4ACC0 = 2C 03 00 01;
  838.     4AD44 = 2C 03 00 01;
  839.     4ADB8 = 2C 03 00 01;
  840.     4AEFC = 2C 03 00 01;
  841.     4C188 = 2C 03 00 01;
  842.     4D5EC = 2C 03 00 01;
  843.     */
  844.  
  845.     WriteGameProcessMemory(0x253601C, (const void *)&auth_data, sizeof(auth_data));
  846.     WriteGameProcessMemory(0x100604FC, (const void *)&main_menus_bytes, sizeof(main_menus_bytes));
  847. }
  848.  
  849.  
  850. void process_cracking_GTA_Extortion_3_9_5()
  851. {
  852.     //3.9.5
  853.  
  854.     //block from writing into sprx
  855.     //unsigned int fs_write001_address = baseAddressGTA + 0x37C;
  856.     //writeProcessMemory((void *)fs_write001_address, &NOP, sizeof(NOP));
  857.  
  858.     //unsigned int fs_write002_address = baseAddressGTA + 0x3B4;
  859.     //writeProcessMemory((void *)fs_write002_address, &NOP, sizeof(NOP));
  860.  
  861.     //unsigned int fs_write003_address = baseAddressGTA + 0x193CC;
  862.     //writeProcessMemory((void *)fs_write003_address, &NOP, sizeof(NOP));
  863.  
  864.     unsigned char auth_data[] = {
  865.     0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  866.     0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x12,
  867.     0x00, 0x3E, 0x3A, 0x20, 0x02, 0x06, 0x6F, 0xCC, 0x02, 0x06, 0x76, 0xDF, 0x01, 0xFD, 0x7D, 0x90
  868.     };
  869.  
  870.     WriteGameProcessMemory(0x253601C, (const void *)&auth_data, sizeof(auth_data));
  871.     WriteGameProcessMemory(0x100604FC, (const void *)&main_menus_bytes, sizeof(main_menus_bytes));
  872. }
  873.  
  874.  
  875. void process_cracking_GTA_Extortion_4_0_1()
  876. {
  877.     //4.0 & 4.0.1
  878.     // I used these bytes to get the hook. there are a few references but its easy to see which one it is (usually a huge sub but sometimes a loc_ becuase its so big)  [E8 41 00 28 7C 63 07 B4  7C 1F 18 00]
  879.  
  880.  
  881.     // icrease sleep time and wait for our module to load (hex: 0xC350, decimal: 50000)
  882.  
  883.  
  884.  
  885.  
  886.     /*
  887.     0x25360DC =
  888.     01010000 00000000 00000000                      // activate 2 bools
  889.     00000000 00000000 00000000 00000000 00000012    // auth var
  890.     003E3A20 01883150 02066FCC 020676DF 01FD7D90    // hook | RPC Adr | unk | unk | unk
  891.     */
  892.     unsigned char auth_data[] = {
  893.         0x01, 0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  894.         0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x12,
  895.         0x00, 0x3E, 0x3A, 0x20, 0x01, 0x88, 0x31, 0x50, 0x02, 0x06, 0x6F, 0xCC, 0x02, 0x06, 0x76, 0xDF, 0x01, 0xFD, 0x7D, 0x90 };
  896.  
  897.  
  898.  
  899.     // patch in jump patch code becuase I couldnt find the proper bytes for off_62A1C which contains the bytes
  900.     // 003E3A20 = 3D60024F 396BF018 7D6903A6 4E800420
  901.     unsigned char hook_data[] = {
  902.         0x3D, 0x60, 0x02, 0x4F, 0x39, 0x6B, 0xF0, 0x18, 0x7D, 0x69, 0x03, 0xA6, 0x4E, 0x80, 0x04, 0x20
  903.     };
  904.  
  905.  
  906.     WriteGameProcessMemory(0x25360DC, (const void *)&auth_data, sizeof(auth_data));
  907.     WriteGameProcessMemory(0x100604FC, (const void *)&main_menus_bytes, sizeof(main_menus_bytes));
  908.     WriteGameProcessMemory(0x003E3A20, (const void *)&hook_data, sizeof(hook_data));
  909.  
  910.  
  911.     //  nop this dword_647A0 becuase it getting set to 0 after its being used [NOTE: this is the other_auth_var]. only need do dump all the values
  912.     // 0251C96C = nop   (ida = 0x4C96C)
  913.     // 0251C970 = nop   (ida = 0x4C970)
  914.     //writeProcessMemory((void *)0x251C96C, (const void *)&NOP, sizeof(NOP));
  915.     //writeProcessMemory((void *)0x251C970, (const void *)&NOP, sizeof(NOP));
  916.  
  917.     //  nop this dword_64798 becuase it getting set to 0 after its being used [NOTE: this is the hook address]. only need do dump all the values
  918.     // 0251CBE4 = nop   (ida = 0x4CBE4)
  919.     // 0251CBE8 = nop   (ida = 0x4CBE8)
  920.  
  921.     //writeProcessMemory((void *)0x251CBE4, (const void *)&NOP, sizeof(NOP));
  922.     //writeProcessMemory((void *)0x251CBE8, (const void *)&NOP, sizeof(NOP));
  923.  
  924.     // nop this off_62A1C becuase it getting set to 0 after its being used. only need do dump all the values
  925.     // 0251CBF0 = nop   (ida = 0x4CBF0)
  926.     // 0251CBF4 = nop   (ida = 0x4CBF4)
  927.     //writeProcessMemory((void *)0x251CBF0, (const void *)&NOP, sizeof(NOP));
  928.     //writeProcessMemory((void *)0x251CBF4, (const void *)&NOP, sizeof(NOP));
  929.  
  930.     //patchinjump code  prt ^
  931.     //0x253437C
  932. }
  933. void process_cracking_GTA_Extortion_4_1()
  934. {
  935.  
  936. }
  937.  
  938.  
  939.  
  940.  
  941.  
  942.  
  943.  
  944.  
  945.  
  946.  
  947.  
  948. GTA_Hextic.h
  949. ---------------------
  950.  
  951.  
  952. /*
  953. unsigned int server_socket_buffer[] = {
  954.     0x48545450, 0x2F312E31, 0x20323030, 0x204F4B0D, 0x0A536572, 0x7665723A, 0x206E6769, 0x6E782F31, 0x2E31342E, 0x320D0A44, 0x6174653A,
  955.     0x20547565, 0x2C203233, 0x204A756C, 0x20323031, 0x39203130, 0x3A34323A, 0x31382047, 0x4D540D0A, 0x436F6E74, 0x656E742D, 0x54797065,
  956.     0x3A207465, 0x78742F68, 0x746D6C3B, 0x20636861, 0x72736574, 0x3D555446, 0x2D380D0A, 0x436F6E74, 0x656E742D, 0x4C656E67, 0x74683A20,
  957.     0x3134340D, 0x0A436F6E, 0x6E656374, 0x696F6E3A, 0x20636C6F, 0x73650D0A, 0x0D0A556E, 0x7265736F, 0x6C766162, 0x6C650A55, 0x6E726573,
  958.     0x6F6C7661, 0x626C650A, 0x556E7265, 0x736F6C76, 0x61626C65, 0x0A313333, 0x37202020, 0x20202020, 0x20202020, 0x20202020, 0x20202020,
  959.     0x20202020, 0x20202020, 0x20202020, 0x20202020, 0x20202020, 0x20202020, 0x20202020, 0x20202020, 0x20202020, 0x20202020, 0x20202020,
  960.     0x20202020, 0x20202020, 0x20202020, 0x20202020, 0x20202020, 0x20202020, 0x20202020, 0x20202020, 0x20202020, 0x20203637, 0x38383130,
  961.     0x34303900, 0x39323432, 0x00323130, 0x34303334, 0x32313400, 0x32313034, 0x30333430, 0x38360031, 0x30323937, 0x30313633, 0x32003635,
  962.     0x35333500, 0x33323736, 0x38003936, 0x33333133, 0x36363400, 0x36353533, 0x35003231, 0x30343033, 0x34323738, 0x00323130, 0x34303334,
  963.     0x30353400, 0x32313034, 0x30333430, 0x37300032, 0x31303430, 0x33343231, 0x34003133, 0x31373031, 0x32353132, 0x00323637, 0x38383130,
  964.     0x34303900, 0x32333330, 0x36323631, 0x35360031, 0x30323937, 0x30313633, 0x32003936, 0x33333133, 0x36363400, 0x32313034, 0x30333432,
  965.     0x31340031, 0x33313730, 0x31323531, 0x32003332, 0x37363800, 0x30784646, 0x46460048, 0x65787469, 0x63004845, 0x58544943, 0x20505333,
  966.     0x20362E37, 0x00436861, 0x6E676520, 0x496E2057, 0x65627369, 0x74650032, 0x39393830, 0x30333200, 0x33333633, 0x31333237, 0x39370032,
  967.     0x34393533, 0x39323839, 0x32000000
  968. };
  969.  
  970. */
  971.  
  972. void process_cracking_GTA_Hextic_6_7_2()
  973. {
  974.  
  975.     SetBranch(0x25023D4, 0x250255C);
  976.     SetBreakPoint(0x250255C);
  977.  
  978.  
  979.  
  980.     /*
  981.     SetBranch(0x24D3100, 0x24D3294);
  982.     SetNop(0x2502290);
  983.     SetNop(0x2502310);
  984.     SetNop(0x250234C);
  985.  
  986.     unsigned int server_socket_buffer[] = {
  987.         0x48545450, 0x2F312E31, 0x20333032, 0x204D6F76, 0x65642054, 0x656D706F, 0x72617269, 0x6C790D0A, 0x53657276, 0x65723A20, 0x6E67696E,
  988.         0x782F312E, 0x31342E32, 0x0D0A4461, 0x74653A20, 0x5765642C, 0x20323420, 0x4A756C20, 0x32303139, 0x2030363A, 0x30343A34, 0x3820474D,
  989.         0x540D0A43, 0x6F6E7465, 0x6E742D54, 0x7970653A, 0x20746578, 0x742F6874, 0x6D6C3B20, 0x63686172, 0x7365743D, 0x5554462D, 0x380D0A43,
  990.         0x6F6E7465, 0x6E742D4C, 0x656E6774, 0x683A2033, 0x36370D0A, 0x436F6E6E, 0x65637469, 0x6F6E3A20, 0x636C6F73, 0x650D0A4C, 0x6F636174,
  991.         0x696F6E3A, 0x20687474, 0x70733A2F, 0x2F777777, 0x2E666269, 0x2E676F76, 0x2F636F6E, 0x74616374, 0x2D75730D, 0x0A0D0A47, 0x6F6F6443,
  992.         0x616C6C00, 0xEF92A520, 0x57656C63, 0x6F6D6520, 0x546F2048, 0x65787469, 0x6320EF92, 0xA50A596F, 0x75204172, 0x65204F6E, 0x20566572,
  993.         0x73696F6E, 0x20362E37, 0x2E320A45, 0x6E6A6F79, 0x2026204A, 0x6F696E20, 0x4F757220, 0x44697363, 0x6F726421, 0x00323637, 0x38383130,
  994.         0x34303900, 0x39323432, 0x00323130, 0x34303334, 0x32313400, 0x32313034, 0x30333430, 0x38360031, 0x30323937, 0x30313633, 0x32003635,
  995.         0x35333500, 0x33323736, 0x38003936, 0x33333133, 0x36363400, 0x36353533, 0x35003231, 0x30343033, 0x34323738, 0x00323130, 0x34303334,
  996.         0x30353400, 0x32313034, 0x30333430, 0x37300032, 0x31303430, 0x33343231, 0x34003133, 0x31373031, 0x32353132, 0x00323637, 0x38383130,
  997.         0x34303900, 0x32333330, 0x36323631, 0x35360031, 0x30323937, 0x30313633, 0x32003936, 0x33333133, 0x36363400, 0x32313034, 0x30333432,
  998.         0x31340031, 0x33313730, 0x31323531, 0x32003332, 0x37363800, 0x30784646, 0x46460048, 0x65787469, 0x63004845, 0x58544943, 0x20505333,
  999.         0x20362E37, 0x00436861, 0x6E676520, 0x496E2057, 0x65627369, 0x74650032, 0x39393830, 0x30333200, 0x33333633, 0x31333237, 0x39370032,
  1000.         0x34393533, 0x39323839, 0x32000000, 0x00000000
  1001.     };
  1002.     WriteGameProcessMemory(0x2535418, (const void *)&server_socket_buffer, sizeof(server_socket_buffer));
  1003.     */
  1004.  
