[QUESTION] HP Memory Address

[Belth]

Is it possible to get the memory address of HP? I read around and saw that it is DMA but more reading around the AutoIt forums said there's a way around that by getting the memory address of the pointer to HP. I tried cheatengine but not really sure what to look for. I'm now starting to get the hang of programming in general so maybe my terms aren't correct.

Anyone understand what I'm looking for?

P.S. I'm trying to find out to make a memory-based auto-potter.

[high6]

 Spoiler

It is encrypted

[clintonselke]

Originally Posted by high6

 Spoiler

It is encrypted

Its not encrypted, its just miss-a-lined (i can't spell for **** xD). And its also dynamically allocated so it will keep changing each time. (U may need an input box for the address).

How to find it??... Answer: binary search in CheatEngine (remember to use the pause game when search checkbox, bcuz ur HP will slowly rise and effect ur results).

After you have found it, then you will have an address and an offset... Looks like this:

[23423ABD]^4 (example only)

something like that will mean its located at 23423ABD and ignore the lowests 4 bits

Example of using example in AutoIt:

$HP = BitShift(_ReadMemory(0x23423ABD, $MemId), 4)

The fact that u have to search it each time u run conquer is a bit of a pain. But i think someone else in elitepvpers knows how to fix the address (make it static), something to do with searching for a pointer to some memory which when u move down a bit will give u another pointer to the HP, but i don't know how to get CheatEngine to search for that. (for getting it to find the address of the pointer that holds the dynamically allocated memory which with a certain offset contains the players current HP)

[high6]

I believe it is a little more than "mis-aligned".



Unless they changed it since then.

[clintonselke]

Originally Posted by high6

I believe it is a little more than "mis-aligned".



Unless they changed it since then.

wow, i had no idea. But it works for me, i wrote a bot for my ninja and it had autopot function using memory read.
Do ya think TQ have a second variable also holding the HP-value and they forgot to cover it up?? (possibly the spot in memory their client stores it when it decrypts)
Because the simple search no encryption is working for me.

[high6]

I believe that, that address will stop working eventually.

[InfamousNoone]

I object to that being the only way to obtain hp, without codecaves, well I can think of a few, but keeping it in line of simple, I'd say encrypting HP with the method(s) you've shown (well obviously we're decrypting it, but whatever) it seems too overly complicated and unnecessary, even for TQ.

[high6]

Originally Posted by InfamousNoone

I object to that being the only way to obtain hp, without codecaves, well I can think of a few, but keeping it in line of simple, I'd say encrypting HP with the method(s) you've shown (well obviously we're decrypting it, but whatever) it seems too overly complicated and unnecessary, even for TQ.

It is what they use everywhere to get the health.

0x004DA518; GetCurrentHealth()
0x004C81F9; GetMaxHealth()

It does look like they have changed a bit since I last ripped them.

[Belth]

Well ****. I've accepted that I won't find a static address for HP (either not possible or too many pointers to pointers I can't figure out) so I would just have to input the HP address every time... not too much of a problem.

But now, I try to find the address for the number of vanillas I have and seem to be running into the same problem. Is this address as hard to pinpoint? Or am I searching for pointers wrong?

Using cheatengine btw.

[high6]

The client doesn't store how many of an item you have.

You will have to locate the inventory and manually count each vanilla in each slot.

[Belth]

My bad, I explained incorrectly. I was actually trying to find the number of a particular item on a particular F-Key (e.g. How many pots are left on F8). Everything else I asked applies.

[rceclmn]

ohh i forgot,, if u get hit by a monster if u sit or just stand, after some seconds your hp will regenerate a lil bit xD

[high6]

Originally Posted by Belth

My bad, I explained incorrectly. I was actually trying to find the number of a particular item on a particular F-Key (e.g. How many pots are left on F8). Everything else I asked applies.

That is just a simple search and then finding the static referencer.


Anyways it seems they changed the CurrentHealth to an FDword.

class CCharacterInfo //0x005DABB8
{
    CFDword * CurrentHealth; //0xCD0
};

So just a simple, CharacterInfo->CurrentHealth->GetValue(1);

Btw is FDword's source, may convert it later... But meh...

[swords]

You can find the HP pot amount from your F keys... Each F key has it's own address... I have some of the addresses, but they are at my home computer, and atm I'm at school :P.

[lazlo]

Originally Posted by Belth

But now, I try to find the address for the number of vanillas I have and seem to be running into the same problem. Is this address as hard to pinpoint? Or am I searching for pointers wrong?

Using cheatengine btw.

Get vanillas and get some other pot. Use 2 different number of pots. EG 2 vanillas and 12 genseng. Put one of F1 and the other on a different F key. Search for the total on F1, then switch them, search again. Keep this process up until the numbers wont go any lower. then use a pot. and repeat. eventuall you will find it.