Pointer collection

[obiov]

Для русской версии здоровье петов (HP Pet):
BaseAdress=$925484 (Dec 9589892)
Цепочка выборки по адресам:
BaseAdress+$20+$bcc+$10+$38 первый слот.
BaseAdress+$20+$bcc+$14+$38 второй слот.
BaseAdress+$20+$bcc+$18+$38 третий слот.

Верность:
BaseAdress+$20+$bcc+$10+$4 первый слот.
BaseAdress+$20+$bcc+$14+$4 второй слот.
BaseAdress+$20+$bcc+$18+$4 третий слот.

[plixbugmenot]

translation:

For the Russian version the health of [petov] (HP Of pet): BaseAdress=$925484 (Dec 9589892)

Chain of [vyborki] with the addresses:
BaseAdress+$20+$bcc+$10+$38 the first slot. BaseAdress+$20+$bcc+$14+$38 the second slot. BaseAdress+$20+$bcc+$18+$38 the third slot.

Faithfulness:
BaseAdress+$20+$bcc+$10+$4 the first slot. BaseAdress+$20+$bcc+$14+$4 the second slot. BaseAdress+$20+$bcc+$18+$4 the third slot

[asgborges]

any1 got Quest-Items slot addresses?????

for PW-Internatinal

[yenleidong]

009297EC, that's right, this base really for PW IND, thx Bro

[obiov]

Для русской версии.
Спасибо Antoha777 за подсказку формулы координат чара.
Получилось вот что:
Coordinates X: ru base address + $20 + $3C =x (float) Xmap=400+x/10
Coordinates Y: ru base address + $20 + $44 =y (float) Ymap=550+y/10
Coordinates Z: ru base address + $20 + $40 =z (float) Zmap=z/10
Xmap,Ymap,Zmap координаты в верхнем правом углу.
Дальше в dec.
мин маг атака 1236
мак маг атака 1240
защита металл 1244
защита дерево 1248
защита вода 1252
защита огонь 1256
защита земля 1260
физ защита 1264
уклонение 1268
текущий опыт 1112
доступ очки 1120
выносливость 1128
интеллект 1132
сила 1136
ловкость 1140
лвл 1096
дух 1116
репутация 1372
чи (3 по 100 во как) 1124
скорость 1164 (float)
0-земля 1-вода 2-воздух 1504
скорость вост жизни 1152
скорость вост манны 1156
очки след уровня 9592444+((лвл-1)*4)

For the Russian version.
Thanks for the hint Antoha777 formula coordinates Chara.
Got here that:
Coordinates X: ru base address + $ 20 + $ 3C = x (float) Xmap = 400 + x/10
Coordinates Y: ru base address + $ 20 + $ 44 = y (float) Ymap = 550 + y/10
Coordinates Z: ru base address + $ 20 + $ 40 = z (float) Zmap = z/10
Xmap, Ymap, Zmap coordinates in the upper right corner.
Continue to dec.
min mage attack 1236
poppy mage attack 1240
protection of metal 1244
tree 1248
protection of water 1252
fire protection of 1256
protection of earth 1260
physical protection of 1264
failure 1268
current experience of 1112
access points 1120
endurance 1128
intellect 1132
power 1136
agility 1140
LVL 1096
the spirit of 1116
goodwill 1372
Chi (3 of 100 in both) 1124
speed of 1164 (float)
0-earth 1-water 2-air 1504
the speed of life 1152 east
velocity east of manna 1156
glasses trace level 9592444+((lvl-1)*4)

Sorry translate Google.

[BetaBowElfe]

offset for crit is still elusive i have hard time finding it.

[0o0]

guys anyone got pwi offsets?? i got some obvious ones.. if anyone got a list of em
thanks in advance

[xyferx]

how bout attack rating and def rating... found the offset haven't tested if there is an effect... if I have time I'll try it on the new item on PW-PH patch

[BetaBowElfe]

im also wondering what are those for.

[Smurfin]

anyone managed to make farm bot for ground mats/resources using vuduy's posted offsets earlier ? please help me to begin with it using autoit if possible, i don't have any knowledge for other language.

Originally Posted by vuduy

Resource offset is as followed (similar to NPC list offsets).

[Base address], 0x8, 0x28, 0x18, index*4, 0x4

index is from 0-768.

