[Release] GR Autolooter

thanks kumpel100 another happy customer.

>>I personally used the packetsend function (as the loot packet is known to me) as entry >>point and worked my way up to the interact function

This is the most interesting part =) How to find packetsend function and how to find interact function. I suspect that if you know the packet, you can find it in memory and place a breakpoint on access (possibly one of the functions is gonna be packetsend). And then we need functions which calls packetsend (one of them is for interaction). But the question appears. How can i find out lootpacket. (afaik traffic is encrypted). Just can not understand full path. I understand that I ask a bit more than I have to, but could you make an easy example guide please (and sorry for my english :)

Quote:

Originally Posted by xoraxax >>I personally used the packetsend function (as the loot packet is known to me) as entry >>point and worked my way up to the interact function This is the most interesting part =) How to find packetsend function and how to find interact function. I suspect that if you know the packet, you can find it in memory and place a breakpoint on access (possibly one of the functions is gonna be packetsend). And then we need functions which calls packetsend (one of them is for interaction). But the question appears. How can i find out lootpacket. (afaik traffic is encrypted). Just can not understand full path. I understand that I ask a bit more than I have to, but could you make an easy example guide please (and sorry for my english :)

well your completely right with the breakpoint, thats what i meant with entrypoint and working his way up (the callstack) to interact (which I have btw posted in this thread). The packetsend function actually takes unencrypted data (to be more precise an abstract data model). ACB started wroting a step by step guide on how to reverse the network layer. Simply google for "A journey to the center of GW2". It isnt complete but it will maybe give you the basic informations you need to work on your own.

thanks a lot xoraxax
with your help i found even easier way to find that address in ce
i usually do max 4 scans and end up with max 10 green addresses
after that is just doing nothing and wait 2mins and i have the address
thanks a lot again

Here i will do this only one time because info in this thread gives you everything to do it yourself
Source belongs to geshvader and thanks to him for it

Nice :) Very well done.

geshvader source with new packet
thank me if you want me to keep this updated

It doesnt really work for me.. it starts but it does not take loot..

Man, you have sources, you know the way of scanning for the address, what is your problem?

I'm still not sure how to get the right memory address. I've tried searching for changes with CheatEngine while standing over a dead mob or a little bit further away.

There are a lot of changing addresses and I've got no clue how to identify the right address, could someone explain this to me?

We want to find the byte that equals 40h when there is loot.
1. Stay near loot (now you have the search button in the game and 40h in that byte).
2. Scan memory for unknown initial value.
3. Step back (you do not have any loot near you now and there is no search button)
4. Scan for changed value (there is no 40h in that byte now)
5. Step forward (now here is loot near you and you have search button again)
6. Scan for changed value (there is 40h in that byte now)
7. Go to step 3 and repeat until you have a few addresses (you can vary search conditions - search for unchanged values sometimes)
8. Now you have to find green adresses - these are static adresses.
9. Now you can do a research. Then you can find out that one of them points to zeros when nothing is near and it changes to XXXX...XX40 when loot is near. (x is any digit)

Pretty easy. (also there is a tutorial for cheat engine afaik - try to complete it)

Hi,
perhaps u can help me too :)
Get the Base Adress... No Problem ;) (017403FB)
Make a usefull pattern... BIG Problem :(

i used olly and the make sig tool... but in this memory region there are only "zeros..." my pattern looks like:

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00
xxxxxxxxxx

and this of cause comes up thousend times...
perhaps someone can help?

ok people
this is my way to find loot address
start gw2
start ce
set value type to 1 byte
put 64 for value
kill mob and when there is loot click first scan
move away from loot and change scan type to DECREASED VALUE BY and click next scan
get close to loot and change scan type to INCREASED VALUE BY and click next scan
by now u should have 3-4 green addresses left max if not do DECREASED BY again
now press F to loot the mob and same time watch the adresses in CE
loot address is the one that its value will disappear
hope it helps and you understand what im saying

Swir, it looks faster, but my cheat engine doesn't work well with bytes, unfortunately (it takes a very long time to scan for 40h and most likely CE will hang). And dwords are ok. Anyway the basic idea should be clear.

Quote:

(it takes a very long time to scan for 40h and most likely CE will hang)

Set the Stop address to 2000000