Post: Advanced Warfare Offsets/Addresses & Scripts (NEW UNRELEASED OFFSETS)
12-10-2014, 01:55 AM #1
RatchetBooty
Former Staff
(adsbygoogle = window.adsbygoogle || []).push({});
Hello NGU community! Today I bring you a thread that contains offsets, addresses, scripts and more for Advanced Warfare. I will be updating them every update if they need updating. You might be thinking to yourself "damn another one of these offset threads", well I'm going to be releasing a lot of stuff that hasn't been released before and a lot of stuff that has. This thread will contain offsets already found by people (credit will be given) and offsets that I've found personally that haven't been found yet.



Game: Advanced Warfare
Current Version: 1.04
Last Updated: 12/09/2014




How to use Client Interval (For the people who don't know):
Client Interval is also known as next client. To use client interval all you have to do is take the offset and add the client interval to it and that will give you the next clients offset.


Offsets:

Stats:

    Prestige : 0x295C66d
XP (Experience) : 0x295C709
Score : 0x295C746
Kills : 0x295C71E
Deaths : 0x295C6F5
Wins : 0x295C772
Losses : 0x295C725
Time Played : 0x295C762
Games Played : 0x295C70D
Stat Entry: 0x295C664
Unlock All: 0x2961DA0


Class Names:

    Class Interval: 0x80

Class 1 Name: 0x2961449
Class 2 Name: 0x29614C9
Class 3 Name: 0x2961549
Class 4 Name: 0x29615C9
Class 5 Name: 0x2961649
Class 6 Name: 0x29616C9
Class 7 Name: 0x2961749
Class 8 Name: 0x29617C9
Class 9 Name: 0x2961849
Class 10 Name: 0x29618C9


Real Unlock All (w/Attachments):

    
byte[] buffer = new byte[0x1770];
for (int i = 0; i < 0x1770; i++)
{
buffer[i] = 0xFE;
}
PS3.SetMemory(0x2961DA0, buffer);


Calling Cards Offset and Bytes:

If you use an unlock all, it unlocks everything with calling cards except for the clan calling cards. Here are the bytes for the clan calling cards, just change the byte with the one you want at the calling card offset.
    
Calling Card Offset: 0x2965713
Clan Card #1: 0xD6
Clan Card #2: 0xD7
Clan Card #3: 0xD8
Clan Card #4: 0xD9
Clan Card #5: 0xDA
Clan Card #6: 0xDB
Checkerbox: 0xDC


Name & Clan Tag:

    Name: 0x28E60E0
Clan Tag: 0xD6E946


Party Name & Clan Tag:

Make sure to use a timer with these otherwise it won't set.
    
Client Interval for both Party Name & Party Clan Tag: 0x378

Party Name Client 0: 0xD7DE58
Party Name Client 1: 0xD7E1D0
Party Name Client 2: 0xD7E548
Party Name Client 3: 0xD7E8C0
Party Name Client 4: 0xD7EC38
Party Name Client 5: 0xD7EFB0
Party Name Client 6: 0xD7F328
Party Name Client 7: 0xD7F6A0
Party Name Client 8: 0xD7FA18
Party Name Client 9: 0xD7FD90
Party Name Client 10: 0xD80108
Party Name Client 11: 0xD80480

Party Clan Tag Client 0: 0xD7DE78
Party Clan Tag Client 1: 0xD7E1F0
Party Clan Tag Client 2: 0xD7E568
Party Clan Tag Client 3: 0xD7E8E0
Party Clan Tag Client 4: 0xD7EC58
Party Clan Tag Client 5: 0xD7EFD0
Party Clan Tag Client 6: 0xD7F348
Party Clan Tag Client 7: 0xD7F6C0
Party Clan Tag Client 8: 0xD7FA38
Party Clan Tag Client 9: 0xD7FDB0
Party Clan Tag Client 10: 0xD80128
Party Clan Tag Client 11: 0xD804A0


Non-Host Mods:

    
Credits to MegaMister & Eddie Mac

Advanced UAV: 0x18DB73 On: 0x00 Off: 0x01
No Recoil: 0x20C8FC On: 0x60, 0x00, 0x00, 0x00 Off: 0x4B, 0xF6, 0x16, 0x5D
Red Boxes: 0x0019610B On: 0x01 Off: 0x00
Green Players: 0x005D60D3 On: 0x01 Off: 0x00
Red Laser: 0x001FF703 On: 0x01 Off: 0x00
Steady Aim: 0x0016E96F On: 0x00 Off: 0x02
Ghost Players: 0x5D62EF On: 0x01 Off: 0x00
No Gun Sound: 0x20C72B On: 0x01 Off: 0x00
Player Outline Color: 0x01FF6F3 Normal: 0x00 Red: 0x04 Green: 0x06 Cyan: 0x08 Yellow: 0x0C
Real Wallhack: 0x01C3424 On: 0x38, 0xC0, 0x00, 0x09 Off: 0x63, 0xC6, 0x00, 0x00
Wallhack: 0x02598BEC On: 0x42 Off: 0x40
Third Person: 0x025B502C On: 0x01 Off: 0x00
compassMaxRange: 0x025B580C On: 0x45, 0x2F Off: 0x44, 0xBB
cg_fov: 0x025B607C On: 0x42, 0xD2 Off: 0x42, 0x82

//Credits to SC58
Heat Vision: (Must overwrite by a tool or bin file otherwise you will freeze; Make sure to set both of these addresses)
0x1F130C - On: 0x60, 0x00, 0x00, 0x00 Off: 0x41, 0x82, 0x00, 0x8c
0x1F1314 - On: 0x60, 0x00, 0x00, 0x00 Off: 0x41, 0x82, 0x00, 0x50

