Post: Advanced Warfare Offsets/Addresses & Scripts (NEW UNRELEASED OFFSETS)
12-17-2014, 02:32 AM #1
1austin112
League Champion
(adsbygoogle = window.adsbygoogle || []).push({});
Hello NGU community! Today I bring you a thread that contains offsets, addresses, scripts and more for Advanced Warfare. I will be updating them every update if they need updating. You might be thinking to yourself "damn another one of these offset threads", well I'm going to be releasing a lot of stuff that hasn't been released before and a lot of stuff that has. This thread will contain offsets already found by people (credit will be given) and offsets that I've found personally that haven't been found yet.



Game: Advanced Warfare
Current Version: 1.05
Last Updated: 12/17/2014




Update 1.04:


How to use Client Interval (For the people who don't know):
Client Interval is also known as next client. To use client interval all you have to do is take the offset and add the client interval to it and that will give you the next clients offset.


Offsets:

Stats:

    Prestige : 0x295C66d
XP (Experience) : 0x295C709
Score : 0x295C746
Kills : 0x295C71E
Deaths : 0x295C6F5
Wins : 0x295C772
Losses : 0x295C725
Time Played : 0x295C762
Games Played : 0x295C70D
Stat Entry: 0x295C664
Unlock All: 0x2961DA0


Class Names:

    Class Interval: 0x80

Class 1 Name: 0x2961449
Class 2 Name: 0x29614C9
Class 3 Name: 0x2961549
Class 4 Name: 0x29615C9
Class 5 Name: 0x2961649
Class 6 Name: 0x29616C9
Class 7 Name: 0x2961749
Class 8 Name: 0x29617C9
Class 9 Name: 0x2961849
Class 10 Name: 0x29618C9


Real Unlock All (w/Attachments):

    
byte[] buffer = new byte[0x1770];
for (int i = 0; i < 0x1770; i++)
{
buffer[i] = 0xFE;
}
PS3.SetMemory(0x2961DA0, buffer);


Calling Cards Offset and Bytes:

If you use an unlock all, it unlocks everything with calling cards except for the clan calling cards. Here are the bytes for the clan calling cards, just change the byte with the one you want at the calling card offset.
    
Calling Card Offset: 0x2965713
Clan Card #1: 0xD6
Clan Card #2: 0xD7
Clan Card #3: 0xD8
Clan Card #4: 0xD9
Clan Card #5: 0xDA
Clan Card #6: 0xDB
Checkerbox: 0xDC


Name & Clan Tag:

    Name: 0x28E60E0
Clan Tag: 0xD6E946


Party Name & Clan Tag:

Make sure to use a timer with these otherwise it won't set.
    
Client Interval for both Party Name & Party Clan Tag: 0x378

Party Name Client 0: 0xD7DE58
Party Name Client 1: 0xD7E1D0
Party Name Client 2: 0xD7E548
Party Name Client 3: 0xD7E8C0
Party Name Client 4: 0xD7EC38
Party Name Client 5: 0xD7EFB0
Party Name Client 6: 0xD7F328
Party Name Client 7: 0xD7F6A0
Party Name Client 8: 0xD7FA18
Party Name Client 9: 0xD7FD90
Party Name Client 10: 0xD80108
Party Name Client 11: 0xD80480

Party Clan Tag Client 0: 0xD7DE78
Party Clan Tag Client 1: 0xD7E1F0
Party Clan Tag Client 2: 0xD7E568
Party Clan Tag Client 3: 0xD7E8E0
Party Clan Tag Client 4: 0xD7EC58
Party Clan Tag Client 5: 0xD7EFD0
Party Clan Tag Client 6: 0xD7F348
Party Clan Tag Client 7: 0xD7F6C0
Party Clan Tag Client 8: 0xD7FA38
Party Clan Tag Client 9: 0xD7FDB0
Party Clan Tag Client 10: 0xD80128
Party Clan Tag Client 11: 0xD804A0


Non-Host Mods:

    
Credits to MegaMister & Eddie Mac

Advanced UAV: 0x18DB73 On: 0x00 Off: 0x01
No Recoil: 0x20C8FC On: 0x60, 0x00, 0x00, 0x00 Off: 0x4B, 0xF6, 0x16, 0x5D
Red Boxes: 0x0019610B On: 0x01 Off: 0x00
Green Players: 0x005D60D3 On: 0x01 Off: 0x00
Red Laser: 0x001FF703 On: 0x01 Off: 0x00
Steady Aim: 0x0016E96F On: 0x00 Off: 0x02
Ghost Players: 0x5D62EF On: 0x01 Off: 0x00
No Gun Sound: 0x20C72B On: 0x01 Off: 0x00
Player Outline Color: 0x01FF6F3 Normal: 0x00 Red: 0x04 Green: 0x06 Cyan: 0x08 Yellow: 0x0C
Real Wallhack: 0x01C3424 On: 0x38, 0xC0, 0x00, 0x09 Off: 0x63, 0xC6, 0x00, 0x00
Wallhack: 0x02598BEC On: 0x42 Off: 0x40
Third Person: 0x025B502C On: 0x01 Off: 0x00
compassMaxRange: 0x025B580C On: 0x45, 0x2F Off: 0x44, 0xBB
cg_fov: 0x025B607C On: 0x42, 0xD2 Off: 0x42, 0x82

//Credits to SC58
Heat Vision: (Must overwrite by a tool or bin file otherwise you will freeze; Make sure to set both of these addresses)
0x1F130C - On: 0x60, 0x00, 0x00, 0x00 Off: 0x41, 0x82, 0x00, 0x8c
0x1F1314 - On: 0x60, 0x00, 0x00, 0x00 Off: 0x41, 0x82, 0x00, 0x50

0x19DF7C - Draw Weapons
0x19E840 - Draw Grenades
0x19EF1C - Draw Objects
0x19F16C - Draw Objects 2
0x1C45A4 - Draw Dead Body
0x1C3424 - Draw Players

Outline Colors:

Normal: 0x38, 0xC0, 0x00, 0x00
Black: 0x38, 0xC0, 0x00, 0x02
Red: 0x38, 0xC0, 0x00, 0x04
Green: 0x38, 0xC0, 0x00, 0x06
Cyan: 0x38, 0xC0, 0x00, 0x08
Basic: 0x38, 0xC0, 0x00, 0x08
Orange: 0x38, 0xC0, 0x00, 0x0A
Yellow: 0x38, 0xC0, 0x00, 0x0C
Blue: 0x38, 0xC0, 0x00, 0x0E

Filled Color (Filled In):

Normal: 0x38, 0xC0, 0x00, 0x00
Red: 0x38, 0xC0, 0x00, 0x12
RedBold: 0x38, 0xC0, 0x00, 0x14
Green: 0x38, 0xC0, 0x00, 0x16
Cyan: 0x38, 0xC0, 0x00, 0x18
Orange: 0x38, 0xC0, 0x00, 0x1A
Yellow: 0x38, 0xC0, 0x00, 0x1C
Blue: 0x38, 0xC0, 0x00, 0x1E


Lobby Settings:

    
Jump Height: 0x025B5ECC
Walk Speed: 0x002F0E44
Knockback: 0x025BBDDC
Floating Bodies: 0x025B8434


Client Mods:

G_Client Offsets:

    
G_Client Address: 0x1950880 Client Interval: 0x4180

Red Boxes: G_Client + 0x5F On: 0x10 Off: 0x00
Heat Vision: G_Client + 0x5F On: 0x1C Off: 0x00
Invisibility: G_Client + 0x5B On: 0xF3 Off: 0x00
Ping: G_Client + 0x58 On: 0x01 Off: 0x00
No Recoil: G_Client + 0x562 On: 0x04 Off: 0x00
Disable Weapons: G_Client + 0x0562 Remove: 0x00 0x80 Give Back: 0x00 0x00
Primary Akimbo: G_Client + 0x3E5 On: 0x90 Off: 0x00
Secondary Akimbo: G_Client + 0x3AD On: 0x90 Off: 0x00
Laser: G_Client + 0x59 On: 0x01 Off: 0x00
Red Laser: G_Client + 0xD On: 0x00
Yellow Laser Color: G_Client + 0xD On: 0x01
Blue Laser Color: G_Client + 0xD On: 0x04
Scrambler: G_Client + 0x59 On: 0x40 Off: 0x00
mFlag: G_Client + 0x3da7 Normal: 0x00 No Clip: 0x01 UFO Mode: 0x02 Freeze: 0x04
System Hack: G_Client + 0x38C9 On: 0x01 Off: 0x00
Third Person: G_Client + 0x5F On: 0x07 Off: 0x00
Heat Chams: G_Client + 0x5F On: 0x1F Off: 0x00
Player Speed: G_Client + 0x3ADC Normal: 0x3F, 0x88 Fast: 0x3F, 0xFF Slow: 0x3F, 0x00
No Friction (Skate Mod): G_Client + 0x56 On: 0x01 Off: 0x00
In-Game Name: G_Client + 0x3B3C
In-Game Clan Tag: G_Client + 0x3BA0
Advanced UAV: G_Client + 0x3C2F On: 0x01 G_Client + 0x3C3F On: 0x00 Off: 0x01
FoV: G_Client + 0x3940 Normal: 0x3F, 0x80
Infinite Ammo:
G_Client + 0x58F On: 0xFF, 0xFF Off: 0x00, 0x00
G_Client + 0x5A6 On: 0xFF, 0xFF Off: 0x00, 0x00
G_Client + 0x65A On: 0xFF, 0xFF Off: 0x00, 0x00
G_Client + 0x642 On: 0xFF, 0xFF Off: 0x00, 0x00
Exo Cloak: G_Client + 0x58 On: 0x11 Off: 0x00
Kill Client: G_Client + 0x3ADC Kill: 0xFF, 0xFF
Fake Lag: G_Client + 0x3A1B On: 0x00 Off: 0x02
Kick Client: G_Client + 0x5A Kick: 0x3F
Invisible Gun: G_Client + 0x3AE1 On: 0x01 Off: 0x00
Exo Screen: G_Client + 0x3880 On: 0x01 Off: 0x00
Instant Drop: G_Client + 0x54 On: 0x01 Off: 0x00
Injured Breathing: G_Client + 0x3AC9 On: 0x01 Off: 0x00
Exo Stim: G_Client + 0x323 On: 0x01 Off: 0x02
Gun View: G_Client + 0x563 Default: 0x00 Launcher: 0x02
Rabbit Man: G_Client + 0x3ADC On: 0x2F, 0x88 Off: 0x3F 0x88
Fake Blood: G_Client + 0x1F3 On: 0xFF Off: 0x64
Stuck in Mud: G_Client + 0x3ADC On: 0x3D, 0x88 Off: 0x3F, 0x88
UAV: G_Client + 0x3948 On: 0x01 Off: 0x00
Border Screen: G_Client + 0x3850 On: 0x01 Off: 0x00
Missile Vision: G_Client + 0x380B On: 0x01 Off: 0x00
Goliath Vision: G_Client + 0x38E8 On: 0x01 Off: 0x02
In-Game Leaderboard spoof: Prestige: G_Client + 0x30C3 Rank: G_Client + 0x30BF Kills: G_Client + 0x3C1B Deaths: G_Client + 0x3C1D Objective: G_Client + 0x3C21 Defends: G_Client + 0x3C23 Score: G_Client + 0x3C19 Assists: G_Client + 0x3C1F



G_Entity Offsets:

    
G_Entity Address: 0x1860880 Client Interval: 0x280

Godmode: G_Entity + 0x1AC On: 0x00, 0x00, 0xFF, 0xFF Off: 0x00, 0x00, 0x00, 0x00
Pointer to G_Client: G_Entity + 0x158





Addresses:

