Post: Addresses, Structs, Scrips & Tutorials 1.11
Options
10-31-2014, 11:57 PM
#1
Swaqq
Professional Thanker
Welcome to my Thread.
This has C# Scripts, and Tutorials, and some structures.
//I don't have time to update the addresses, I've made a tutorial provided below.
Here are Some Addresses for 1.11: You must login or register to view this content. and You must login or register to view this content.
Tutorials:
Basic Addresses(FPS/Cbuff_AddText/G_Spawn/G_LocalizedString) //Tut by Me
Porting Addresses from Older Updates:
Structures
Stats: //Swiss + Eddie Mac + br0wniiez
StatEntry = 0x2AC7E6C, //Thanks to LeBigKilleur :3
Score = StatEntry + 0xE2,
Name = 0x0298fbe8,
Prestige = StatEntry + 0x9,
Kills = StatEntry + 0xBA,
Deaths = StatEntry + 0x91,
Wins = StatEntry + 0x10E,
Losses = StatEntry + 0xC1,
Xp = StatEntry + 0xA5,
TimePlayed = StatEntry + 0xFE,
Games_played = StatEntry + 0xA9,
UnlockAll = StatEntry + 0x573C,
CustomClass = StatEntry + 0x4DE5,
Headshots = StatEntry + 0x8A2F,
Saviors = StatEntry + 0x8A3F,
LongShots = StatEntry + 0x8A43,
OneShots = StatEntry + 0x8AA7,
FirstBloods = StatEntry + 0x8A97,
Stabs = StatEntry + 0x8AD7,
Confirms = StatEntry + 0x8402,
Denies = StatEntry + 0x8406,
Uplinks = StatEntry + 0x83EA, // also Captures and hardpoint Caps
Returns = StatEntry + 0x83EE,
Plants = StatEntry + 0x83F6,
Defuses = StatEntry + 0x83FA,
SnR_Caps = StatEntry + 0x8402,
SnR_Rescue = StatEntry + 0x8406,
Defends = StatEntry + 0x83F2,
Weapon_Kills = StatEntry + 0x69A, // 0x1AC for next weapon [url=https://pastebin.com/AmKmBnaT]found by brOwniiez **SCORESTREAK EARN/KILLS** EARNED UAV 0x29D661F War - Pastebin.com[/url] for details
Killstreaks_Earned = StatEntry + 0x89BB,
Killstreak_Warbird_Kills = StatEntry + 0x898B,
Killstreak_Paladin_Kills = StatEntry + 0x898F,
Killstreak_Vulcan_Kills = StatEntry + 0x8993,
Killstreak_Goliath_Kills = StatEntry + 0x8997,
Killstreak_MissleStrike_Kills = StatEntry + 0x89A3,
Killstreak_RemoteTurret_Kills = StatEntry + 0x89A7,
Killstreak_BombingRun_Kills = StatEntry + 0x89AB,
Killstreak_AssultDrone_Kills = StatEntry + 0x89AF,
G_Client //Thanks to xCSBKx and RatchetBooty
G_Client = 0x1A75C00,
Client Interval: 0x3900
Buttons = Addresses.G_Client + 0x3DBE
Red Boxes: G_Client + 0x5F On: 0x10 Off: 0x00
Heat Vision: G_Client + 0x5F On: 0x1C Off: 0x00
Invisibility: G_Client + 0x5B On: 0xF3 Off: 0x00
Ping: G_Client + 0x58 On: 0x01 Off: 0x00
Primary Akimbo: G_Client + 0x3E5 On: 0x01 Off: 0x00
Secondary Akimbo: G_Client + 0x3AD On: 0x90 Off: 0x00
Laser: G_Client + 0x59 On: 0x01 Off: 0x00
Red Laser: G_Client + 0xD On: 0x00
Yellow Laser Color: G_Client + 0xD On: 0x01
Blue Laser Color: G_Client + 0xD On: 0x04
Scrambler: G_Client + 0x59 On: 0x40 Off: 0x00
mFlag: G_Client + 0x3DAF Normal: 0x00 No Clip: 0x01 UFO Mode: 0x02 Freeze: 0x04
System Hack: G_Client + 0x38C9 On: 0x01 Off: 0x00
Third Person: G_Client + 0x5F On: 0x07 Off: 0x00
Heat Chams: G_Client + 0x5F On: 0x1F Off: 0x00
Player Speed: G_Client + 0x3ADC Normal: 0x3F, 0x88 Fast: 0x3F, 0xFF Slow: 0x3F, 0x00
No Friction (Skate Mod): G_Client + 0x56 On: 0x01 Off: 0x00
In-Game Name: G_Client + 0x3B3C
In-Game Clan Tag: G_Client + 0x3BA0
Advanced UAV: G_Client + 0x3C2F On: 0x01 G_Client + 0x3C3F On: 0x00 Off: 0x01
Infinite Ammo:
G_Client + 0x58F On: 0xFF, 0xFF Off: 0x00, 0x00
G_Client + 0x5A6 On: 0xFF, 0xFF Off: 0x00, 0x00
G_Client + 0x65A On: 0xFF, 0xFF Off: 0x00, 0x00