0x19DF7C - Draw Weapons
0x19E840 - Draw Grenades
0x19EF1C - Draw Objects
0x19F16C - Draw Objects 2
0x1C45A4 - Draw Dead Body
0x1C3424 - Draw Players

Outline Colors:

Normal: 0x38, 0xC0, 0x00, 0x00
Black: 0x38, 0xC0, 0x00, 0x02
Red: 0x38, 0xC0, 0x00, 0x04
Green: 0x38, 0xC0, 0x00, 0x06
Cyan: 0x38, 0xC0, 0x00, 0x08
Basic: 0x38, 0xC0, 0x00, 0x08
Orange: 0x38, 0xC0, 0x00, 0x0A
Yellow: 0x38, 0xC0, 0x00, 0x0C
Blue: 0x38, 0xC0, 0x00, 0x0E

Filled Color (Filled In):

Normal: 0x38, 0xC0, 0x00, 0x00
Red: 0x38, 0xC0, 0x00, 0x12
RedBold: 0x38, 0xC0, 0x00, 0x14
Green: 0x38, 0xC0, 0x00, 0x16
Cyan: 0x38, 0xC0, 0x00, 0x18
Orange: 0x38, 0xC0, 0x00, 0x1A
Yellow: 0x38, 0xC0, 0x00, 0x1C
Blue: 0x38, 0xC0, 0x00, 0x1E


Lobby Settings:

    
Jump Height: 0x025B5ECC
Walk Speed: 0x002F0E44
Knockback: 0x025BBDDC
Floating Bodies: 0x025B8434


Client Mods:

G_Client Offsets:

    
G_Client Address: 0x1950880 Client Interval: 0x4180

Red Boxes: G_Client + 0x5F On: 0x10 Off: 0x00
Heat Vision: G_Client + 0x5F On: 0x1C Off: 0x00
Invisibility: G_Client + 0x5B On: 0xF3 Off: 0x00
Ping: G_Client + 0x58 On: 0x01 Off: 0x00
No Recoil: G_Client + 0x562 On: 0x04 Off: 0x00
Disable Weapons: G_Client + 0x0562 Remove: 0x00 0x80 Give Back: 0x00 0x00
Primary Akimbo: G_Client + 0x3E5 On: 0x90 Off: 0x00
Secondary Akimbo: G_Client + 0x3AD On: 0x90 Off: 0x00
Laser: G_Client + 0x59 On: 0x01 Off: 0x00
Red Laser: G_Client + 0xD On: 0x00
Yellow Laser Color: G_Client + 0xD On: 0x01
Blue Laser Color: G_Client + 0xD On: 0x04
Scrambler: G_Client + 0x59 On: 0x40 Off: 0x00
mFlag: G_Client + 0x3da7 Normal: 0x00 No Clip: 0x01 UFO Mode: 0x02 Freeze: 0x04
System Hack: G_Client + 0x38C9 On: 0x01 Off: 0x00
Third Person: G_Client + 0x5F On: 0x07 Off: 0x00
Heat Chams: G_Client + 0x5F On: 0x1F Off: 0x00
Player Speed: G_Client + 0x3ADC Normal: 0x3F, 0x88 Fast: 0x3F, 0xFF Slow: 0x3F, 0x00
No Friction (Skate Mod): G_Client + 0x56 On: 0x01 Off: 0x00
In-Game Name: G_Client + 0x3B3C
In-Game Clan Tag: G_Client + 0x3BA0
Advanced UAV: G_Client + 0x3C2F On: 0x01 G_Client + 0x3C3F On: 0x00 Off: 0x01
FoV: G_Client + 0x3940 Normal: 0x3F, 0x80
Infinite Ammo:
G_Client + 0x58F On: 0xFF, 0xFF Off: 0x00, 0x00
G_Client + 0x5A6 On: 0xFF, 0xFF Off: 0x00, 0x00
G_Client + 0x65A On: 0xFF, 0xFF Off: 0x00, 0x00
G_Client + 0x642 On: 0xFF, 0xFF Off: 0x00, 0x00
Exo Cloak: G_Client + 0x58 On: 0x11 Off: 0x00
Kill Client: G_Client + 0x3ADC Kill: 0xFF, 0xFF
Fake Lag: G_Client + 0x3A1B On: 0x00 Off: 0x02
Kick Client: G_Client + 0x5A Kick: 0x3F
Invisible Gun: G_Client + 0x3AE1 On: 0x01 Off: 0x00
Exo Screen: G_Client + 0x3880 On: 0x01 Off: 0x00
Instant Drop: G_Client + 0x54 On: 0x01 Off: 0x00
Injured Breathing: G_Client + 0x3AC9 On: 0x01 Off: 0x00
Exo Stim: G_Client + 0x323 On: 0x01 Off: 0x02
Gun View: G_Client + 0x563 Default: 0x00 Launcher: 0x02
Rabbit Man: G_Client + 0x3ADC On: 0x2F, 0x88 Off: 0x3F 0x88
Fake Blood: G_Client + 0x1F3 On: 0xFF Off: 0x64
Stuck in Mud: G_Client + 0x3ADC On: 0x3D, 0x88 Off: 0x3F, 0x88
UAV: G_Client + 0x3948 On: 0x01 Off: 0x00
Border Screen: G_Client + 0x3850 On: 0x01 Off: 0x00
Missile Vision: G_Client + 0x380B On: 0x01 Off: 0x00
Goliath Vision: G_Client + 0x38E8 On: 0x01 Off: 0x02
In-Game Leaderboard spoof: Prestige: G_Client + 0x30C3 Rank: G_Client + 0x30BF Kills: G_Client + 0x3C1B Deaths: G_Client + 0x3C1D Objective: G_Client + 0x3C21 Defends: G_Client + 0x3C23 Score: G_Client + 0x3C19 Assists: G_Client + 0x3C1F