  1005.  
  1006. }
  1007.  
  1008.  
  1009.  
  1010.  
  1011.  
  1012. GTA_Lexicon.h
  1013. ------------------------
  1014.  
  1015. void process_cracking_lexicon()
  1016. {
  1017.     SetBranch(IDA2MEM(0x57BC0), IDA2MEM(0x57C5C)); // so you can load the menu offline
  1018.     SetNop(IDA2MEM(0x561E8));  // nop read license key
  1019.     SetBranch(IDA2MEM(0x56200), IDA2MEM(0x57AE8)); // skip to hooking
  1020.     SetNop(IDA2MEM(0x57B28)); // nop address decrypter
  1021.     SetNop(IDA2MEM(0x57B3C)); // nop thread for server settings
  1022.     SetNop(IDA2MEM(0x57B40)); // nop thread for server settings 2
  1023.  
  1024.     SetUint(0x1C2BB80, 0x2520878); // hook is player online
  1025.     //SetUint(0x1C271E0, 0x2520878); // hook GET_INDEX_OF_CURRENT_LEVEL  an old hook he used in his previous versions of lexicon
  1026.  
  1027.     SetUint(0x1C2A3D0, 0x2520DEC); // hook disable control actions
  1028.     SetUint(0x1C2E9F8, 0x2520EFC); // hook set ped current weapon
  1029.  
  1030.     SetString(IDA2MEM(0x6A13C), "LEXICON CRACKED", strlen("LEXICON CRACKED")); // replace    "Lexicon PS3 3.7" 
  1031. }
  1032.  
  1033.  
  1034.  
  1035.  
  1036.  
  1037.  
  1038. GTA_LTS.h
  1039. --------------------
  1040. /*
  1041. responses:
  1042.  
  1043. 104.27.175.50
  1044.  
  1045.  
  1046. server.lastteamstanding.uk//8mTNvKbbPTHjz5RFQqs6A77yDVhc/KKZnXavaxhGct9m7fh5CtNHpejHN.php?usern=PPPPPPPPPPPPPPPPPPP&passw=pppppppppppppppp&guidl=4515b6de31029b7b359a10d152cd6385&psnnameo=RealGamer214&macAddresso=A8:A8:A8:A8:A8:A8
  1047. respones:    Success: Logged in.
  1048.  
  1049.  
  1050.  
  1051. server.lastteamstanding.uk//8mTNvKbbPTHjz5RFQqs6A77yDVhc/KKZnXavaxhGct9m7fh5CtNHpejHN.php?val=270
  1052. respones:    elgood
  1053.  
  1054.  
  1055. server.lastteamstanding.uk//8mTNvKbbPTHjz5RFQqs6A77yDVhc/KKZnXavaxhGct9m7fh5CtNHpejHN.php?usern=PPPPPPPPPPPPPPPPPPP&do=gd&passw=pppppppppppppppp
  1056. respones:    Resp:1:1:1:1:1:0:197:195:ip-api.com:line/:?fields=513:adder:16397:0:1:1:1:1:1:1:1:1:1:1:1:5:0:1000:4:511:75
  1057.  
  1058.  
  1059.  
  1060. 8/2/2019
  1061.  
  1062. 104.27.175.50
  1063.  
  1064. server.lastteamstanding.uk//8mTNvKbbPTHjz5RFQqs6A77yDVhc/KKZnXavaxhGct9m7fh5CtNHpejHN.php?usern=PPPPPPPPPPPPPPPPPPP&passw=pppppppppppppppp&guidl=4515b6de31029b7b359a10d152cd6385&psnnameo=RealGamer214&macAddresso=A8:A8:A8:A8:A8:A8
  1065. respones:   Success: Logged in.
  1066.  
  1067.  
  1068. server.lastteamstanding.uk/
  1069. respones:    // just a space
  1070.  
  1071.  
  1072. server.lastteamstanding.uk//8mTNvKbbPTHjz5RFQqs6A77yDVhc/KKZnXavaxhGct9m7fh5CtNHpejHN.php?val=277
  1073. respones:  elgood
  1074.  
  1075. server.lastteamstanding.uk//8mTNvKbbPTHjz5RFQqs6A77yDVhc/KKZnXavaxhGct9m7fh5CtNHpejHN.php?usern=PPPPPPPPPPPPPPPPPPP&do=gd&passw=pppppppppppppppp
  1076. respones:   Resp:1:1:1:1:1:0:197:195:ip-api.com:line/:?fields=513:adder:16397:0:1:1:1:1:1:1:1:1:1:1:1:5:0:1000:4:511:75
  1077.  
  1078.  
  1079. */
  1080.  
  1081.  
  1082.  
  1083. void process_cracking_LTS_2_7_7()
  1084. {
  1085.  
  1086. }
  1087.  
  1088.  
  1089.  
  1090.  
  1091.  
  1092.  
  1093.  
  1094. GTA_Paradise.h
  1095. --------------------------
  1096.  
  1097.  
  1098.  
  1099. /*
  1100. responses:
  1101.  
  1102.  
  1103.  
  1104. 185.11.145.5
  1105.  
  1106. server.paradisesprx.com/gtartm.php?retreiveData=true&Key=ppppppppppppppppppppppppppppppppppp
  1107.  
  1108.  
  1109. server.paradisesprx.com/ipinfo.php?IP=31.215.63.29
  1110.  
  1111.  
  1112. server.paradisesprx.com/res/downloadasset.php?key=%s&filename=%s
  1113.  
  1114.  
  1115. server.paradisesprx.com/res/getprop.php?hash=%s
  1116.  
  1117.  
  1118. server.paradisesprx.com/res/downloadsprx.php?key=ppppppppppppppppppppppppppppppppppp&filesize
  1119.  
  1120.  
  1121. server.paradisesprx.com/downloadsprx.php?key=ppppppppppppppppppppppppppppppppppp
  1122.  
  1123.  
  1124. server.paradisesprx.com/res/downloadasset.php?key=ppppppppppppppppppppppppppppppppppp&filename=ParadiseScrollbar.dds
  1125.  
  1126.  
  1127. server.paradisesprx.com/res/downloadasset.php?key=ppppppppppppppppppppppppppppppppppp&filename=portalCrosshair.dds
  1128.  
  1129.  
  1130. server.paradisesprx.com/res/downloadasset.php?key=ppppppppppppppppppppppppppppppppppp&filename=ParadiseText256.dds
  1131.  
  1132.  
  1133. server.paradisesprx.com/conneco.php?sesh=ppppppppppppppppppppppppppppppppppp&data=-470941074
  1134.  
  1135.  
  1136. server.paradisesprx.com/conneco.php?sesh=ppppppppppppppppppppppppppppppppppp&data=ppppppppppppppppppppppppppppppppppp      =   1239465692
  1137. responses:
  1138. 0x14EDE704
  1139. 0x1534BD2C
  1140. 0x143B7A68
  1141. 0x14CDA7BC
  1142. 0x153493B8
  1143. 0x1596800C
  1144. 0x154C5868
  1145. 0x154CF830
  1146. 0x153186C0
  1147. 0x286B183C
  1148. 0x2C60183C
  1149. 0x68621B9A
  1150. 0x5B8B1C1C
  1151. 0x32A95CE4
  1152. 0x1535221C
  1153. 0xA564FBC2
  1154. 0xC820E44B
  1155. 0x15AE4ADC
  1156. 0x22827B79
  1157. 0x1431FB8C
  1158.  
  1159.  
  1160.  
  1161. //idk other stuff respones that idk where it came from:
  1162. 0x110306A4
  1163. 0x22690036
  1164. 0x799F018C
  1165. 0x2CC0674D
  1166. 0x60DE1963
  1167. 0x5FE551AA
  1168. 0x5C5C2D08
  1169.  
  1170.  
  1171.  
  1172.  
  1173.  
  1174. */
  1175.  
  1176.  
  1177.  
  1178. /*
  1179. patterns for ida
  1180.  
  1181.  
  1182. pattern to search for to find thread function in paradise sprx
  1183. these are the values that he uses for this thread params
  1184. li        r6, 0x5AA
  1185. li        r7, 0x1000
  1186. 38 C0 05 AA 38 E0 10 00
  1187.  
  1188.  
  1189. ***dont need to nop the decrypt function. you need to nop the encrypt function. the encrypt function will be below the decrypt function in the ida funciton list***
  1190.  
  1191. nop sys call for write to process inside encryption func
  1192. you will freeze when the function is called but you can now dump the funtion that is decrypted
  1193. pattern: 78 66 36 64 78 67 1F 24  7C 63 30 14 7C 67 18 10     |     you should see 2      sc       instructions. 1 to  get process id and another for write process memory  (NOTE: DO NOT confuse it with the decrypt func as they are similar) (usually decrypt function are always at the top of a function)
  1194.  
  1195.  
  1196. update: for find the threads in the new versions you need to nop the sys call ^ above and then you be able to search for the threads. (only the main 2 threads show up)
  1197. pattern: 38 A0 00 00 38 C0 05 AA  60 E7 A0 00
  1198. pattern: 38 A0 00 00 38 C0 05 AA  38 E0 20 00 39 00 00 00
  1199.  
  1200.  
  1201. to get the main thread unencrypted. connect and attach before the welcome message dialog comes up and the thread will be decrypted
  1202.  
  1203.  
  1204. for the write process. this is just useful for any writes that he uses
  1205. pattern: 39 60 03 89    |   li        r11, 0x389
  1206.  
  1207.  
  1208.  
  1209. */
  1210.  
  1211.  
  1212.  
  1213.  
  1214. void process_cracking_GTA_Paradise_April_15_2018() // APRIL 15TH, 2018
  1215. {
  1216.     unsigned int address = Global_BaseAddressGTA + 0x14E20; // nop empty thread from paradise. this thread returns 0. Causes freeze when attached RTM tools/debugger
  1217.     WriteGameProcessMemory(address, (const void *)&NOP, sizeof(NOP));
  1218.     unsigned int address2 = Global_BaseAddressGTA + 0x14E64; // another thread. could be like checks
  1219.     WriteGameProcessMemory(address2, (const void *)&NOP, sizeof(NOP));
  1220. }
  1221.  
  1222. void process_cracking_GTA_Paradise_April_30_2018() // APRIL 30TH, 2018 | Paradise GTA Update(1.4.6.1)
  1223. {
  1224.    