G_Client + 0x642 On: 0xFF, 0xFF Off: 0x00, 0x00
Exo Cloak: G_Client + 0x58 On: 0x11 Off: 0x00
Kill Client: G_Client + 0x3ADC Kill: 0xFF, 0xFF
Fake Lag: G_Client + 0x3A1B On: 0x00 Off: 0x02
Kick Client: G_Client + 0x5A Kick: 0x3F
Invisible Gun: G_Client + 0x3AE1 On: 0x01 Off: 0x00
Exo Screen: G_Client + 0x3880 On: 0x01 Off: 0x00
Instant Drop: G_Client + 0x54 On: 0x01 Off: 0x00
Injured Breathing: G_Client + 0x3AC9 On: 0x01 Off: 0x00
Exo Stim: G_Client + 0x323 On: 0x01 Off: 0x02
Gun View: G_Client + 0x563 Default: 0x00 Launcher: 0x02
Rabbit Man: G_Client + 0x3ADC On: 0x2F, 0x88 Off: 0x3F 0x88
Fake Blood: G_Client + 0x1F3 On: 0xFF Off: 0x64
Stuck in Mud: G_Client + 0x3ADC On: 0x3D, 0x88 Off: 0x3F, 0x88
UAV: G_Client + 0x3948 On: 0x01 Off: 0x00
Border Screen: G_Client + 0x3850 On: 0x01 Off: 0x00
Missile Vision: G_Client + 0x380B On: 0x01 Off: 0x00
Goliath Vision: G_Client + 0x38E8 On: 0x01 Off: 0x02
In-Game Leaderboard spoof: Prestige: G_Client + 0x30C3 Rank: G_Client + 0x30BF Kills: G_Client + 0x3C1B Deaths: G_Client + 0x3C1D Objective: G_Client + 0x3C21 Defends: G_Client + 0x3C23 Score: G_Client + 0x3C19 Assists: G_Client + 0x3C1F
G_Entity :
G_Entity = 0x1985C00,//Thanks to LeBigKilleur
Size = 0x280 //Thanks to xCSBKx
0x158 = Pointer to G_Client // Thanks to Shark
0x1AC = Health
Scripts
Super ForceHost: //Creds to me
public void ForceHostON()
{
Cbuf_AddText("ds_serverConnectTimeout 1000");
Cbuf_AddText("ds_serverConnectTimeout 1");
Cbuf_AddText("party_minplayers 1");
Cbuf_AddText("party_maxplayers 16");
}
//Addresses thanks to RachetBooty 
party_minplayers: 0x02624F84
party_maxplayers: 0x02624FCC
ds_serverConnectTimeout : 0x0262BBCC
BTW: The length is 4 bytes, add 0x3 to each address and then change it's value.
RPC: //Credit to Choco, and Shark for fixing it
public class RPC
{
static uint function_address = Addresses.R_SetFrameFog; // R_SetFrameFog
public static int Init()
{
if (function_address == 0) return -1;
Enable_RPC();
return 0;
}
public static void Enable_RPC()
{
PS3.SetMemory(function_address, new byte[] { 0x4E, 0x80, 0x00, 0x20 });
System.Threading.Thread.Sleep(20);
byte[] func = new byte[] { 0x7C, 0x08, 0x02, 0xA6, 0xF8, 0x01, 0x00, 0x80, 0x3C, 0x60, 0x10, 0x05, 0x81, 0x83, 0x00, 0x4C, 0x2C, 0x0C, 0x00, 0x00, 0x41, 0x82, 0x00, 0x64, 0x80, 0x83, 0x00, 0x04, 0x80, 0xA3, 0x00, 0x08, 0x80, 0xC3, 0x00, 0x0C, 0x80, 0xE3, 0x00, 0x10, 0x81, 0x03, 0x00, 0x14, 0x81, 0x23, 0x00, 0x18, 0x81, 0x43, 0x00, 0x1C, 0x81, 0x63, 0x00, 0x20, 0xC0, 0x23, 0x00, 0x24, 0xC0, 0x43, 0x00, 0x28, 0xC0, 0x63, 0x00, 0x2C, 0xC0, 0x83, 0x00, 0x30, 0xC0, 0xA3, 0x00, 0x34, 0xC0, 0xC3, 0x00, 0x38, 0xC0, 0xE3, 0x00, 0x3C, 0xC1, 0x03, 0x00, 0x40, 0xC1, 0x23, 0x00, 0x48, 0x80, 0x63, 0x00, 0x00, 0x7D, 0x89, 0x03, 0xA6, 0x4E, 0x80, 0x04, 0x21, 0x3C, 0x80, 0x10, 0x05, 0x38, 0xA0, 0x00, 0x00, 0x90, 0xA4, 0x00, 0x4C, 0x90, 0x64, 0x00, 0x50, 0xE8, 0x01, 0x00, 0x80, 0x7C, 0x08, 0x03, 0xA6, 0x38, 0x21, 0x00, 0x70, 0x4E, 0x80, 0x00, 0x20 };
PS3.SetMemory(function_address + 0x4, func);
PS3.SetMemory(0x10050000, new byte[0x2854]);
PS3.SetMemory(function_address, new byte[] { 0xF8, 0x21, 0xFF, 0x91 });
}
public static int Call(uint func_address, params object[] parameters)
{
int num_params = parameters.Length;
uint num_floats = 0;
for (uint i = 0; i < num_params; i++)
{
if (parameters[i] is int)
{
byte[] val = BitConverter.GetBytes((int)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, val);
