PWI: Redemption

Page 1 of 2

09/20/2018 23:38 BMV#1

(Updated to v1106)

Hello all

[system]
BA = $00FBE6D4
GA = $00FBF124
ArrLut = $1C
ArrNPC = $20
ArrChar = $30
AutoPath = $00417EC0
GavItem = $004DBB50
Walk1 = $004EF840
Walk3 = $004F0920
Walk2 = $004F4F00
SendPack = $008EE050
ChatStart = $FC6924 I can't define it, sorry ...
ChatQval = $FC6930 I can't define it, sorry ...
ServerTime = $FE6350 I can't define it, sorry ...
GUIFunkt = $00A87620 ??? ( (old, does not work)) no longer use, sorry ...

[infochar]
CrdX = $3C
CrdZ = $40
CrdY = $44
Mining = $288
Level = $4CC
Health = $4D4
EXP = $4DC
FlyerID = $6B8
AddrName = $81C <===== playerNameOffset
ClassID = $820
WalkMode = $82C
.............. = $8DC <===== PlayerParty_Offset I don't use, sorry ...
NPCDialog = $115A <==== PlayerNpcWindow
ArrInv = $1368 <======= InventoryListOffset
ArrAction = $17CC
ActionFlag = $24
ArrQuest = $17D4
TQArr = $8
TQList = 8

[inventory]
ArrCell = $C
CntCell = $10
CellID = $C
CellQuant = $14

[lutmining]
LutArr = $24 <========= ItemListOffset
LutList = $18 <========= sortedItemListOffset
ArrLutX = $4
LutXWID = $110 <======= ItemUIDOffset
LutXDist = $158
LutXNameAddr = $164 <=== ItemNameOffset

[action]
JoJ71ID = $0000058C (8010058C)
JoJ61ID = $0000058D (8010058D)
OrphanHongID = $00006104 ...
ErrKnFeiID = $00006108
NaturalistID = $000074E8
KidKuangID = $00005362

[NPC]
NPCArr = $6C <========= sortedNpcListOffset

someone will help?

09/23/2018 09:57 Stark77#2

Thanks for your help :)

I had to change the list offset for the items from 0x1C to 0x18 .. not sure if thats LutList or ArrLut for you.

Other changes so far:
playerNameOffset := 0x80C
sortedPlayerListOffset := 0x8C
sortedNpcListOffset := 0x6c
InventoryListOffset := 0x1358
sortedItemListOffset := 0x18
PlayerParty_Offset := 0x8DC

And ofc as you wrote the playerOffSet := 0x30, this also is important for the move functions in case anyone does not have it as a variable yet

09/23/2018 22:24 BMV#3

Stark77 , thank you so much dear !
GA => 0x1C => 0x24 => 0x18 it works

09/24/2018 04:33 jasty#4

My List:

Spoiler

Code:

Global $ADDRESS_BASE = 0xfbcaec
Global $ADDRESS_SENDPACKET = 0x8e7aa0
Global $ADDRESS_AUTOPATH = 0x424440
Global $ADDRESS_ACTION1 = 0x4fb6b0
Global $ADDRESS_ACTION2 = 0x500d90
Global $ADDRESS_ACTION3 = 0x4FC7B0

Global $ADDRESS_GATHER = 0x4e7f00
Global $ADDRESS_FOLLOW = 0x858da0
Global $ADDRESS_CASTSKILL = 0x4f8430
Global $ADDRESS_REGATTACK = 0x4E2290
Global $PARTYINV_ADDRESS = 0xFCF720

