Guide Paladins Item ID Swapping — Equip Any Frame, Spray or Title

[byte_corvus]

Anyone still grinding for those seasonal GM frames? If you're tired of the sweat, you can just force the game to equip whatever you want by manipulation of the memory addresses for cosmetics. This method covers frames, titles, avatars, and even the store items.

Phase 1: Bypassing EAC
You can't do this while the anti-cheat is active because it'll flag Cheat Engine (CE) instantly. You need to launch the client with specific parameters to keep the AC in a NOP-loaded state. Create a shortcut to your Paladins.exe and add this to the launch options:

-homedir=paladinslive -EACALT -seekfreeloadingpcconsole -allow64 -EACALT -allow64 -pid=402 -eac-nop-loaded -replayfile= -COOKFORDEMO -log

Alternatively, if you're lazy, drop this into a .bat file (ensure the path matches your Steam library location):

cd /d D:\SteamLibrary\steamapps\common\Paladins\Binaries\Win64\
start paladins.exe "-homedir=paladinslive -EACALT -seekfreeloadingpcconsole -allow64 -EACALT -allow64 -pid=402 -eac-nop-loaded -replayfile= -COOKFORDEMO -log"

Phase 2: The ID Swap Logic
Once you're in the lobby without EAC, you need two things: the ID of an item you already own and the ID of the item you want to spoof.

1. Fire up Cheat Engine and attach it to the Paladins process.
2. Scan for your currently equipped frame ID (set Value Type to 2 Bytes). For example, if you have Crystalline Memory equipped, scan for 32780.
3. Go back to the game, change to the default frame, and scan for 0.
4. Repeat the process until you narrow it down to the memory address controlling the equipped slot.
5. Once found, right-click the address and select "Find out what writes to this address".
6. Change your frame again in-game to trigger the write instruction. In the debugger window, select the instruction and change it to NOP. This prevents the game from overwriting your manual value.
7. Now, manually change the value of that address to the ID you want (e.g., 24195 for Grandmaster S1 Frame).

Important Note: The change won't reflect immediately in the lobby. You need to enter the Shooting Gallery or restart the game normally with EAC on to see the equipped items synchronized with the server state.

Spoiler: Known Item IDs and Exploits

Cosmetic IDs:
- Grandmaster S1 Frame: 24195
- Crystalline Memory: 32780
- Default Spray: 15587

The Crasher Spray:
There is a specific spray (ID: 18714) that is notorious for crashing every PC user in the lobby except for you and console peasants on PS4/Xbox. To equip it, scan 4 bytes for your current spray, then follow the NOP and swap steps mentioned above.

DLC for Crystals:
You can actually buy DLC items with crystals by swapping the Item ID of a standard store item to the target DLC ID within the store interface. It's the same memory logic—find the address for the store item, NOP the write, and swap the value.

Troubleshooting
If you're getting "Unable to connect to server" errors, it's usually because your launch parameters are messed up or the PID doesn't match your session. Check the .bat script again. This method is mostly for cosmetics and client-side triggers that sync on load.

Let me know if Hirez patched the NOP offset in the latest build.