G_Entity Offsets:

    
G_Entity Address: 0x1860880 Client Interval: 0x280

Godmode: G_Entity + 0x1AC On: 0x00, 0x00, 0xFF, 0xFF Off: 0x00, 0x00, 0x00, 0x00
Pointer to G_Client: G_Entity + 0x158





Addresses:

    
//Credits to Swiss

TOC Address = 00994F68
Stats Entry = 00295C664
G_Client = 001950880
G_Client_size = 0x4180
G_Entity = 001860880
G_Entity_size = 0x280
G_Spawn = 00366A24
SV_SetClientStats = 004322C0
G_Speed: 002F0E44
Add_Ammo = 003101C0
G_SpawnTurret = 0037B4F8
G_GivePlayerWeapon = 0036A6A0
G_SetFog: 00306AD4
BG_FindWeaponIndexForName = 00168074
G_GetWeaponIndexForName = 0036B3C4
SV_SetConfigString = 0042ECD0
G_Hudelems = 0017B9670
Hudelem_Alloc = 0030CAD0
G_LocalizedStringIndex = 0004C9A8
ui_debugmode = 0048D148
Dvar_GetBool: 004BF0F8
Com_Sprintf = 004C7548
SV_GameSendServerCommand = 0042D9A4
Cbuf_AddText = 0038AEA4
R_SetFrameFog = 005FCBF0
SV_SetClientViewAngles = 002F4530
Scr_GetInt = 003E299C
Scr_SpawnFX = 00349568
FPSText = 0079924C
//Thanks to Lebigkilleur
Com_ERROR = 003ACAA8
SV_SetupIgnoreEntParams = 00449F78
Dvar_FindVar = 0x4BEFC4
HECmd_SetClock(scr_entref_t entref) = 0x30EE54
HECmd_SetClock_Internal(scr_entref_t entref, he_type_t type, const char *cmdName) = 0x30EB08
G_MaterialIndex(const char *name) = 0x47BA8
G_ModelIndex(const char *name) = 0x47BEC
G_ModelName(int index) = 0x47C6C
G_ShellShockIndex(const char *name) = 0x47D10
Dvar_FindMalleableVar = 0x4BD528



Scripts:

RPC: //Credits to SC58

    
public class RPC
{
static uint function_address = 0x5FCBF0; // R_SetFrameFog

public static int Init()
{
if (function_address == 0) return -1;
Enable_RPC();
return 0;
}

public static void Enable_RPC()
{
PS3.SetMemory(function_address, new byte[] { 0x4E, 0x80, 0x00, 0x20 });
System.Threading.Thread.Sleep(20);
byte[] func = new byte[] { 0x7C, 0x08, 0x02, 0xA6, 0xF8, 0x01, 0x00, 0x80, 0x3C, 0x60, 0x10, 0x05, 0x81, 0x83, 0x00, 0x4C, 0x2C, 0x0C, 0x00, 0x00, 0x41, 0x82, 0x00, 0x64, 0x80, 0x83, 0x00, 0x04, 0x80, 0xA3, 0x00, 0x08, 0x80, 0xC3, 0x00, 0x0C, 0x80, 0xE3, 0x00, 0x10, 0x81, 0x03, 0x00, 0x14, 0x81, 0x23, 0x00, 0x18, 0x81, 0x43, 0x00, 0x1C, 0x81, 0x63, 0x00, 0x20, 0xC0, 0x23, 0x00, 0x24, 0xC0, 0x43, 0x00, 0x28, 0xC0, 0x63, 0x00, 0x2C, 0xC0, 0x83, 0x00, 0x30, 0xC0, 0xA3, 0x00, 0x34, 0xC0, 0xC3, 0x00, 0x38, 0xC0, 0xE3, 0x00, 0x3C, 0xC1, 0x03, 0x00, 0x40, 0xC1, 0x23, 0x00, 0x48, 0x80, 0x63, 0x00, 0x00, 0x7D, 0x89, 0x03, 0xA6, 0x4E, 0x80, 0x04, 0x21, 0x3C, 0x80, 0x10, 0x05, 0x38, 0xA0, 0x00, 0x00, 0x90, 0xA4, 0x00, 0x4C, 0x80, 0x64, 0x00, 0x50, 0xE8, 0x01, 0x00, 0x80, 0x7C, 0x08, 0x03, 0xA6, 0x38, 0x21, 0x00, 0x70, 0x4E, 0x80, 0x00, 0x20 };
PS3.SetMemory(function_address + 0x4, func);
PS3.SetMemory(0x10050000, new byte[0x2854]);
PS3.SetMemory(function_address, new byte[] { 0xF8, 0x21, 0xFF, 0x91 });
}

public static int Call(uint func_address, params object[] parameters)
{
int num_params = parameters.Length;
uint num_floats = 0;
for (uint i = 0; i < num_params; i++)
{
if (parameters[i] is int)
{
byte[] val = BitConverter.GetBytes((int)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, val);
}
else if (parameters[i] is uint)
{
byte[] val = BitConverter.GetBytes((uint)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, val);
}
else if (parameters[i] is string)
{
byte[] str = Encoding.UTF8.GetBytes(Convert.ToString(parameters[i]) + "\0");
PS3.SetMemory(0x10050054 + i * 0x400, str);
uint addr = 0x10050054 + i * 0x400;
byte[] address = BitConverter.GetBytes(addr);
Array.Reverse(address);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, address);
}
else if (parameters[i] is float)
{
num_floats++;
byte[] val = BitConverter.GetBytes((float)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050024 + ((num_floats - 1) * 0x4), val);
}
}
byte[] fadd = BitConverter.GetBytes(func_address);
Array.Reverse(fadd);
PS3.SetMemory(0x1005004C, fadd);
System.Threading.Thread.Sleep(20);
byte[] ret = PS3.GetMemory(0x10050050, 4);
Array.Reverse(ret);
return BitConverter.ToInt32(ret, 0);
}
}


