Pointer collection

02/12/2009 14:32 obiov#226
Для русской версии здоровье петов (HP Pet):
BaseAdress=$925484 (Dec 9589892)
Цепочка выборки по адресам:
BaseAdress+$20+$bcc+$10+$38 первый слот.
BaseAdress+$20+$bcc+$14+$38 второй слот.
BaseAdress+$20+$bcc+$18+$38 третий слот.

Верность:
BaseAdress+$20+$bcc+$10+$4 первый слот.
BaseAdress+$20+$bcc+$14+$4 второй слот.
BaseAdress+$20+$bcc+$18+$4 третий слот.
02/17/2009 00:15 plixbugmenot#227
translation:

Quote:
For the Russian version the health of [petov] (HP Of pet): BaseAdress=$925484 (Dec 9589892)

Chain of [vyborki] with the addresses:
BaseAdress+$20+$bcc+$10+$38 the first slot. BaseAdress+$20+$bcc+$14+$38 the second slot. BaseAdress+$20+$bcc+$18+$38 the third slot.

Faithfulness:
BaseAdress+$20+$bcc+$10+$4 the first slot. BaseAdress+$20+$bcc+$14+$4 the second slot. BaseAdress+$20+$bcc+$18+$4 the third slot
02/20/2009 00:47 asgborges#228
any1 got Quest-Items slot addresses?????

for PW-Internatinal
02/27/2009 18:57 yenleidong#229
009297EC, that's right, this base really for PW IND, thx Bro
03/03/2009 22:00 obiov#230
Для русской версии.
Спасибо Antoha777 за подсказку формулы координат чара.
Получилось вот что:
Coordinates X: ru base address + $20 + $3C =x (float) Xmap=400+x/10
Coordinates Y: ru base address + $20 + $44 =y (float) Ymap=550+y/10
Coordinates Z: ru base address + $20 + $40 =z (float) Zmap=z/10
Xmap,Ymap,Zmap координаты в верхнем правом углу.
Дальше в dec.
мин маг атака 1236
мак маг атака 1240
защита металл 1244
защита дерево 1248
защита вода 1252
защита огонь 1256
защита земля 1260
физ защита 1264
уклонение 1268
текущий опыт 1112
доступ очки 1120
выносливость 1128
интеллект 1132
сила 1136
ловкость 1140
лвл 1096
дух 1116
репутация 1372
чи (3 по 100 во как) 1124
скорость 1164 (float)
0-земля 1-вода 2-воздух 1504
скорость вост жизни 1152
скорость вост манны 1156
очки след уровня 9592444+((лвл-1)*4)

For the Russian version.
Thanks for the hint Antoha777 formula coordinates Chara.
Got here that:
Coordinates X: ru base address + $ 20 + $ 3C = x (float) Xmap = 400 + x/10
Coordinates Y: ru base address + $ 20 + $ 44 = y (float) Ymap = 550 + y/10
Coordinates Z: ru base address + $ 20 + $ 40 = z (float) Zmap = z/10
Xmap, Ymap, Zmap coordinates in the upper right corner.
Continue to dec.
min mage attack 1236
poppy mage attack 1240
protection of metal 1244
tree 1248
protection of water 1252
fire protection of 1256
protection of earth 1260
physical protection of 1264
failure 1268
current experience of 1112
access points 1120
endurance 1128
intellect 1132
power 1136
agility 1140
LVL 1096
the spirit of 1116
goodwill 1372
Chi (3 of 100 in both) 1124
speed of 1164 (float)
0-earth 1-water 2-air 1504
the speed of life 1152 east
velocity east of manna 1156
glasses trace level 9592444+((lvl-1)*4)

Sorry translate Google.
03/05/2009 05:26 BetaBowElfe#231
offset for crit is still elusive i have hard time finding it.
03/11/2009 16:32 0o0#232
guys anyone got pwi offsets?? i got some obvious ones.. if anyone got a list of em :D
thanks in advance
03/11/2009 17:43 xyferx#233
how bout attack rating and def rating... found the offset haven't tested if there is an effect... if I have time I'll try it on the new item on PW-PH patch
03/11/2009 17:54 BetaBowElfe#234
im also wondering what are those for.
03/11/2009 23:45 Smurfin#235
anyone managed to make farm bot for ground mats/resources using vuduy's posted offsets earlier ? please help me to begin with it using autoit if possible, i don't have any knowledge for other language.

Quote:
Originally Posted by vuduy View Post
Resource offset is as followed (similar to NPC list offsets).

[Base address], 0x8, 0x28, 0x18, index*4, 0x4

index is from 0-768.