  1225.     unsigned int address = Global_BaseAddressGTA + 0x15CA4; // nop empty thread from paradise. this thread returns 0. Causes freeze when attached RTM tools/debugger
  1226.     WriteGameProcessMemory(address, (const void *)&NOP, sizeof(NOP));
  1227.     unsigned int address2 = Global_BaseAddressGTA + 0x15CE8; // another thread. could be like checks
  1228.     WriteGameProcessMemory(address2, (const void *)&NOP, sizeof(NOP));
  1229. }
  1230.  
  1231. void process_cracking_GTA_Paradise_September_8_2018() // SEPTEMBER 8TH, 2018 | Paradise GTA Update 1.4.8
  1232. {
  1233.     //these string dont show up in the dump some how???
  1234.     //Please refrain from using network mods while downloading.
  1235.     //Paradise RPF download 95% Complete
  1236.     //~g~Download finished! Restart your PS3 to take effect!
  1237.     //Paradise RPF download 100% Complete
  1238.  
  1239.  
  1240.    
  1241.     unsigned int address3 = Global_BaseAddressGTA + 0x29BC0; // nop empty thread from paradise. this thread returns 0. Causes freeze when attached RTM tools/debugger
  1242.     WriteGameProcessMemory(address3, (const void *)&NOP, sizeof(NOP));
  1243.  
  1244.     //unsigned int breakPoint = 0x7FE00008; // used from thread funcs when main thread is too fast to use break point with debugger
  1245.     //writeProcessMemory((void *)0x24F9CBC, (const void *)&breakPoint, sizeof(breakPoint));
  1246. }
  1247.  
  1248. void process_cracking_GTA_Paradise_November_23_2018() // November 23TH, 2018 | Paradise GTA Update 1.4.9.1 | ** the version he said he added some "secret stuff" on a skype call. also said it just a cool feature for his users **
  1249. {
  1250.     unsigned int address = Global_BaseAddressGTA + 0x00000; // nop empty thread from paradise. this thread returns 0. Causes freeze when attached RTM tools/debugger
  1251.     WriteGameProcessMemory(address, (const void *)&NOP, sizeof(NOP));
  1252. }
  1253.  
  1254. void process_cracking_GTA_Paradise_JANUARY_31ST_2019() // JANUARY 31ST, 2019 | Paradise GTA Update 1.5.0
  1255. {
  1256.     // nop sys call for write to process inside encryption func
  1257.     // you will freeze when the function is called but you can now dump the funtion that is decrypted
  1258.     // pattern: 78 66 36 64 78 67 1F 24  7C 63 30 14 7C 67 18 10     |     you should see 2      sc       instructions. 1 to  get process id and another for write process memory   (NOTE: DO NOT confuse it with the decrypt func as they are similar) (usually decrypt function are always at the top of a function)
  1259.     //WriteGameProcessMemory(0x24D29AC, (const void *)&NOP, sizeof(NOP));
  1260.    
  1261.     // nop empty threads from paradise. this thread returns 0. Causes freeze when attached RTM tools/debugger. IMPORTANT: you need to remove the sleeps from our thread in    prx.cpp    becuase this thread is faster then ours
  1262.     WriteGameProcessMemory(0x24FF914, (const void *)&NOP, sizeof(NOP));
  1263.    
  1264.  
  1265.     // encrypted_game_calls_part_1
  1266.     //SetBreakPoint(0x24D9568);
  1267.     // 24D9568                 lwz       r3, 0(r3)  # r3 = 0x1E70388    |  a xor value for encrpting addresses
  1268.  
  1269.     //SetBreakPoint(0x24D95E4); // used for encryption
  1270.     // 24D95E4                 addic     r3, r1, arg_70     # r3 = 0x2550000, r1 = 0xD003FE40 = 00000000
  1271.  
  1272.     //SetBreakPoint(0x24D95FC); // used for encryption
  1273.     // 24D95FC                 mr        r3, r1     # r3 = 0xD003FEB0 = 0xEDEAEDD8
  1274.  
  1275.  
  1276.  
  1277.  
  1278.  
  1279.  
  1280.  
  1281.     // encrypted game called part 3
  1282.     //SetBreakPoint(0x24DA460); // didn't breakpoint
  1283.     // 24DA460                 extsw     r3, r3
  1284.  
  1285.     //SetBreakPoint(0x24DA57C); // didn't breakpoint
  1286.     // 24DA57C                 lwz       r4, 0(r4)
  1287.     // 24DA580                 std       r2, arg_28(r1)
  1288.  
  1289.     //SetBreakPoint(0x24DA59C); // didnt breakpoint
  1290.     // 24DA59C                 lwz       r4, 0(r5)
  1291.     // 24DA5A0                 lwz       r2, 4(r5)
  1292.  
  1293.     //SetBreakPoint(0x24DA5D8); // didn't breakpoint
  1294.     // 24DA5D8                 lwz       r4, 0(r5)
  1295.     // 24DA5DC                 lwz       r2, 4(r5)
  1296.  
  1297.     //SetBreakPoint(0x24DA654); // didn't breakpoint
  1298.     // 24DA654                 lwz       r7, 0(r9)
  1299.     // 24DA658                 lwz       r2, 4(r9)
  1300.  
  1301.     // SetBreakPoint(0x24DA704);  // no good address results
  1302.     // 24DA704                 lwz       r4, 0(r4)
  1303.     // 24DA708                 std       r2, arg_28(r1)
  1304.  
  1305.     //SetBreakPoint(0x24DA724);
  1306.     // 24DA724                 lwz       r4, 0(r5)  # r4 = 0x15BA0E4
  1307.     // 24DA728                 lwz       r2, 4(r5)
  1308.  
  1309.     //SetBreakPoint(0x24DA7E4);
  1310.     // 24DA7E4                 lwz       r4, 0(r5)  # r4 = 0xA8B814
  1311.     // 24DA7E8                 lwz       r2, 4(r5)
  1312.  
  1313.     //SetBreakPoint(0x24DA878);
  1314.     // 24DA878                 lwz       r7, 0(r6)  # r7 = 0xA8B908
  1315.     // 24DA87C                 lwz       r2, 4(r6)
  1316.  
  1317.     //SetBreakPoint(0x24DA904);
  1318.     // 24DA904                 lwz       r5, 0(r6)  # r6 = 0xD003F8D8 = 0x1626844
  1319.     // 24DA908                 std       r2, arg_28(r1)
  1320.  
  1321.     //SetBreakPoint(0x24DA93C);  // not a func but it seems to be some pointer for creating the function
  1322.     // 24DA93C                 lwz       r3, 0(r3)  # r3 = 0x40D13AB8
  1323.     // 24DA940                 std       r2, arg_28(r1)
  1324.  
  1325.     //SetBreakPoint(0x24DA960);
  1326.     // 24DA960                 lwz       r6, 0(r5)  # r6 = 0x46E30C
  1327.     // 24DA964                 lwz       r2, 4(r5)
  1328.  
  1329.     //SetBreakPoint(0x24DA9FC);
  1330.     // 24DA9FC                 stw       r6, arg_7C(r1) # r5 = 0xA8B978
  1331.     // 24DAA00                 mr        r3, r26
  1332.     // 24DAA04                 std       r2, arg_28(r1)
  1333.  
  1334.     //SetBreakPoint(0x24DAA0C);
  1335.     // 24DAA0C                 lwz       r5, 0(r4)  # r5 = 0xA8B978
  1336.     // 24DAA10                 lwz       r2, 4(r4)
  1337.  
  1338.     //SetBreakPoint(0x24DAAC4);
  1339.     // 24DAAC4                 lwz       r10, 0(r9) # r9 = 0xD003F8C0 = 0x9F8FF0
  1340.     // 24DAAC8                 mr        r4, r28
  1341.     // 24DAACC                 std       r2, arg_28(r1)
  1342.  
  1343.     //SetBreakPoint(0x24DAAD0);
  1344.     // 24DAAD0                 mr        r5, r25    # r5 = 0x222D970 = CNetworkPlayerMgr
  1345.     // 24DAAD4                 mtctr     r10
  1346.     // 24DAAD8                 lwz       r2, 4(r9)
  1347.  
  1348.     //SetBreakPoint(0x24DA62C); // didn't breakpoint
  1349.     // 24DA62C                 lwz       r5, 0(r5)
  1350.     // 24DA630                 extsw     r4, r7
  1351.     // 24DA634                 std       r2, arg_28(r1)
  1352.  
  1353.     //SetBreakPoint(0x24DA654); // didn't breakpoint
  1354.     // 24DA654                 lwz       r7, 0(r9)
  1355.     // 24DA658                 lwz       r2, 4(r9)
  1356.  
  1357.  
  1358.  
  1359.  
  1360.  
  1361.  
  1362.  
  1363.  
  1364.  
  1365.  
  1366.     //SetBreakPoint(0x24DAC68);
  1367.     // results:
  1368.     // 24DAC68                 lwz       r6, 0(r5)     # r6 = 0x47E00C
  1369.     // 24DAC6C                 lwz       r2, 4(r5)     # 0x1C85330
  1370.  
  1371.     //SetBreakPoint(0x24D9908);
  1372.     // 24D9908                 lwz       r4, 0(r5)     # r4 = 0x15BA0E4
  1373.     // 24D990C                 lwz       r2, 4(r5)     # 0x1C85330
  1374.  
  1375.     //SetBreakPoint(0x24D99DC);
  1376.     // 24D99DC                 lwz       r4, 0(r5)     # r4 = 0xA8B814
  1377.     // 24D99E0                 extsw     r30, r30      # ignore
  1378.     // 24D99E4                 lwz       r2, 4(r5)     # 0x1C85330
  1379.  
  1380.     //SetBreakPoint(0x24D9A58);
  1381.     // 24D9A58                 lwz       r6, 0(r7)     # r7 = 0xD003F748 = 0xA8B908
  1382.     // 24D9A5C                 lwz       r2, 4(r7)     # 0x1C85330
  1383.  
  1384.     //SetBreakPoint(0x24D9AEC);
  1385.     // 24D9AEC                 lwz       r5, 0(r6)     # r6 = 0x1626844
  1386.  
  1387.     //SetBreakPoint(0x24D9B4C);
  1388.     // 24D9B4C                 lwz       r6, 0(r5)     # 0xD003F738->0x46E30C
  1389.     // 24D9B50                 lwz       r2, 4(r5)     # 0x1C85330
  1390.  
  1391.     //SetBreakPoint(0x24D9C50);
  1392.     // 24D9C50                 lwz       r7, 0(r8)     # r7 = 0xA8B5FC
  1393.     // 24D9C54                 std       r2, 0x620+var_5F8(r1)  # 0x1C85330
  1394.  
  1395.     //SetBreakPoint(0x24D9CE0);
  1396.     // 24D9CE0                 lwz       r5, 0(r7)    # r5 = 0xA8BBBC
  1397.     // 24D9CE4                 std       r2, 0x620+var_5F8(r1)  # 0x1C85330
  1398.  
  1399.     //SetBreakPoint(0x24D9DD0);
  1400.     // 24D9DD0                 lwz       r7, 0(r8)    # r7 = 0xA8B5FC
  1401.     // 24D9DD4                 std       r2, 0x620+var_5F8(r1)  # 0x1C85330
  1402.  
  1403.     //SetBreakPoint(0x24D9E60);
  1404.     // 24D9E60                 lwz       r5, 0(r7)     # r5 = 0xA8BBBC
  1405.     // 24D9E64                 std       r2, 0x620+var_5F8(r1)  # 0x1C85330
  1406.  