All Client Button Monitoring: //Credits to iTnDM

    class Buttons
{

public static class Buttonz
{
public static Int32
Cross = 1024,
Square = 48,
Crouch = 512,
Prone = 256,
Start = 8388608,
L1 = 526336,
L2 = 32768,
L3 = 8194,
R1 = 1,
R2 = 16384,
R3 = 67108868;


}

public static bool ButtonPressed(int client, int Buttons)
{
if (PS3.Extension.ReadInt32(G_Client + 0x3DB4 + ((uint)client * 0x4180)) == Buttons)
return true;
else return false;
}


Jetpack: //Credits to BlackPanther

    public void JetPack(int client)
{
float jH = PS3.Extension.ReadFloat(G_Client + ((uint)client * 0x4180));
jH += 100;
PS3.Extension.WriteFloat(G_Client + ((uint)client * 0x4180), jH);
}


//How to use it in a timer or backgroundworker

if(ButtonPressed(0, Buttons.Cross))
{
JetPack(0);
}


Unlock All Trophies: //Credits to SC58

       {
string[] Achievements = new string[50];
Achievements[0] = "4 CARMA";
Achievements[1] = "4 CAMPAIGN_COMPLETE";
Achievements[2] = "4 CAMPAIGN_HARDENED";
Achievements[3] = "4 CAMPAIGN_VETERAN";
Achievements[4] = "4 BOOST_DASH_STOMP";
Achievements[5] = "4 GRENADE_DODGE";
Achievements[6] = "4 SONIC_KILL";
Achievements[7] = "4 OVERDRIVE_KILL";
Achievements[8] = "4 SMART_GRENADE_KILL";
Achievements[9] = "4 THREAT_GRENADE_KILL";
Achievements[10] = "4 EMP_DRONE";
Achievements[11] = "4 EMP_AST";
Achievements[12] = "4 INTEL_HALF";
Achievements[13] = "4 INTEL_ALL";
Achievements[14] = "4 COVER_DRONE_KILL";
Achievements[15] = "4 EXO_UPGRADE";
Achievements[16] = "4 EXO_UPGRADE_10";
Achievements[17] = "4 EXO_UPGRADE_20";
Achievements[18] = "4 EXO_UPGRADE_FULL";
Achievements[19] = "4 LEVEL_1";
Achievements[20] = "4 LEVEL_1A";
Achievements[21] = "4 LEVEL_2A";
Achievements[22] = "4 LEVEL_2B";
Achievements[23] = "4 LEVEL_2";
Achievements[24] = "4 LEVEL_3A";
Achievements[25] = "4 LEVEL_3";
Achievements[26] = "4 LEVEL_4A";
Achievements[27] = "4 LEVEL_4";
Achievements[28] = "4 LEVEL_5";
Achievements[29] = "4 LEVEL_5A";
Achievements[30] = "4 LEVEL_6A";
Achievements[31] = "4 LEVEL_6";
Achievements[32] = "4 LEVEL_7";
Achievements[33] = "4 LEVEL_8A";
Achievements[34] = "4 LEVEL_8";
Achievements[35] = "4 LEVEL_9";
Achievements[36] = "4 LEVEL_10A";
Achievements[37] = "4 LEVEL_10";
Achievements[38] = "4 LEVEL_11";
Achievements[39] = "4 LEVEL_12A";
Achievements[40] = "4 LEVEL_12";
Achievements[41] = "4 LEVEL_13A";
Achievements[42] = "4 LEVEL_13";
Achievements[43] = "4 LEVEL_14A";
Achievements[44] = "4 LEVEL_14";
Achievements[45] = "4 COOP_VETERAN";
Achievements[46] = "4 COOP_WARFARE";
Achievements[47] = "4 COOP_UNDEAD_SURVIVOR";
Achievements[48] = "4 COOP_EXO_SURVIVOR";
Achievements[49] = "4 COOP_FLIP_FLOP";

for (int i = 0; i < 50; i++)
{
RPC.Call(0x42D9A4, -1, 1, Achievements[i]);
System.Threading.Thread.Sleep(25);
RPC.Call(0x42D9A4, -1, 1, Achievements[i]);
}
}


Clone Player: //Credits to xReaperV3

    public static void ClonePlayer(int clientIndex)
{
RPC.Call(0x38AEA4, new object[] { clientIndex });
}


Keyboard: //Credits to Swiss for the kb_cb address; Credits to īTnDM for the keyboardPrompt address

    uint kb_Result = 0x030D0E22;
uint kb_cb = 0x00989068;
uint keyboardPrompt = 0x498828;
uint kb_active = 0x030D0AE4;
string KeyBoard(string title = "Your title", string presetText = "text here", int maxLength = 20)
{

RPC.Call(keyboardPrompt, new object[] { 0, title, presetText, maxLength, 0, 0, kb_cb });
System.Threading.Thread.Sleep(10);
while (PS3.Extension.ReadInt32(kb_active) == 0)
continue;
return PS3.Extension.ReadString(kb_Result);
}


G_GivePlayerWeapon: //Credits Unknown

    
public static void G_GivePlayerWeapon(int client, int weapon, int ammo)
{
RPC.Call(0x36A6A0, 0x1950880 + ((uint)client * 0x4180, weapon, 0);
RPC.Call(0x3101C0, 0x1950880+ ((uint)client * 0x4180, weapon, 0, ammo, 1);
}




A lot of the stuff in the "Offsets" spoiler have not been released/found before on Advanced Warfare so I decided to release them. This thread contains a lot of stuff that hasn't been released before on Advanced Warfare like the calling cards address, party name and clan tag offsets, A LOT of client mods and more, enjoy Smile. Btw, credits are in the spoilers.
Last edited by RatchetBooty ; 12-13-2014 at 10:12 PM.