}
else if (parameters[i] is uint)
{
byte[] val = BitConverter.GetBytes((uint)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, val);
}
else if (parameters[i] is string)
{
byte[] str = Encoding.UTF8.GetBytes(Convert.ToString(parameters[i]) + "\0");
PS3.SetMemory(0x10050054 + i * 0x400, str);
uint addr = 0x10050054 + i * 0x400;
byte[] address = BitConverter.GetBytes(addr);
Array.Reverse(address);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, address);
}
else if (parameters[i] is float)
{
num_floats++;
byte[] val = BitConverter.GetBytes((float)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050024 + ((num_floats - 1) * 0x4), val);
}
}
byte[] fadd = BitConverter.GetBytes(func_address);
Array.Reverse(fadd);
PS3.SetMemory(0x1005004C, fadd);
System.Threading.Thread.Sleep(20);
byte[] ret = PS3.Extension.ReadBytes(0x10050050, 4);
Array.Reverse(ret);
return BitConverter.ToInt32(ret, 0);
}
}
All Clients Button Monitering: //Thanks to Me and iTnDm
public class Buttons
{
public static class Buttonz
{
public static Int32
Cross = 67108864,
Crouch = 33557732,
Prone = 16777216,
Start = 128,
L1 = 134217736,
L2 = -2147483648,
L3 = 537001984,
R1 = 65536,
R2 = 1107296256,
R3 = 33817600;
}
}
public static bool ButtonPressed(int client, int Buttons)
{
if (PS3.Extension.ReadInt32(Offsets.Buttons + ((uint)client * 0x4180)) == Buttons)
return true;
else return false;
}
Jetpack: //Thanks again to Black Panther
public void JetPack(int client)
{
float jH = PS3.Extension.ReadFloat(G_Client + ((uint)client * 0x4180));
jH += 100;
PS3.Extension.WriteFloat(G_Client + ((uint)client * 0x4180), jH);
}
//How to use it in a timer or backgroundworker
if(ButtonPressed(0, Buttons.Cross))
{
JetPack(0);
}
Unlock All Trophies: //Thanks to SC58
{
string[] Achievements = new string[50];
Achievements[0] = "4 CARMA";
Achievements[1] = "4 CAMPAIGN_COMPLETE";
Achievements[2] = "4 CAMPAIGN_HARDENED";
Achievements[3] = "4 CAMPAIGN_VETERAN";
Achievements[4] = "4 BOOST_DASH_STOMP";
Achievements[5] = "4 GRENADE_DODGE";
Achievements[6] = "4 SONIC_KILL";
Achievements[7] = "4 OVERDRIVE_KILL";
Achievements[8] = "4 SMART_GRENADE_KILL";
Achievements[9] = "4 THREAT_GRENADE_KILL";
Achievements[10] = "4 EMP_DRONE";
Achievements[11] = "4 EMP_AST";
Achievements[12] = "4 INTEL_HALF";
Achievements[13] = "4 INTEL_ALL";
Achievements[14] = "4 COVER_DRONE_KILL";
Achievements[15] = "4 EXO_UPGRADE";
Achievements[16] = "4 EXO_UPGRADE_10";
Achievements[17] = "4 EXO_UPGRADE_20";
Achievements[18] = "4 EXO_UPGRADE_FULL";
Achievements[19] = "4 LEVEL_1";
Achievements[20] = "4 LEVEL_1A";
Achievements[21] = "4 LEVEL_2A";
Achievements[22] = "4 LEVEL_2B";
Achievements[23] = "4 LEVEL_2";
Achievements[24] = "4 LEVEL_3A";
Achievements[25] = "4 LEVEL_3";
Achievements[26] = "4 LEVEL_4A";
Achievements[27] = "4 LEVEL_4";
Achievements[28] = "4 LEVEL_5";
Achievements[29] = "4 LEVEL_5A";
Achievements[30] = "4 LEVEL_6A";
Achievements[31] = "4 LEVEL_6";
Achievements[32] = "4 LEVEL_7";
Achievements[33] = "4 LEVEL_8A";
Achievements[34] = "4 LEVEL_8";
Achievements[35] = "4 LEVEL_9";
Achievements[36] = "4 LEVEL_10A";
Achievements[37] = "4 LEVEL_10";
Achievements[38] = "4 LEVEL_11";
Achievements[39] = "4 LEVEL_12A";
Achievements[40] = "4 LEVEL_12";
Achievements[41] = "4 LEVEL_13A";
Achievements[42] = "4 LEVEL_13";
Achievements[43] = "4 LEVEL_14A";
Achievements[44] = "4 LEVEL_14";