Global $MACRO_ADDRESS_BASE  = 0xfbdf58
Global $OFFSET_ACTIONBASE  = 0x17bc

Global $ADDRESS_CHAT_BASE = 0xFC6930-0xC

global $Player_Offset = 0x30
global $playerIDOffset = 0x4B8
global $PlayerClass_Offset = 0x810
global $PlayerName_Offset = 0x80C
global $PlayerParty_Offset = 0x8DC
global $PartyCount_Offset = 0x18
global $PlayerCurrentSkill_Offset = 0x8F8
global $playerEquipOffset = 0x664
global $InventoryListOffset = 0x1358
global $EquippedListOffset = $InventoryListOffset + 0x4
global $QuestInvListOffset = $InventoryListOffset + 0x8
global $PlayerWardrobeBag_Offset = $InventoryListOffset + 0x44
global $PlayerAvatarBag_Offset = $InventoryListOffset + 0x4C
global $PlayerGlyphBag_Offset = $InventoryListOffset + 0x54

global $PhysPosOffset = 0x83C-0x40
global $PlayerNpcWindow = 0x114A


Global $QuestList_Offset = 0x17C4

global $PlayerMoveCounter_Offset = 0xCC0
global $PlayerTransportMode_Offset = 0x81C
global $PlayerCombatStatus_Offset = 0x8B0
global $PlayerSwimSpeed_Offset = 0x530
global $PlayerWalkSpeed_Offset = $PlayerSwimSpeed_Offset+0x4
global $PlayerFlySpeed_Offset = $PlayerSwimSpeed_Offset+0xC
global $PlayerFlySpeedPhys_Offset = $PlayerNpcWindow+0xE

global $PlayerCamX_Offset = 0xb58 
global $PlayerCharmActive_Offset = 0x1A44
global $PlayerCharmActive_MagBit = 0x10000
global $PlayerCharmActive_PhysBit = 0x100
global $PlayerCharmCooldown_Offset = 0xE04


	;~ #-------- NPC ----------------#
global $NpcListOffset = 0x20
global $sortedNpcListOffset = 0x6c
global $NpcCounterOffset = 0x18
global $NpcUIDOffset = 0x114
global $NpcIDOffset = 0x118
global $NpcNameOffset = 0x260
global $NpcLVLOffset = 0x120
global $NpcHPOffset = 0x128
global $NpcHPmaxOffset = 0x17C
global $NpcStatusOffset = 0x210
global $NpcSpecialOffset = 0x24C
global $NpcX = 0x3C
global $NpcY = 0x44
global $NpcZ = 0x40

global $NpcStatusBitDead = 0x80
global $NpcStatusBitIncSpeed = 0x100
global $NpcStatusBitIncDef = 0x300
global $NpcStatusBitIncAtt = 0x500
global $NpcStatusBitSacAss = 0x700
global $NpcStatusBitIncLife = 0x800
global $NpcStatusBitWeak = 0x900
global $NpcStatusBitIsPet = 0x1000

global $NpcStatusBitIsNpc = 0x4000
global $NpcStatusBitIsFly = 0x10000
global $NpcStatusBitIsWater = 0x20000



global $bufflist = 0x390
global $buffcount = 0x39c

global $PlayerTarget_Offset = 0x638
global $PlayerFactionId_Offset = 0x790
global $PlayerOrderId_Offset = 0x7d0
global $PlayerChiOffset = 0x4E0

global $sortedInventoryListOffset = 0xC
global $InventorySizeOffset = 0x14
global $InvName_Offset = 0x4C
global $InvID_Offset = 0xC
global $InvDurability_Offset = 0x74
global $InvStackAmount_Offset = 0x14
global $gearAddonList_Offset = 0xb0

global $itemTypeX = 0x8
global $itemIDX = 0xC
global $itemCountX = 0x14
global $itemRefine = 0x90

global $HP_OffSet = 0x4cc
global $MaxHP_OffSet = 0x520
global $MP_OffSet = $HP_OffSet + 0x4
global $MaxMP_OffSet = $MaxHP_OffSet + 0x4
global $HPCooldown_Offset = 0xDA4
global $MPCooldown_Offset = $HPCooldown_Offset + 0x8
global $ElixCooldown_Offset = $HPCooldown_Offset - 0x40
global $PlayerSkill_Offset = 0x17E8
global $PlayerFactionSkill_Offset = $PlayerSkill_Offset + 0x90
global $PlayerGlyphedSkill_Offset = $PlayerSkill_Offset + 0x78
global $PlayerPassiveSkill_Offset = $PlayerSkill_Offset + 0x18
global $PlayerGenieSkill_Offset = $PlayerSkill_Offset + 0x30
global $PlayerItemSkill_Offset = $PlayerGenieSkill_Offset + 0x18 ;mark of might