The following 25 users say thank you to RatchetBooty for this useful post:

One, 1austin112, ALI ALHILFI, Antonio96C, BISOON, Boliberrys, Chris, Geo, Helper, iEnd, KranK, LBK, Luphox, MotivationFST, Not Rage, RawDog2002, SC58, Script Kiddie, Sunnis, Taylor, Sync, wajdi9, XM7MD_VX, Zlare
12-10-2014, 01:59 AM #2
Default Avatar
Gambler
Guest
Great contribution RatchetBooty.

The following user thanked Gambler for this useful post:

RatchetBooty
12-10-2014, 02:00 AM #3
Taylor
Former Black Knight.
Andddddddd stickied.

The following user thanked Taylor for this useful post:

RatchetBooty
12-10-2014, 02:00 AM #4
Sync
The (ONE) Above!
Good shit Rachet Keep it updated please :p
12-10-2014, 02:01 AM #5
RatchetBooty
Former Staff
Originally posted by Sync View Post
Good shit Rachet Keep it updated please :p


Will do, I'll be adding more soon as well Smile

The following user thanked RatchetBooty for this useful post:

Sync
12-10-2014, 02:01 AM #6
Sync
The (ONE) Above!
Originally posted by RatchetBooty View Post
Will do, I'll be adding more soon as well Smile


Sounds good! :p
12-10-2014, 02:04 AM #7
Chris
Former Staff
Pretty sure Swaqq has the same exact content You must login or register to view this content.. But eh, that's not my place to judge. It's great that you found all of this man, but where's the credits for all of the people who released offsets?
12-10-2014, 02:33 AM #8
1austin112
League Champion
Originally posted by RatchetBooty View Post
Hello NGU community! Today I bring you a thread that contains offsets, addresses, scripts and more for Advanced Warfare. I will be updating them every update if they need updating. You might be thinking to yourself "damn another one of these offset threads", well I'm going to be releasing a lot of stuff that hasn't been released before and a lot of stuff that has. This thread will contain offsets already found by people (credit will be given) and offsets that I've found personally that haven't been found yet.



Game: Advanced Warfare
Current Version: 1.04
Last Updated: 12/09/2014




How to use Client Interval (For the people who don't know):
Client Interval is also known as next client. To use client interval all you have to do is take the offset and add the client interval to it and that will give you the next clients offset.


Offsets:

Stats:

    Prestige : 0x295C66d
XP (Experience) : 0x295C709
Score : 0x295C746
Kills : 0x295C71E
Deaths : 0x295C6F5
Wins : 0x295C772
Losses : 0x295C725
Time Played : 0x295C762
Games Played : 0x295C70D
Stat Entry: 0x295C664
Unlock All: 0x2961DA0


Class Names:

    Client Interval: 0x80

Class 1 Name: 0x2961449
Class 2 Name: 0x29614C9
Class 3 Name: 0x2961549
Class 4 Name: 0x29615C9
Class 5 Name: 0x2961649
Class 6 Name: 0x29616C9
Class 7 Name: 0x2961749
Class 8 Name: 0x29617C9
Class 9 Name: 0x2961849
Class 10 Name: 0x29618C9


Real Unlock All (w/Attachments):

    
byte[] buffer = new byte[0x1770];
for (int i = 0; i < 0x1770; i++)
{
buffer[i] = 0xFE;
}
PS3.SetMemory(0x2961DA0, buffer);


Calling Cards Offset and Bytes:

If you use an unlock all, it unlocks everything with calling cards except for the clan calling cards. Here are the bytes for the clan calling cards, just change the byte with the one you want at the calling card offset.
    
Calling Card Offset: 0x2965713
Clan Card #1: 0xD6
Clan Card #2: 0xD7
Clan Card #3: 0xD8
Clan Card #4: 0xD9
Clan Card #5: 0xDA
Clan Card #6: 0xDB
Checkerbox: 0xDC


Name & Clan Tag:

    Name: 0x28E60E0
Clan Tag: 0xD6E946


Party Name & Clan Tag:

Make sure to use a timer with these otherwise it won't set.
    
Client Interval for both Party Name & Party Clan Tag: 0x378

Party Name Client 0: 0xD7DE58
Party Name Client 1: 0xD7E1D0
Party Name Client 2: 0xD7E548
Party Name Client 3: 0xD7E8C0
Party Name Client 4: 0xD7EC38
Party Name Client 5: 0xD7EFB0
Party Name Client 6: 0xD7F328
Party Name Client 7: 0xD7F6A0
Party Name Client 8: 0xD7FA18
Party Name Client 9: 0xD7FD90
Party Name Client 10: 0xD80108
Party Name Client 11: 0xD80480

Party Clan Tag Client 0: 0xD7DE78
Party Clan Tag Client 1: 0xD7E1F0
Party Clan Tag Client 2: 0xD7E568
Party Clan Tag Client 3: 0xD7E8E0
Party Clan Tag Client 4: 0xD7EC58
Party Clan Tag Client 5: 0xD7EFD0
Party Clan Tag Client 6: 0xD7F348
Party Clan Tag Client 7: 0xD7F6C0
Party Clan Tag Client 8: 0xD7FA38
Party Clan Tag Client 9: 0xD7FDB0
Party Clan Tag Client 10: 0xD80128
Party Clan Tag Client 11: 0xD804A0


Non-Host Mods:

    
Advanced UAV: 0x18DB73 On: 0x00 Off: 0x01
No Recoil: 0x20C8FC On: 0x60, 0x00, 0x00, 0x00 Off: 0x4B, 0xF6, 0x16, 0x5D
Red Boxes: 0x0019610B On: 0x01 Off: 0x00
Green Players: 0x005D60D3 On: 0x01 Off: 0x00
Red Laser: 0x001FF703 On: 0x01 Off: 0x00
Steady Aim: 0x0016E96F On: 0x00 Off: 0x02
Ghost Players: 0x5D62EF On: 0x01 Off: 0x00
No Gun Sound: 0x20C72B On: 0x01 Off: 0x00
Player Outline Color: 0x01FF6F3 Normal: 0x00 Red: 0x04 Green: 0x06 Cyan: 0x08 Yellow: 0x0C
Real Wallhack: 0x01C3424 On: 0x38, 0xC0, 0x00, 0x09 Off: 0x63, 0xC6, 0x00, 0x00
Wallhack: 0x02598BEC On: 0x42 Off: 0x40
Third Person: 0x025B502C On: 0x01 Off: 0x00
compassMaxRange: 0x025B580C On: 0x45, 0x2F Off: 0x44, 0xBB
cg_fov: 0x025B607C On: 0x42, 0xD2 Off: 0x42, 0x82


Lobby Settings:

    
Jump Height: 0x025B5ECC
Walk Speed: 0x002F0E44
Knockback: 0x025BBDDC


Client Mods:

G_Client Offsets:

    
G_Client Address: 0x1950880 Client Interval: 0x4180

Red Chams: G_Client + 0x5F On: 0x10 Off: 0x00
Heat Vision: G_Client + 0x5F On: 0x1C Off: 0x00
Invisibility: G_Client + 0x5B On: 0xF3 Off: 0x00
Ping: G_Client + 0x58 On: 0x01 Off: 0x00
No Recoil: G_Client + 0x562 On: 0x04 Off: 0x00
Disable Weapons: G_Client + 0x0562 Remove: 0x00 0x80 Give Back: 0x00 0x00
Primary Akimbo: G_Client + 0x3E5 On: 0x90 Off: 0x00
Secondary Akimbo: G_Client + 0x3AD On: 0x90 Off: 0x00
Laser: G_Client + 0x59 On: 0x01 Off: 0x00
Red Laser: G_Client + 0xD On: 0x00
Yellow Laser Color: G_Client + 0xD On: 0x01
Blue Laser Color: G_Client + 0xD On: 0x04
Scrambler: G_Client + 0x59 On: 0x40 Off: 0x00
mFlag: G_Client + 0x2 Normal: 0x00 No Clip: 0x01 UFO Mode: 0x02 Freeze: 0x04
System Hack: G_Client + 0x38C9 On: 0x01 Off: 0x00
Third Person: G_Client + 0x5F On: 0x07 Off: 0x00
Heat Chams: G_Client + 0x5F On: 0x1F Off: 0x00
Player Speed: G_Client + 0x3ADC Normal: 0x3F, 0x88 Fast: 0x3F, 0xFF Slow: 0x3F, 0x00
No Friction (Skate Mod): G_Client + 0x56 On: 0x01 Off: 0x00
In-Game Name: G_Client + 0x3B3C
In-Game Clan Tag: G_Client + 0x3BA0
Advanced UAV: G_Client + 0x3C2F On: 0x01 G_Client + 0x3C3F On: 0x00 Off: 0x01
FoV: G_Client + 0x3940 Normal: 0x3F, 0x80
Infinite Ammo:
G_Client + 0x58F On: 0xFF, 0xFF Off: 0x00, 0x00
G_Client + 0x5A6 On: 0xFF, 0xFF Off: 0x00, 0x00
G_Client + 0x65A On: 0xFF, 0xFF Off: 0x00, 0x00
G_Client + 0x642 On: 0xFF, 0xFF Off: 0x00, 0x00
Exo Cloak: G_Client + 0x58 On: 0x11 Off: 0x00
Kill Client: G_Client + 0x3ADC Kill: 0xFF, 0xFF
Fake Lag: G_Client + 0x3A1B On: 0x00 Off: 0x02
Kick Client: G_Client + 0x5A Kick: 0x3F
Invisible Gun: G_Client + 0x3AE1 On: 0x01 Off: 0x00
Exo Screen: G_Client + 0x3880 On: 0x01 Off: 0x00
Instant Drop: G_Client + 0x54 On: 0x01 Off: 0x00
Injured Breathing: G_Client + 0x3AC9 On: 0x01 Off: 0x00
Exo Stim: G_Client + 0x323 On: 0x01 Off: 0x02
Gun View: G_Client + 0x563 Default: 0x00 Launcher: 0x02
Rabbit Man: G_Client + 0x3ADC On: 0x2F, 0x88 Off: 0x3F 0x88
Fake Blood: G_Client + 0x1F3 On: 0xFF Off: 0x64
Stuck in Mud: G_Client + 0x3ADC On: 0x3D, 0x88 Off: 0x3F, 0x88
UAV: G_Client + 0x3948 On: 0x01 Off: 0x00
Border Screen: G_Client + 0x3850 On: 0x01 Off: 0x00
Missile Vision: G_Client + 0x380B On: 0x01 Off: 0x00
Goliath Vision: G_Client + 0x38E8 On: 0x01 Off: 0x02
In-Game Leaderboard spoof: Prestige: G_Client + 0x30C3 Rank: G_Client + 0x30BF Kills: G_Client + 0x3C1B Deaths: G_Client + 0x3C1D Objective: G_Client + 0x3C21 Defends: G_Client + 0x3C23 Score: G_Client + 0x3C19 Assists: G_Client + 0x3C1F



G_Entity Offsets:

    
G_Entity Address: 0x1860880 Client Interval: 0x280

Godmode: G_Entity + 0x1AC On: 0x00, 0x00, 0xFF, 0xFF Off: 0x00, 0x00, 0x00, 0x00
Pointer to G_Client: G_Entity + 0x158





