Latest roblox offsets + datamodel address for externals

The offsets for the latest version of roblox
(EXTERNAL OFFSETS)
all you need now is a driver and a way to get datamodel. (getting it from roblox logs is patched)

uintptr_t BaseAddress = mem::find_image(); // make ur own base address
uintptr_t FakeDataModel = read<uintptr_t>(BaseAddress + 0x61C7538);
uintptr_t DataModel = read<uintptr_t>(FakeDataModel + 0x1B8);

and this is how to get the datamodel. (make sure you are using a driver to read memory)

offsets are here

namespace offsets {
    inline constexpr uintptr_t Adornee = 0xD0;
    inline constexpr uintptr_t Anchored = 0x311;
    inline constexpr uintptr_t AnimationId = 0xD0;
    inline constexpr uintptr_t Camera = 0x3F0;
    inline constexpr uintptr_t CameraMaxZoomDistance = 0x268;
    inline constexpr uintptr_t CameraMinZoomDistance = 0x26C;
    inline constexpr uintptr_t CameraMode = 0x270;
    inline constexpr uintptr_t CameraPos = 0x104;
    inline constexpr uintptr_t CameraRotation = 0xE0;
    inline constexpr uintptr_t CameraSubject = 0xD0;
    inline constexpr uintptr_t CameraType = 0x140;
    inline constexpr uintptr_t CanCollide = 0x313;
    inline constexpr uintptr_t CanTouch = 0x314;
    inline constexpr uintptr_t CharacterAppearanceId = 0x210;
    inline constexpr uintptr_t Children = 0x78;
    inline constexpr uintptr_t ChildrenEnd = 0x8;
    inline constexpr uintptr_t ClassDescriptor = 0x18;
    inline constexpr uintptr_t ClickDetectorMaxActivationDistance = 0x110;
    inline constexpr uintptr_t CreatorId = 0x168;
    inline constexpr uintptr_t DataModelDeleterPointer = 0x61C7540;
    inline constexpr uintptr_t DataModelPrimitiveCount = 0x0;
    inline constexpr uintptr_t DataModelToRenderView1 = 0x1B0;
    inline constexpr uintptr_t DataModelToRenderView2 = 0x8;
    inline constexpr uintptr_t DataModelToRenderView3 = 0x28;
    inline constexpr uintptr_t DataModelWeirdInstancesCount = 0x484;
    inline constexpr uintptr_t DecalTexture = 0x108;
    inline constexpr uintptr_t Deleter = 0x10;
    inline constexpr uintptr_t DeleterBack = 0x18;
    inline constexpr uintptr_t Dimensions = 0x740;
    inline constexpr uintptr_t DisplayName = 0x110;
    inline constexpr uintptr_t FOV = 0x148;
    inline constexpr uintptr_t FakeDataModelPointer = 0x61C7538;
    inline constexpr uintptr_t FakeDataModelToDataModel = 0x1B8;
    inline constexpr uintptr_t FogEnd = 0x130;
    inline constexpr uintptr_t FogStart = 0x134;
    inline constexpr uintptr_t FramePositionOffsetX  = 0x374;
    inline constexpr uintptr_t FramePositionOffsetY = 0x37C;
    inline constexpr uintptr_t FramePositionX = 0x370;
    inline constexpr uintptr_t FramePositionY = 0x378;
    inline constexpr uintptr_t FrameRotation = 0x188;
    inline constexpr uintptr_t FrameSizeX = 0x118;
    inline constexpr uintptr_t FrameSizeY = 0x11C;
    inline constexpr uintptr_t GameId = 0x170;
    inline constexpr uintptr_t GameLoaded = 0x3E1;
    inline constexpr uintptr_t Gravity = 0x8C0;
    inline constexpr uintptr_t Health = 0x194;
    inline constexpr uintptr_t HealthDisplayDistance = 0x290;
    inline constexpr uintptr_t HumanoidDisplayName = 0xD0;
    inline constexpr uintptr_t HumanoidState = 0x858;
    inline constexpr uintptr_t HumanoidStateId = 0x20;
    inline constexpr uintptr_t InputObject = 0x100;
    inline constexpr uintptr_t InsetMaxX = 0x100;
    inline constexpr uintptr_t InsetMaxY = 0x104;
    inline constexpr uintptr_t InsetMinX = 0xF8;
    inline constexpr uintptr_t InsetMinY = 0xFC;
    inline constexpr uintptr_t JobEnd = 0x1D8;
    inline constexpr uintptr_t JobId = 0x118;
    inline constexpr uintptr_t JobStart = 0x1D0;
    inline constexpr uintptr_t Job_Name = 0x90;
    inline constexpr uintptr_t JobsPointer = 0x627DAE0;
    inline constexpr uintptr_t JumpPower = 0x1B0;
    inline constexpr uintptr_t LocalPlayer = 0x120;
    inline constexpr uintptr_t LocalScriptByteCode = 0x1C8;