    
//Credits to Swiss

TOC Address = 00994F68
Stats Entry = 00295C664
G_Client = 001950880
G_Client_size = 0x4180
G_Entity = 001860880
G_Entity_size = 0x280
G_Spawn = 00366A24
SV_SetClientStats = 004322C0
G_Speed: 002F0E44
Add_Ammo = 003101C0
G_SpawnTurret = 0037B4F8
G_GivePlayerWeapon = 0036A6A0
G_SetFog: 00306AD4
BG_FindWeaponIndexForName = 00168074
G_GetWeaponIndexForName = 0036B3C4
SV_SetConfigString = 0042ECD0
G_Hudelems = 0017B9670
Hudelem_Alloc = 0030CAD0
G_LocalizedStringIndex = 0004C9A8
ui_debugmode = 0048D148
Dvar_GetBool: 004BF0F8
Com_Sprintf = 004C7548
SV_GameSendServerCommand = 0042D9A4
Cbuf_AddText = 0038AEA4
R_SetFrameFog = 005FCBF0
SV_SetClientViewAngles = 002F4530
Scr_GetInt = 003E299C
Scr_SpawnFX = 00349568
FPSText = 0079924C
//Thanks to Lebigkilleur
Com_ERROR = 003ACAA8
SV_SetupIgnoreEntParams = 00449F78
Dvar_FindVar = 0x4BEFC4
HECmd_SetClock(scr_entref_t entref) = 0x30EE54
HECmd_SetClock_Internal(scr_entref_t entref, he_type_t type, const char *cmdName) = 0x30EB08
G_MaterialIndex(const char *name) = 0x47BA8
G_ModelIndex(const char *name) = 0x47BEC
G_ModelName(int index) = 0x47C6C
G_ShellShockIndex(const char *name) = 0x47D10
Dvar_FindMalleableVar = 0x4BD528



Scripts:

RPC: //Credits to SC58

    
public class RPC
{
static uint function_address = 0x5FCBF0; // R_SetFrameFog

public static int Init()
{
if (function_address == 0) return -1;
Enable_RPC();
return 0;
}

public static void Enable_RPC()
{
PS3.SetMemory(function_address, new byte[] { 0x4E, 0x80, 0x00, 0x20 });
System.Threading.Thread.Sleep(20);
byte[] func = new byte[] { 0x7C, 0x08, 0x02, 0xA6, 0xF8, 0x01, 0x00, 0x80, 0x3C, 0x60, 0x10, 0x05, 0x81, 0x83, 0x00, 0x4C, 0x2C, 0x0C, 0x00, 0x00, 0x41, 0x82, 0x00, 0x64, 0x80, 0x83, 0x00, 0x04, 0x80, 0xA3, 0x00, 0x08, 0x80, 0xC3, 0x00, 0x0C, 0x80, 0xE3, 0x00, 0x10, 0x81, 0x03, 0x00, 0x14, 0x81, 0x23, 0x00, 0x18, 0x81, 0x43, 0x00, 0x1C, 0x81, 0x63, 0x00, 0x20, 0xC0, 0x23, 0x00, 0x24, 0xC0, 0x43, 0x00, 0x28, 0xC0, 0x63, 0x00, 0x2C, 0xC0, 0x83, 0x00, 0x30, 0xC0, 0xA3, 0x00, 0x34, 0xC0, 0xC3, 0x00, 0x38, 0xC0, 0xE3, 0x00, 0x3C, 0xC1, 0x03, 0x00, 0x40, 0xC1, 0x23, 0x00, 0x48, 0x80, 0x63, 0x00, 0x00, 0x7D, 0x89, 0x03, 0xA6, 0x4E, 0x80, 0x04, 0x21, 0x3C, 0x80, 0x10, 0x05, 0x38, 0xA0, 0x00, 0x00, 0x90, 0xA4, 0x00, 0x4C, 0x80, 0x64, 0x00, 0x50, 0xE8, 0x01, 0x00, 0x80, 0x7C, 0x08, 0x03, 0xA6, 0x38, 0x21, 0x00, 0x70, 0x4E, 0x80, 0x00, 0x20 };
PS3.SetMemory(function_address + 0x4, func);
PS3.SetMemory(0x10050000, new byte[0x2854]);
PS3.SetMemory(function_address, new byte[] { 0xF8, 0x21, 0xFF, 0x91 });
}

public static int Call(uint func_address, params object[] parameters)
{
int num_params = parameters.Length;
uint num_floats = 0;
for (uint i = 0; i < num_params; i++)
{
if (parameters[i] is int)
{
byte[] val = BitConverter.GetBytes((int)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, val);
}
else if (parameters[i] is uint)
{
byte[] val = BitConverter.GetBytes((uint)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, val);
}
else if (parameters[i] is string)
{
byte[] str = Encoding.UTF8.GetBytes(Convert.ToString(parameters[i]) + "\0");
PS3.SetMemory(0x10050054 + i * 0x400, str);
uint addr = 0x10050054 + i * 0x400;
byte[] address = BitConverter.GetBytes(addr);
Array.Reverse(address);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, address);
}
else if (parameters[i] is float)
{
num_floats++;
byte[] val = BitConverter.GetBytes((float)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050024 + ((num_floats - 1) * 0x4), val);
}
}
byte[] fadd = BitConverter.GetBytes(func_address);
Array.Reverse(fadd);
PS3.SetMemory(0x1005004C, fadd);
System.Threading.Thread.Sleep(20);
byte[] ret = PS3.GetMemory(0x10050050, 4);
Array.Reverse(ret);
return BitConverter.ToInt32(ret, 0);
}
}


All Client Button Monitoring: //Credits to iTnDM

    class Buttons
{

public static class Buttonz
{
public static Int32
Cross = 1024,
Square = 48,
Crouch = 512,
Prone = 256,
Start = 8388608,
L1 = 526336,
L2 = 32768,
L3 = 8194,
R1 = 1,
R2 = 16384,
R3 = 67108868;


}

public static bool ButtonPressed(int client, int Buttons)
{
if (PS3.Extension.ReadInt32(G_Client + 0x3DB4 + ((uint)client * 0x4180)) == Buttons)
return true;
else return false;
}


Jetpack: //Credits to BlackPanther

    public void JetPack(int client)
{
float jH = PS3.Extension.ReadFloat(G_Client + ((uint)client * 0x4180));
jH += 100;
PS3.Extension.WriteFloat(G_Client + ((uint)client * 0x4180), jH);
}


//How to use it in a timer or backgroundworker

if(ButtonPressed(0, Buttons.Cross))
{
JetPack(0);
}


Unlock All Trophies: //Credits to SC58

       {
string[] Achievements = new string[50];
Achievements[0] = "4 CARMA";
Achievements[1] = "4 CAMPAIGN_COMPLETE";
Achievements[2] = "4 CAMPAIGN_HARDENED";
Achievements[3] = "4 CAMPAIGN_VETERAN";
Achievements[4] = "4 BOOST_DASH_STOMP";
Achievements[5] = "4 GRENADE_DODGE";
Achievements[6] = "4 SONIC_KILL";
Achievements[7] = "4 OVERDRIVE_KILL";
Achievements[8] = "4 SMART_GRENADE_KILL";
Achievements[9] = "4 THREAT_GRENADE_KILL";
Achievements[10] = "4 EMP_DRONE";
Achievements[11] = "4 EMP_AST";
Achievements[12] = "4 INTEL_HALF";
Achievements[13] = "4 INTEL_ALL";
Achievements[14] = "4 COVER_DRONE_KILL";
Achievements[15] = "4 EXO_UPGRADE";
Achievements[16] = "4 EXO_UPGRADE_10";
Achievements[17] = "4 EXO_UPGRADE_20";
Achievements[18] = "4 EXO_UPGRADE_FULL";
Achievements[19] = "4 LEVEL_1";
Achievements[20] = "4 LEVEL_1A";
Achievements[21] = "4 LEVEL_2A";
Achievements[22] = "4 LEVEL_2B";
Achievements[23] = "4 LEVEL_2";
Achievements[24] = "4 LEVEL_3A";
Achievements[25] = "4 LEVEL_3";
Achievements[26] = "4 LEVEL_4A";
Achievements[27] = "4 LEVEL_4";
Achievements[28] = "4 LEVEL_5";
Achievements[29] = "4 LEVEL_5A";
Achievements[30] = "4 LEVEL_6A";
Achievements[31] = "4 LEVEL_6";
Achievements[32] = "4 LEVEL_7";
Achievements[33] = "4 LEVEL_8A";
Achievements[34] = "4 LEVEL_8";
Achievements[35] = "4 LEVEL_9";
Achievements[36] = "4 LEVEL_10A";
Achievements[37] = "4 LEVEL_10";
Achievements[38] = "4 LEVEL_11";
Achievements[39] = "4 LEVEL_12A";
Achievements[40] = "4 LEVEL_12";
Achievements[41] = "4 LEVEL_13A";
Achievements[42] = "4 LEVEL_13";
Achievements[43] = "4 LEVEL_14A";
Achievements[44] = "4 LEVEL_14";
Achievements[45] = "4 COOP_VETERAN";
Achievements[46] = "4 COOP_WARFARE";
Achievements[47] = "4 COOP_UNDEAD_SURVIVOR";
Achievements[48] = "4 COOP_EXO_SURVIVOR";
Achievements[49] = "4 COOP_FLIP_FLOP";

for (int i = 0; i < 50; i++)
{
RPC.Call(0x42D9A4, -1, 1, Achievements[i]);
System.Threading.Thread.Sleep(25);
RPC.Call(0x42D9A4, -1, 1, Achievements[i]);
}
}


Clone Player: //Credits to xReaperV3

    public static void ClonePlayer(int clientIndex)
{
RPC.Call(0x38AEA4, new object[] { clientIndex });
}


Keyboard: //Credits to Swiss for the kb_cb address; Credits to īTnDM for the keyboardPrompt address

    uint kb_Result = 0x030D0E22;
uint kb_cb = 0x00989068;
uint keyboardPrompt = 0x498828;
uint kb_active = 0x030D0AE4;
string KeyBoard(string title = "Your title", string presetText = "text here", int maxLength = 20)
{

RPC.Call(keyboardPrompt, new object[] { 0, title, presetText, maxLength, 0, 0, kb_cb });
System.Threading.Thread.Sleep(10);
while (PS3.Extension.ReadInt32(kb_active) == 0)
continue;
return PS3.Extension.ReadString(kb_Result);
}









Update 1.05:


How to use Client Interval (For the people who don't know):
Client Interval is also known as next client. To use client interval all you have to do is take the offset and add the client interval to it and that will give you the next clients offset.


Offsets:

Stats:

    Prestige : 0x29CDC6D
XP (Experience) : 0x029cdd0a
Score : 0x29CDD46
Kills : 0x029cdd1d
Deaths : 0x29CDCF5
Wins : 0x29CDD72
Losses : 0x29CDD25
Time Played : 0x29CDD62
Games Played : 0x29CDD0D
Stat Entry: 0x29CDC64
Unlock All: 0x29D33A0


Class Names:

    Class Interval: 0x80

Class 1 Name: 0x29d2a49
Class 2 Name: 0x29d2ac9
Class 3 Name: 0x29d2b29
Class 4 Name: 0x29d2bc9
Class 5 Name: 0x29d2c49
Class 6 Name: 0x29d2cc9
Class 7 Name: 0x29d2d49
Class 8 Name: 0x29d2dc9
Class 9 Name: 0x29d2e49
Class 10 Name: 0x29d2ec9


Real Unlock All (w/Attachments):

    
byte[] buffer = new byte[0x1770];
for (int i = 0; i < 0x1770; i++)
{
buffer[i] = 0xFE;
}
PS3.SetMemory(0x29D33A0, buffer);


Calling Cards Offset and Bytes:

If you use an unlock all, it unlocks everything with calling cards except for the clan calling cards. Here are the bytes for the clan calling cards, just change the byte with the one you want at the calling card offset.
    
Calling Card Offset: 0x29D6D13
Clan Card #1: 0xD6
Clan Card #2: 0xD7
Clan Card #3: 0xD8
Clan Card #4: 0xD9
Clan Card #5: 0xDA
Clan Card #6: 0xDB
Checkerbox: 0xDC


Name & Clan Tag:

    Name: 0x029672e0
Clan Tag: 0xD82046


Party Name & Clan Tag:

Make sure to use a timer with these otherwise it won't set.
    