Achievements[45] = "4 COOP_VETERAN";
Achievements[46] = "4 COOP_WARFARE";
Achievements[47] = "4 COOP_UNDEAD_SURVIVOR";
Achievements[48] = "4 COOP_EXO_SURVIVOR";
Achievements[49] = "4 COOP_FLIP_FLOP";
for (int i = 0; i < 50; i++)
{
RPC.Call(Addresses.SV_GameSendServerCommand, -1, 1, Achievements[i]);
System.Threading.Thread.Sleep(25);
RPC.Call(Addresses.SV_GameSendServerCommand, -1, 1, Achievements[i]);
}
}
SV_GameSendServerCommand // Credits to me
public void SV_GameSendServerCommand(int client, string command)
{
RPC.Call(Addresses.SV_GameSendServerCommand, client, 0, command + "\"");
}
iPrintln Funcs: //Credits to Me
iPrintlnBold(Center Screen)
public void iPrintlnBold(int client, string text)
{
SV_GameSendServerCommand(client, "c \"" + text + "\"");
}
iPrintln(Killfeed)
public void iPrintln(int client, string text)
{
SV_GameSendServerCommand(client, "e \"" + text + "\"");
}
CBuf_AddText // Ported from BO2(Shark's)
public void Cbuf_AddText(string CMD)
{
RPC.Call(Addresses.Cbuf_AddText, 0, Command);
}
Hud Elements: //Thanks to Shark for the struct, BLB for making setShader and setText, Mega for fixing it somehow, and me for MoveOverTime
https://pastebin.com/D7yj9N1u
Aimbot: // Thanks to Bee el Bee (1.04)
https://pastebin.com/YTnXukEu
Spawning Entities: //Thanks to xReaperV3 (1.04)
public static float[] getPlayerOrigin(int clientIndex)
{
return RPC.ReadSingle(G_Client(clientIndex, 0x7
, 3);
}
public static float[] getPlayerAngles(int clientIndex)
{
return RPC.ReadSingle(G_Client(clientIndex, 0x1B4), 3);
}
public static uint spawnEntity(string ModelName, float[] Origin, float[] Angles)
{
uint Entity = (uint)RPC.Call(0x3669B0);
RPC.WriteSingle(Entity + 0x138, Origin);
RPC.WriteSingle(Entity + 0x148, Angles);
RPC.Call(0x365738, Entity, ModelName);
RPC.Call(0x35B6C4, Entity);
return Entity;
}
Clone Player: //Thanks to xReaperV3
public static void ClonePlayer(int clientIndex)
{
RPC.Call(Addresses.PlayerCMD_ClonePlayer, new object[] { clientIndex });
}
Keyboard: // Thanks to iTnDM (1.04)
uint kb_Result = 0x03080E22;
uint kb_cb = 0x988F98;
uint keyboardPrompt = 0x498828;
uint kb_active = 0x0099E42C;
string runKeyboard(string title = "Your title", string presetText = "text here", int maxLength = 20)
{
RPC.Call(keyboardPrompt, new object[] { 0, title, presetText, maxLength, 0, 0, kb_cb });
System.Threading.Thread.Sleep(10);
while (PS3.Extension.ReadInt32(kb_active) == 0) { }
return PS3.Extension.ReadString(kb_Result);
}
Unlock All: //Thanks to RachetBooty
byte[] buffer = new byte[0x1770];
for (int i = 0; i < 0x1770; i++)
{
buffer[i] = 0xFE;
}
PS3.SetMemory(Addresses.UnlockAll, buffer);
The following 48 users say thank you to Swaqq for this useful post:
@XM7MD_VX, One, ALI ALHILFI, Antonio96C, Azus, BISOON, Boliberrys, CoLsh2R, Confusing, Creepzoid 0___0, dolby1, Drughi, FusionIsDaName, G-T-A-5, Hunter926, ImAzazel, Items, Welsh, Krypton, Kryptus, LcGamingHD, Marco_Legend, MODZ4FUN420, ModzIsCoot, NotALegitPlayer, OLDSCHOOLMODZHD, Prom1ses, RTE, SaberNGU, Smoky420, SONYS✮NIGHTMARE, Stunz, Synergy, top_top, TotalModzHD, tyronS, Laser, xCLS, xDebugKiller, xKrazy SicknesS, XM7MD_VX, xSlinkeyy, xso1id, Xx-GIPPI-xX, yomen9, zAlbanianModder, zRayz-
12-01-2014, 11:55 PM
#236
Boliberrys
^^ Sexy ^^
I need help with these: Dvar_GetString; LocalName; G_Client Team.
Anyone knows?
Anyone knows?
12-02-2014, 04:11 PM
#238
Antonio96C
Do a barrel roll!