global $SkillID_Offset=8
global $SkillLVL_Offset=12
global $SkillCurCD_Offset=16
global $SkillCD_Offset=20

global $PlayerGenie_Offset = 0x408
global $GenieEnergy_Offset = 0xb0

This was a really weird update. Since when do offsets get smaller?

09/24/2018 12:02 BMV#5

jasty, stark77 - please tell me, do you respond to private messages?
P.S. Sometimes i do not want to write for everyone, and sometimes you just can not do it ...

Quote:

Originally Posted by jasty

This was a really weird update. Since when do offsets get smaller?

the size of the game client exceeds 16Gb ...
maybe it's time and reduce it?

09/27/2018 16:31 Remmm#6

ChatStart = $FC6924
ChatQval = $FC6930
ServerTime=$FE6350

09/27/2018 18:46 nezz1#7

Is there a guide how to set up offsets? And where to find everything?

09/28/2018 11:11 BMV#8

Quote:

Originally Posted by nezz1

Is there a guide how to set up offsets? And where to find everything?

the answer to this question is the direct path to the banned
probably, you need to understand a little what you are asking ...
sorry...

but...
Stark77 , jasty , Remmm
Thank you so much !
Up to new meetings on the expanses of the PWI !
Good luck, Friends !

01/05/2019 20:52 Asprin#9

Hi. Can anyone tell me gui function address please?

About ingame windows offsets.
Now they look like BA+0x1C+0x18+0x8+0x1e0 (or +0x200 or 0x250).

01/10/2019 14:33 BMV#10

Edited #1 to v1106

Got a question:
2500070000000C000000XXXXXXXX0000000000000000
25000600000008000000XXXXXXXX00000000
280001010C00XXXXXXXX
040000000000
9C00
31000300000002XXXXXXXX
310003000000017E77
the last two don't work anymore
who knows new values - please, inform (or in PM)

01/10/2019 18:28 jasty#11

You mean these two?

Quote:

31000300000002XXXXXXXX
310003000000017E77

Those are the trash quest and complete quest packets. They work fine except make sure to use full 4 bytes for the quest ID for the complete quest

01/13/2019 08:19 BMV#12

If nothing has changed in the codes (according to jasty), has anyone else thought - why did I have problems with these codes (31000300000002XXXXXXXX 310003000000017E77)?
When determining the address of the SendPack program, it was noticed that the program code has changed noticeably, so I admit changes that interfere with the correct execution of codes 31000300000002ХХХХХХХХХ and 310003000000017E77, so there are changes either in the syntax or in the values.
I would be grateful if someone could share (in PM please) part of the program that uses these codes (and please indicate the programming language of this part of the program).

01/14/2019 05:02 fGravity#13

What's ur send pack address? is it 0x4EE05? Also, whats ur base/game addr?

Seems like they did change the structure of how the packets are sent, the address that i found seems to not work too

01/14/2019 08:10 BMV#14

Quote:

Originally Posted by fGravity

What's ur send pack address? is it 0x4EE05? Also, whats ur base/game addr?

Quote:

Originally Posted by BMV

Edited #1 to v1106]

Thanks for participating...

01/23/2019 20:28 CeifadorX#15

Hello,

had changes in the control code, was 3 and now and 4, and to discard it there was an addition of a hex I do not know why

Trash quest sendpacket

Spoiler

Roll Call Quest

Spoiler

trash quest:
3100040000000200XXXX

Rollcall
31000400000002007e77

Page 1 of 2