Client Interval for both Party Name & Party Clan Tag: 0x378

Party Name 0 0xd915bc
Party name 1 0xd9193c
Party name 2 0xD91CBC
Party name 3 0xD9203C
Party name 4 0xD923BC
Party name 5 0xD9273C
Party name 6 0xD92ABC
Party name 7 0xD92E3C
Party name 8 0xD931BC
Party name 9 0xD9353C
Party name 10 0xD938BC
Party name 11 0xD93C3C

Party Clan 0 0xd915dc
Party Clan 1 0xd9195c
Party Clan 2 0xD91CDC
Party Clan 3 0xD9205C
Party Clan 4 0xD923DC
Party Clan 5 0xD9275C
Party Clan 6 0xD92ADC
Party Clan 7 0xD92E5C
Party Clan 8 0xD931DC
Party Clan 9 0xD9355C
Party Clan 10 0xD938DC
Party Clan 11 0xD93C5C


Non-Host Mods:

    
Credits to MegaMister & Eddie Mac(finding) + 1Austin112 & RatchetBooty(Updating)

Advanced UAV: 0x1813DB On: 0x00 Off: 0x01
No Recoil: 0021018C On: 0x60, 0x00, 0x00, 0x00 Off: 0x4B, 0xF6, 0x16, 0x5D
Red Boxes: 0x00199923 On: 0x01 Off: 0x00
Red Laser: 0x202F93 On: 0x01 Off: 0x00
Steady Aim: 0x1720DF On: 0x00 Off: 0x02
Ghost Players: 0x5DC9EF On: 0x01 Off: 0x00
No Gun Sound: 0x20FFBB On: 0x01 Off: 0x00
Player Outline Color: 0x1C6C28 Normal: 0x00 Red: 0x04 Green: 0x06 Cyan: 0x08 Yellow: 0x0C
Real Wallhack: 0x1C6C28 On: 0x38, 0xC0, 0x00, 0x09 Off: 0x63, 0xC6, 0x00, 0x00
Wallhack: 0x2619D7C On: 0x42 Off: 0x40
Third Person: 0x026364d4 On: 0x01 Off: 0x00
compassMaxRange: 0x02636cb4 On: 0x45, 0x2F Off: 0x44, 0xBB
cg_fov: 0x02637524 On: 0x42, 0xD2 Off: 0x42, 0x82

//Credits to SC58(Finding) + 1Austin112(Updating)
Heat Vision: (Must overwrite by a tool or bin file otherwise you will freeze; Make sure to set both of these addresses)
0x1F4B54 - On: 0x60, 0x00, 0x00, 0x00 Off: 0x41, 0x82, 0x00, 0x8C
0x1F4B5C - On: 0x60, 0x00, 0x00, 0x00 Off: 0x41, 0x82, 0x00, 0x50

0x1A1784 - Draw Weapons
0x1A2048 - Draw Grenades
0x1A2724 - Draw Objects
0x1A2724 - Draw Objects 2
0x1C7DE4 - Draw Dead Body
0x1C6C28 - Draw Players

Outline Colors:

Normal: 0x38, 0xC0, 0x00, 0x00
Black: 0x38, 0xC0, 0x00, 0x02
Red: 0x38, 0xC0, 0x00, 0x04
Green: 0x38, 0xC0, 0x00, 0x06
Cyan: 0x38, 0xC0, 0x00, 0x08
Basic: 0x38, 0xC0, 0x00, 0x08
Orange: 0x38, 0xC0, 0x00, 0x0A
Yellow: 0x38, 0xC0, 0x00, 0x0C
Blue: 0x38, 0xC0, 0x00, 0x0E

Filled Color (Filled In):

Normal: 0x38, 0xC0, 0x00, 0x00
Red: 0x38, 0xC0, 0x00, 0x12
RedBold: 0x38, 0xC0, 0x00, 0x14
Green: 0x38, 0xC0, 0x00, 0x16
Cyan: 0x38, 0xC0, 0x00, 0x18
Orange: 0x38, 0xC0, 0x00, 0x1A
Yellow: 0x38, 0xC0, 0x00, 0x1C
Blue: 0x38, 0xC0, 0x00, 0x1E


Lobby Settings:

    
Jump Height: 0x02637374
Walk Speed: 0x002F58CC
Knockback: 0x0263d314
Floating Bodies: 0x026398de


Client Mods:

G_Client Offsets:

    
G_Client Address: 0x1987980 Client Interval: 0x4180

Red Boxes: G_Client + 0x5F On: 0x10 Off: 0x00
Heat Vision: G_Client + 0x5F On: 0x1C Off: 0x00
Invisibility: G_Client + 0x5B On: 0xF3 Off: 0x00
Ping: G_Client + 0x58 On: 0x01 Off: 0x00
No Recoil: G_Client + 0x562 On: 0x04 Off: 0x00
Disable Weapons: G_Client + 0x0562 Remove: 0x00 0x80 Give Back: 0x00 0x00
Primary Akimbo: G_Client + 0x3E5 On: 0x90 Off: 0x00
Secondary Akimbo: G_Client + 0x3AD On: 0x90 Off: 0x00
Laser: G_Client + 0x59 On: 0x01 Off: 0x00
Red Laser: G_Client + 0xD On: 0x00
Yellow Laser Color: G_Client + 0xD On: 0x01
Blue Laser Color: G_Client + 0xD On: 0x04
Scrambler: G_Client + 0x59 On: 0x40 Off: 0x00
mFlag: G_Client + 0x3da7 Normal: 0x00 No Clip: 0x01 UFO Mode: 0x02 Freeze: 0x04
System Hack: G_Client + 0x38C9 On: 0x01 Off: 0x00
Third Person: G_Client + 0x5F On: 0x07 Off: 0x00
Heat Chams: G_Client + 0x5F On: 0x1F Off: 0x00
Player Speed: G_Client + 0x3ADC Normal: 0x3F, 0x88 Fast: 0x3F, 0xFF Slow: 0x3F, 0x00
No Friction (Skate Mod): G_Client + 0x56 On: 0x01 Off: 0x00
In-Game Name: G_Client + 0x3B3C
In-Game Clan Tag: G_Client + 0x3BA0
Advanced UAV: G_Client + 0x3C2F On: 0x01 G_Client + 0x3C3F On: 0x00 Off: 0x01
FoV: G_Client + 0x3940 Normal: 0x3F, 0x80
Infinite Ammo:
G_Client + 0x58F On: 0xFF, 0xFF Off: 0x00, 0x00
G_Client + 0x5A6 On: 0xFF, 0xFF Off: 0x00, 0x00
G_Client + 0x65A On: 0xFF, 0xFF Off: 0x00, 0x00
G_Client + 0x642 On: 0xFF, 0xFF Off: 0x00, 0x00
Exo Cloak: G_Client + 0x58 On: 0x11 Off: 0x00
Kill Client: G_Client + 0x3ADC Kill: 0xFF, 0xFF
Fake Lag: G_Client + 0x3A1B On: 0x00 Off: 0x02
Kick Client: G_Client + 0x5A Kick: 0x3F
Invisible Gun: G_Client + 0x3AE1 On: 0x01 Off: 0x00
Exo Screen: G_Client + 0x3880 On: 0x01 Off: 0x00
Instant Drop: G_Client + 0x54 On: 0x01 Off: 0x00
Injured Breathing: G_Client + 0x3AC9 On: 0x01 Off: 0x00
Exo Stim: G_Client + 0x323 On: 0x01 Off: 0x02
Gun View: G_Client + 0x563 Default: 0x00 Launcher: 0x02
Rabbit Man: G_Client + 0x3ADC On: 0x2F, 0x88 Off: 0x3F 0x88
Fake Blood: G_Client + 0x1F3 On: 0xFF Off: 0x64
Stuck in Mud: G_Client + 0x3ADC On: 0x3D, 0x88 Off: 0x3F, 0x88
UAV: G_Client + 0x3948 On: 0x01 Off: 0x00
Border Screen: G_Client + 0x3850 On: 0x01 Off: 0x00
Missile Vision: G_Client + 0x380B On: 0x01 Off: 0x00
Goliath Vision: G_Client + 0x38E8 On: 0x01 Off: 0x02
In-Game Leaderboard spoof: Prestige: G_Client + 0x30C3 Rank: G_Client + 0x30BF Kills: G_Client + 0x3C1B Deaths: G_Client + 0x3C1D Objective: G_Client + 0x3C21 Defends: G_Client + 0x3C23 Score: G_Client + 0x3C19 Assists: G_Client + 0x3C1F



G_Entity Offsets:

    
G_Entity Address: 0x1897980 Client Interval: 0x280

Godmode: G_Entity + 0x1AC On: 0x00, 0x00, 0xFF, 0xFF Off: 0x00, 0x00, 0x00, 0x00
Pointer to G_Client: G_Entity + 0x158





Addresses:

    
//Credits to Swiss

TOC Address = 009A5080
Stats Entry = 029CDC64
G_Client = 001950880
G_Client_size = 0x4180
G_Entity = 001860880
G_Entity_size = 0x280
0036F6F4 - BG_TakePlayerWeapon(playerState_s *ps, unsigned int weaponIndex, int takeAwayAmmo)
0036B518 - G_Spawn(void)
0043738C - SV_SetClientStat(int clientNum, int index, int value)
00314C60 - Add_Ammo(gentity_s *ent, unsigned int weaponIndex, char weaponModel, int count, int fillClip)
003801B0 - G_SpawnTurret(gentity_s *,char const *)
0036F34C - G_GivePlayerWeapon(playerState_s *pPS, int iWeaponIndex, char altModelIndex)
0030B594 - G_setfog(const char *fogstring)
002AEFB0 - G_RadiusDamage(const float *origin, gentity_s *inflictor, gentity_s *attacker, float fInnerDamage, float fOuterDamage, float radius, float coneAngleCos, float *coneDirection, gentity_s *ignore, int mod, int weapon)
0031EAD0 - TeleportPlayer(gentity_s *player, float *origin, float *angles)
0016B7E4 - BG_FindWeaponIndexForName(const char *name)
00370070 - G_GetWeaponIndexForName(const char *name)
0036BEA0 - G_AddEvent(gentity_s *ent, int event, unsigned int eventParm)
0036BD54 - G_TempEntity(const float *origin, int event)
00048AFC - G_EffectIndex(const char *name)
00433EF0 - SV_SetConfigstring(int,char const *)
0043206C - SV_AddServerCommand(client_s *client, svscmd_type type, const char *cmd) //
004C1260 - SV_ClientCommand(client_s *cl, msg_t *msg)
0044DB80 - SV_LinkEntity(gentity_s *gEnt)
0044DB00 - SV_UnlinkEntity(gentity_s *gEnt)
0042C4D4 - SV_KickClient(client_s *cl, char *playerName, int maxPlayerNameLen)
0042C060 - SV_MapRestart(int fast_restart)
0031DC70 - G_LocationalTrace(trace_t *results, const float *start, const float *end, int passEntityNum, int contentmask, char *priorityMap)
00387398 - Trace_GetEntityHitId(trace_t *trace)
004C4C20 - Dvar_GetBool(const char *dvarName)
004C4D68 - Dvar_GetString(const char *dvarName)
004C4C9C - Dvar_GetInt(const char *dvarName)
004C4D68 - Dvar_GetString(const char *dvarName)
004C3050 - Dvar_FindMalleableVar(const char *dvarName)
00360198 - SP_script_brushmodel(gentity_s *self)
00319E28 - G_SpawnString(SpawnVar *spawnVar, const char *key, const char *defaultString, const char **out)
017F02F0 - G_HudElems
00311570 - HudElem_Alloc(int,int)
0004DE08 - G_LocalizedStringIndex(const char *string)
0181F300 - leveltime
06ACAD8 - strchr
030DBF0 - player_die(gentity_s *self, gentity_s *inflictor, gentity_s *attacker, int damage, int meansOfDeath, int iWeapon, const float *vDir, hitLocation_t hitLoc, int psTimeOffset)
00492298 - ui_debugmode
003220F8 - G_ExplodeMissile(gentity_s *ent)
00328028 - G_FireGrenade(gentity_s *parent, float *start, float *dir, int grenadeWPID, char grenModel, int rotate, int time)
003283E8 - G_FireRocket(gentity_s *parent, unsigned int weaponIndex, float *start, float *dir, const float *gunVel, gentity_s *target, const float *targetOffset)
003801B0 - G_SpawnTurret(gentity_s *self, const char *weaponinfoname)
004C4C20 - Dvar_GetBool(char const *)
004CCFA8 - Com_sprintf(char *dest, int size, const char *fmt)
0042D780 - SV_SendDisconnect(client_s *client, int state, const char *reason)
00432BCC - SV_GameSendServerCommand(int,svscmd_type,char const *)
0038FBDC - Cbuf_AddText(int localClientNum, const char *text)
006032D0 - R_SetFrameFog(GfxCmdBufInput *)
002F8FB8 - SetClientViewAngle(gentity_s *ent, const float *angle)
003E7C2C - Scr_GetInt(unsigned int index)
0034DFF8 - Scr_SpawnFX
007A07DC - FPS
002F58CC - G_Speed
0003E2530 - Scr_Error(char const *)
00432E6C - SV_SetBrushModel(gentity_s *ent)
0037A964 - G_VehiclesInit(int restarting)
003B1E58 - Com_Error(errorParm_t code, const char *fmt)
003728BC - G_SetOrigin(gentity_s *ent, const float *origin)
00366C54 - G_CallSpawn