Addresses:

    
//Credits to Swiss

TOC Address = 00994F68
Stats Entry = 00295C664
G_Client = 001950880
G_Client_size = 0x4180
G_Entity = 001860880
G_Entity_size = 0x280
G_Spawn = 00366A24
SV_SetClientStats = 004322C0
G_Speed: 002F0E44
Add_Ammo = 003101C0
G_SpawnTurret = 0037B4F8
G_GivePlayerWeapon = 0036A6A0
G_SetFog: 00306AD4
BG_FindWeaponIndexForName = 00168074
G_GetWeaponIndexForName = 0036B3C4
SV_SetConfigString = 0042ECD0
G_Hudelems = 0017B9670
Hudelem_Alloc = 0030CAD0
G_LocalizedStringIndex = 0004C9A8
ui_debugmode = 0048D148
Dvar_GetBool: 004BF0F8
Com_Sprintf = 004C7548
SV_GameSendServerCommand = 0042D9A4
Cbuf_AddText = 0038AEA4
R_SetFrameFog = 005FCBF0
SV_SetClientViewAngles = 002F4530
Scr_GetInt = 003E299C
Scr_SpawnFX = 00349568
FPSText = 0079924C



Scripts:

RPC: //Credits to SC58

    
public class RPC
{
static uint function_address = 0x5FCBF0; // R_SetFrameFog

public static int Init()
{
if (function_address == 0) return -1;
Enable_RPC();
return 0;
}

public static void Enable_RPC()
{
PS3.SetMemory(function_address, new byte[] { 0x4E, 0x80, 0x00, 0x20 });
System.Threading.Thread.Sleep(20);
byte[] func = new byte[] { 0x7C, 0x08, 0x02, 0xA6, 0xF8, 0x01, 0x00, 0x80, 0x3C, 0x60, 0x10, 0x05, 0x81, 0x83, 0x00, 0x4C, 0x2C, 0x0C, 0x00, 0x00, 0x41, 0x82, 0x00, 0x64, 0x80, 0x83, 0x00, 0x04, 0x80, 0xA3, 0x00, 0x08, 0x80, 0xC3, 0x00, 0x0C, 0x80, 0xE3, 0x00, 0x10, 0x81, 0x03, 0x00, 0x14, 0x81, 0x23, 0x00, 0x18, 0x81, 0x43, 0x00, 0x1C, 0x81, 0x63, 0x00, 0x20, 0xC0, 0x23, 0x00, 0x24, 0xC0, 0x43, 0x00, 0x28, 0xC0, 0x63, 0x00, 0x2C, 0xC0, 0x83, 0x00, 0x30, 0xC0, 0xA3, 0x00, 0x34, 0xC0, 0xC3, 0x00, 0x38, 0xC0, 0xE3, 0x00, 0x3C, 0xC1, 0x03, 0x00, 0x40, 0xC1, 0x23, 0x00, 0x48, 0x80, 0x63, 0x00, 0x00, 0x7D, 0x89, 0x03, 0xA6, 0x4E, 0x80, 0x04, 0x21, 0x3C, 0x80, 0x10, 0x05, 0x38, 0xA0, 0x00, 0x00, 0x90, 0xA4, 0x00, 0x4C, 0x80, 0x64, 0x00, 0x50, 0xE8, 0x01, 0x00, 0x80, 0x7C, 0x08, 0x03, 0xA6, 0x38, 0x21, 0x00, 0x70, 0x4E, 0x80, 0x00, 0x20 };
PS3.SetMemory(function_address + 0x4, func);
PS3.SetMemory(0x10050000, new byte[0x2854]);
PS3.SetMemory(function_address, new byte[] { 0xF8, 0x21, 0xFF, 0x91 });
}

public static int Call(uint func_address, params object[] parameters)
{
int num_params = parameters.Length;
uint num_floats = 0;
for (uint i = 0; i < num_params; i++)
{
if (parameters[i] is int)
{
byte[] val = BitConverter.GetBytes((int)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, val);
}
else if (parameters[i] is uint)
{
byte[] val = BitConverter.GetBytes((uint)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, val);
}
else if (parameters[i] is string)
{
byte[] str = Encoding.UTF8.GetBytes(Convert.ToString(parameters[i]) + "\0");
PS3.SetMemory(0x10050054 + i * 0x400, str);
uint addr = 0x10050054 + i * 0x400;
byte[] address = BitConverter.GetBytes(addr);
Array.Reverse(address);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, address);
}
else if (parameters[i] is float)
{
num_floats++;
byte[] val = BitConverter.GetBytes((float)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050024 + ((num_floats - 1) * 0x4), val);
}
}
byte[] fadd = BitConverter.GetBytes(func_address);
Array.Reverse(fadd);
PS3.SetMemory(0x1005004C, fadd);
System.Threading.Thread.Sleep(20);
byte[] ret = PS3.GetMemory(0x10050050, 4);
Array.Reverse(ret);
return BitConverter.ToInt32(ret, 0);
}
}


All Client Button Monitoring: //Credits to iTnDM

    class Buttons
{

public static class Buttonz
{
public static Int32
Cross = 1024,
Square = 48,
Crouch = 512,
Prone = 256,
Start = 8388608,
L1 = 526336,
L2 = 32768,
L3 = 8194,
R1 = 1,
R2 = 16384,
R3 = 67108868;


}

public static bool ButtonPressed(int client, int Buttons)
{
if (PS3.Extension.ReadInt32(G_Client + 0x3DB4 + ((uint)client * 0x4180)) == Buttons)
return true;
else return false;
}


Jetpack: //Credits to BlackPanther

    public void JetPack(int client)
{
float jH = PS3.Extension.ReadFloat(G_Client + ((uint)client * 0x4180));
jH += 100;
PS3.Extension.WriteFloat(G_Client + ((uint)client * 0x4180), jH);
}


