I use the old findWQbotOffsets.au3. For some addresses however this generator is not valid anymore, but just skip those lines in the sourcecode and you will be fine. The remaining values need to be found by hand.
Code:
$PATH="elementclient.exe"
$FILE=FILEOPEN($PATH,16)
$DATA=FILEREAD($FILE,FILEGETSIZE($PATH))
FILECLOSE($FILE)
INIWRITE("WQing.ini","main","logActivities","0")
$SEARCH=STRINGREGEXP($DATA,"6A21"&"E8.{8}"&"8BF0"&"83C404"&"85F6"&"74.{2}"&"8A442418"&"668B4C2410"&"66C7060000"&"88461E"&"8B442408"&"66894E1A"&"D9442414"&"8B10"&"895602"&"8B4804"&"D80D.{8}"&"894E06"&"8B5008"&"8B44240C"&"89560A"&"D805.{8}"&"8B08"&"894E0E"&"8B5004"&"895612"&"8B4008"&"894616"&"E8.{8}"&"668B4C241C"&"6689461C"&"66894E1F"&"8B15(.{8})"&"6A21"&"56"&"8B4A20"&"E8(.{8})"&"56"&"E8.{8}"&"83C404"&"5E"&"C3",2)
$CALL_POS=STRINGINSTR($DATA,$SEARCH[0])/2+4194427
CONSOLEWRITE("realBaseAddress=0x"&REV($SEARCH[1])&@CRLF)
CONSOLEWRITE("SendPacketAddress=0x"&HEX(DEC(REV($SEARCH[2]))+$CALL_POS+6)&@CRLF)
INIWRITE("WQing.ini","offsets","realBaseAddress","0x"&REV($SEARCH[1]))
INIWRITE("WQing.ini","offsets","SendPacketAddress","0x"&HEX(DEC(REV($SEARCH[2]))+$CALL_POS+6))
$SEARCH=STRINGREGEXP($DATA,"D946.{2}"&"D9.{6}"&"D946.{2}"&"8B8E.{8}"&"8B96.{8}"&"8B86.{8}"&"8BBE.{8}"&"D95C244C"&"D946.{2}"&"D95C2450"&"894C2444"&"8D4C243C"&"8954243C"&"89442440"&"E8.{8}"&"D95C2414"&"8B542414"&"6A01"&"57"&"8D442444"&"52"&"50"&"68.{8}"&"8D4C245C"&"6A02"&"51"&"8D8E(.{8})"&"E8.{8}",2)
CONSOLEWRITE("playerCounterOffset=0x"&HEX(DEC(REV($SEARCH[1]))+100)&@CRLF)
CONSOLEWRITE("playerIntervalOffset=0x"&HEX(DEC(REV($SEARCH[1]))+24)&@CRLF)
INIWRITE("WQing.ini","offsets","playerCounterOffset","0x"&HEX(DEC(REV($SEARCH[1]))+100))
INIWRITE("WQing.ini","offsets","playerIntervalOffset","0x"&HEX(DEC(REV($SEARCH[1]))+24))
$SEARCH=STRINGREGEXP($DATA,"E8.{8}"&"8BB8.{8}"&"8BCB"&".{6,14}"&"E8.{8}"&"8B80(.{8})"&".{14}"&"51"&"50"&"8BCF",2)
CONSOLEWRITE("questFunctionOffset=0x"&REV($SEARCH[1])&@CRLF)
INIWRITE("WQing.ini","offsets","questFunctionOffset","0x"&REV($SEARCH[1]))
$SEARCH=STRINGREGEXP($DATA,"8B8D.{8}"&"85C9"&"74.{2}"&"3BC1"&"0F87.{8}"&"8B45.{2}"&"8BCF"&"50"&"E8(.{8})"&"85C0"&"0F85.{8}"&"8B46.{2}"&"8B4E.{2}"&"3BC1"&"0F85.{8}"&"8D48.{2}"&"83F905"&"73.{2}",2)
$CALL_POS=STRINGINSTR($DATA,$SEARCH[0])/2+4194328
CONSOLEWRITE("questFunctionAddress=0x"&HEX(DEC(REV($SEARCH[1]))+$CALL_POS+4)&@CRLF)
INIWRITE("WQing.ini","offsets","questFunctionAddress","0x"&HEX(DEC(REV($SEARCH[1]))+$CALL_POS+4))
$SEARCH=STRINGREGEXP($DATA,"8B83(.{8})8D4C243C",2)
CONSOLEWRITE("playerNameOffset=0x"&REV($SEARCH[1])&@CRLF)
INIWRITE("WQing.ini","offsets","playerNameOffset","0x"&REV($SEARCH[1]))
$SEARCH=STRINGREGEXP($DATA,"83EC.{2}"&"56"&"8BF1"&"8B86.{8}"&"C1E804"&"A801"&"74.{2}"&"C786(.{8})02000000"&"5E"&"83C4.{2}"&"C2.{4}",2)