Originally posted by Swaqq
Hello Guys!
Welcome to my Updated version of this Addresses/Offsets/Scripts Thread
Everything on this Thread has credits, so be sure to check those people out !
Please feel free to add scripts/addresses in the reply section
Last Updated: 11/29/14 4:09PM EST - Changed Themes and Updated Addresses !
Addresses
Stats: //Unknown Credits
Lobby: //Found by Me
Non-Host:
Offsets
G_Client : Size = 0x4180 //Thanks to xCSBKx
G_Entity : Size = 0x280 //Thanks to xCSBKx
Scripts
RPC: //Credit to SC58
All Clients Button Monitering: //Thanks to iTnDM
Jetpack: //Thanks again to Black Panther
Unlock All Trophies: //Thanks to SC58
SV_GameSendServerCommand // Credits to me
iPrintln Funcs: //Credits to Me
iPrintlnBold(Center Screen)
iPrintln(Killfeed)
CBuf_AddText // Ported from BO2(Shark's)
Hud Elements(Semi-Updated): //Thanks to Shark for the struct, BLB for making setShader and setText, and me for the rest
Aimbot: // Thanks to Bee el Bee
Spawning Entities: //Thanks to xReaperV3
Clone Player: //Thanks to xReaperV3
Keyboard: // Thanks to iTnDM
Other Useful Things/Tutorials
Tutorials:
Basic Addresses(FPS/Cbuff_AddText/G_Spawn/G_LocalizedString) //Tut by Me
Finding Non-Host Mods:
Welcome to my Updated version of this Addresses/Offsets/Scripts Thread
Everything on this Thread has credits, so be sure to check those people out !
Please feel free to add scripts/addresses in the reply section
Last Updated: 11/29/14 4:09PM EST - Changed Themes and Updated Addresses !
Addresses
--Found by xReaperV3-- //1.04
//Standard Shit
TOC = 0x994F68,
G_Client = 0x1950880,
G_Entity = 0x1860880,
//Functions
TeleportPlayer = 0x31A010,
G_Spawn = 0x3669B0,
G_SetModel = 0x365738,
SetClientViewAngles = 0x2F4530,
G_ExplodeMissile = 0x31D638,
G_FireGrenade = 0x323568,
G_FireRocket = 0x323928,
G_SpawnTurret = 0x37B4F8,
Weapon_RocketLauncherFire = 0x3697B8,
G_GivePlayerWeapon = 0x36A6A0,
Add_Ammo = 0x3101C0,
BG_FindWeaponIndexForName = 0x168074,
Com_Sprintf = 0x4C7548,
Dvar_GetBool = 0x4BF0F8,
SV_GameSendServerCommand = 0x42D9A4,
Player_Die = 0x1850C8, //Thanks to Swiss
//RPC
R_SetFrameFog = 0x5FCBF0,
//Hud Elems
G_HudElems = 0x17B9670,
G_LocalizedStringIndex = 0x4C9A8,
LevelTime = 0x17E8680,
//Anti-Ban
(Set all to 0x60, 0x00, 0x00, 0x00)
- 0x590DBC
- 0x590DC4
- 0x5912A0
- 0x5931F0
- 0x593274
- 0x593280
- 0x593288
Stats: //Unknown Credits
Score : 0x295c746
Name : 0x28e60e0
Prestige : 0x295c66d
Kills : 0x295c71e
Deaths : 0x295c6f5
Wins : 0x295c772
Losses : 0x295c725
Xp : 0x295c709
Time played : 0x295c762
Games played : 0x295c70d
Lobby: //Found by Me
Knockback = 0x25BBDDC; //Turn on with: 0x49
Super Double Jump = 0x25B5ECC //Turn on with: 0x49
Non-Host:
//Thanks to MegaMister
Advanced UAV : 0x18DB73, On: 0x00 Off: 0x01
Red Boxes : 0x0019610b (01 on / 00 off)
No Recoil : 0x0020c8a3 (nop on / 00 41 82 00 off)
Green Players : 0x005d60d3 (01 on / 00 off)
High Light Players : 0x001ff6f3 (04 red / 00 off) (change bytes for other colours)
Laser : 0x001ff703 ( 01 on / 00 off)
Explosive Bullets : 0x0016fe9f (01 on / 00 off)
Steady Aim : 0x0016e96f ( 00 on / 02 off)
//
//Thanks to Eddie Mac
bg_compassShowEnemies (UAV) = 0x025b5614 ON = 0x01
Advanced UAV = 0x018DB73 ON = 0x00
No recoil = 0x020C8FC = nop off = 4B F6 16 5D
steady aim = 0x016E96f = 0x00
RedBoxes = 0x019610C = nop
r_znear (Wall Hack) = 0x02598bec - off = 40 on = 42
compassMaxRange = 0x025b580c - off = 44 bb on = 45 2f
cg_fov = 0x025b607c - 0ff = 42, 82 on = 42, d2