  1407.     //SetBreakPoint(0x24D9F0C);
  1408.     // 24D9F0C                 lwz       r5, 0(r4)     # r5 = 0xA8B978
  1409.     // 24D9F10                 std       r2, 0x620+var_5F8(r1)  #0x1C85330
  1410.  
  1411.     //SetBreakPoint(0x24D9FC8);
  1412.     // 24D9FC8                 lwz       r10, 0(r9)     # r9 = 0xD003F708 = 0x9F8FF0
  1413.     // 24D9FCC                 mr        r4, r28        # ignore
  1414.     // 24D9FD0                 std       r2, 0x620+var_5F8(r1)  # 0x1C85330
  1415.  
  1416.     //SetBreakPoint(0x24DA04C);
  1417.     // 24DA04C                 lwz       r8, 0(r7)      # r7 = 0xD003F700 = 0x483F50
  1418.     // 24DA050                 lwz       r2, 4(r7)      # 0x1C85330
  1419.  
  1420.  
  1421.  
  1422.     // encrypted game pointer part 1
  1423.     //SetBreakPoint(0x24D9814); // no good results
  1424.     //SetBreakPoint(0x24D9818);
  1425.     //SetBreakPoint(0x24D9808);
  1426.  
  1427.  
  1428.  
  1429.  
  1430.     //SetBreakPoint(0x24DA250);
  1431.     // results:
  1432.     // 24DA250                 lwz       r6, 0(r5)     # r6 = 0x5A47C
  1433.     // 24DA254                 lwz       r2, 4(r5)     # 0x1C85330
  1434.  
  1435.     //SetBreakPoint(0x24DA304);
  1436.     // 24DA304                 lwz       r4, 0(r6)     # r4 = 0x150BAA4
  1437.     // 24DA308                 lwz       r2, 4(r6)     # 0x1C85330
  1438.  
  1439.  
  1440.  
  1441.  
  1442.  
  1443.     // found in memory. Might be used later???
  1444.     // 0x51BA0
  1445. }
  1446.  
  1447. void process_cracking_GTA_Paradise_FEBUARY_13TH_2019()
  1448. {
  1449.     // nop sys call for write to process inside encryption func
  1450.     // you will freeze when the function is called but you can now dump the funtion that is decrypted
  1451.     //WriteGameProcessMemory(0x24DC3CC, (const void *)&NOP, sizeof(NOP)); // nop the encryption function
  1452.     //WriteGameProcessMemory(0x24DC578, (const void *)&NOP, sizeof(NOP)); // nop the encryption function
  1453.    
  1454.  
  1455.     //SetBreakPoint(0x24DC140);
  1456.    
  1457.  
  1458. }
  1459.  
  1460. void process_cracking_GTA_Paradise_May_5TH_2019()
  1461. {
  1462.  
  1463. #ifdef enable_debugging
  1464.  
  1465.     ///SetNop(0x24D1E94); // nop write process syscall for decrypt function. not needed
  1466.     //SetNop(0x24D22A4); // nop write process syscall for encrypt function
  1467.     //SetNop(0x24FCAC8); // nop write process syscall for encrypting the thread
  1468.  
  1469.  
  1470.     //SetNop(0x24DB6FC); // nop write process syscall in freeze lobby v3
  1471.     //SetNop(0x24DB4DC); // nop write process syscall in freeze lobby v3 as host
  1472.     //SetNop(0x24D5544);  // nop write process syscall for encrypt function #2
  1473.  
  1474.     //SetNop(0x24FAF24); // nop write process syscall for encrypting for unknown func
  1475.  
  1476.     ///SetBreakPoint(0x24D23C8); // breakpoint here to get the first param of the get host of this script native
  1477.  
  1478. #elif enable_cracking
  1479.  
  1480.  
  1481.     //**NOTE** when the time is in the fiture the game will say cound't not go online bc youre missing cloud files
  1482.  
  1483.     SetNop(0x24FC088); // remove read license key function
  1484.     SetReturnTrue(0x24DE6F0); // return true in the read license key function | useless since we nop the sub but here just incase
  1485.     SetBranch(0x24FC098, 0x24FC0DC); // bypass reading key
  1486.     SetBranch(0x24FC0F4, 0x24FC154); // bypass read key length
  1487.     SetNop(0x24FBF88); // nop anti debugging thread
  1488.     //SetNop(0x24FBFB0); // nop 2nd thread that checks for anti debugger. this will let you debug but will cuase some functions not ot work like xml vehicle spawner and freeze player and other functions
  1489.     unsigned int anti_debugging_eboot_memory[] = {
  1490.         0x60000000, 0x60000000, 0x60000000, 0x60000000, 0x60000000, 0x60000000,
  1491.         0x60000000, 0x60000000, 0x60000000, 0x60000000, 0x60000000, 0x60000000,
  1492.         0x60000000, 0x60000000, 0x60000000, 0x60000000, 0x60000000, 0x60000000,
  1493.         0x60000000, 0x60000000, 0x60000000, 0x60000000, 0x60000000, 0x60000000,
  1494.         0x60000000, 0x60000000, 0x60000000, 0x60000000,
  1495.     };
  1496.     WriteGameProcessMemory(0x24D36AC, (const void *)&anti_debugging_eboot_memory, sizeof(anti_debugging_eboot_memory));
  1497.  
  1498.  
  1499.     SetNop(0x24FC3A8); // nop the run_auth_setup
  1500.     SetUint(0x25379A0, 0x253D280); // pointer to array_with_server_addresses
  1501.     unsigned int array_with_server_addresses[] = {
  1502.         0x01E6FF38, 0x003FA510, 0x01306254, 0x01C6BF80, 0x003F8B84, 0x009D9830,
  1503.         0x00474054, 0x0047E00C, 0x003A9EFC, 0x3D600000, 0x396B0000, 0x7D6903A6,
  1504.         0x4E800420, 0x27A244D8, 0x003E3A20, 0xB06FE3FE, 0xDD2BFC77, 0x00A552E0,
  1505.         0x19974656, 0x013AE3B0, 0x00000000, 0x00000000, 0x00000000, 0x00000000,
  1506.         0x00000000, 0x08421B34, 0x004241D4, 0x043E4298, 0x0159A284, 0x01C707E0,
  1507.         0x0133C430, 0x01DE12C0, 0x68BE968A, 0x00D38374, 0xDDF8506E, 0x01C72E70,
  1508.         0x013CA768, 0x5D2F0936, 0x3FF8A110, 0x7701AE7A, 0x2EDCED76, 0x6889179E,
  1509.         0x37AE0314, 0x7FF6D4F3, 0x198AE961, 0x54F5F89C, 0x7CB53A80, 0x1399569B,
  1510.         0x741DB119, 0x7184E059, 0x12365695, 0x602DC317, 0x413DAEE5, 0x1519CFC7,
  1511.         0x378281EF, 0x6C70C35E, 0x56FE147C, 0x16D635A7,
  1512.     };
  1513.     WriteGameProcessMemory(0x253D280, (const void *)&array_with_server_addresses, sizeof(array_with_server_addresses));
  1514.  
  1515.     // when spawning a car it used to crash bc the function was partly encrypted
  1516.     unsigned int spawn_callback_decrypted[] = {
  1517.         0xF821FF61, 0x7C0802A6, 0xF80100B0, 0xFBE10098,
  1518.         0x3FE01006, 0xFBC10090, 0x38800000, 0x607E0000,
  1519.         0x3C601005, 0x3CC0FA92, 0x909F0004, 0x3CA00250,
  1520.         0x909F000C, 0x907F0008, 0x907F0000, 0xFBA10088,
  1521.         0x60C4E226, 0x3BA59970, 0x78830020, 0x3C801006,
  1522.         0x4BFD7AF5, 0x3C801647, 0x80BF0000, 0x30610070,
  1523.         0x6084F1CB, 0x38C00000, 0x80A50000, 0x7CA507B4,
  1524.         0x4801F3CD, 0x60000000, 0xC03D0000, 0x63C30000,
  1525.         0xC0810070, 0xC0410074, 0xC0610078, 0xEC24082A,
  1526.         0x4BFFFD91, 0xE80100B0, 0x7C0803A6, 0xEBA10088,
  1527.         0xEBC10090, 0xEBE10098, 0x382100A0, 0x4E800020,
  1528.     };
  1529.     WriteGameProcessMemory(0x24F9978, (const void *)&spawn_callback_decrypted, sizeof(spawn_callback_decrypted));
  1530.  
  1531.     // function was partly encrypted
  1532.     unsigned int secondary_thread_decrypted[] = {
  1533.         0x4BFFF9E9, 0x2C030000, 0x41820008, 0x3BC00001,
  1534.         0x38600000, 0x48044D81, 0x60000000, 0x3C800254,
  1535.         0x2C1E0000, 0xE884B0F8, 0x41820010, 0x3CA00254,
  1536.         0x60640000, 0xF865B0F8, 0x7C841810, 0x2C240002,
  1537.         0x40810074,
  1538.     };
  1539.     WriteGameProcessMemory(0x24D3668, (const void *)&secondary_thread_decrypted, sizeof(secondary_thread_decrypted));
  1540.  
  1541.  
  1542.  
  1543.     SetString(0x2525B70, "Paradise Cracked", strlen("Paradise Cracked"));
  1544.     SetString(0x2523A90, "using næ«Paradise CRAKnæ«", strlen("using næ«Paradise CRAKnæ«"));
  1545.  
  1546.     /*
  1547.  
  1548.     // 0xF48643B0 Thursday, December 31, 2099 10:37:36 PM
  1549.     unsigned int time_stamp_date_patch[] = {
  1550.     0x3C80F486, // lis       r4, 0xF486 # 0xF48643B0
  1551.     0x608443B0, // ori       r4, r4, 0x43B0 # 0xF48643B0
  1552.     };
  1553.     WriteGameProcessMemory(0x24FB9DC, (const void *)&time_stamp_date_patch, sizeof(time_stamp_date_patch)); // crashed
  1554.     SetBlr(0x24FB338); // blr the run_date_check_function
  1555.     SetNop(0x24FBA40); // when the timestamp ends the thread will crash by setting an invalid memory address
  1556.  
  1557.  
  1558.  
  1559.  
  1560.     unsigned int data_001[] = {
  1561.     0x322934A0, 0x40D13A80,
  1562.     };
  1563.     WriteGameProcessMemory(0x253021C, (const void *)&data_001, sizeof(data_001));
  1564.  
  1565.     SetUint(0x2530350, 0x00000000);
  1566.     SetUint(0x253052C, 0x00000000);
  1567.  
  1568.     unsigned int data_002[] = {
  1569.     0x000000FF, 0x00000053,
  1570.     };
  1571.     WriteGameProcessMemory(0x2530530, (const void *)&data_002, sizeof(data_002));
  1572.  
  1573.     unsigned int data_006[] = {
  1574.     0x00000000, 0x00010000, 0x00000001, 0x01000000,
  1575.     };
  1576.     WriteGameProcessMemory(0x2534A49, (const void *)&data_006, sizeof(data_006));
  1577.  
  1578.     SetUint(0x2535C30, 0x1EEE1A4);
  1579.     */
  1580.  
  1581. #endif
  1582. }
  1583.  
  1584.  
  1585.  
  1586.  
  1587. void process_cracking_GTA_Paradise_March_3rd_2020()
  1588. {
  1589.  
  1590. #ifdef enable_debugging
  1591.  
  1592.     SetNop(0x24D5920); // nop write process syscall in encrypt func 0001
  1593.  