Scripts:

RPC: //Credits to SC58

    
public class RPC
{
static uint function_address = 006032D0; // R_SetFrameFog

public static int Init()
{
if (function_address == 0) return -1;
Enable_RPC();
return 0;
}

public static void Enable_RPC()
{
PS3.SetMemory(function_address, new byte[] { 0x4E, 0x80, 0x00, 0x20 });
System.Threading.Thread.Sleep(20);
byte[] func = new byte[] { 0x7C, 0x08, 0x02, 0xA6, 0xF8, 0x01, 0x00, 0x80, 0x3C, 0x60, 0x10, 0x05, 0x81, 0x83, 0x00, 0x4C, 0x2C, 0x0C, 0x00, 0x00, 0x41, 0x82, 0x00, 0x64, 0x80, 0x83, 0x00, 0x04, 0x80, 0xA3, 0x00, 0x08, 0x80, 0xC3, 0x00, 0x0C, 0x80, 0xE3, 0x00, 0x10, 0x81, 0x03, 0x00, 0x14, 0x81, 0x23, 0x00, 0x18, 0x81, 0x43, 0x00, 0x1C, 0x81, 0x63, 0x00, 0x20, 0xC0, 0x23, 0x00, 0x24, 0xC0, 0x43, 0x00, 0x28, 0xC0, 0x63, 0x00, 0x2C, 0xC0, 0x83, 0x00, 0x30, 0xC0, 0xA3, 0x00, 0x34, 0xC0, 0xC3, 0x00, 0x38, 0xC0, 0xE3, 0x00, 0x3C, 0xC1, 0x03, 0x00, 0x40, 0xC1, 0x23, 0x00, 0x48, 0x80, 0x63, 0x00, 0x00, 0x7D, 0x89, 0x03, 0xA6, 0x4E, 0x80, 0x04, 0x21, 0x3C, 0x80, 0x10, 0x05, 0x38, 0xA0, 0x00, 0x00, 0x90, 0xA4, 0x00, 0x4C, 0x80, 0x64, 0x00, 0x50, 0xE8, 0x01, 0x00, 0x80, 0x7C, 0x08, 0x03, 0xA6, 0x38, 0x21, 0x00, 0x70, 0x4E, 0x80, 0x00, 0x20 };
PS3.SetMemory(function_address + 0x4, func);
PS3.SetMemory(0x10050000, new byte[0x2854]);
PS3.SetMemory(function_address, new byte[] { 0xF8, 0x21, 0xFF, 0x91 });
}

public static int Call(uint func_address, params object[] parameters)
{
int num_params = parameters.Length;
uint num_floats = 0;
for (uint i = 0; i < num_params; i++)
{
if (parameters[i] is int)
{
byte[] val = BitConverter.GetBytes((int)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, val);
}
else if (parameters[i] is uint)
{
byte[] val = BitConverter.GetBytes((uint)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, val);
}
else if (parameters[i] is string)
{
byte[] str = Encoding.UTF8.GetBytes(Convert.ToString(parameters[i]) + "\0");
PS3.SetMemory(0x10050054 + i * 0x400, str);
uint addr = 0x10050054 + i * 0x400;
byte[] address = BitConverter.GetBytes(addr);
Array.Reverse(address);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, address);
}
else if (parameters[i] is float)
{
num_floats++;
byte[] val = BitConverter.GetBytes((float)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050024 + ((num_floats - 1) * 0x4), val);
}
}
byte[] fadd = BitConverter.GetBytes(func_address);
Array.Reverse(fadd);
PS3.SetMemory(0x1005004C, fadd);
System.Threading.Thread.Sleep(20);
byte[] ret = PS3.GetMemory(0x10050050, 4);
Array.Reverse(ret);
return BitConverter.ToInt32(ret, 0);
}
}


All Client Button Monitoring: //Credits to iTnDM

    class Buttons
{

public static class Buttonz
{
public static Int32
Cross = 1024,
Square = 48,
Crouch = 512,
Prone = 256,
Start = 8388608,
L1 = 526336,
L2 = 32768,
L3 = 8194,
R1 = 1,
R2 = 16384,
R3 = 67108868;


}

public static bool ButtonPressed(int client, int Buttons)
{
if (PS3.Extension.ReadInt32(G_Client + 0x3DB4 + ((uint)client * 0x4180)) == Buttons)
return true;
else return false;
}


Jetpack: //Credits to BlackPanther

    public void JetPack(int client)
{
float jH = PS3.Extension.ReadFloat(G_Client + ((uint)client * 0x4180));
jH += 100;
PS3.Extension.WriteFloat(G_Client + ((uint)client * 0x4180), jH);
}


//How to use it in a timer or backgroundworker

if(ButtonPressed(0, Buttons.Cross))
{
JetPack(0);
}


Unlock All Trophies: //Credits to SC58

       {
string[] Achievements = new string[50];
Achievements[0] = "4 CARMA";
Achievements[1] = "4 CAMPAIGN_COMPLETE";
Achievements[2] = "4 CAMPAIGN_HARDENED";
Achievements[3] = "4 CAMPAIGN_VETERAN";
Achievements[4] = "4 BOOST_DASH_STOMP";
Achievements[5] = "4 GRENADE_DODGE";
Achievements[6] = "4 SONIC_KILL";
Achievements[7] = "4 OVERDRIVE_KILL";
Achievements[8] = "4 SMART_GRENADE_KILL";
Achievements[9] = "4 THREAT_GRENADE_KILL";
Achievements[10] = "4 EMP_DRONE";
Achievements[11] = "4 EMP_AST";
Achievements[12] = "4 INTEL_HALF";
Achievements[13] = "4 INTEL_ALL";
Achievements[14] = "4 COVER_DRONE_KILL";
Achievements[15] = "4 EXO_UPGRADE";
Achievements[16] = "4 EXO_UPGRADE_10";
Achievements[17] = "4 EXO_UPGRADE_20";
Achievements[18] = "4 EXO_UPGRADE_FULL";
Achievements[19] = "4 LEVEL_1";
Achievements[20] = "4 LEVEL_1A";
Achievements[21] = "4 LEVEL_2A";
Achievements[22] = "4 LEVEL_2B";
Achievements[23] = "4 LEVEL_2";
Achievements[24] = "4 LEVEL_3A";
Achievements[25] = "4 LEVEL_3";
Achievements[26] = "4 LEVEL_4A";
Achievements[27] = "4 LEVEL_4";
Achievements[28] = "4 LEVEL_5";
Achievements[29] = "4 LEVEL_5A";
Achievements[30] = "4 LEVEL_6A";
Achievements[31] = "4 LEVEL_6";
Achievements[32] = "4 LEVEL_7";
Achievements[33] = "4 LEVEL_8A";
Achievements[34] = "4 LEVEL_8";
Achievements[35] = "4 LEVEL_9";
Achievements[36] = "4 LEVEL_10A";
Achievements[37] = "4 LEVEL_10";
Achievements[38] = "4 LEVEL_11";
Achievements[39] = "4 LEVEL_12A";
Achievements[40] = "4 LEVEL_12";
Achievements[41] = "4 LEVEL_13A";
Achievements[42] = "4 LEVEL_13";
Achievements[43] = "4 LEVEL_14A";
Achievements[44] = "4 LEVEL_14";
Achievements[45] = "4 COOP_VETERAN";
Achievements[46] = "4 COOP_WARFARE";
Achievements[47] = "4 COOP_UNDEAD_SURVIVOR";
Achievements[48] = "4 COOP_EXO_SURVIVOR";
Achievements[49] = "4 COOP_FLIP_FLOP";

for (int i = 0; i < 50; i++)
{
RPC.Call(0x432BCC, -1, 1, Achievements[i]);
System.Threading.Thread.Sleep(25);
RPC.Call(0x432BCC, -1, 1, Achievements[i]);
}
}


Clone Player:[1.04] //Credits to xReaperV3

    public static void ClonePlayer(int clientIndex)
{
RPC.Call(0x38AEA4, new object[] { clientIndex });
}


Keyboard: //Credits to Swiss & īTnDM(Finding) + iTnDM (Updating)

     uint kb_Result = 0x03080E22;
uint kb_cb = 0x0999150 ;
uint keyboardPrompt = 0x049D980 ;
uint kb_active = 0x09AACA0 ;



string runKeyboard(string title = "Your title", string presetText = "text here", int maxLength = 20)
{


RPC.Call(keyboardPrompt, new object[] { 0, title, presetText, maxLength, 0, 0, kb_cb });
System.Threading.Thread.Sleep(10);

while (PS3.Extension.ReadInt32(kb_active) == 0) { }
return PS3.Extension.ReadString(kb_Result);
}


FastRestart: //Credits to SC58

    
void FastRestart()
{
RPC.Call(0x42C31Cool Man (aka Tustin);
}







A lot of the stuff in the "Offsets" spoiler have not been released/found before on Advanced Warfare so I decided to release them. This thread contains a lot of stuff that hasn't been released before on Advanced Warfare like the calling cards address, party name and clan tag offsets, A LOT of client mods and more, enjoy Smile. Btw, If i forgot you for credits and you care that much, be civil and just pm me and let me know
RatchetBooty gave me permission to use his layout and keep updating the thread as he said he was to lazy to, don't hate, I will do my best to update this thread as fast as i can.

Last edited by 1austin112 ; 12-21-2014 at 03:24 PM.

The following 14 users say thank you to 1austin112 for this useful post:

One, ALI ALHILFI, BISOON, Boliberrys, Confusing, CuBaN-_-ViRuZ, Deversi, dolby1, Krypton, MODZ4FUN420, MotivationFST, xCLS, xDebugKiller, xXx-.-Moder
12-17-2014, 02:44 AM #2
SC58
Former Staff
The person who make this Offsets/Addresses & Scripts or whatever else you wanna call it post don't have to update everything posted for that title update to the next. lol They can just add what other post i mean it kinda stupid to have let say over 100 thing in a thread like this and the main guy who posted this thread is updating it all, it should all be in the show Spoiler of past title update so 1.04 then you click show and it show everything for that TU then the next tU for what people post, so yeah we will call it lazy seeing this is like the 4 or 5 one of these might aswell not even do this type of post if that the case, Just my opinion.

The following user thanked SC58 for this useful post:

Boliberrys
12-17-2014, 02:47 AM #3
1austin112
League Champion
Originally posted by SC58 View Post
The person who make this Offsets/Addresses & Scripts or whatever else you wanna call it post don't have to update everything posted for that title update to the next. lol They can just add what other post i mean it kinda stupid to have let say over 100 thing in a thread like this and the main guy who posted this thread is updating it all, it should all be in the show Spoiler of past title update so 1.04 then you click show and it show everything for that TU then the next tU for what people post, so yeah we will call it lazy seeing this is like the 4 or 5 one of these might aswell not even do this type of post if that the case, Just my opinion.


Why do you hate me so much? Everything i do it seems you rag on me for something, i dont understand what i did, you didnt hate ratchets thread when it was up, you actually helped him with stuff, but now he asked me to take over it cuz he doesnt want to update anymore you auto hate it....whats the deal
12-17-2014, 02:52 AM #4
SC58
Former Staff
Originally posted by 1austin112 View Post
Why do you hate me so much? Everything i do it seems you rag on me for something, i dont understand what i did, you didnt hate ratchets thread when it was up, you actually helped him with stuff, but now he asked me to take over it cuz he doesnt want to update anymore you auto hate it....whats the deal


no i'm not hating, Just giving my opinion about how it would make it easier and make one of these thread look better. :gooby:
12-17-2014, 02:55 AM #5
1austin112
League Champion
Originally posted by SC58 View Post
no i'm not hating, Just giving my opinion about how it would make it easier and make one of these thread look better. :gooby:


I do see what you are saying, if its how i think you mean, kinda like mango_knife use to have right?
12-17-2014, 03:03 AM #6
SC58
Former Staff
Originally posted by 1austin112 View Post
I do see what you are saying, if its how i think you mean, kinda like mango_knife use to have right?


