[REQUEST] Offsets

04/08/2008 20:00 wakawaka1234#1
Hi, i been looking into PW for quite a while searching for the Place where packets are built/encrypted, but so far i have found nothing. (just me personally, nothing to do with this thread actually xD)

What i see lacking is some professional information for this game!

So here i post 2 (memory, not file) offsets i have found with someone elses way, they are for version 12 (current) english/international client:

004056B4 (nop 3 bytes to disable) zoom limit so you can zoom no further than your head
004056D9 (nop 3 bytes to disable) zoom limit so you can zoom no further than 8 out

And i hereby request you to be so kind and also post offsets you know of in this thread (together with info and client version/language) for the good of the community.
04/08/2008 20:50 infinity2k7#2
00903F15 npcid enable/disable
008BBF74 max.jumps
00903804 pointer for:
->current - moboffset: a18
->offsets for hp,mp,exp,gold,vigor,sp,... you will be able to find by yourself i think ;)

what i currently not found is monster lvl, coords and so on..
btw nice idea, in this thread we should collect all offsets/addresses/pointers/.. we found!
greetz!
04/09/2008 10:54 syron198#3
yep, we definitely should, gonna post the list I got in my CE list. Juz at university now :/

I'd be really glad if admins could create a new forum especially for PW...

but nice idea! We could also make sum projects together...
04/09/2008 14:33 infinity2k7#4
right.. if we would share our knowledge we could programming better hax ;)
04/09/2008 14:56 zevorc#5
Coords
Base +20 +3c(X-Axis)
Base + 20 +44(Y-Axis)
Base + 20 +40(Z axis)
Base + 20 + a25(Freeze Char) freeze at 1 to freeze char
Destination
Base+20+bb8+30+4+20(X)
Base+20+bb8+30+4+28(Y)
Base+20+bb8+30+4+24(Z)
Char Info
Base + 20 +450(HP)
+448(Lvl)
+44c(CultiLvl)
+458(Exp)
+45c(SP)
+454(MP)
+464(Vigour)
+478(MaxHP)
+47c(MaxMP)
(CharName)Base+20+5cc+0
Pet Info
(PetLvl)Base+20+bcc+[10+hex(4*(petslot-1))]+20
(PetExp)Base+20+bcc+[10+hex(4*(petslot-1))]+28
(PetHp)Base+20+bcc+[10+hex(4*(petslot-1))]+38
(PetLoyalty)Base+20+bcc+[10+hex(4*(petslot-1))]+4
Debug reg
Dist.903F20
Coords.903F21
Misc.903F22
ID.903F15

(Jump Hack)Base+20+b08
04/09/2008 15:04 syron198#6
MaxVigour: base + 20 + 4F8
Current MP: base + 20 + 454
Gold: base + 20 + 4FC
Reputation: base + 20 + 55C

juz added those, which r not added...
04/09/2008 16:45 infinity2k7#7
i think thats all :D
or did anyone has an idea what we should search for..?
04/09/2008 17:34 zevorc#8
try searching resting state,like maybe 1 when resting, 0 when not resting.this can help in my bot's resting function making it more reliable.
i tried for a while but theres so many addresses,quite lazy =P.Not very impt anyway.

One more thing is about the chat strings, being able to read the lastest chat string would be useful.All i am able to get are addresses holding,number of entries like total normal chat strings,total sys/chat/battle strings entries,total chat lines etc/
04/09/2008 17:57 infinity2k7#9
good idea..gonna take a look..
i tested to find smth like the nearest npcid and so on but this doesnt work! so, my current method is like in zevorcs old bots, to select the npcids at first, then write them in the current mob address everytime, but thats not as effective as i thought ;)
zevorc whats your trick to select a nearby monster? there´s no way in my logic how it could be possible... give me a lil tipp =p
04/09/2008 21:30 syron198#10
I forgot 1 thing!

0344F4B8+c30+38 = if something is in target or not


any1 got offset for max experience? I mean on lvl77 u need like 2,7 million exp.. any1 got offset to find out that value?

regards...
04/10/2008 04:30 zevorc#11
there are addresses which hold all mobs coord,lvl,class,id,name,etc.being able to read then enables you to calculate dist.between u and mob and then sorting it out.Those address of mob info wasnt found by me, i merely translated it from viet server C++ bot.Here the one for max exp but who knows whats in W2I_EXP_ARRAY.
lpTempAdd = (LPBYTE)W2I_EXP_ARRAY + (m_sPlayer.plrLV-1)*4;
if (!ReadProcessMemory(m_hProcess, (LPCVOID)lpTempAdd, (LPVOID)&(m_sPlayer.plrMaxEXP), 4, NULL))
return 0x0D
04/10/2008 11:09 marien#12
petride max jumps?