//How to use it in a timer or backgroundworker

if(ButtonPressed(0, Buttons.Cross))
{
JetPack(0);
}


Unlock All Trophies: //Credits to SC58

       {
string[] Achievements = new string[50];
Achievements[0] = "4 CARMA";
Achievements[1] = "4 CAMPAIGN_COMPLETE";
Achievements[2] = "4 CAMPAIGN_HARDENED";
Achievements[3] = "4 CAMPAIGN_VETERAN";
Achievements[4] = "4 BOOST_DASH_STOMP";
Achievements[5] = "4 GRENADE_DODGE";
Achievements[6] = "4 SONIC_KILL";
Achievements[7] = "4 OVERDRIVE_KILL";
Achievements[8] = "4 SMART_GRENADE_KILL";
Achievements[9] = "4 THREAT_GRENADE_KILL";
Achievements[10] = "4 EMP_DRONE";
Achievements[11] = "4 EMP_AST";
Achievements[12] = "4 INTEL_HALF";
Achievements[13] = "4 INTEL_ALL";
Achievements[14] = "4 COVER_DRONE_KILL";
Achievements[15] = "4 EXO_UPGRADE";
Achievements[16] = "4 EXO_UPGRADE_10";
Achievements[17] = "4 EXO_UPGRADE_20";
Achievements[18] = "4 EXO_UPGRADE_FULL";
Achievements[19] = "4 LEVEL_1";
Achievements[20] = "4 LEVEL_1A";
Achievements[21] = "4 LEVEL_2A";
Achievements[22] = "4 LEVEL_2B";
Achievements[23] = "4 LEVEL_2";
Achievements[24] = "4 LEVEL_3A";
Achievements[25] = "4 LEVEL_3";
Achievements[26] = "4 LEVEL_4A";
Achievements[27] = "4 LEVEL_4";
Achievements[28] = "4 LEVEL_5";
Achievements[29] = "4 LEVEL_5A";
Achievements[30] = "4 LEVEL_6A";
Achievements[31] = "4 LEVEL_6";
Achievements[32] = "4 LEVEL_7";
Achievements[33] = "4 LEVEL_8A";
Achievements[34] = "4 LEVEL_8";
Achievements[35] = "4 LEVEL_9";
Achievements[36] = "4 LEVEL_10A";
Achievements[37] = "4 LEVEL_10";
Achievements[38] = "4 LEVEL_11";
Achievements[39] = "4 LEVEL_12A";
Achievements[40] = "4 LEVEL_12";
Achievements[41] = "4 LEVEL_13A";
Achievements[42] = "4 LEVEL_13";
Achievements[43] = "4 LEVEL_14A";
Achievements[44] = "4 LEVEL_14";
Achievements[45] = "4 COOP_VETERAN";
Achievements[46] = "4 COOP_WARFARE";
Achievements[47] = "4 COOP_UNDEAD_SURVIVOR";
Achievements[48] = "4 COOP_EXO_SURVIVOR";
Achievements[49] = "4 COOP_FLIP_FLOP";

for (int i = 0; i < 50; i++)
{
RPC.Call(0x42D9A4, -1, 1, Achievements[i]);
System.Threading.Thread.Sleep(25);
RPC.Call(0x42D9A4, -1, 1, Achievements[i]);
}
}


Clone Player: //Credits to xReaperV3

    public static void ClonePlayer(int clientIndex)
{
RPC.Call(0x38AEA4, new object[] { clientIndex });
}


Keyboard: //Credits to Swiss for the kb_cb address

    uint kb_Result = 0x030D0E22;
uint kb_cb = 0x00989068;
uint keyboardPrompt = 0x498828;
uint kb_active = 0x030D0AE4;
string KeyBoard(string title = "Your title", string presetText = "text here", int maxLength = 20)
{

RPC.Call(keyboardPrompt, new object[] { 0, title, presetText, maxLength, 0, 0, kb_cb });
System.Threading.Thread.Sleep(10);
while (PS3.Extension.ReadInt32(kb_active) == 0)
continue;
return PS3.Extension.ReadString(kb_Result);
}


G_GivePlayerWeapon: //Credits Unknown

    
public static void G_GivePlayerWeapon(int client, int weapon, int ammo)
{
RPC.Call(0x36A6A0, 0x1950880 + ((uint)client * 0x4180, weapon, 0);
RPC.Call(0x3101C0, 0x1950880+ ((uint)client * 0x4180, weapon, 0, ammo, 1);
}




A lot of the stuff in the "Offsets" spoiler have not been released/found before on Advanced Warfare so I decided to release them. This thread contains a lot of stuff that hasn't been released before on Advanced Warfare like the calling cards address, party name and clan tag offsets, A LOT of client mods and more, enjoy Smile.


Nice job man...dont pay attention to any haters... keep it up

The following user thanked 1austin112 for this useful post:

RatchetBooty
12-10-2014, 04:07 AM #9
One
At least I can fight
nice thread, thanks for sharing :p
12-10-2014, 04:47 AM #10
SC58
Former Staff
Here is some more Chams for rendering stuff thru walls.

to enable you need to put

li r6, 0x0
PPC: 38 C0 00 00

0x0 being the int for render flag for the texture color you want.

    
0x19DF7C - Draw Weapons
0x19E840 - Draw Grenades
0x19EF1C - Draw Objects
0x19F16C - Draw Objects 2
0x1C45A4 - Draw Dead Body
0x1C3424 - Draw Players


Forgot i had these thought i would post em as idc about this stuff :p lol

The following 4 users say thank you to SC58 for this useful post:

KranK, RatchetBooty, RGaming, Taylor

Copyright © 2024, NextGenUpdate.
All Rights Reserved.

Gray NextGenUpdate Logo