  1594.  
  1595. #elif enable_cracking
  1596.  
  1597.     //SetNop(0x24FF0AC); // remove read license key function
  1598.     //SetReturnTrue(0x24E2830); // return true in the read license key function | useless since we nop the sub but here just incase
  1599.     //SetBranch(0x24FF0BC, 0x24FF100); // bypass reading key
  1600.     //SetBranch(0x24FF118, 0x24FF178); // bypass read key length
  1601.  
  1602.     SetNop(0x24FEFAC); // nop anti debugging thread
  1603.     SetBranch(0x24D3B70, 0x24D3CD8); // skip anti debugging and break point detection
  1604.     SetUint(0x24D1330, 0x609F0000); // invalid instruction2 fix
  1605.  
  1606.     /*
  1607.     SetNop(0x24FF3CC); // nop the run_auth_setup
  1608.  
  1609.     SetUint(0x2544C20, 0xE3EE026E); // xor value used for xor values
  1610.  
  1611.     SetUint(0x2547C98, 0x254D058); // pointer to array_with_xor_values
  1612.     unsigned int array_with_xor_values[] = {
  1613.         0x088A3A8A, 0x095360A2, 0x085CA7E6, 0x08AA7A32, 0x09534E36, 0x09F15D82,
  1614.         0x092B85E6, 0x092B25BE, 0x09565B4E, 0x340CC5B2, 0x3007C5B2, 0x7405C614,
  1615.         0x47ECC192, 0x2ECE816A, 0x0952FF92, 0xB903264C, 0xD44739C5, 0x09C99752,
  1616.         0x11FB83E4, 0x08562602, 0x066CC5B2, 0x066CC5B2, 0x066CC5B2, 0x066CC5B2,
  1617.         0x066CC5B2, 0x012EDE86, 0x092E8466, 0x0D52872A, 0x08356736, 0x08ABC252,
  1618.         0x085F0182, 0x08B2D772, 0x61D25338, 0x09BF46C6, 0xD49495DC, 0x08ABEBC2,
  1619.         0x085062DA, 0x570C5801, 0x369464A2, 0x7E6D6BC8, 0x27B028C4, 0x61E5D22C,
  1620.         0x3EC2C6A6, 0x769A1141, 0x10E62CD3, 0x5D993D2E, 0x75D9FF32, 0x1AF59329,
  1621.         0x7D7174AB, 0x78E825EB, 0x1B5A9327, 0x694106A5, 0x48516B57, 0x1C750A75,
  1622.         0x3EEE445D, 0x651C06EC, 0x5F92D1CE, 0x1FBAF015,
  1623.     };
  1624.     WriteGameProcessMemory(0x254D058, (const void*)&array_with_xor_values, sizeof(array_with_xor_values));
  1625.     SetUint(0x2547C9C, 0x882578A3); // xor values for xor array
  1626.     SetUint(0x2547C8C, 0xBF20B39A); // xor values for xor array
  1627.     */
  1628.  
  1629.  
  1630.  
  1631.  
  1632.  
  1633. #endif
  1634. }
  1635.  
  1636.  
  1637. void process_cracking_GTA_Paradise_March_17Th_2020()
  1638. {
  1639.  
  1640. #ifdef enable_debugging
  1641.  
  1642.  
  1643. #elif enable_cracking
  1644.  
  1645.     uint32_t bl_create_thread = GetGameProcessUint32(0x24FF588);
  1646.     if (bl_create_thread == 0x4802A611) // only do it once becuase its going to re-encrypt and it will cause invalid instruction somewhere else
  1647.         SetNop(0x24FF588); // nop anti debugging thread
  1648.  
  1649.     SetBranch(0x24D3C80, 0x24D3DE8); // skip anti debugging and break point detection
  1650.  
  1651. #endif
  1652. }
  1653.  
  1654.  
  1655. void process_cracking_GTA_Paradise_June_15Th_2020()
  1656. {
  1657.  
  1658. #ifdef enable_debugging
  1659.  
  1660.  
  1661. #elif enable_cracking
  1662.  
  1663.     // some what still broken but enough to dump it
  1664.  
  1665.     uint32_t bl_create_thread = GetGameProcessUint32(0x2501A88);
  1666.     if (bl_create_thread == 0x4802CA09) // only do it once becuase its going to re-encrypt and it will cause invalid instruction somewhere else
  1667.         SetNop(0x2501A88);
  1668.  
  1669.     SetBranch(0x24D3C78, 0x24D3E08); // skip anti debugging and break point detection
  1670.  
  1671. #endif
  1672. }
  1673.  
  1674.  
  1675. void process_cracking_GTA_Paradise_July_2Nd_2020()
  1676. {
  1677.  
  1678. #ifdef enable_debugging
  1679.  
  1680.  
  1681. #elif enable_cracking
  1682.  
  1683.     // some what still broken but enough to dump it
  1684.  
  1685.     uint32_t bl_create_thread = GetGameProcessUint32(0x2501C98);
  1686.     if (bl_create_thread == 0x4802CAD9) // only do it once becuase its going to re-encrypt and it will cause invalid instruction somewhere else
  1687.         SetNop(0x2501C98);
  1688.  
  1689.     SetBranch(0x24D3C78, 0x24D3E08); // skip anti debugging and break point detection
  1690.  
  1691. #endif
  1692. }
  1693.  
  1694.  
  1695.  
  1696.  
  1697.  
  1698.  
  1699.  
  1700.  
  1701.  
  1702.  
  1703. GTA_Serendipity.h
  1704. --------------------------
  1705.  
  1706.  
  1707. void process_cracking_serendipity()
  1708. {
  1709.     WriteGameProcessMemory(0x24D4194, (const void *)&NOP, sizeof(NOP)); // read key  0x24D3968
  1710.     WriteGameProcessMemory(0x24D41D0, (const void *)&NOP, sizeof(NOP)); // first auth request
  1711.     WriteGameProcessMemory(0x24D42B0, (const void *)&NOP, sizeof(NOP)); // seconds auth request
  1712.  
  1713.     unsigned int seren_hook = 0x3E3A20; // is player online
  1714.     WriteGameProcessMemory(0x2530064, (const void *)&seren_hook, sizeof(seren_hook)); // main hook address
  1715.  
  1716.     unsigned int text_pos_x = 0x3F30A3D7; // float 0.69
  1717.     WriteGameProcessMemory(0x2531B40, (const void *)&text_pos_x, sizeof(text_pos_x)); // text pos x
  1718.  
  1719.     unsigned int menu_pos_x = 0x3F4CCCCD; // float 0.8
  1720.     WriteGameProcessMemory(0x2531B44, (const void *)&menu_pos_x, sizeof(menu_pos_x)); // menu pos x
  1721.  
  1722.     unsigned int menu_rgba[] = {
  1723.         0x000000FF, 0x000000FF, 0x000000FF, 0x000000FF, 0x000000FF, 0x000000FF,
  1724.         0x000000FF, 0x000000FF, 0x0000000F, 0x0000000F, 0x0000000F, 0x00000078,
  1725.         0x000000FF, 0x0000007D, 0x00000000, 0x000000AF, 0x000000FF, 0x0000007D,
  1726.         0x00000000, 0x000000AF, 0x000000FF, 0x0000007D, 0x00000000, 0x000000AF
  1727.     };
  1728.  
  1729.     WriteGameProcessMemory(0x2531C10, (const void *)&menu_rgba, sizeof(menu_rgba)); // menu RGBA
  1730. }
  1731.  
  1732.  
  1733.  
  1734.  
  1735.  
  1736.  
  1737.  
  1738.  
  1739. GTA_Terrorizor.h
  1740. --------------------------------
  1741.  
  1742. void process_cracking_terrorizer()
  1743. {
  1744.     SetNop(IDA2MEM(0x4FD58)); // nop auther thread
  1745.     SetNop(IDA2MEM(0x48B40)); // bypass check in PatchInJump
  1746.     SetUint(IDA2MEM(0x48D74), 0x2C030001); // set some check to true
  1747.     SetUint(IDA2MEM(0x48E48), 0x38600001); // set check to true
  1748.     SetBranchless(IDA2MEM(0x48BF4)); // branch where he sets up all the hooks
  1749. }
  1750.  
  1751.  
  1752.  
  1753.  
  1754.  
  1755.  
  1756.  
  1757.  
  1758. lua_plugin.h
  1759. ----------------------
  1760.  
  1761. // github.com/gallexme/ScriptHook-Lua-Plugin
  1762. // gtaforums.com/topic/386908-doc-lua-scripting-help/page/6/   VECTOR3 lua usage
  1763.  
  1764.  
  1765.  
  1766. int lua_func_notify(lua_State *l)
  1767. {
  1768.     const char *text = lua_tostring(l, 1);
  1769.     vshtask_notify(text);
  1770.     return 1;
  1771. }
  1772.  
  1773. int lua_func_sleep(lua_State *l)
  1774. {
  1775.     int key = lua_tointeger(l, 1);
  1776.     sleep(key);
  1777.     return 1;
  1778. }
  1779.  
  1780. int lua_func_set_memory(lua_State *l)
  1781. {
  1782.     unsigned long _address = ((unsigned long)tolua_tonumber(l, 1, 0));
  1783.     const char *_text = tolua_tostring(l, 2, 0);
  1784.     //const char *text = lua_tostring(l, 2);
  1785.     unsigned long _size = ((unsigned long)tolua_tonumber(l, 3, 0));
  1786.  
  1787.     int ret = WriteGameProcessMemory(_address, (const void *)_text, _size);
  1788.     lua_pushboolean(l, ret);
  1789.     return 1;
  1790. }
  1791.  
  1792. int lua_func_get_memory_uint32(lua_State *l)
  1793. {
  1794.     unsigned long _address = ((unsigned long)tolua_tonumber(l, 1, 0));
  1795.     uint32_t value;
  1796.     int ret = ReadGameProcessMemory(_address, (void *)&value, sizeof(uint32_t));
  1797.     if (ret == SUCCEEDED)
  1798.     {
  1799.         lua_pushnumber(l, value);
  1800.     }
  1801.     else
  1802.     {
  1803.         lua_pushnumber(l, 0x8001000D);
  1804.     }
  1805.     return 1;
  1806. }
  1807.  
  1808. int lua_func_get_memory_uint64(lua_State *l)
  1809. {
  1810.     unsigned long _address = ((unsigned long)tolua_tonumber(l, 1, 0));
  1811.     //uint64_t* value = ((uint64_t*)tolua_tousertype(l, 2, 0));
  1812.  
  1813.     uint64_t value;
  1814.     int ret = ReadGameProcessMemory(_address, (void *)&value, sizeof(uint64_t));
  1815.     if (ret == SUCCEEDED)
  1816.     {
  1817.         lua_pushnumber(l, value);
  1818.     }
  1819.     else
  1820.     {
  1821.         lua_pushnumber(l, 0x8001000D); // if failed
  1822.     }
  1823.     return 1;
  1824. }
  1825.  
  1826. int lua_func_is_in_game(lua_State *l)
  1827. {
  1828.     lua_pushboolean(l, bIsGameLoaded);
  1829.  
  1830.     return 1;
  1831. }
  1832.  
  1833. int lua_func_get_game_name(lua_State *l)
  1834. {
  1835.     if (bIsGameLoaded)
  1836.     {
  1837.         lua_pushstring(l, global_game_Title);
  1838.     }
  1839.     else
  1840.     {
  1841.         lua_pushstring(l, "");
  1842.     }
  1843.  