    inline constexpr uintptr_t LocalScriptBytecodePointer = 0x10;
    inline constexpr uintptr_t LocalScriptHash = 0x1D8;
    inline constexpr uintptr_t MaterialType = 0x2F0;
    inline constexpr uintptr_t MaxHealth = 0x1B4;
    inline constexpr uintptr_t MaxSlopeAngle = 0x1B8;
    inline constexpr uintptr_t MeshPartColor3 = 0x0;
    inline constexpr uintptr_t ModelInstance = 0x2D0;
    inline constexpr uintptr_t ModuleScriptByteCode = 0x170;
    inline constexpr uintptr_t ModuleScriptBytecodePointer = 0x10;
    inline constexpr uintptr_t ModuleScriptHash = 0x198;
    inline constexpr uintptr_t MoonTextureId = 0xD8;
    inline constexpr uintptr_t MousePosition = 0xEC;
    inline constexpr uintptr_t MoveDirection = 0x158;
    inline constexpr uintptr_t Name = 0x70;
    inline constexpr uintptr_t NameDisplayDistance = 0x29C;
    inline constexpr uintptr_t NameSize = 0x10;
    inline constexpr uintptr_t Parent = 0x50;
    inline constexpr uintptr_t PartSize = 0x2B0;
    inline constexpr uintptr_t Ping = 0xC8;
    inline constexpr uintptr_t PlaceId = 0x178;
    inline constexpr uintptr_t PlayerConfigurerPointer = 0x6168EB8;
    inline constexpr uintptr_t Position = 0x140;
    inline constexpr uintptr_t Primitive = 0x168;
    inline constexpr uintptr_t PrimitiveGravity = 0x114;
    inline constexpr uintptr_t PrimitiveValidateValue = 0x6;
    inline constexpr uintptr_t PrimitivesPointer1 = 0x378;
    inline constexpr uintptr_t PrimitivesPointer2 = 0x1F0;
    inline constexpr uintptr_t ProximityPromptActionText = 0xD0;
    inline constexpr uintptr_t ProximityPromptEnabled = 0x142;
    inline constexpr uintptr_t ProximityPromptGamepadKeyCode = 0x12C;
    inline constexpr uintptr_t ProximityPromptHoldDuraction = 0x130;
    inline constexpr uintptr_t ProximityPromptMaxActivationDistance = 0x138;
    inline constexpr uintptr_t ProximityPromptMaxObjectText = 0xF0;
    inline constexpr uintptr_t RenderJobToDataModel = 0x1A8;
    inline constexpr uintptr_t RenderJobToFakeDataModel = 0xB0;
    inline constexpr uintptr_t RenderJobToRenderView = 0x218;
    inline constexpr uintptr_t RigType = 0x1C8;
    inline constexpr uintptr_t Rotation = 0x124;
    inline constexpr uintptr_t ScriptContext = 0x3C0;
    inline constexpr uintptr_t SkyboxBk = 0x100;
    inline constexpr uintptr_t SkyboxDn = 0x128;
    inline constexpr uintptr_t SkyboxFt = 0x150;
    inline constexpr uintptr_t SkyboxLf = 0x178;
    inline constexpr uintptr_t SkyboxRt = 0x1A0;
    inline constexpr uintptr_t SkyboxUp = 0x1C8;
    inline constexpr uintptr_t SoundId = 0xD8;
    inline constexpr uintptr_t StarCount = 0x214;
    inline constexpr uintptr_t StringLength = 0x10;
    inline constexpr uintptr_t SunTextureId = 0x1F0;
    inline constexpr uintptr_t TaskSchedulerPointer = 0x5919D10;
    inline constexpr uintptr_t Team = 0x200;
    inline constexpr uintptr_t TeamColor = 0xD0;
    inline constexpr uintptr_t Tool_Grip_Position = 0x424;
    inline constexpr uintptr_t Transparency = 0xF0;
    inline constexpr uintptr_t UserId = 0x220;
    inline constexpr uintptr_t Value = 0xD0;
    inline constexpr uintptr_t Velocity = 0x14C;
    inline constexpr uintptr_t ViewportSize = 0x2D8;
    inline constexpr uintptr_t VisualEngine = 0x10;
    inline constexpr uintptr_t VisualEnginePointer = 0x5FD77E0;
    inline constexpr uintptr_t VisualEngineToDataModel1 = 0x720;
    inline constexpr uintptr_t VisualEngineToDataModel2 = 0x1B8;
    inline constexpr uintptr_t WalkSpeed = 0x1D0;
    inline constexpr uintptr_t WalkSpeedCheck = 0x3A8;
    inline constexpr uintptr_t Workspace = 0x158;
    inline constexpr uintptr_t viewmatrix = 0x4D0;
}

3 Likes

thanks daddy daddy daddy

2 Likes

you can also find the DataModel by bruteforcing RTTI (same with render view/visual engine)
gameid is also a static offset at 0x58CA338, i find it’s easier to locate with static scanning

1 Like

no c frame no huminoid missg half the good one sum ass