1.04

stuff here


1.05

stuff here


whatever tu is next

stuff here


like update what u can of tu4 to tu5 but if u can't get it all then don't worry let other who post stuff in this thread do it for you well hopefully they don't do it all but like a few thing here and there like normally happens plus new thing getting posted, plus like script like c# or c++ u don't need c&p them to next tu just put the function name for them in there beside the script and they can put the address form this post or whatever they get it from in the code for it to work like

rpc.call(sv_gamesendservercommand, client, type, char command);

idk you don't have to do it this way whatever u want but i think it look better this way instead of the past ways it has been done in my opinion.
12-17-2014, 03:05 AM #7
1austin112
League Champion
Originally posted by SC58 View Post
1.04

stuff here


1.05

stuff here


whatever tu is next

stuff here


like update what u can of tu4 to tu5 but if u can't get it all then don't worry let other who post stuff in this thread do it for you well hopefully they don't do it all but like a few thing here and there like normally happens plus new thing getting posted, plus like script like c# or c++ u don't need c&p them to next tu just put the function name for them in there beside the script and they can put the address form this post or whatever they get it from in the code for it to work like

rpc.call(sv_gamesendservercommand, client, type, char command);

idk you don't have to do it this way whatever u want but i think it look better this way instead of the past ways it has been done in my opinion.


Yeah thats how mango_knife had his, it would look alot cleaner and maybe get rid of half of the offset threads that come out
12-17-2014, 03:09 AM #8
SC58
Former Staff
Originally posted by 1austin112 View Post
Yeah thats how mango_knife had his, it would look alot cleaner and maybe get rid of half of the offset threads that come out


Pretty much what i mean't with the script is you don't have to change the address for them each tu u can just add new script that get posted or whatever as if they see it says cbuf_addtext or sv_gamesendservercommand, g_giveplayerweapon ect they can just take it put in tool or whatever and boom there they go just put the address in it. it would make it look more clean and better. and then people would know what function make that code do it's thing instead of just seeing a address or having to ask you know
12-17-2014, 03:16 AM #9
1austin112
League Champion
Originally posted by SC58 View Post
Pretty much what i mean't with the script is you don't have to change the address for them each tu u can just add new script that get posted or whatever as if they see it says cbuf_addtext or sv_gamesendservercommand, g_giveplayerweapon ect they can just take it put in tool or whatever and boom there they go just put the address in it. it would make it look more clean and better. and then people would know what function make that code do it's thing instead of just seeing a address or having to ask you know


Yeah thats a good idea, will make it easier, Thanks for the tip Happy
12-17-2014, 03:22 AM #10
BISOON
Maggbot timeout!
Originally posted by 1austin112 View Post
Hello NGU community! Today I bring you a thread that contains offsets, addresses, scripts and more for Advanced Warfare. I will be updating them every update if they need updating. You might be thinking to yourself "damn another one of these offset threads", well I'm going to be releasing a lot of stuff that hasn't been released before and a lot of stuff that has. This thread will contain offsets already found by people (credit will be given) and offsets that I've found personally that haven't been found yet.



Game: Advanced Warfare
Current Version: 1.05
Last Updated: 12/16/2014




Update 1.04:


How to use Client Interval (For the people who don't know):
Client Interval is also known as next client. To use client interval all you have to do is take the offset and add the client interval to it and that will give you the next clients offset.


Offsets:

Stats:

    Prestige : 0x295C66d
XP (Experience) : 0x295C709
Score : 0x295C746
Kills : 0x295C71E
Deaths : 0x295C6F5
Wins : 0x295C772
Losses : 0x295C725
Time Played : 0x295C762
Games Played : 0x295C70D
Stat Entry: 0x295C664
Unlock All: 0x2961DA0


Class Names:

    Class Interval: 0x80

Class 1 Name: 0x2961449
Class 2 Name: 0x29614C9
Class 3 Name: 0x2961549
Class 4 Name: 0x29615C9
Class 5 Name: 0x2961649
Class 6 Name: 0x29616C9
Class 7 Name: 0x2961749
Class 8 Name: 0x29617C9
Class 9 Name: 0x2961849
Class 10 Name: 0x29618C9


Real Unlock All (w/Attachments):

    
byte[] buffer = new byte[0x1770];
for (int i = 0; i < 0x1770; i++)
{
buffer[i] = 0xFE;
}
PS3.SetMemory(0x2961DA0, buffer);


Calling Cards Offset and Bytes:

If you use an unlock all, it unlocks everything with calling cards except for the clan calling cards. Here are the bytes for the clan calling cards, just change the byte with the one you want at the calling card offset.
    
Calling Card Offset: 0x2965713
Clan Card #1: 0xD6
Clan Card #2: 0xD7
Clan Card #3: 0xD8
Clan Card #4: 0xD9
Clan Card #5: 0xDA
Clan Card #6: 0xDB
Checkerbox: 0xDC


Name & Clan Tag:

    Name: 0x28E60E0
Clan Tag: 0xD6E946


Party Name & Clan Tag:

Make sure to use a timer with these otherwise it won't set.
    
Client Interval for both Party Name & Party Clan Tag: 0x378

Party Name Client 0: 0xD7DE58
Party Name Client 1: 0xD7E1D0
Party Name Client 2: 0xD7E548
Party Name Client 3: 0xD7E8C0
Party Name Client 4: 0xD7EC38
Party Name Client 5: 0xD7EFB0
Party Name Client 6: 0xD7F328
Party Name Client 7: 0xD7F6A0
Party Name Client 8: 0xD7FA18
Party Name Client 9: 0xD7FD90
Party Name Client 10: 0xD80108
Party Name Client 11: 0xD80480

Party Clan Tag Client 0: 0xD7DE78
Party Clan Tag Client 1: 0xD7E1F0
Party Clan Tag Client 2: 0xD7E568
Party Clan Tag Client 3: 0xD7E8E0
Party Clan Tag Client 4: 0xD7EC58
Party Clan Tag Client 5: 0xD7EFD0
Party Clan Tag Client 6: 0xD7F348
Party Clan Tag Client 7: 0xD7F6C0
Party Clan Tag Client 8: 0xD7FA38
Party Clan Tag Client 9: 0xD7FDB0
Party Clan Tag Client 10: 0xD80128
Party Clan Tag Client 11: 0xD804A0


Non-Host Mods:

    
Credits to MegaMister & Eddie Mac

Advanced UAV: 0x18DB73 On: 0x00 Off: 0x01
No Recoil: 0x20C8FC On: 0x60, 0x00, 0x00, 0x00 Off: 0x4B, 0xF6, 0x16, 0x5D
Red Boxes: 0x0019610B On: 0x01 Off: 0x00
Green Players: 0x005D60D3 On: 0x01 Off: 0x00
Red Laser: 0x001FF703 On: 0x01 Off: 0x00
Steady Aim: 0x0016E96F On: 0x00 Off: 0x02
Ghost Players: 0x5D62EF On: 0x01 Off: 0x00
No Gun Sound: 0x20C72B On: 0x01 Off: 0x00
Player Outline Color: 0x01FF6F3 Normal: 0x00 Red: 0x04 Green: 0x06 Cyan: 0x08 Yellow: 0x0C
Real Wallhack: 0x01C3424 On: 0x38, 0xC0, 0x00, 0x09 Off: 0x63, 0xC6, 0x00, 0x00
Wallhack: 0x02598BEC On: 0x42 Off: 0x40
Third Person: 0x025B502C On: 0x01 Off: 0x00
compassMaxRange: 0x025B580C On: 0x45, 0x2F Off: 0x44, 0xBB
cg_fov: 0x025B607C On: 0x42, 0xD2 Off: 0x42, 0x82

//Credits to SC58
Heat Vision: (Must overwrite by a tool or bin file otherwise you will freeze; Make sure to set both of these addresses)
0x1F130C - On: 0x60, 0x00, 0x00, 0x00 Off: 0x41, 0x82, 0x00, 0x8c
0x1F1314 - On: 0x60, 0x00, 0x00, 0x00 Off: 0x41, 0x82, 0x00, 0x50

0x19DF7C - Draw Weapons
0x19E840 - Draw Grenades
0x19EF1C - Draw Objects
0x19F16C - Draw Objects 2
0x1C45A4 - Draw Dead Body
0x1C3424 - Draw Players

Outline Colors:

Normal: 0x38, 0xC0, 0x00, 0x00
Black: 0x38, 0xC0, 0x00, 0x02
Red: 0x38, 0xC0, 0x00, 0x04
Green: 0x38, 0xC0, 0x00, 0x06
Cyan: 0x38, 0xC0, 0x00, 0x08
Basic: 0x38, 0xC0, 0x00, 0x08
Orange: 0x38, 0xC0, 0x00, 0x0A
Yellow: 0x38, 0xC0, 0x00, 0x0C
Blue: 0x38, 0xC0, 0x00, 0x0E

Filled Color (Filled In):

Normal: 0x38, 0xC0, 0x00, 0x00
Red: 0x38, 0xC0, 0x00, 0x12
RedBold: 0x38, 0xC0, 0x00, 0x14
Green: 0x38, 0xC0, 0x00, 0x16
Cyan: 0x38, 0xC0, 0x00, 0x18
Orange: 0x38, 0xC0, 0x00, 0x1A
Yellow: 0x38, 0xC0, 0x00, 0x1C
Blue: 0x38, 0xC0, 0x00, 0x1E


Lobby Settings:

    
Jump Height: 0x025B5ECC
Walk Speed: 0x002F0E44
Knockback: 0x025BBDDC
Floating Bodies: 0x025B8434


Client Mods:

G_Client Offsets:

    
G_Client Address: 0x1950880 Client Interval: 0x4180

Red Boxes: G_Client + 0x5F On: 0x10 Off: 0x00
Heat Vision: G_Client + 0x5F On: 0x1C Off: 0x00
Invisibility: G_Client + 0x5B On: 0xF3 Off: 0x00
Ping: G_Client + 0x58 On: 0x01 Off: 0x00
No Recoil: G_Client + 0x562 On: 0x04 Off: 0x00
Disable Weapons: G_Client + 0x0562 Remove: 0x00 0x80 Give Back: 0x00 0x00
Primary Akimbo: G_Client + 0x3E5 On: 0x90 Off: 0x00
Secondary Akimbo: G_Client + 0x3AD On: 0x90 Off: 0x00
Laser: G_Client + 0x59 On: 0x01 Off: 0x00
Red Laser: G_Client + 0xD On: 0x00
Yellow Laser Color: G_Client + 0xD On: 0x01
Blue Laser Color: G_Client + 0xD On: 0x04
Scrambler: G_Client + 0x59 On: 0x40 Off: 0x00
mFlag: G_Client + 0x3da7 Normal: 0x00 No Clip: 0x01 UFO Mode: 0x02 Freeze: 0x04
System Hack: G_Client + 0x38C9 On: 0x01 Off: 0x00
Third Person: G_Client + 0x5F On: 0x07 Off: 0x00
Heat Chams: G_Client + 0x5F On: 0x1F Off: 0x00
Player Speed: G_Client + 0x3ADC Normal: 0x3F, 0x88 Fast: 0x3F, 0xFF Slow: 0x3F, 0x00
No Friction (Skate Mod): G_Client + 0x56 On: 0x01 Off: 0x00
In-Game Name: G_Client + 0x3B3C
In-Game Clan Tag: G_Client + 0x3BA0
Advanced UAV: G_Client + 0x3C2F On: 0x01 G_Client + 0x3C3F On: 0x00 Off: 0x01
FoV: G_Client + 0x3940 Normal: 0x3F, 0x80
Infinite Ammo:
G_Client + 0x58F On: 0xFF, 0xFF Off: 0x00, 0x00
G_Client + 0x5A6 On: 0xFF, 0xFF Off: 0x00, 0x00
G_Client + 0x65A On: 0xFF, 0xFF Off: 0x00, 0x00
G_Client + 0x642 On: 0xFF, 0xFF Off: 0x00, 0x00
Exo Cloak: G_Client + 0x58 On: 0x11 Off: 0x00
Kill Client: G_Client + 0x3ADC Kill: 0xFF, 0xFF
Fake Lag: G_Client + 0x3A1B On: 0x00 Off: 0x02
Kick Client: G_Client + 0x5A Kick: 0x3F
Invisible Gun: G_Client + 0x3AE1 On: 0x01 Off: 0x00
Exo Screen: G_Client + 0x3880 On: 0x01 Off: 0x00
Instant Drop: G_Client + 0x54 On: 0x01 Off: 0x00
Injured Breathing: G_Client + 0x3AC9 On: 0x01 Off: 0x00
Exo Stim: G_Client + 0x323 On: 0x01 Off: 0x02
Gun View: G_Client + 0x563 Default: 0x00 Launcher: 0x02
Rabbit Man: G_Client + 0x3ADC On: 0x2F, 0x88 Off: 0x3F 0x88
Fake Blood: G_Client + 0x1F3 On: 0xFF Off: 0x64
Stuck in Mud: G_Client + 0x3ADC On: 0x3D, 0x88 Off: 0x3F, 0x88
UAV: G_Client + 0x3948 On: 0x01 Off: 0x00
Border Screen: G_Client + 0x3850 On: 0x01 Off: 0x00
Missile Vision: G_Client + 0x380B On: 0x01 Off: 0x00
Goliath Vision: G_Client + 0x38E8 On: 0x01 Off: 0x02
In-Game Leaderboard spoof: Prestige: G_Client + 0x30C3 Rank: G_Client + 0x30BF Kills: G_Client + 0x3C1B Deaths: G_Client + 0x3C1D Objective: G_Client + 0x3C21 Defends: G_Client + 0x3C23 Score: G_Client + 0x3C19 Assists: G_Client + 0x3C1F