  1844.     return 1;
  1845. }
  1846.  
  1847. int lua_func_load_sprx_into_process(lua_State *l)
  1848. {
  1849.     if (bIsGameLoaded)
  1850.     {
  1851.         const char *text = lua_tostring(l, 1);
  1852.         load_start(text);
  1853.         lua_pushboolean(l, 1);
  1854.     }
  1855.     else
  1856.     {
  1857.         lua_pushboolean(l, 0);
  1858.     }
  1859.     return 1;
  1860. }
  1861.  
  1862. void run_function(lua_State *L, const char *func)
  1863. {
  1864.     lua_getglobal(L, func);
  1865.     int error = lua_pcall(L, 0, 0, 0);
  1866.  
  1867.     if (error) {
  1868.         fprintf(_stderr, "%s: %s\n", func, lua_tostring(L, -1));
  1869.         lua_pop(L, 1);
  1870.         sys_timer_usleep(500);
  1871.     }
  1872.     if (error == LUA_ERRMEM) {
  1873.         fprintf(_stderr, "C daemon: Memory error");
  1874.         sys_timer_usleep(500);
  1875.     }
  1876. }
  1877.  
  1878. void run_file(lua_State *L, char *file)
  1879. {
  1880.     int error = luaL_loadfile(L, file) || lua_pcall(L, 0, 0, 0);
  1881.  
  1882.     if (error) {
  1883.         fprintf(_stderr, "%s: %s\n", file, lua_tostring(L, -1));
  1884.         lua_pop(L, 1);
  1885.     }
  1886.     if (error == LUA_ERRMEM) {
  1887.         fprintf(_stderr, "C daemon: Memory error");
  1888.     }
  1889. }
  1890.  
  1891. #define LUA_SCRIPT_FILE "/dev_hdd0/tmp/lua/main.lua"
  1892.  
  1893. lua_State *generateLuaState()
  1894. {
  1895.     lua_State *lua_state;
  1896.  
  1897.     printf("calling luaL_newstate\n");
  1898.     lua_state = luaL_newstate();
  1899.     sleep(500);
  1900.     // load Lua libraries
  1901.     printf("calling luaL_openlibs\n");
  1902.     luaL_openlibs(lua_state);
  1903.  
  1904.     sleep(9000);
  1905.  
  1906.     if (luaL_dofile(lua_state, LUA_SCRIPT_FILE)) // crashes in here????
  1907.     {
  1908.         fprintf(_stderr, "Main.lua: %s\n", lua_tostring(lua_state, -1));
  1909.         lua_pop(lua_state, 1);
  1910.     }
  1911.  
  1912.     printf("seting up lids\n");
  1913.     lua_pushcfunction(lua_state, &lua_func_notify);
  1914.     lua_setglobal(lua_state, "notify");
  1915.     lua_pushcfunction(lua_state, &lua_func_sleep);
  1916.     lua_setglobal(lua_state, "sleep");
  1917.     lua_pushcfunction(lua_state, &lua_func_set_memory);
  1918.     lua_setglobal(lua_state, "set_memory");
  1919.     lua_pushcfunction(lua_state, &lua_func_get_memory_uint32);
  1920.     lua_setglobal(lua_state, "get_memory_uint32");
  1921.     //lua_pushcfunction(lua_state, &lua_func_get_memory_uint64);
  1922.     //lua_setglobal(lua_state, "get_memory_uint64");
  1923.     lua_pushcfunction(lua_state, &lua_func_is_in_game);
  1924.     lua_setglobal(lua_state, "is_in_game");
  1925.     lua_pushcfunction(lua_state, &lua_func_get_game_name);
  1926.     lua_setglobal(lua_state, "get_game_name");
  1927.     lua_pushcfunction(lua_state, &lua_func_load_sprx_into_process);
  1928.     lua_setglobal(lua_state, "load_sprx");
  1929.    
  1930.  
  1931.  
  1932.     printf("calling init\n");
  1933.     run_function(lua_state, "init");
  1934.     printf("finished calling init\n");
  1935.     return lua_state;
  1936. }
  1937.  
  1938.  
  1939.  
  1940.  
  1941.  
  1942.  
  1943.  
  1944.  
  1945.  
  1946.  
  1947.  
  1948. Minecraft_modcraft_Tool.h
  1949. ----------------------------------------
  1950. /*
  1951. responses:
  1952.  
  1953.  
  1954. modcraft.pw/
  1955.  
  1956. /api/login.php?para1=RealGamer3242&para2=ppppppppppp&para3=Fl4g5Or5ajv864x4MeV9JM50tgBfy1vO3fMl5t52pR8ECYGlt7b/Z23mWXbLXRbL&para4=489984&para5=Color%20[A=255,%20R=0,%20G=100,%20B=155]
  1957.  
  1958. respones: [truncated]qwskgsjuow396jb0x41d88338spr0x016C5D60spr0x4000ABE4spr0x00B2E06Cspr0x008BB020spr0x013E4DB4spr0x00947B40spr0x00A0B1E8spr0x0032A0D8spr0x0032A0F8spr0x0032A090spr0x0032A098spr0x0032A0B0spr0x0032A0A0spr0x001E9277spr0x000119FFspr0x00
  1959.  
  1960.  
  1961. /api/login.php?para1=RealGamer3242&para2=ppppppppppp&para3=Fl4g5Or5ajv864x4MeV9JM50tgBfy1vO3fMl5t52pR8ECYGlt7b/Z23mWXbLXRbL&para4=489984&para5=Color%20[A=255,%20R=0,%20G=100,%20B=155]
  1962.  
  1963. */
  1964.  
  1965.  
  1966.  
  1967.  
  1968.  
  1969.  
  1970.  
  1971. MW2_Paradox.h
  1972. -------------------
  1973.  
  1974.  
  1975. // add 0x20000   for it to work with 2 sprx's, only if the paradox is the second one loaded
  1976. void process_cracking_MW2_Paradox_Sep_29TH_2019()
  1977. {
  1978.     //uint32_t sprx_base_address1 = 0x25C0000;
  1979.     //uint32_t sprx_base_address2 = 0x25E0000;
  1980.     //uint32_t next_base_address_size = sprx_base_address2 - sprx_base_address1; // 0x20000
  1981.     //uint32_t next_base_address_size = 0x20000;
  1982.  
  1983.     SetNop(0x25CAC18); // stop connect to paradox.sh
  1984.     SetNop(0x25CB6C4); // request addresses from server
  1985.     SetNop(0x25CB7B8); // thread get admin commands
  1986.     SetNop(0x25CBC00); // stop auto update module
  1987.  
  1988.     uint32_t auth_data_1[] = {
  1989.         0xD00179A0, 0x00128D72, 0x01000000, 0x00050000
  1990.     };
  1991.     SetUintArray(0x25F0B48, auth_data_1, sizeof(auth_data_1));
  1992.  
  1993.     uint32_t auth_data_2[] = {
  1994.         0x00915258, 0x0091527C, 0x00915254, 0x009FD590, 0x000A2060
  1995.     };
  1996.     SetUintArray(0x26004DC, auth_data_2, sizeof(auth_data_2));
  1997.  
  1998.     uint32_t server_data[] = {
  1999.         0x000A1A88, 0x00724C38, 0x00052738, 0x00724C38,
  2000.         0x0005EFB0, 0x00724C38, 0x0045B298, 0x00724C38,
  2001.         0x004C6CC8, 0x00724C38, 0x00096178, 0x00724C38,
  2002.         0x00200E38, 0x00724C38, 0x004C6D28, 0x00724C38,
  2003.         0x001E59A0, 0x00724C38, 0x000335D8, 0x00724C38,
  2004.         0x00032898, 0x00724C38, 0x00238070, 0x00724C38,
  2005.         0x002539F8, 0x00724C38, 0x001D9EC0, 0x00724C38,
  2006.         0x0004FE80, 0x00724C38, 0x000A8510, 0x00724C38,
  2007.         0x004C7168, 0x00724C38, 0x004C7248, 0x00724C38
  2008.     };
  2009.     SetUintArray(0x25F07DC, server_data, sizeof(server_data));
  2010.  
  2011.  
  2012.     SetBranch(0x25CAA9C, 0x25CABCC); // skip the bullshit
  2013.     SetBranch(0x25CAC1C, 0x25CB6AC); // skip the bullshit
  2014. }
  2015.  
  2016.  
  2017.  
  2018. MW3_Paradox.h
  2019. --------------------------
  2020.  
  2021. // add 0x20000   for it to work with 2 sprx's, only if the paradox is the second one loaded
  2022. void process_cracking_MW3_Paradox_Sep_29TH_2019()
  2023. {
  2024.     //uint32_t sprx_base_address1 = 0x23B0000;
  2025.     //uint32_t sprx_base_address2 = 0x23D0000;
  2026.     //uint32_t next_base_address_size = sprx_base_address2 - sprx_base_address1; // 0x20000
  2027.     //uint32_t next_base_address_size = 0x20000;
  2028.  
  2029.     SetNop(0x23CBA3C); // stops connecting the server
  2030.     SetNop(0x23CCA20); // stops the auto updater
  2031.     SetNop(0x23CC4E8); // stops downloading server addresses
  2032.  
  2033.     uint32_t auth_data_1[] = {
  2034.         0xD00189A0, 0x001379A5, 0x01000000, 0x00050000
  2035.     };
  2036.     SetUintArray(0x2405438, auth_data_1, sizeof(auth_data_1));
  2037.  
  2038.     uint32_t auth_data_2[] = {
  2039.         0x007F0ECC, 0x007BD008, 0x007BD010, 0x007BD00C,
  2040.     };
  2041.     SetUintArray(0x2416934, auth_data_2, sizeof(auth_data_2));
  2042.  
  2043.     uint32_t server_data[] = {
  2044.         0x00393640, 0x0072DCE8, 0x004A38B8, 0x0072DCE8,
  2045.         0x004A3740, 0x0072DCE8, 0x000C0878, 0x0072DCE8,
  2046.         0x0006DE58, 0x0072DCE8, 0x001DB240, 0x0072DCE8,
  2047.         0x003937C0, 0x0072DCE8, 0x00068308, 0x0072DCE8,
  2048.         0x003930D0, 0x0072DCE8, 0x00211A24, 0x0072DCE8,
  2049.         0x001F9D74, 0x0072DCE8, 0x000C568C, 0x0072DCE8,
  2050.         0x00291060, 0x0072DCE8, 0x002911A8, 0x0072DCE8,
  2051.         0x000C42A8, 0x0072DCE8, 0x0007A5C8, 0x0072DCE8,
  2052.         0x003F8DE8, 0x0072DCE8, 0x0003CAD8, 0x0072DCE8,
  2053.         0x000BC550, 0x0072DCE8, 0x000402C0, 0x0072DCE8,
  2054.         0x004A4B20, 0x0072DCE8, 0x0038B044, 0x0072DCE8,
  2055.         0x003808B8, 0x0072DCE8, 0x00392D78, 0x0072DCE8,
  2056.         0x004A568C, 0x0072DCE8, 0x0002B620, 0x0072DCE8,
  2057.         0x00023890, 0x0072DCE8, 0x000BE498, 0x0072DCE8,
  2058.         0x00277158, 0x0072DCE8, 0x000CD63C, 0x0072DCE8
  2059.     };
  2060.     SetUintArray(0x2400C18, server_data, sizeof(server_data));
  2061.  
  2062.  