CONSOLEWRITE("playerTransportModeOffset=0x"&REV($SEARCH[1])&@CRLF)
INIWRITE("WQing.ini","offsets","playerTransportModeOffset","0x"&REV($SEARCH[1]))
$SEARCH=STRINGREGEXP($DATA,"55"&"56"&"8BF1"&"57"&"6A03"&"50"&"8B4E.{2}"&"83C1.{2}"&"E8.{8}"&"8B6E.{2}"&"8B85.{8}"&"8BF8"&"83EF02"&"F7DF"&"1BFF"&"83E7.{2}"&"83C7.{2}"&"83F802"&"75.{2}"&"D985(.{8})"&".{10}"&"EB.{2}",2)
CONSOLEWRITE("playerFlySpdOffset=0x"&REV($SEARCH[1])&@CRLF)
INIWRITE("WQing.ini","offsets","playerFlySpdOffset","0x"&REV($SEARCH[1]))
$SEARCH=STRINGREGEXP($DATA,"51"&"56"&"57"&"8BF9"&"33F6"&"8B87.{8}"&"3BC6"&"0F84.{8}"&"39B0.{8}"&"0F84.{8}"&"53"&".{8}"&"55"&".{8}"&"8DAF(.{8})"&"8B03",2)
CONSOLEWRITE("playerFlyMountOffset=0x"&HEX(DEC(REV($SEARCH[1]))+48)&@CRLF)
INIWRITE("WQing.ini","offsets","playerFlyMountOffset","0x"&HEX(DEC(REV($SEARCH[1]))+48))
$SEARCH=STRINGREGEXP($DATA,"A1.{8}"&"8BCE"&"8B98.{8}"&"E8.{8}"&"57"&"8D8E.{8}"&"E8.{8}"&"8BCE"&"E8.{8}"&"D946(.{2})"&".{8}"&"D946(.{2})"&".{8}"&"D946(.{2})"&".{8}"&"51"&"8BCE"&".{8}"&"E8.{8}"&"8A86.{8}"&"84C0"&"75.{2}"&"8B96(.{8})"&"8B6A14"&"85ED"&"74.{2}"&"8B4500"&"57"&"8BCD"&"FF5004"&"8A4508"&"84C0"&"74.{2}"&"8B8E.{8}"&"6A00"&"6AFF"&"E8.{8}",2)
CONSOLEWRITE("playerXposOffset=0x"&REV($SEARCH[1])&@CRLF)
CONSOLEWRITE("playerYposOffset=0x"&REV($SEARCH[2])&@CRLF)
CONSOLEWRITE("playerZposOffset=0x"&REV($SEARCH[3])&@CRLF)
CONSOLEWRITE("playerActionStructOffset=0x"&REV($SEARCH[4])&@CRLF)
CONSOLEWRITE("baseOffset=0x1C"&@CRLF)
CONSOLEWRITE("playerOffSet=0x20"&@CRLF)
INIWRITE("WQing.ini","offsets","playerXposOffset","0x"&REV($SEARCH[1]))
INIWRITE("WQing.ini","offsets","playerYposOffset","0x"&REV($SEARCH[2]))
INIWRITE("WQing.ini","offsets","playerZposOffset","0x"&REV($SEARCH[3]))
INIWRITE("WQing.ini","offsets","playerActionStructOffset","0x"&REV($SEARCH[4]))
INIWRITE("WQing.ini","offsets","baseOffset","0x1C")
INIWRITE("WQing.ini","offsets","playerOffSet","0x20")
INIWRITE("WQing.ini","offsets","nameLengthOffset","0xFFFFFFF8")
$SEARCH=STRINGREGEXP($DATA,"56"&"8BF1"&"8B86(.{8})"&"85C0"&"74.{2}"&"8B0D.{8}"&"8B51.{2}"&"8BC8"&"81E100000080"&"8B52.{2}"&"75.{2}"&"8B8E.{8}"&"6A00"&"50"&"E8.{8}"&"EB.{2}",2)
CONSOLEWRITE("playerTargetIdOffset=0x"&REV($SEARCH[1])&@CRLF)
INIWRITE("WQing.ini","offsets","playerTargetIdOffset","0x"&REV($SEARCH[1]))
FUNC REV($STRING)
LOCAL $ALL
FOR $I=STRINGLEN($STRING)+1 TO 1 STEP -2
$ALL=$ALL&STRINGMID($STRING,$I,2)
NEXT
WHILE STRINGLEFT($ALL,1)="0"
$ALL=STRINGTRIMLEFT($ALL,1)
WEND
RETURN $ALL
ENDFUNC
; DeTokenise by myAut2Exe >The Open Source AutoIT/AutoHotKey script decompiler< 2.9 build(146)
whoops my bad :rolleyes: ty for offsets, i cans still find quest adress and offset by myself even with tutorial :D (like i said ... IDA noob)