G_Entity Offsets:

    
G_Entity Address: 0x1860880 Client Interval: 0x280

Godmode: G_Entity + 0x1AC On: 0x00, 0x00, 0xFF, 0xFF Off: 0x00, 0x00, 0x00, 0x00
Pointer to G_Client: G_Entity + 0x158





Addresses:

    
//Credits to Swiss

TOC Address = 00994F68
Stats Entry = 00295C664
G_Client = 001950880
G_Client_size = 0x4180
G_Entity = 001860880
G_Entity_size = 0x280
G_Spawn = 00366A24
SV_SetClientStats = 004322C0
G_Speed: 002F0E44
Add_Ammo = 003101C0
G_SpawnTurret = 0037B4F8
G_GivePlayerWeapon = 0036A6A0
G_SetFog: 00306AD4
BG_FindWeaponIndexForName = 00168074
G_GetWeaponIndexForName = 0036B3C4
SV_SetConfigString = 0042ECD0
G_Hudelems = 0017B9670
Hudelem_Alloc = 0030CAD0
G_LocalizedStringIndex = 0004C9A8
ui_debugmode = 0048D148
Dvar_GetBool: 004BF0F8
Com_Sprintf = 004C7548
SV_GameSendServerCommand = 0042D9A4
Cbuf_AddText = 0038AEA4
R_SetFrameFog = 005FCBF0
SV_SetClientViewAngles = 002F4530
Scr_GetInt = 003E299C
Scr_SpawnFX = 00349568
FPSText = 0079924C
//Thanks to Lebigkilleur
Com_ERROR = 003ACAA8
SV_SetupIgnoreEntParams = 00449F78
Dvar_FindVar = 0x4BEFC4
HECmd_SetClock(scr_entref_t entref) = 0x30EE54
HECmd_SetClock_Internal(scr_entref_t entref, he_type_t type, const char *cmdName) = 0x30EB08
G_MaterialIndex(const char *name) = 0x47BA8
G_ModelIndex(const char *name) = 0x47BEC
G_ModelName(int index) = 0x47C6C
G_ShellShockIndex(const char *name) = 0x47D10
Dvar_FindMalleableVar = 0x4BD528



Scripts:

RPC: //Credits to SC58

    
public class RPC
{
static uint function_address = 0x5FCBF0; // R_SetFrameFog

public static int Init()
{
if (function_address == 0) return -1;
Enable_RPC();
return 0;
}

public static void Enable_RPC()
{
PS3.SetMemory(function_address, new byte[] { 0x4E, 0x80, 0x00, 0x20 });
System.Threading.Thread.Sleep(20);
byte[] func = new byte[] { 0x7C, 0x08, 0x02, 0xA6, 0xF8, 0x01, 0x00, 0x80, 0x3C, 0x60, 0x10, 0x05, 0x81, 0x83, 0x00, 0x4C, 0x2C, 0x0C, 0x00, 0x00, 0x41, 0x82, 0x00, 0x64, 0x80, 0x83, 0x00, 0x04, 0x80, 0xA3, 0x00, 0x08, 0x80, 0xC3, 0x00, 0x0C, 0x80, 0xE3, 0x00, 0x10, 0x81, 0x03, 0x00, 0x14, 0x81, 0x23, 0x00, 0x18, 0x81, 0x43, 0x00, 0x1C, 0x81, 0x63, 0x00, 0x20, 0xC0, 0x23, 0x00, 0x24, 0xC0, 0x43, 0x00, 0x28, 0xC0, 0x63, 0x00, 0x2C, 0xC0, 0x83, 0x00, 0x30, 0xC0, 0xA3, 0x00, 0x34, 0xC0, 0xC3, 0x00, 0x38, 0xC0, 0xE3, 0x00, 0x3C, 0xC1, 0x03, 0x00, 0x40, 0xC1, 0x23, 0x00, 0x48, 0x80, 0x63, 0x00, 0x00, 0x7D, 0x89, 0x03, 0xA6, 0x4E, 0x80, 0x04, 0x21, 0x3C, 0x80, 0x10, 0x05, 0x38, 0xA0, 0x00, 0x00, 0x90, 0xA4, 0x00, 0x4C, 0x80, 0x64, 0x00, 0x50, 0xE8, 0x01, 0x00, 0x80, 0x7C, 0x08, 0x03, 0xA6, 0x38, 0x21, 0x00, 0x70, 0x4E, 0x80, 0x00, 0x20 };
PS3.SetMemory(function_address + 0x4, func);
PS3.SetMemory(0x10050000, new byte[0x2854]);
PS3.SetMemory(function_address, new byte[] { 0xF8, 0x21, 0xFF, 0x91 });
}

public static int Call(uint func_address, params object[] parameters)
{
int num_params = parameters.Length;
uint num_floats = 0;
for (uint i = 0; i < num_params; i++)
{
if (parameters[i] is int)
{
byte[] val = BitConverter.GetBytes((int)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, val);
}
else if (parameters[i] is uint)
{
byte[] val = BitConverter.GetBytes((uint)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, val);
}
else if (parameters[i] is string)
{
byte[] str = Encoding.UTF8.GetBytes(Convert.ToString(parameters[i]) + "\0");
PS3.SetMemory(0x10050054 + i * 0x400, str);
uint addr = 0x10050054 + i * 0x400;
byte[] address = BitConverter.GetBytes(addr);
Array.Reverse(address);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, address);
}
else if (parameters[i] is float)
{
num_floats++;
byte[] val = BitConverter.GetBytes((float)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050024 + ((num_floats - 1) * 0x4), val);
}
}
byte[] fadd = BitConverter.GetBytes(func_address);
Array.Reverse(fadd);
PS3.SetMemory(0x1005004C, fadd);
System.Threading.Thread.Sleep(20);
byte[] ret = PS3.GetMemory(0x10050050, 4);
Array.Reverse(ret);
return BitConverter.ToInt32(ret, 0);
}
}


All Client Button Monitoring: //Credits to iTnDM

    class Buttons
{

public static class Buttonz
{
public static Int32
Cross = 1024,
Square = 48,
Crouch = 512,
Prone = 256,
Start = 8388608,
L1 = 526336,
L2 = 32768,
L3 = 8194,
R1 = 1,
R2 = 16384,
R3 = 67108868;


}

public static bool ButtonPressed(int client, int Buttons)
{
if (PS3.Extension.ReadInt32(G_Client + 0x3DB4 + ((uint)client * 0x4180)) == Buttons)
return true;
else return false;
}


Jetpack: //Credits to BlackPanther

    public void JetPack(int client)
{
float jH = PS3.Extension.ReadFloat(G_Client + ((uint)client * 0x4180));
jH += 100;
PS3.Extension.WriteFloat(G_Client + ((uint)client * 0x4180), jH);
}


//How to use it in a timer or backgroundworker

if(ButtonPressed(0, Buttons.Cross))
{
JetPack(0);
}


Unlock All Trophies: //Credits to SC58

       {
string[] Achievements = new string[50];
Achievements[0] = "4 CARMA";
Achievements[1] = "4 CAMPAIGN_COMPLETE";
Achievements[2] = "4 CAMPAIGN_HARDENED";
Achievements[3] = "4 CAMPAIGN_VETERAN";
Achievements[4] = "4 BOOST_DASH_STOMP";
Achievements[5] = "4 GRENADE_DODGE";
Achievements[6] = "4 SONIC_KILL";
Achievements[7] = "4 OVERDRIVE_KILL";
Achievements[8] = "4 SMART_GRENADE_KILL";
Achievements[9] = "4 THREAT_GRENADE_KILL";
Achievements[10] = "4 EMP_DRONE";
Achievements[11] = "4 EMP_AST";
Achievements[12] = "4 INTEL_HALF";
Achievements[13] = "4 INTEL_ALL";
Achievements[14] = "4 COVER_DRONE_KILL";
Achievements[15] = "4 EXO_UPGRADE";
Achievements[16] = "4 EXO_UPGRADE_10";
Achievements[17] = "4 EXO_UPGRADE_20";
Achievements[18] = "4 EXO_UPGRADE_FULL";
Achievements[19] = "4 LEVEL_1";
Achievements[20] = "4 LEVEL_1A";
Achievements[21] = "4 LEVEL_2A";
Achievements[22] = "4 LEVEL_2B";
Achievements[23] = "4 LEVEL_2";
Achievements[24] = "4 LEVEL_3A";
Achievements[25] = "4 LEVEL_3";
Achievements[26] = "4 LEVEL_4A";
Achievements[27] = "4 LEVEL_4";
Achievements[28] = "4 LEVEL_5";
Achievements[29] = "4 LEVEL_5A";
Achievements[30] = "4 LEVEL_6A";
Achievements[31] = "4 LEVEL_6";
Achievements[32] = "4 LEVEL_7";
Achievements[33] = "4 LEVEL_8A";
Achievements[34] = "4 LEVEL_8";
Achievements[35] = "4 LEVEL_9";
Achievements[36] = "4 LEVEL_10A";
Achievements[37] = "4 LEVEL_10";
Achievements[38] = "4 LEVEL_11";
Achievements[39] = "4 LEVEL_12A";
Achievements[40] = "4 LEVEL_12";
Achievements[41] = "4 LEVEL_13A";
Achievements[42] = "4 LEVEL_13";
Achievements[43] = "4 LEVEL_14A";
Achievements[44] = "4 LEVEL_14";
Achievements[45] = "4 COOP_VETERAN";
Achievements[46] = "4 COOP_WARFARE";
Achievements[47] = "4 COOP_UNDEAD_SURVIVOR";
Achievements[48] = "4 COOP_EXO_SURVIVOR";
Achievements[49] = "4 COOP_FLIP_FLOP";

for (int i = 0; i < 50; i++)
{
RPC.Call(0x42D9A4, -1, 1, Achievements[i]);
System.Threading.Thread.Sleep(25);
RPC.Call(0x42D9A4, -1, 1, Achievements[i]);
}
}


Clone Player: //Credits to xReaperV3

    public static void ClonePlayer(int clientIndex)
{
RPC.Call(0x38AEA4, new object[] { clientIndex });
}


Keyboard: //Credits to Swiss for the kb_cb address; Credits to īTnDM for the keyboardPrompt address

    uint kb_Result = 0x030D0E22;
uint kb_cb = 0x00989068;
uint keyboardPrompt = 0x498828;
uint kb_active = 0x030D0AE4;
string KeyBoard(string title = "Your title", string presetText = "text here", int maxLength = 20)
{

RPC.Call(keyboardPrompt, new object[] { 0, title, presetText, maxLength, 0, 0, kb_cb });
System.Threading.Thread.Sleep(10);
while (PS3.Extension.ReadInt32(kb_active) == 0)
continue;
return PS3.Extension.ReadString(kb_Result);
}









Update 1.05:


How to use Client Interval (For the people who don't know):
Client Interval is also known as next client. To use client interval all you have to do is take the offset and add the client interval to it and that will give you the next clients offset.