  2063.     SetBranch(0x23CB8C0, 0x23CB9F0); // skip the bullshit
  2064.     SetBranch(0x23CBA40, 0x23CC4D0); // skip the bullshit
  2065. }
  2066.  
  2067.  
  2068.  
  2069.  
  2070.  
  2071.  
  2072.  
  2073.  
  2074.  
  2075.  
  2076. prx.cpp
  2077. -------------------------
  2078. #include <sys/ppu_thread.h>
  2079. #include <string.h>
  2080. #include <ppu_asm_intrinsics.h>
  2081. #include <sys/sys_time.h>
  2082. #include <sys/time_util.h>
  2083. #include <stdarg.h>
  2084. #include <assert.h>
  2085. #include <sys/process.h>
  2086. #include <sys/memory.h>
  2087. #include <sys/timer.h>
  2088. #include <sys/return_code.h>
  2089. #include <sys/prx.h>
  2090. #include <stddef.h>
  2091. #include <math.h>
  2092. #include <cmath>
  2093. #include <cellstatus.h>
  2094. #include <typeinfo>
  2095. #include <algorithm>
  2096. #include <vector>
  2097. #include <pthread.h>
  2098. #include <locale.h>
  2099. #include <cell/error.h>
  2100. #include <sys/paths.h>
  2101. #include <time.h>
  2102. #include <net\if_dl.h>
  2103. #include <sys/socket.h>
  2104. #include <netinet/in.h>
  2105. #include <arpa/inet.h>
  2106. #include <cell/cell_fs.h>
  2107. #include <cell/sysmodule.h>
  2108. #include <stdio.h>
  2109. #include <cell/fs/cell_fs_errno.h>
  2110. #include <cell/fs/cell_fs_file_api.h>
  2111. #include <sysutil/sysutil_userinfo.h>
  2112. #include <sysutil/sysutil_oskdialog.h>
  2113. #include <sysutil/sysutil_msgdialog.h>
  2114. #include <netdb.h>
  2115. #include <netex/net.h>
  2116. #include <netex/errno.h>
  2117. #include <ppu_intrinsics.h>
  2118. #include <stdlib.h>
  2119. #include <cfloat>
  2120. #include <cstdio>
  2121. #include <cstdlib>
  2122. #include <ctime>
  2123. #include <np.h>
  2124. #include <xstring>
  2125. #include <stdint.h>
  2126. #include <map>
  2127. #include <sys/syscall.h>
  2128. #include <sys/types.h>
  2129. #include <fastmath.h>
  2130. #include <sys/random_number.h>
  2131. #include <sysutil/sysutil_sysparam.h>
  2132. #include <netex/libnetctl.h>
  2133. #include <ctype.h>
  2134.  
  2135.  
  2136.  
  2137. //needed for vshlib.h
  2138. #include <stdio.h>
  2139. #include <stdlib.h>
  2140. #include <string.h>
  2141. #include <unistd.h>
  2142. #include <math.h>
  2143. #include <time.h>
  2144. #include <dirent.h>
  2145. #include <wchar.h>
  2146. #include <cell/codec/pngdec.h>
  2147. #include <cell/gcm.h>
  2148. #include <cell/font.h>
  2149. #include <cell/l10n.h>
  2150. #include <sys/prx.h>
  2151. #include <sys/mempool.h>
  2152. #include <sys/synchronization.h>
  2153. #include <sys/ppu_thread.h>
  2154. #include <sys/memory.h>
  2155. #include <sys/interrupt.h>
  2156. #include <sys/process.h>
  2157. #include <sys/spinlock.h>
  2158. #include <sys/random_number.h>
  2159. #include <sys/sys_time.h>
  2160. #include <sys/spu_utility.h>
  2161. #include <sys/spu_image.h>
  2162.  
  2163.  
  2164.  
  2165. // newly added
  2166. #include <sdk_version.h>
  2167. #include <cell/rtc.h>
  2168. #include <cell/pad.h>
  2169. #include <sys/event.h>
  2170. #include <cell/pad.h>
  2171. #include <ctype.h>
  2172. #include <limits.h>
  2173. #include <float.h>
  2174.  
  2175.  
  2176. #include <vshlib.h>
  2177.  
  2178.  
  2179. SYS_MODULE_INFO(sprx_entry, SYS_MODULE_ATTR_EXCLUSIVE_LOAD | SYS_MODULE_ATTR_EXCLUSIVE_START, 1, 1);
  2180. SYS_MODULE_START(sprx_entry);
  2181.  
  2182.  
  2183. //libaries
  2184. #pragma comment(lib, "c")
  2185. #pragma comment(lib, "c_stub")
  2186. #pragma comment(lib, "sn")
  2187. #pragma comment(lib, "m")
  2188. #pragma comment(lib, "io_stub")
  2189. #pragma comment(lib, "sysutil_stub")
  2190. #pragma comment(lib, "sysmodule_stub")
  2191. #pragma comment(lib, "syscall")
  2192. #pragma comment(lib, "gcm_sys_stub")
  2193. #pragma comment(lib, "net_stub")
  2194. #pragma comment(lib, "netctl_stub")
  2195.  
  2196.  
  2197.  
  2198. #define enable_cracking 1
  2199. //#define enable_debugging 1
  2200.  
  2201.  
  2202. //#define enable_AW 1
  2203. //#define enable_Ghosts 1
  2204. //#define enable_BO3 1
  2205. #define enable_BO2 1
  2206. //#define enable_BO1 1
  2207. //#define enable_MW3 1
  2208. //#define enable_MW2 1
  2209. //#define enable_GTA 1
  2210.  
  2211.  
  2212.  
  2213. //#define enable_MW3_RetroClient 1
  2214. //#define enable_MW2_Reflex_2_5 1
  2215. //#define enable_GTA_paradise 1
  2216. //#define enable_GTA_LTS 1
  2217. //#define enable_GTA_extortion 1
  2218. //#define enable_GTA_serendipity 1
  2219. //#define enable_GTA_lexicon 1
  2220. //#define enable_GTA_hextic 1
  2221. //#define enable_GTA_terrorizer 1
  2222. //#define enable_AW_Paradox 1
  2223. //#define enable_BO2_Paradox 1
  2224. //#define enable_BO1_Paradox 1
  2225. //#define enable_Ghosts_Paradox 1
  2226. //#define enable_MW2_Paradox 1
  2227. //#define enable_MW3_Paradox 1
  2228. #define enable_BO2_Sprxio 1
  2229.  
  2230.  
  2231.  
  2232.  
  2233. #include "lua.h"
  2234. #include "utils.h"
  2235. #include "lua_plugin.h"
  2236. #include "MW3_RetroClient.h"
  2237. #include "MW2_Reflex_2_5.h"
  2238. #include "GTA_Extortion.h"
  2239. #include "GTA_Paradise.h"
  2240. #include "GTA_Conqueror.h"
  2241. #include "GTA_LTS.h"
  2242. #include "GTA_Serendipity.h"
  2243. #include "GTA_Lexicon.h"
  2244. #include "Minecraft_modCraft_Tool.h"
  2245. #include "GTA_Hextic.h"
  2246. #include "GTA_Terrorizer.h"
  2247. #include "AW_Paradox.h"
  2248. #include "BO2_Paradox.h"
  2249. #include "BO1_Paradox.h"
  2250. #include "MW2_Paradox.h"
  2251. #include "MW3_Paradox.h"
  2252. #include "Ghost_Paradox.h"
  2253. #include "BO2_Sprxio.h"
  2254.  
  2255.  
  2256.  
  2257. void initiate_ingame_cracks(uint32_t pid, char *game_id, char *game_title)
  2258. {
  2259.     //printf("game_id: %s\n", game_id);
  2260.     //printf("game_title: %s\n", game_title);
  2261.  
  2262.  
  2263.     //GTAV
  2264.     if (IsGameGTAV(game_id))
  2265.     {
  2266.         //printf("game_title: %s\n", game_title);
  2267. #ifdef enable_GTA_paradise
  2268.         process_cracking_GTA_Paradise_July_2Nd_2020();
  2269. #elif enable_GTA_LTS
  2270.         process_cracking_LTS_2_7_7();
  2271. #elif enable_GTA_extortion
  2272.         process_cracking_GTA_Extortion_4_1();
  2273. #elif enable_GTA_serendipity
  2274.         process_cracking_serendipity();
  2275. #elif enable_GTA_lexicon
  2276.         process_cracking_lexicon();
  2277. #elif enable_GTA_hextic
  2278.         process_cracking_GTA_Hextic_6_7_2();
  2279. #elif enable_GTA_terrorizer
  2280.         process_cracking_terrorizer();
  2281. #endif
  2282.     }
  2283.     //BO1
  2284.     else if (IsGameBO1(game_id))
  2285.     {
  2286.         //printf("game_title: %s\n", game_title);
  2287. #ifdef enable_BO1_Paradox
  2288.         process_cracking_BO1_Paradox_Sep_26TH_2019();
  2289. #endif
  2290.     }
  2291.     //BO2
  2292.     else if (IsGameBO2(game_id))
  2293.     {
  2294.         //printf("game_title: %s\n", game_title);
  2295. #ifdef enable_BO2_Paradox
  2296.         process_cracking_BO2_Paradox_Sep_24TH_2019();
  2297. #elif enable_BO2_Sprxio
  2298.         process_cracking_BO2_Sprxio_Nov_2ND_2019();
  2299. #endif
  2300.     }
  2301.     //BO3
  2302.     else if (IsGameBO3(game_id))
  2303.     {
  2304.         //printf("game_title: %s\n", game_title);
  2305.     }
  2306.     //MW3
  2307.     else if (IsGameMW3(game_id))
  2308.     {
  2309.         //printf("game_title: %s\n", game_title);
  2310. #ifdef enable_MW3_RetroClient
  2311.         proccess_cracking_MW3_RetroClient();
  2312. #elif enable_MW3_Paradox
  2313.         process_cracking_MW3_Paradox_Sep_29TH_2019();
  2314. #endif
  2315.     }
  2316.     //MW2
  2317.     else if (IsGameMW2(game_id))
  2318.     {
  2319.         //printf("game_title: %s\n", game_title);
  2320. #ifdef enable_MW2_Reflex_2_5
  2321.         process_MW2_Reflex_2_5();
  2322. #elif enable_MW2_Paradox
  2323.         process_cracking_MW2_Paradox_Sep_29TH_2019();
  2324. #endif
  2325.     }
  2326.     // COD Ghosts
  2327.     else if (IsGameGhosts(game_id))
  2328.     {
  2329.         //printf("game_title: %s\n", game_title);
  2330. #ifdef enable_Ghosts_Paradox
  2331.         process_cracking_Ghost_Paradox_Sep_29TH_2019();
  2332. #endif
  2333.     }
  2334.     //AW
  2335.     else if (IsGameAW(game_id))
  2336.     {
  2337.         //printf("game_title: %s\n", game_title);
  2338. #ifdef enable_AW_Paradox
  2339.         process_cracking_AW_Paradox_Sep_24TH_2019();
  2340. #endif
  2341.     }
  2342.     else
  2343.     {
  2344.  
  2345.     }
  2346. }
  2347.  
  2348. void main_thread_handler(uint64_t arg)
  2349. {
  2350.     int GameProcessID = 0, lastGameProcessID = 0;
  2351.  
  2352.     sys_timer_sleep(10);
  2353.  
  2354.     printf("loaded sprx cracker\n");
  2355.  
  2356.  
  2357.     //lua_State *lua_state = generateLuaState();
  2358.  
