Memory Address's Update

schnoobie · 01/11/2007, 00:43

another one playerid:
51209c - DWORD

blinko · 01/11/2007, 16:12

Quote:

Originally posted by ancientglory@Jan 10 2007, 19:16
kewl thanks mate...got it...now just need to make it work..hah

Blessed value: 4194304
Fly Value: 524288

yeah you'll just have to use the writing example i posted on the first post..it should be able ot read the value unto the memory for you..and flying is as simple as writing to the memory the flying in the constants everything is already hexed.

blinko · 01/11/2007, 16:24

anyone havea pointer or perhaps an address to detect whether or not a player is bluenamed?

blinko · 01/11/2007, 18:16

i just found out something while trying to get the characters bluename value for the other players..

i've found a address that when i closed co and reopened it still worked..

incoming character name = 0B321F04

incoming characters action.(6 = action,17=walking,16=jumping,19=magicATK,20=melee atk) = 0B321FAC
*note that the values in the memory region will be different, the byte will read 10 with a 1-4 byte equaling 17.

incoming characters direction = 0B321FC0.

and setting a timer watching the value for 19 and or 20 messaging me saying Player is attacking..so it works..
however it gives npc info's as well..

dunno aobut how to go about bluename captures..

giacometti · 01/11/2007, 20:03

Quote:

Originally posted by blinko@Jan 11 2007, 14:16
i just found out something while trying to get the characters bluename value for the other players..

i've found a address that when i closed co and reopened it still worked..

incoming character name = 0B321F04

incoming characters action.(6 = action,17=walking,16=jumping,19=magicATK,20=melee atk) = 0B321FAC
*note that the values in the memory region will be different, the byte will read 10 with a 1-4 byte equaling 17.

incoming characters direction = 0B321FC0.

and setting a timer watching the value for 19 and or 20 messaging me saying Player is attacking..so it works..
however it gives npc info's as well..

dunno aobut how to go about bluename captures..

The idea is to make an auto disconnect on blue name? Whatever... I will try to contribute with this when I get home... It should be a byte 01 when it is active, and 00 when not, just like in our own chars.

blinko · 01/11/2007, 20:09

yeah i know, however the character comes along and the name reads into one string..
and each string after that is 00 i've checked all address's one changes but its is the direction when i had my noob attack me, it showed the action type values Magic attack value was 19 and then bluename came on but novalues changed to 01..one value was already 01 before it started..it has to be elsewhere than where i had it i think.

giacometti · 01/11/2007, 21:55

I got it. The offset is 81 of the char name. 1 byte, 01 when flashing, and 00 when normal, just like I predict...

btw, char names seem to be not static... diferents ones goes in diferent places when reloading conquer..

So now how could we make a disconnect funtion? I dont know if writing to memory could help us (or me!

). Maybe learn how to hook winsock connection and close from there...

Maybe It's Maybelline · 01/11/2007, 23:15

Quote:

Originally posted by giacometti@Jan 11 2007, 21:55
So now how could we make a disconnect funtion? I dont know if writing to memory could help us (or me! ). Maybe learn how to hook winsock connection and close from there...

There are many ways, more common is using softice and debugging Co to find out the functions offset for logging out. The easiest way would be making a service control and just dc the lan, but alot of people still use a modem so it wont work that way.

giacometti · 01/11/2007, 23:23

So there is a log out function? Cause i thought it didnt exist, cause conquer itself doenst have an option to log off. Well, pretty good then. Dc the internet connection as a whole is a dirty way of doing it

Good if just conquer communication could be turn off.

NoName · 01/12/2007, 00:55

Quote:

Originally posted by Maybe It's Maybelline+Jan 11 2007, 23:15--></span><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (Maybe It's Maybelline @ Jan 11 2007, 23:15)</td></tr><tr><td id='QUOTE'> <!--QuoteBegin--giacometti@Jan 11 2007, 21:55
So now how could we make a disconnect funtion? I dont know if writing to memory could help us (or me! ). Maybe learn how to hook winsock connection and close from there...

There are many ways, more common is using softice and debugging Co to find out the functions offset for logging out. The easiest way would be making a service control and just dc the lan, but alot of people still use a modem so it wont work that way. [/b][/quote]
softice sucks

Quote:

So there is a log out function? Cause i thought it didnt exist, cause conquer itself doenst have an option to log off. Well, pretty good then. Dc the internet connection as a whole is a dirty way of doing it Good if just conquer communication could be turn off.

just kill the client or make it sense to let it open?

nickel · 01/12/2007, 01:22

hmm.. maybe we should try and reach choco and ask him how he did the disc function?

giacometti · 01/12/2007, 02:33

Quote:

just kill the client or make it sense to let it open?

Well, It does. The reason I am thinking is a pratical issue. If you have like 10 conquers loaded, re-opening and re-setting the bots can be really boring... Anyway, killing the client is what we have in hands, at least it works for the moment.

giacometti · 01/12/2007, 10:23

Quote:

Originally posted by giacometti@Jan 11 2007, 17:55
I got it. The offset is 81 of the char name. 1 byte, 01 when flashing, and 00 when normal, just like I predict... btw, char names seem to be not static... diferents ones goes in diferent places when reloading conquer..

So now how could we make a disconnect funtion? I dont know if writing to memory could help us (or me! ). Maybe learn how to hook winsock connection and close from there...

My mistake here! the offset is not for flashing names... its just the action=attck that triggs that. They stop at same time (flash and the action), so that cheated me. =p.

elementary · 01/12/2007, 10:30

Did ya manage to make autohealer based on my post?

giacometti · 01/12/2007, 11:02

didnt really tryied, cause there is a hard step before: track the f1 call function or sendkeys to conquer handle.. didnt go deep in that project yet.

Well, the correct offset for flash bluename is -104 from charname (above it). I the next byte you can check for red/blackname and in the next for cyclone, superman, fly etc.