Offsets:

Stats:

    Prestige : 0x29CDC6D
XP (Experience) : 0x029cdd0a
Score : 0x29CDD46
Kills : 0x029cdd1d
Deaths : 0x29CDCF5
Wins : 0x29CDD72
Losses : 0x29CDD25
Time Played : 0x29CDD62
Games Played : 0x29CDD0D
Stat Entry: 0x29CDC64
Unlock All: 0x29D33A0


Class Names:

    Class Interval: 0x80

Class 1 Name: 0x29d2a49
Class 2 Name: 0x29d2ac9
Class 3 Name: 0x29d2b29
Class 4 Name: 0x29d2bc9
Class 5 Name: 0x29d2c49
Class 6 Name: 0x29d2cc9
Class 7 Name: 0x29d2d49
Class 8 Name: 0x29d2dc9
Class 9 Name: 0x29d2e49
Class 10 Name: 0x29d2ec9


Real Unlock All (w/Attachments):

    
byte[] buffer = new byte[0x1770];
for (int i = 0; i < 0x1770; i++)
{
buffer[i] = 0xFE;
}
PS3.SetMemory(0x29D33A0, buffer);


Calling Cards Offset and Bytes:

If you use an unlock all, it unlocks everything with calling cards except for the clan calling cards. Here are the bytes for the clan calling cards, just change the byte with the one you want at the calling card offset.
    
Calling Card Offset: 0x29D6D13
Clan Card #1: 0xD6
Clan Card #2: 0xD7
Clan Card #3: 0xD8
Clan Card #4: 0xD9
Clan Card #5: 0xDA
Clan Card #6: 0xDB
Checkerbox: 0xDC


Name & Clan Tag:

    Name: 0x029672e0
Clan Tag: 0xD82046


Party Name & Clan Tag:

Make sure to use a timer with these otherwise it won't set.
    
Client Interval for both Party Name & Party Clan Tag: 0x378

Party Name 0 0xd915bc
Party name 1 0xd9193c
Party name 2 0xD91CBC
Party name 3 0xD9203C
Party name 4 0xD923BC
Party name 5 0xD9273C
Party name 6 0xD92ABC
Party name 7 0xD92E3C
Party name 8 0xD931BC
Party name 9 0xD9353C
Party name 10 0xD938BC
Party name 11 0xD93C3C

Party Clan 0 0xd915dc
Party Clan 1 0xd9195c
Party Clan 2 0xD91CDC
Party Clan 3 0xD9205C
Party Clan 4 0xD923DC
Party Clan 5 0xD9275C
Party Clan 6 0xD92ADC
Party Clan 7 0xD92E5C
Party Clan 8 0xD931DC
Party Clan 9 0xD9355C
Party Clan 10 0xD938DC
Party Clan 11 0xD93C5C


Non-Host Mods:

    
Credits to MegaMister & Eddie Mac(finding) + 1Austin112 & RatchetBooty(Updating)

Advanced UAV: 0x1913D3 On: 0x00 Off: 0x01
No Recoil: 0021018C On: 0x60, 0x00, 0x00, 0x00 Off: 0x4B, 0xF6, 0x16, 0x5D
Red Boxes: 0x00199920 On: 0x01 Off: 0x00
Red Laser: 0x202F93 On: 0x01 Off: 0x00
Steady Aim: 0x1720DF On: 0x00 Off: 0x02
Ghost Players: 0x5DC9EF On: 0x01 Off: 0x00
No Gun Sound: 0x20FFBB On: 0x01 Off: 0x00
Player Outline Color: 0x1C6C28 Normal: 0x00 Red: 0x04 Green: 0x06 Cyan: 0x08 Yellow: 0x0C
Real Wallhack: 0x1C6C28 On: 0x38, 0xC0, 0x00, 0x09 Off: 0x63, 0xC6, 0x00, 0x00
Wallhack: 0x2619D7C On: 0x42 Off: 0x40
Third Person: 0x026364d4 On: 0x01 Off: 0x00
compassMaxRange: 0x02636cb4 On: 0x45, 0x2F Off: 0x44, 0xBB
cg_fov: 0x02637524 On: 0x42, 0xD2 Off: 0x42, 0x82

//Credits to SC58(Finding) + 1Austin112(Updating)
Heat Vision: (Must overwrite by a tool or bin file otherwise you will freeze; Make sure to set both of these addresses)
0x1F4B54 - On: 0x60, 0x00, 0x00, 0x00 Off: 0x41, 0x82, 0x00, 0x8C
0x1F4B5C - On: 0x60, 0x00, 0x00, 0x00 Off: 0x41, 0x82, 0x00, 0x50

0x1A1784 - Draw Weapons
0x1A2048 - Draw Grenades
0x1A2724 - Draw Objects
0x1A2724 - Draw Objects 2
0x1C7DE4 - Draw Dead Body
0x1C6C28 - Draw Players

Outline Colors:

Normal: 0x38, 0xC0, 0x00, 0x00
Black: 0x38, 0xC0, 0x00, 0x02
Red: 0x38, 0xC0, 0x00, 0x04
Green: 0x38, 0xC0, 0x00, 0x06
Cyan: 0x38, 0xC0, 0x00, 0x08
Basic: 0x38, 0xC0, 0x00, 0x08
Orange: 0x38, 0xC0, 0x00, 0x0A
Yellow: 0x38, 0xC0, 0x00, 0x0C
Blue: 0x38, 0xC0, 0x00, 0x0E

Filled Color (Filled In):

Normal: 0x38, 0xC0, 0x00, 0x00
Red: 0x38, 0xC0, 0x00, 0x12
RedBold: 0x38, 0xC0, 0x00, 0x14
Green: 0x38, 0xC0, 0x00, 0x16
Cyan: 0x38, 0xC0, 0x00, 0x18
Orange: 0x38, 0xC0, 0x00, 0x1A
Yellow: 0x38, 0xC0, 0x00, 0x1C
Blue: 0x38, 0xC0, 0x00, 0x1E


Lobby Settings:

    
Jump Height: 0x02637374
Walk Speed: 0x002F58CC
Knockback: 0x0263d314
Floating Bodies: 0x026398de


Client Mods:

G_Client Offsets:

    
G_Client Address: 0x1987980 Client Interval: 0x4180

Red Boxes: G_Client + 0x5F On: 0x10 Off: 0x00
Heat Vision: G_Client + 0x5F On: 0x1C Off: 0x00
Invisibility: G_Client + 0x5B On: 0xF3 Off: 0x00
Ping: G_Client + 0x58 On: 0x01 Off: 0x00
No Recoil: G_Client + 0x562 On: 0x04 Off: 0x00
Disable Weapons: G_Client + 0x0562 Remove: 0x00 0x80 Give Back: 0x00 0x00
Primary Akimbo: G_Client + 0x3E5 On: 0x90 Off: 0x00
Secondary Akimbo: G_Client + 0x3AD On: 0x90 Off: 0x00
Laser: G_Client + 0x59 On: 0x01 Off: 0x00
Red Laser: G_Client + 0xD On: 0x00
Yellow Laser Color: G_Client + 0xD On: 0x01
Blue Laser Color: G_Client + 0xD On: 0x04
Scrambler: G_Client + 0x59 On: 0x40 Off: 0x00
mFlag: G_Client + 0x3da7 Normal: 0x00 No Clip: 0x01 UFO Mode: 0x02 Freeze: 0x04
System Hack: G_Client + 0x38C9 On: 0x01 Off: 0x00
Third Person: G_Client + 0x5F On: 0x07 Off: 0x00
Heat Chams: G_Client + 0x5F On: 0x1F Off: 0x00
Player Speed: G_Client + 0x3ADC Normal: 0x3F, 0x88 Fast: 0x3F, 0xFF Slow: 0x3F, 0x00
No Friction (Skate Mod): G_Client + 0x56 On: 0x01 Off: 0x00
In-Game Name: G_Client + 0x3B3C
In-Game Clan Tag: G_Client + 0x3BA0
Advanced UAV: G_Client + 0x3C2F On: 0x01 G_Client + 0x3C3F On: 0x00 Off: 0x01
FoV: G_Client + 0x3940 Normal: 0x3F, 0x80
Infinite Ammo:
G_Client + 0x58F On: 0xFF, 0xFF Off: 0x00, 0x00
G_Client + 0x5A6 On: 0xFF, 0xFF Off: 0x00, 0x00
G_Client + 0x65A On: 0xFF, 0xFF Off: 0x00, 0x00
G_Client + 0x642 On: 0xFF, 0xFF Off: 0x00, 0x00
Exo Cloak: G_Client + 0x58 On: 0x11 Off: 0x00
Kill Client: G_Client + 0x3ADC Kill: 0xFF, 0xFF
Fake Lag: G_Client + 0x3A1B On: 0x00 Off: 0x02
Kick Client: G_Client + 0x5A Kick: 0x3F
Invisible Gun: G_Client + 0x3AE1 On: 0x01 Off: 0x00
Exo Screen: G_Client + 0x3880 On: 0x01 Off: 0x00
Instant Drop: G_Client + 0x54 On: 0x01 Off: 0x00
Injured Breathing: G_Client + 0x3AC9 On: 0x01 Off: 0x00
Exo Stim: G_Client + 0x323 On: 0x01 Off: 0x02
Gun View: G_Client + 0x563 Default: 0x00 Launcher: 0x02
Rabbit Man: G_Client + 0x3ADC On: 0x2F, 0x88 Off: 0x3F 0x88
Fake Blood: G_Client + 0x1F3 On: 0xFF Off: 0x64
Stuck in Mud: G_Client + 0x3ADC On: 0x3D, 0x88 Off: 0x3F, 0x88
UAV: G_Client + 0x3948 On: 0x01 Off: 0x00
Border Screen: G_Client + 0x3850 On: 0x01 Off: 0x00
Missile Vision: G_Client + 0x380B On: 0x01 Off: 0x00
Goliath Vision: G_Client + 0x38E8 On: 0x01 Off: 0x02
In-Game Leaderboard spoof: Prestige: G_Client + 0x30C3 Rank: G_Client + 0x30BF Kills: G_Client + 0x3C1B Deaths: G_Client + 0x3C1D Objective: G_Client + 0x3C21 Defends: G_Client + 0x3C23 Score: G_Client + 0x3C19 Assists: G_Client + 0x3C1F



G_Entity Offsets:

    
G_Entity Address: 0x1897980 Client Interval: 0x280

Godmode: G_Entity + 0x1AC On: 0x00, 0x00, 0xFF, 0xFF Off: 0x00, 0x00, 0x00, 0x00
Pointer to G_Client: G_Entity + 0x158





Addresses:

    
//Credits to Swiss

TOC Address = 009A5080
Stats Entry = 029CDC64
G_Client = 001950880
G_Client_size = 0x4180
G_Entity = 001860880
G_Entity_size = 0x280
0036F6F4 - BG_TakePlayerWeapon(playerState_s *ps, unsigned int weaponIndex, int takeAwayAmmo)
0036B518 - G_Spawn(void)
0043738C - SV_SetClientStat(int clientNum, int index, int value)
00314C60 - Add_Ammo(gentity_s *ent, unsigned int weaponIndex, char weaponModel, int count, int fillClip)
003801B0 - G_SpawnTurret(gentity_s *,char const *)
0036F34C - G_GivePlayerWeapon(playerState_s *pPS, int iWeaponIndex, char altModelIndex)
0030B594 - G_setfog(const char *fogstring)
002AEFB0 - G_RadiusDamage(const float *origin, gentity_s *inflictor, gentity_s *attacker, float fInnerDamage, float fOuterDamage, float radius, float coneAngleCos, float *coneDirection, gentity_s *ignore, int mod, int weapon)
0031EAD0 - TeleportPlayer(gentity_s *player, float *origin, float *angles)
0016B7E4 - BG_FindWeaponIndexForName(const char *name)
00370070 - G_GetWeaponIndexForName(const char *name)
0036BEA0 - G_AddEvent(gentity_s *ent, int event, unsigned int eventParm)
0036BD54 - G_TempEntity(const float *origin, int event)
00048AFC - G_EffectIndex(const char *name)
00433EF0 - SV_SetConfigstring(int,char const *)
0043206C - SV_AddServerCommand(client_s *client, svscmd_type type, const char *cmd) //
004C1260 - SV_ClientCommand(client_s *cl, msg_t *msg)
0044DB80 - SV_LinkEntity(gentity_s *gEnt)
0044DB00 - SV_UnlinkEntity(gentity_s *gEnt)
0042C4D4 - SV_KickClient(client_s *cl, char *playerName, int maxPlayerNameLen)
0042C060 - SV_MapRestart(int fast_restart)
0031DC70 - G_LocationalTrace(trace_t *results, const float *start, const float *end, int passEntityNum, int contentmask, char *priorityMap)
00387398 - Trace_GetEntityHitId(trace_t *trace)
004C4C20 - Dvar_GetBool(const char *dvarName)
004C4D68 - Dvar_GetString(const char *dvarName)
004C4C9C - Dvar_GetInt(const char *dvarName)
004C4D68 - Dvar_GetString(const char *dvarName)
004C3050 - Dvar_FindMalleableVar(const char *dvarName)
00360198 - SP_script_brushmodel(gentity_s *self)
00319E28 - G_SpawnString(SpawnVar *spawnVar, const char *key, const char *defaultString, const char **out)
017F02F0 - G_HudElems
00311570 - HudElem_Alloc(int,int)
0004DE08 - G_LocalizedStringIndex(const char *string)
0181F300 - leveltime
06ACAD8 - strchr
030DBF0 - player_die(gentity_s *self, gentity_s *inflictor, gentity_s *attacker, int damage, int meansOfDeath, int iWeapon, const float *vDir, hitLocation_t hitLoc, int psTimeOffset)
00492298 - ui_debugmode
003220F8 - G_ExplodeMissile(gentity_s *ent)
00328028 - G_FireGrenade(gentity_s *parent, float *start, float *dir, int grenadeWPID, char grenModel, int rotate, int time)
003283E8 - G_FireRocket(gentity_s *parent, unsigned int weaponIndex, float *start, float *dir, const float *gunVel, gentity_s *target, const float *targetOffset)
003801B0 - G_SpawnTurret(gentity_s *self, const char *weaponinfoname)
004C4C20 - Dvar_GetBool(char const *)
004CCFA8 - Com_sprintf(char *dest, int size, const char *fmt)
0042D780 - SV_SendDisconnect(client_s *client, int state, const char *reason)
00432BCC - SV_GameSendServerCommand(int,svscmd_type,char const *)
0038FBDC - Cbuf_AddText(int localClientNum, const char *text)
006032D0 - R_SetFrameFog(GfxCmdBufInput *)
002F8FB8 - SetClientViewAngle(gentity_s *ent, const float *angle)
003E7C2C - Scr_GetInt(unsigned int index)
0034DFF8 - Scr_SpawnFX
007A07DC - FPS
002F58CC - G_Speed
0003E2530 - Scr_Error(char const *)
00432E6C - SV_SetBrushModel(gentity_s *ent)
0037A964 - G_VehiclesInit(int restarting)
003B1E58 - Com_Error(errorParm_t code, const char *fmt)
003728BC - G_SetOrigin(gentity_s *ent, const float *origin)
00366C54 - G_CallSpawn



Scripts:

RPC: //Credits to SC58

    
public class RPC
{
static uint function_address = 006032D0; // R_SetFrameFog

public static int Init()
{
if (function_address == 0) return -1;
Enable_RPC();
return 0;
}

public static void Enable_RPC()
{
PS3.SetMemory(function_address, new byte[] { 0x4E, 0x80, 0x00, 0x20 });
System.Threading.Thread.Sleep(20);
byte[] func = new byte[] { 0x7C, 0x08, 0x02, 0xA6, 0xF8, 0x01, 0x00, 0x80, 0x3C, 0x60, 0x10, 0x05, 0x81, 0x83, 0x00, 0x4C, 0x2C, 0x0C, 0x00, 0x00, 0x41, 0x82, 0x00, 0x64, 0x80, 0x83, 0x00, 0x04, 0x80, 0xA3, 0x00, 0x08, 0x80, 0xC3, 0x00, 0x0C, 0x80, 0xE3, 0x00, 0x10, 0x81, 0x03, 0x00, 0x14, 0x81, 0x23, 0x00, 0x18, 0x81, 0x43, 0x00, 0x1C, 0x81, 0x63, 0x00, 0x20, 0xC0, 0x23, 0x00, 0x24, 0xC0, 0x43, 0x00, 0x28, 0xC0, 0x63, 0x00, 0x2C, 0xC0, 0x83, 0x00, 0x30, 0xC0, 0xA3, 0x00, 0x34, 0xC0, 0xC3, 0x00, 0x38, 0xC0, 0xE3, 0x00, 0x3C, 0xC1, 0x03, 0x00, 0x40, 0xC1, 0x23, 0x00, 0x48, 0x80, 0x63, 0x00, 0x00, 0x7D, 0x89, 0x03, 0xA6, 0x4E, 0x80, 0x04, 0x21, 0x3C, 0x80, 0x10, 0x05, 0x38, 0xA0, 0x00, 0x00, 0x90, 0xA4, 0x00, 0x4C, 0x80, 0x64, 0x00, 0x50, 0xE8, 0x01, 0x00, 0x80, 0x7C, 0x08, 0x03, 0xA6, 0x38, 0x21, 0x00, 0x70, 0x4E, 0x80, 0x00, 0x20 };
PS3.SetMemory(function_address + 0x4, func);
PS3.SetMemory(0x10050000, new byte[0x2854]);
PS3.SetMemory(function_address, new byte[] { 0xF8, 0x21, 0xFF, 0x91 });
}

public static int Call(uint func_address, params object[] parameters)
{
int num_params = parameters.Length;
uint num_floats = 0;
for (uint i = 0; i < num_params; i++)
{
if (parameters[i] is int)
{
byte[] val = BitConverter.GetBytes((int)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, val);
}
else if (parameters[i] is uint)
{
byte[] val = BitConverter.GetBytes((uint)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, val);
}
else if (parameters[i] is string)
{
byte[] str = Encoding.UTF8.GetBytes(Convert.ToString(parameters[i]) + "\0");
PS3.SetMemory(0x10050054 + i * 0x400, str);
uint addr = 0x10050054 + i * 0x400;
byte[] address = BitConverter.GetBytes(addr);
Array.Reverse(address);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, address);
}
else if (parameters[i] is float)
{
num_floats++;
byte[] val = BitConverter.GetBytes((float)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050024 + ((num_floats - 1) * 0x4), val);
}
}
byte[] fadd = BitConverter.GetBytes(func_address);
Array.Reverse(fadd);
PS3.SetMemory(0x1005004C, fadd);
System.Threading.Thread.Sleep(20);
byte[] ret = PS3.GetMemory(0x10050050, 4);
Array.Reverse(ret);
return BitConverter.ToInt32(ret, 0);
}
}


All Client Button Monitoring: //Credits to iTnDM

    class Buttons
{

public static class Buttonz
{
public static Int32
Cross = 1024,
Square = 48,
Crouch = 512,
Prone = 256,
Start = 8388608,
L1 = 526336,
L2 = 32768,
L3 = 8194,
R1 = 1,
R2 = 16384,
R3 = 67108868;


}

public static bool ButtonPressed(int client, int Buttons)
{
if (PS3.Extension.ReadInt32(G_Client + 0x3DB4 + ((uint)client * 0x4180)) == Buttons)
return true;
else return false;
}


Jetpack: //Credits to BlackPanther

    public void JetPack(int client)
{
float jH = PS3.Extension.ReadFloat(G_Client + ((uint)client * 0x4180));
jH += 100;
PS3.Extension.WriteFloat(G_Client + ((uint)client * 0x4180), jH);
}


//How to use it in a timer or backgroundworker

if(ButtonPressed(0, Buttons.Cross))
{
JetPack(0);
}


Unlock All Trophies: //Credits to SC58

       {
string[] Achievements = new string[50];
Achievements[0] = "4 CARMA";
Achievements[1] = "4 CAMPAIGN_COMPLETE";
Achievements[2] = "4 CAMPAIGN_HARDENED";
Achievements[3] = "4 CAMPAIGN_VETERAN";
Achievements[4] = "4 BOOST_DASH_STOMP";
Achievements[5] = "4 GRENADE_DODGE";
Achievements[6] = "4 SONIC_KILL";
Achievements[7] = "4 OVERDRIVE_KILL";
Achievements[8] = "4 SMART_GRENADE_KILL";
Achievements[9] = "4 THREAT_GRENADE_KILL";
Achievements[10] = "4 EMP_DRONE";
Achievements[11] = "4 EMP_AST";
Achievements[12] = "4 INTEL_HALF";
Achievements[13] = "4 INTEL_ALL";
Achievements[14] = "4 COVER_DRONE_KILL";
Achievements[15] = "4 EXO_UPGRADE";
Achievements[16] = "4 EXO_UPGRADE_10";
Achievements[17] = "4 EXO_UPGRADE_20";
Achievements[18] = "4 EXO_UPGRADE_FULL";
Achievements[19] = "4 LEVEL_1";
Achievements[20] = "4 LEVEL_1A";
Achievements[21] = "4 LEVEL_2A";
Achievements[22] = "4 LEVEL_2B";
Achievements[23] = "4 LEVEL_2";
Achievements[24] = "4 LEVEL_3A";
Achievements[25] = "4 LEVEL_3";
Achievements[26] = "4 LEVEL_4A";
Achievements[27] = "4 LEVEL_4";
Achievements[28] = "4 LEVEL_5";
Achievements[29] = "4 LEVEL_5A";
Achievements[30] = "4 LEVEL_6A";
Achievements[31] = "4 LEVEL_6";
Achievements[32] = "4 LEVEL_7";
Achievements[33] = "4 LEVEL_8A";
Achievements[34] = "4 LEVEL_8";
Achievements[35] = "4 LEVEL_9";
Achievements[36] = "4 LEVEL_10A";
Achievements[37] = "4 LEVEL_10";
Achievements[38] = "4 LEVEL_11";
Achievements[39] = "4 LEVEL_12A";
Achievements[40] = "4 LEVEL_12";
Achievements[41] = "4 LEVEL_13A";
Achievements[42] = "4 LEVEL_13";
Achievements[43] = "4 LEVEL_14A";
Achievements[44] = "4 LEVEL_14";
Achievements[45] = "4 COOP_VETERAN";
Achievements[46] = "4 COOP_WARFARE";
Achievements[47] = "4 COOP_UNDEAD_SURVIVOR";
Achievements[48] = "4 COOP_EXO_SURVIVOR";
Achievements[49] = "4 COOP_FLIP_FLOP";

for (int i = 0; i < 50; i++)
{
RPC.Call(0x432BCC, -1, 1, Achievements[i]);
System.Threading.Thread.Sleep(25);
RPC.Call(0x432BCC, -1, 1, Achievements[i]);
}
}


Clone Player:[1.04] //Credits to xReaperV3

    public static void ClonePlayer(int clientIndex)
{
RPC.Call(0x38AEA4, new object[] { clientIndex });
}


Keyboard:[1.04] //Credits to Swiss & īTnDM

    uint kb_Result = 0x030D0E22;
uint kb_cb = 0x00989068;
uint keyboardPrompt = 0x498828;
uint kb_active = 0x030D0AE4;
string KeyBoard(string title = "Your title", string presetText = "text here", int maxLength = 20)
{

RPC.Call(keyboardPrompt, new object[] { 0, title, presetText, maxLength, 0, 0, kb_cb });
System.Threading.Thread.Sleep(10);
while (PS3.Extension.ReadInt32(kb_active) == 0)
continue;
return PS3.Extension.ReadString(kb_Result);
}








A lot of the stuff in the "Offsets" spoiler have not been released/found before on Advanced Warfare so I decided to release them. This thread contains a lot of stuff that hasn't been released before on Advanced Warfare like the calling cards address, party name and clan tag offsets, A LOT of client mods and more, enjoy Smile. Btw, If i forgot you for credits and you care that much, be civil and just pm me and let me know
RatchetBooty gave me permission to use his layout and keep updating the thread as he said he was to lazy to, don't hate, I will do my best to update this thread as fast as i can.




Thanks 4 ur hard work :yes:
best offsets thread until now .. it worth to be sticked Smile

Copyright © 2024, NextGenUpdate.
All Rights Reserved.

Gray NextGenUpdate Logo