  2359.     printf("starting while loop\n");
  2360.  
  2361.     while (true)
  2362.     {
  2363.         GameProcessID = GetGameProcessID();
  2364.         //printf("GameProcessID: 0x%X\n", GameProcessID);
  2365.  
  2366.         if (GameProcessID != 0)
  2367.         {
  2368.             if (GameProcessID != lastGameProcessID)
  2369.             {
  2370.                 /*for (int x = 0; x < (10 * 100); x++) //10 second delay
  2371.                 {
  2372.                     sys_timer_usleep(10000);
  2373.                     sys_ppu_thread_yield();
  2374.                 }*/
  2375.  
  2376.  
  2377.                 printf("Attached into game process\n");
  2378.             }
  2379.  
  2380.  
  2381.             if (bPressStartToAttach)
  2382.             {
  2383.                 attachedPID = GameProcessID;
  2384.                 if (attachedPID)
  2385.                 {
  2386.                     get_game_info(); // get current game information
  2387.  
  2388.                     bIsGameLoaded = 1;
  2389.  
  2390.                     //if (lua_state)
  2391.                     //  run_function(lua_state, "tick");
  2392.  
  2393.                     //printf("game process 0x%08X\n", attachedPID);
  2394.                     initiate_ingame_cracks(attachedPID, global_game_TitleID, global_game_Title);
  2395.                 }
  2396.             }
  2397.         }
  2398.         else
  2399.         {
  2400.             if (attachedPID) // Disconnect
  2401.             {
  2402.                 attachedPID = 0;
  2403.                 bIsGameLoaded = 0;
  2404.             }
  2405.             else
  2406.             {
  2407.                 //sys_timer_usleep(3 * 1000 * 1000); //3 second delay
  2408.             }
  2409.         }
  2410.  
  2411.  
  2412.  
  2413.         lastGameProcessID = GameProcessID;
  2414.         sys_timer_usleep(1668);
  2415.         sys_ppu_thread_yield();
  2416.     }
  2417.  
  2418.  
  2419.     // close the Lua state
  2420.     //if (lua_state)
  2421.     //  lua_close(lua_state);
  2422.  
  2423.     sys_ppu_thread_exit(0);
  2424.  
  2425. }
  2426.  
  2427. extern "C" int sprx_entry(void)
  2428. {
  2429.     sys_ppu_thread_t main_thread_id = -1;
  2430.     sys_ppu_thread_create(&main_thread_id, main_thread_handler, 0, 3000, 0x4000, 1, "sprx_entry");
  2431.     _sys_ppu_thread_exit(0);
  2432.  
  2433.     return 0;
  2434. }
  2435.  
  2436.  
  2437.  
  2438.  
  2439.  
  2440. Utils.h
  2441. ---------------------------
  2442. char global_game_TitleID[16]; //#define _game_TitleID  _game_info+0x04
  2443. char global_game_Title[64]; //#define _game_Title    _game_info+0x14
  2444.  
  2445. int get_game_info()
  2446. {
  2447.     int game_plugin_handle = FindLoadedPlugin("game_plugin");
  2448.  
  2449.     if (game_plugin_handle)
  2450.     {
  2451.         char _game_info[0x120];
  2452.         game_interface = (game_plugin_interface *)plugin_GetInterface(game_plugin_handle, 1);
  2453.         game_interface->gameInfo(_game_info);
  2454.  
  2455.         snprintf(global_game_TitleID, 10, "%s", _game_info + 0x04);
  2456.         snprintf(global_game_Title, 63, "%s", _game_info + 0x14);
  2457.     }
  2458.  
  2459.     return game_plugin_handle;
  2460. }
  2461.  
  2462.  
  2463. bool IsGameGTAV(char *cur_title_id)
  2464. {
  2465.     if (!strcmp(cur_title_id, "BLES01807") || !strcmp(cur_title_id, "BLUS31156") ||
  2466.         !strcmp(cur_title_id, "BLJM61019") || !strcmp(cur_title_id, "NPUB31154") ||
  2467.         !strcmp(cur_title_id, "NPEB01283"))
  2468.     {
  2469.         return true;
  2470.     }
  2471.  
  2472.     return false;
  2473. }
  2474. bool IsGameBO1(char *cur_title_id)
  2475. {
  2476.     if (!strcmp(cur_title_id, "BLES01034") || !strcmp(cur_title_id, "BLES01031") ||
  2477.         !strcmp(cur_title_id, "BLES01105") || !strcmp(cur_title_id, "BLJM60286") ||
  2478.         !strcmp(cur_title_id, "BLES01035") || !strcmp(cur_title_id, "BLES01032") ||
  2479.         !strcmp(cur_title_id, "BLES01033") || !strcmp(cur_title_id, "BLUS30591"))
  2480.     {
  2481.         return true;
  2482.     }
  2483.  
  2484.     return false;
  2485. }
  2486. bool IsGameBO2(char *cur_title_id)
  2487. {
  2488.     if (!strcmp(cur_title_id, "BLUS31011") || !strcmp(cur_title_id, "BLES01717") ||
  2489.         !strcmp(cur_title_id, "BLES01718") || !strcmp(cur_title_id, "BLES01719") ||
  2490.         !strcmp(cur_title_id, "BLES01720") || !strcmp(cur_title_id, "NPEB01205") ||
  2491.         !strcmp(cur_title_id, "NPUB31054") || !strcmp(cur_title_id, "NPUB31055") ||
  2492.         !strcmp(cur_title_id, "NPUB31056") || !strcmp(cur_title_id, "BLUS31141") ||
  2493.         !strcmp(cur_title_id, "BLUS31140"))
  2494.     {
  2495.         return true;
  2496.     }
  2497.  
  2498.     return false;
  2499. }
  2500. bool IsGameBO3(char *cur_title_id)
  2501. {
  2502.     if (!strcmp(cur_title_id, "NPEB02266") || !strcmp(cur_title_id, "BLUS31527") ||
  2503.         !strcmp(cur_title_id, "NPUB31665") || !strcmp(cur_title_id, "BLES02166") ||
  2504.         !strcmp(cur_title_id, "BLES02168"))
  2505.     {
  2506.         return true;
  2507.     }
  2508.  
  2509.     return false;
  2510. }
  2511. bool IsGameAW(char *cur_title_id)
  2512. {
  2513.     if (!strcmp(cur_title_id, "BLUS31466") || !strcmp(cur_title_id, "BLES02078") ||
  2514.         !strcmp(cur_title_id, "BLES02077") || !strcmp(cur_title_id, "BLES02079") ||
  2515.         !strcmp(cur_title_id, "BLJM61227") || !strcmp(cur_title_id, "BLJM61228") ||
  2516.         !strcmp(cur_title_id, "NPUB31553") || !strcmp(cur_title_id, "NPEB02087"))
  2517.     {
  2518.         return true;
  2519.     }
  2520.  
  2521.     return false;
  2522. }
  2523. bool IsGameMW3(char *cur_title_id)
  2524. {
  2525.     if (!strcmp(cur_title_id, "BLES01428") || !strcmp(cur_title_id, "BLES01429") ||
  2526.         !strcmp(cur_title_id, "BLES01432") || !strcmp(cur_title_id, "BLUS30838") ||
  2527.         !strcmp(cur_title_id, "BLES01433") || !strcmp(cur_title_id, "NPUB30787") ||
  2528.         !strcmp(cur_title_id, "NPUB30788") || !strcmp(cur_title_id, "NPEB00964") ||
  2529.         !strcmp(cur_title_id, "BLES01431"))
  2530.     {
  2531.         return true;
  2532.     }
  2533.  
  2534.     return false;
  2535. }
  2536. bool IsGameMW2(char *cur_title_id)
  2537. {
  2538.     if (!strcmp(cur_title_id, "BLES00683") || !strcmp(cur_title_id, "BLES00684") ||
  2539.         !strcmp(cur_title_id, "BLES00685") || !strcmp(cur_title_id, "BLES00686") ||
  2540.         !strcmp(cur_title_id, "BLES00687") || !strcmp(cur_title_id, "BLUS30377") ||
  2541.         !strcmp(cur_title_id, "BLES00690") || !strcmp(cur_title_id, "BLES00691") ||
  2542.         !strcmp(cur_title_id, "NPEB00731") || !strcmp(cur_title_id, "NPUB30586") ||
  2543.         !strcmp(cur_title_id, "NPUB30585"))
  2544.     {
  2545.         return true;
  2546.     }
  2547.  
  2548.     return false;
  2549. }
  2550. bool IsGameGhosts(char *cur_title_id)
  2551. {
  2552.     if (!strcmp(cur_title_id, "BLES01945") || !strcmp(cur_title_id, "BLES01948") ||
  2553.         !strcmp(cur_title_id, "BLUS31270") || !strcmp(cur_title_id, "NPUB31301") ||
  2554.         !strcmp(cur_title_id, "NPEB01832"))
  2555.     {
  2556.         return true;
  2557.     }
  2558.  
  2559.     return false;
  2560. }
  2561.  
  2562.  
  2563.  
  2564.  
  2565.  
  2566.  
  2567.  
  2568.  
  2569.  
  2570.  
  2571.  
  2572.  
  2573.  
  2574.  
  2575.  
  2576.  
  2577.  
  2578. old_dumps.h
  2579. -------------------
  2580. //seren auth           
  2581. PHPSESSID=781b85936b69d8f8077a300c02512fb3; path=/1337BOSS-0682210141002002501
  2582. GET /api2.php?license=7WGVW-RQ7WA-G7I61 HTTP/1.0..User-Agent: 35879135823481.........
  2583. B359A10D152CD6385&mac=A8:A8:A8:A8:A8:A8 HTTP/1.0..User-Agent: 35879135823481
  2584. .......................................7WGVW-RQ7WA-G7I61.............BOSS  
  2585.  
  2586. //lexicon auth
  2587. b29c492834f8bc3723018822d5e1b814.php
  2588.  
  2589. 8c361f954648edb04def5b72ca743e50GVN8-UW3U-5XP7-3FEK&bb737dcfb027aa4f4059db6baef42661=280
  2590.  
  2591. b9f7cb1eddd102477ed2445c2=TheRouletteBoi02&743e976dba4c3b5a80187bf12484c58f=A8:A8:A8:A8:A8:A8 HTTP/1.0..HOST: IP
  2592.  
  2593. ------------------------------------------------------------
  2594. LTS
  2595.  
  2596. GET //8mTNvKbbPTHjz5RFQqs6A77yDVhc/KKZnXavaxhGct9m7fh5CtNHpejHN.php?usern=WILLYHU&do=gd&passw=marochio
  2597. HTTP/1.0..HOST: server.lastteamstanding.uk.....tting123&macAddresso=A8:A8:A8:A8:A8:A8 HTTP/1.0..
  2598. HOST: server.lastteamstanding.uk
  2599.  
  2600. ------------------------------------------------------------------
  2601.  
  2602. independence
  2603.  
  2604. GET /auth/auth.php?type=license_MacCheck&mac=A8:A8:A8:A8:A8:A8&license=6969-6969-6969 HTTP/1.0..HOST: 92.222.68.51
  2605.  
  2606.  
  2607. 078112.4164484.0.0.0.0.0.0.104.7.202..4203930150.373813707.4294030592.
  2608. 1656740663.1870876878.3710647415.0.80.0.238.193.195.194.192.1073896576.
  2609. 1073896648.136.1029701632.32768.963313664.2104034214.1317012512.4345452.269025280.1073896598
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!