Okay, I will tell you a secret. It's very easy to find the ability address. Just search for your current available inventory space. It's a none static 4 byte address. Add a new item into your inventory and repeat, until you only have a few of them left.
Next step is just adding this addresses into your list and make a pointer scann on each address.
Set the max. offset value to: 10048 and max level: 1
You can also set "Base address must be in specific range". You just have to find there the game.dll begin and end. For this you can use this script:
local module = "Game.dll"
local base = getAddress(module)
local size = getModuleSize(module)
print(string.format("%X",base))
print(string.format("%X",base+size))
The first offset of the inventory space address will start with a nine - this can change after time.
The current current cube space address is:
"Game.dll"+ECEDF8 + 0x94c
But this is also the address for all the abilites: "Game.dll"+ECEDF8
Now you have to find the ability offset for this. It's always in the same range: 700 to FFF
But I can't tell you how to find it, because I wrote my own scanner for this and no, I don't scann for a byte pattern. You also need to find the correct multiplier (range 0 - 10), because it's a list and you need to go through all the pointers. I'm sorry, I can't give you my code because I know that a bot creator group will steal it, like they did it on immons bot earlier. And I don't like these people. But if you are smart enough you will just write your own scanner - it's very easy if you just think logically.
Here some other addresses:
Ability name (EU) changed to: 0x18
Ability cooldown (EU): 0x38
Ability cooldown remaining (EU): 3C
Thanks for the source by the way, it's helped me too :D.
"
UInt32 player_ID_gf = 0xED9048;
UInt32 player_name_gf = 0xED904C;
UInt32 player_level_gf = 0xED90FC;
UInt32 player_class_gf = 0xED9088;
UInt32 player_currenthp_gf = 0xEE2B40;
UInt32 player_maxhp_gf = 0xEE2B3C;
UInt32 player_curmp_gf = 0xEE2B48;
UInt32 player_maxmp_gf = 0xEE2B44;
UInt32 player_curexp_gf = 0xEE2B30;
UInt32 player_maxexp_gf = 0xEE2B20;
UInt32 player_dp_gf = 0xEE2B4E;
UInt32 player_position_x_gf = 0xEDBED0;
UInt32 player_position_y_gf = 0xEDBED4;
UInt32 player_position_z_gf = 0xEDBED8;
UInt32 player_ismoving_gf = 0xED8814;
UInt32 player_havetarget_gf = 0xAE01C4;
UInt32 player_camx_gf = 0xED8830;
UInt32 player_camy_gf = 0xED8828;
UInt32 player_hotbarNr_gf = 0xECE6A8;
UInt32 player_hotbarFirstSlotSkillID_gf = 0xED3FF8;
UInt32 player_reztime_gf = 0xF26518;
UInt32 player_casttime_gf = 0xED6F0C; (Offset: 0x480)
UInt32 player_curcube_gf = 0xECEDF8; (Offset: 0x94c)
UInt32 player_maxcube_gf = 0xED93DC;
UInt32 pet_id_gf = 0xF17AE8;
UInt32 target_base_gf = 0xAE01BC;
UInt32 target_state_gf = 0xAE01CC;
UInt32 cursorx_gf = 0xF2BA40;
UInt32 cursory_gf = 0xF2BA3C;
UInt32 flyTime_gf = 0xEE2B54;
"
Entity: Game.dll + 0xEE3534
EntityArray offset: 0x34
EntityArraycount offset: 0x58
Basically you already found all that stuff :D. So I'm wondering why do you have problems with some offsets? Could you maybe share how you disassembled the dll? Or just share the link from the pokemon reddit? Would be cool.