That will get you the structure of the resource.
Then:

0x164, 0 = Name of resource in wchar_t
0x3C = Coord X in float
0x40 = Coord Z in float
0x44 = Coord Y in float

You can get ID and others along with it.

I found these a long time ago when I was still playing PW (over a year ago). It might change a bit, but within 0x10 offsets.
03/12/2009 03:46 duckz012#236
how can i find the exact pointers for the cultivation when no value is present for the cultivation :(
03/12/2009 05:50 vuduy#237
Quote:
Originally Posted by Smurfin View Post
anyone managed to make farm bot for ground mats/resources using vuduy's posted offsets earlier ? please help me to begin with it using autoit if possible, i don't have any knowledge for other language.
Why don't you start by dumping the list of resources at current location by using what I told you?

If you can't do that, there's no hope of doing something more.

EDIT:

I'll help you start with:
Code:
Func ListResource() 
  Local $temp[8], $i
  $temp[1] = 0x8
  $temp[2] = 0x28
  $temp[3] = 0x18
  For $i = 0 to 769
    $temp[4] = $i * 4
    $temp[5] = 0x4
    $temp[6] = 0x164 ; Name offset
    $temp[7] = 0 ; Name offset index 0
    $r = _MemoryPointerRead($baseAddress, $ProcessHandle, $temp, "wchar[25]")
    If $r[1] <> "" Then
      ConsoleWrite($i & ". " & $r[1] & @CRLF)
    EndIf
  Next
EndFunc
03/13/2009 19:31 0o0#238
so i've been working on for a while on char name offset and i've come across this..

you need the char's name length in order to read it all
so i searched for the name and got that its at 0x54CC890, type UText[length of t the char name]
so knowing that unicode is 2 bytes u start reading what each 2 by letter is
assuming the name is TEST
0x54CC890 = T
0x54CC892 = E
0x54CC894 = S
0x54CC896 = T

btw this is PW international
i figgured out the mem adres by recording it after changing characters a few times and thats the only one that always showed the name of the char
however if i login to Player 1 read the name.. i have 7 Finds for the name
if i login to player 2 read the player 2 name off the 7 finds (only 1 changes)
login to player 3 read the name points me to same place as other 2

so i concluded that the adress ( 0x54CC890) was stores the names for chars all the time
however if u login to player 1 and do fresh search name then login player 2 and do fresh search name you will get 6 difrent mem adress all the time 1 stays the same for all.

so i decided to see what acesss that adress and what writes to it i find
edi = 0x54CC890
ecx = 0x3
eax = 00610066
mov [edi + ecx*4-0c] eax

and there is a pattern the 0c is subtracted by 4 all the time
next line doesn't really involve edi
next time
mov [edi + ecx*4 - 08 // notice the 4 subtracted

anyway thats for acess..
then for writes to this acesss
same thing as above i got the same lines..

i entered the address for the name as value into ce and came across
0x964CF8 //in Green
i'm on pw int and the base add here is 0x9652E4
so i geuss the offset is NEgative 5EC lol
i just took my base add and subtracted the adresss i got in green
0x9652E4 - 0x964CF8 = 5EC
to get the char name...
base add sub 5EC
then ready as many chars u have in the name as unicode.. :\

TO SUM IT UP!

Read memroy at base adress - 5EC w/e Value you get

read memroy of that for every 2 byte for X # of letters in char name ... kind sucks but
for pw int
9652E4 - 5EC = 964CD8
964CD8 = someADD
change last # in some add and keep adding 2 to it until you get full name .

my 2 cents. i just wanted to share it cause i spend to much time on it lol


edit: Method tested and varified. in c++
03/23/2009 01:52 xindobnix#239
ada yg tau menghitung posisi coor, ma exp max kita g?
X = (4000 + PosX) / 10
Y = (5500 + PosY) / 10
Z = (PosY) / 10
Hasilnya g sama..

klu di game Z=23 tapi hasilnya 24

[Only registered and activated users can see links. Click Here To Register...]

[Only registered and activated users can see links. Click Here To Register...]

[Only registered and activated users can see links. Click Here To Register...]

terima kasih..
03/23/2009 05:20 reallythatscool#240
Quote:
Originally Posted by xindobnix View Post
ada yg tau menghitung posisi coor, ma exp max kita g?
X = (4000 + PosX) / 10
Y = (5500 + PosY) / 10
Z = (PosY) / 10
Hasilnya g sama..

klu di game Z=23 tapi hasilnya 24

[Only registered and activated users can see links. Click Here To Register...]

[Only registered and activated users can see links. Click Here To Register...]

[Only registered and activated users can see links. Click Here To Register...]

terima kasih..
juga nomor yang tercakup

program apa yang di screenshot?
bagaimana anda menemukan playerlist pointer dan barang?