That will get you the structure of the resource.
Then:

0x164, 0 = Name of resource in wchar_t
0x3C = Coord X in float
0x40 = Coord Z in float
0x44 = Coord Y in float

You can get ID and others along with it.

I found these a long time ago when I was still playing PW (over a year ago). It might change a bit, but within 0x10 offsets.

[duckz012]

how can i find the exact pointers for the cultivation when no value is present for the cultivation

[vuduy]

Originally Posted by Smurfin

anyone managed to make farm bot for ground mats/resources using vuduy's posted offsets earlier ? please help me to begin with it using autoit if possible, i don't have any knowledge for other language.

Why don't you start by dumping the list of resources at current location by using what I told you?

If you can't do that, there's no hope of doing something more.

EDIT:

I'll help you start with:

Func ListResource() 
  Local $temp[8], $i
  $temp[1] = 0x8
  $temp[2] = 0x28
  $temp[3] = 0x18
  For $i = 0 to 769
    $temp[4] = $i * 4
    $temp[5] = 0x4
    $temp[6] = 0x164 ; Name offset
    $temp[7] = 0 ; Name offset index 0
    $r = _MemoryPointerRead($baseAddress, $ProcessHandle, $temp, "wchar[25]")
    If $r[1] <> "" Then
      ConsoleWrite($i & ". " & $r[1] & @CRLF)
    EndIf
  Next
EndFunc

[0o0]

so i've been working on for a while on char name offset and i've come across this..

you need the char's name length in order to read it all
so i searched for the name and got that its at 0x54CC890, type UText[length of t the char name]
so knowing that unicode is 2 bytes u start reading what each 2 by letter is
assuming the name is TEST
0x54CC890 = T
0x54CC892 = E
0x54CC894 = S
0x54CC896 = T

btw this is PW international
i figgured out the mem adres by recording it after changing characters a few times and thats the only one that always showed the name of the char
however if i login to Player 1 read the name.. i have 7 Finds for the name
if i login to player 2 read the player 2 name off the 7 finds (only 1 changes)
login to player 3 read the name points me to same place as other 2

so i concluded that the adress ( 0x54CC890) was stores the names for chars all the time
however if u login to player 1 and do fresh search name then login player 2 and do fresh search name you will get 6 difrent mem adress all the time 1 stays the same for all.

so i decided to see what acesss that adress and what writes to it i find
edi = 0x54CC890
ecx = 0x3
eax = 00610066
mov [edi + ecx*4-0c] eax

and there is a pattern the 0c is subtracted by 4 all the time
next line doesn't really involve edi
next time
mov [edi + ecx*4 - 08 // notice the 4 subtracted

anyway thats for acess..
then for writes to this acesss
same thing as above i got the same lines..

i entered the address for the name as value into ce and came across
0x964CF8 //in Green
i'm on pw int and the base add here is 0x9652E4
so i geuss the offset is NEgative 5EC lol
i just took my base add and subtracted the adresss i got in green
0x9652E4 - 0x964CF8 = 5EC
to get the char name...
base add sub 5EC
then ready as many chars u have in the name as unicode.. :\

TO SUM IT UP!

Read memroy at base adress - 5EC w/e Value you get

read memroy of that for every 2 byte for X # of letters in char name ... kind sucks but
for pw int
9652E4 - 5EC = 964CD8
964CD8 = someADD
change last # in some add and keep adding 2 to it until you get full name .

my 2 cents. i just wanted to share it cause i spend to much time on it lol


edit: Method tested and varified. in c++

[xindobnix]

ada yg tau menghitung posisi coor, ma exp max kita g?
X = (4000 + PosX) / 10
Y = (5500 + PosY) / 10
Z = (PosY) / 10
Hasilnya g sama..

klu di game Z=23 tapi hasilnya 24







terima kasih..

[reallythatscool]

Originally Posted by xindobnix

ada yg tau menghitung posisi coor, ma exp max kita g?
X = (4000 + PosX) / 10
Y = (5500 + PosY) / 10
Z = (PosY) / 10
Hasilnya g sama..

klu di game Z=23 tapi hasilnya 24







terima kasih..

juga nomor yang tercakup

program apa yang di screenshot?
bagaimana anda menemukan playerlist pointer dan barang?