chrome players = 0x05D60D3 - off = 0x00 on = 0x01
camera_thirdPerson = 0x025b502c - 0ff = 00 on = 01
laser = 0x01FF703 - 0ff = 00 on = 01
Real Wallhack = 0x01C3424 On - 0x38, 0xC0, 0x00, 0x09 Off - 0x63, 0xC6, 0x00, 0x00
Player Outline = 0x01FF6F3 0n = 08 off = 00
//
Offsets
G_Client : Size = 0x4180 //Thanks to xCSBKx
G_Client + 0x78 = Origin
G_Client + 0x1b4 = Angles
G_Client + 0x0562 = Weapon Flags // {0x8, 0x0} = Disable Switching, {0x0, 0x80} = Disable Weapons, {0x0, 0x20} = Disable Zoom, {0x04, 0x0} = NoRecoil
G_Client + 0x58C = Secondary Ammo
G_Client + 0x5A4 = Primary Ammo
G_Client + 0x640 = Secondary Clip
G_Client + 0x658 = Primary Clip
G_Client + 0xa64 = Button Monitoring(unsure if correct)
G_Client + 0xB3c = Name
G_Client + 0x3da7 = mFlag //0x1 = Ufo, 0x2 = NoClip, 0x4 = Freeze
//Thanks to xReaperV3
Buttons = 0x3DB4,
pOpts = 0x5F, | Contains Red Boxes, Third Person + Thermal View
Floors = 0x56, | Contains more likely a Skate Mod
Laser = 0x59, | Can turn Laser ON/OFF
LaserColor = 0x0D, | Contains 3 different Colors (Red | Default, Yellow, Blue)
Akimbo = 0x3E5 | Can turn Akimo ON/OFF
G_Entity : Size = 0x280 //Thanks to xCSBKx
0x158 = Pointer to G_Client // Thanks to Shark
0x1AC = Health
Scripts
RPC: //Credit to SC58
public class RPC
{
static uint function_address = 0x5FCBF0; // R_SetFrameFog
public static int Init()
{
if (function_address == 0) return -1;
Enable_RPC();
return 0;
}
public static void Enable_RPC()
{
PS3.SetMemory(function_address, new byte[] { 0x4E, 0x80, 0x00, 0x20 });
System.Threading.Thread.Sleep(20);
byte[] func = new byte[] { 0x7C, 0x08, 0x02, 0xA6, 0xF8, 0x01, 0x00, 0x80, 0x3C, 0x60, 0x10, 0x05, 0x81, 0x83, 0x00, 0x4C, 0x2C, 0x0C, 0x00, 0x00, 0x41, 0x82, 0x00, 0x64, 0x80, 0x83, 0x00, 0x04, 0x80, 0xA3, 0x00, 0x08, 0x80, 0xC3, 0x00, 0x0C, 0x80, 0xE3, 0x00, 0x10, 0x81, 0x03, 0x00, 0x14, 0x81, 0x23, 0x00, 0x18, 0x81, 0x43, 0x00, 0x1C, 0x81, 0x63, 0x00, 0x20, 0xC0, 0x23, 0x00, 0x24, 0xC0, 0x43, 0x00, 0x28, 0xC0, 0x63, 0x00, 0x2C, 0xC0, 0x83, 0x00, 0x30, 0xC0, 0xA3, 0x00, 0x34, 0xC0, 0xC3, 0x00, 0x38, 0xC0, 0xE3, 0x00, 0x3C, 0xC1, 0x03, 0x00, 0x40, 0xC1, 0x23, 0x00, 0x48, 0x80, 0x63, 0x00, 0x00, 0x7D, 0x89, 0x03, 0xA6, 0x4E, 0x80, 0x04, 0x21, 0x3C, 0x80, 0x10, 0x05, 0x38, 0xA0, 0x00, 0x00, 0x90, 0xA4, 0x00, 0x4C, 0x80, 0x64, 0x00, 0x50, 0xE8, 0x01, 0x00, 0x80, 0x7C, 0x08, 0x03, 0xA6, 0x38, 0x21, 0x00, 0x70, 0x4E, 0x80, 0x00, 0x20 };
PS3.SetMemory(function_address + 0x4, func);
PS3.SetMemory(0x10050000, new byte[0x2854]);
PS3.SetMemory(function_address, new byte[] { 0xF8, 0x21, 0xFF, 0x91 });
}
public static int Call(uint func_address, params object[] parameters)
{
int num_params = parameters.Length;
uint num_floats = 0;
for (uint i = 0; i < num_params; i++)
{
if (parameters[i] is int)
{
byte[] val = BitConverter.GetBytes((int)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, val);
}
else if (parameters[i] is uint)
{
byte[] val = BitConverter.GetBytes((uint)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, val);
}
else if (parameters[i] is string)
{
byte[] str = Encoding.UTF8.GetBytes(Convert.ToString(parameters[i]) + "\0");
PS3.SetMemory(0x10050054 + i * 0x400, str);
uint addr = 0x10050054 + i * 0x400;
byte[] address = BitConverter.GetBytes(addr);
Array.Reverse(address);
PS3.SetMemory(0x10050000 + (i + num_floats) * 4, address);
}
else if (parameters[i] is float)
{
num_floats++;
byte[] val = BitConverter.GetBytes((float)parameters[i]);
Array.Reverse(val);
PS3.SetMemory(0x10050024 + ((num_floats - 1) * 0x4), val);
}
}
byte[] fadd = BitConverter.GetBytes(func_address);
Array.Reverse(fadd);
PS3.SetMemory(0x1005004C, fadd);
System.Threading.Thread.Sleep(20);
byte[] ret = PS3.GetMemory(0x10050050, 4);
Array.Reverse(ret);
return BitConverter.ToInt32(ret, 0);
}
}
All Clients Button Monitering: //Thanks to iTnDM
class Buttons
{
public static class Buttonz
{
public static Int32
Cross = 1024,
Square = 48,
Crouch = 512,
Prone = 256,
Start = 8388608,
L1 = 526336,
L2 = 32768,
L3 = 8194,
R1 = 1,
R2 = 16384,
R3 = 67108868;
}
public static bool ButtonPressed(int client, int Buttons)
{
if (PS3.Extension.ReadInt32(G_Client + 0x3DB4 + ((uint)client * 0x4180)) == Buttons)
return true;
else return false;
}
Jetpack: //Thanks again to Black Panther
public void JetPack(int client)
{
float jH = PS3.Extension.ReadFloat(G_Client + ((uint)client * 0x4180));
jH += 100;
PS3.Extension.WriteFloat(G_Client + ((uint)client * 0x4180), jH);
}
//How to use it in a timer or backgroundworker
if(ButtonPressed(0, Buttons.Cross))
{
JetPack(0);
}
Unlock All Trophies: //Thanks to SC58
{
string[] Achievements = new string[50];
Achievements[0] = "4 CARMA";
Achievements[1] = "4 CAMPAIGN_COMPLETE";
Achievements[2] = "4 CAMPAIGN_HARDENED";
Achievements[3] = "4 CAMPAIGN_VETERAN";
Achievements[4] = "4 BOOST_DASH_STOMP";
Achievements[5] = "4 GRENADE_DODGE";
Achievements[6] = "4 SONIC_KILL";
Achievements[7] = "4 OVERDRIVE_KILL";
Achievements[8] = "4 SMART_GRENADE_KILL";
Achievements[9] = "4 THREAT_GRENADE_KILL";
Achievements[10] = "4 EMP_DRONE";
Achievements[11] = "4 EMP_AST";
Achievements[12] = "4 INTEL_HALF";
Achievements[13] = "4 INTEL_ALL";
Achievements[14] = "4 COVER_DRONE_KILL";
Achievements[15] = "4 EXO_UPGRADE";
Achievements[16] = "4 EXO_UPGRADE_10";
Achievements[17] = "4 EXO_UPGRADE_20";
Achievements[18] = "4 EXO_UPGRADE_FULL";
Achievements[19] = "4 LEVEL_1";
Achievements[20] = "4 LEVEL_1A";
Achievements[21] = "4 LEVEL_2A";
Achievements[22] = "4 LEVEL_2B";
Achievements[23] = "4 LEVEL_2";
Achievements[24] = "4 LEVEL_3A";
Achievements[25] = "4 LEVEL_3";
Achievements[26] = "4 LEVEL_4A";
Achievements[27] = "4 LEVEL_4";
Achievements[28] = "4 LEVEL_5";
Achievements[29] = "4 LEVEL_5A";
Achievements[30] = "4 LEVEL_6A";
Achievements[31] = "4 LEVEL_6";
Achievements[32] = "4 LEVEL_7";
Achievements[33] = "4 LEVEL_8A";
Achievements[34] = "4 LEVEL_8";
Achievements[35] = "4 LEVEL_9";
Achievements[36] = "4 LEVEL_10A";
Achievements[37] = "4 LEVEL_10";
Achievements[38] = "4 LEVEL_11";
Achievements[39] = "4 LEVEL_12A";
Achievements[40] = "4 LEVEL_12";
Achievements[41] = "4 LEVEL_13A";
Achievements[42] = "4 LEVEL_13";
Achievements[43] = "4 LEVEL_14A";
Achievements[44] = "4 LEVEL_14";
Achievements[45] = "4 COOP_VETERAN";
Achievements[46] = "4 COOP_WARFARE";
Achievements[47] = "4 COOP_UNDEAD_SURVIVOR";
Achievements[48] = "4 COOP_EXO_SURVIVOR";
Achievements[49] = "4 COOP_FLIP_FLOP";
for (int i = 0; i < 50; i++)
{
RPC.Call(0x42D9A4, -1, 1, Achievements[i]);
System.Threading.Thread.Sleep(25);
RPC.Call(0x42D9A4, -1, 1, Achievements[i]);
}
}
SV_GameSendServerCommand // Credits to me
public void SV_GameSendServerCommand(int client, string command)
{
RPC.Call(0x42D9A4, client, 0, command + "\"");
}
iPrintln Funcs: //Credits to Me
iPrintlnBold(Center Screen)
public void iPrintlnBold(int client, string text)
{
SV_GameSendServerCommand(client, "c \"" + text + "\"");
}
iPrintln(Killfeed)
public void iPrintln(int client, string text)
{
SV_GameSendServerCommand(client, "e \"" + text + "\"");
}
CBuf_AddText // Ported from BO2(Shark's)
public void Cbuf_AddText(string CMD)
{
RPC.Call(0x38AEA4, 0, Command);
}
Hud Elements(Semi-Updated): //Thanks to Shark for the struct, BLB for making setShader and setText, and me for the rest
https://pastebin.com/igYGgxQt
Aimbot: // Thanks to Bee el Bee
https://pastebin.com/YTnXukEu
Spawning Entities: //Thanks to xReaperV3
public static float[] getPlayerOrigin(int clientIndex)
{
return RPC.ReadSingle(G_Client(clientIndex, 0x7, 3);
}
public static float[] getPlayerAngles(int clientIndex)
{
return RPC.ReadSingle(G_Client(clientIndex, 0x1B4), 3);
}
public static uint spawnEntity(string ModelName, float[] Origin, float[] Angles)
{
uint Entity = (uint)RPC.Call(0x3669B0);
RPC.WriteSingle(Entity + 0x138, Origin);
RPC.WriteSingle(Entity + 0x148, Angles);
RPC.Call(0x365738, Entity, ModelName);
RPC.Call(0x35B6C4, Entity);
return Entity;
}
Clone Player: //Thanks to xReaperV3
public static void ClonePlayer(int clientIndex)
{
RPC.Call(0x38AEA4, new object[] { clientIndex });
}
Keyboard: // Thanks to iTnDM
uint kb_Result = 0x03080E22;
uint kb_cb = 0x988F98;
uint keyboardPrompt = 0x498828;
uint kb_active = 0x0099E42C;
string runKeyboard(string title = "Your title", string presetText = "text here", int maxLength = 20)
{
RPC.Call(keyboardPrompt, new object[] { 0, title, presetText, maxLength, 0, 0, kb_cb });
System.Threading.Thread.Sleep(10);
while (PS3.Extension.ReadInt32(kb_active) == 0) { }
return PS3.Extension.ReadString(kb_Result);
}
Other Useful Things/Tutorials
https://www.nextgenupdate.com/forums/call-duty-advanced-warfare-modding/776607-advanced-warfare-c-script-thread.html - C++ Scripts
Tutorials:
Basic Addresses(FPS/Cbuff_AddText/G_Spawn/G_LocalizedString) //Tut by Me
Finding Non-Host Mods:
Add No-Host
Invisible - 0x01ff19f on (00) off (1)
Player Ghost - 0x05d62ef on (00) off(01)
Level 50 0x28E60E0 + 0x76629 (0, 0, 15, 0, 0, 0, 0, 0, 0, 15, 0, 0, 0, 0, 0, 0, 0x36, 0, 0, 0, 0, 0, 0x4C, 15, 0x13)
Unlock All
Originally posted by another user
byte[] buffer = new byte[0x1700];
for (int i = 0; i < 0x1700; i++)
{
buffer = 0xFE;
}
PS3.SetMemory(0x28E60E0 + 0x7BDB4, buffer);
for (int i = 0; i < 0x1700; i++)
{
buffer = 0xFE;
}
PS3.SetMemory(0x28E60E0 + 0x7BDB4, buffer);
12-02-2014, 04:48 PM
#239
Boliberrys
^^ Sexy ^^
Originally posted by Lebigkilleur
Wants you to know ?
I want to know their offset/address.
For example:
Dvar_GetString = 0x4BF240.
12-03-2014, 06:21 PM
#241
Boliberrys
^^ Sexy ^^
Originally posted by Unknauwn
I think you can't use this with the RPC released.
I want to Update OldSchoolModz SPRX Aimbot.
But i cant find updated addresses
12-04-2014, 12:05 PM
#243
Unknauwn
Do a barrel roll!
Originally posted by Boliberrys
I want to Update OldSchoolModz SPRX Aimbot.
But i cant find updated addresses
But i cant find updated addresses
I have updated to AW 1.04 from Ghosts 1.15
Dvar_GetInt : 0x004BF174
Dvar_GetString : 0x004BF240
But you can't use them with the actual RPC i think....
12-04-2014, 12:10 PM
#244
Boliberrys
^^ Sexy ^^
Originally posted by Unknauwn
I have updated to AW 1.04 from Ghosts 1.15
Dvar_GetInt : 0x004BF174
Dvar_GetString : 0x004BF240
But you can't use them with the actual RPC i think....
Dvar_GetInt : 0x004BF174
Dvar_GetString : 0x004BF240
But you can't use them with the actual RPC i think....
Ghost 1.15? The SPRX is for AW lol
Copyright © 2026, NextGenUpdate.
All Rights Reserved.
