[Dev Notes] Shaiya References & Functions

Cups · 08/17/2019, 15:47

Consider this a compilation of constants, functions, or structures that I've identified:

Code:

{
 Author: Cups, 26th April 2019

 Defines constant values used within the game
}
[ENABLE]

// The custom allocated memory for external apps to read from
define(Cups::Pointer, ps_game.exe+600000)
registersymbol(Cups::Pointer)

// The game world instance
define(CWorld::Instance, ps_game.exe+187960)
registersymbol(CWorld::Instance)

// Check if a zone can be entered
define(CMap::IsPartyInsZoneOpenTime, ps_game.exe+2F770)
registersymbol(CMap::IsPartyInsZoneOpenTime)

// CObjectMgr::FreeItem(item = edi)
define(CObjectMgr::FreeItem, ps_game.exe+11710)
registersymbol(CObjectMgr::FreeItem)

// CGameData::GetSkillInfo(id, level)
define(CGameData::GetSkillInfo, ps_game.exe+1BB30)
registersymbol(CGameData::GetSkillInfo)

// CGameData::GetItemInfo(type, typeid)
define(CGameData::GetItemInfo, ps_game.exe+59B0)
registersymbol(CGameData::GetItemInfo)

// CUser::SendCharacterItem(user)
define(CUser::SendCharacterItem, ps_game.exe+92500)
registersymbol(CUser::SendCharacterItem)

// CUser::UseItemSkill(user, skill_info)
define(CUser::UseItemSkill, ps_game.exe+725B0)
registersymbol(CUser::UseItemSkill)

// CUser::ItemCreate(user, item_info, count)
define(CUser::ItemCreate, ps_game.exe+6BD10)
registersymbol(CUser::ItemCreate)

// CUser::ItemRemove(user, bag, slot)
define(CUser::ItemRemove, ps_game.exe+674F0)
registersymbol(CUser::ItemRemove)

// CUser::ItemDelete(user, type, typeid)
define(CUser::ItemDelete, ps_game.exe+6C6A0)
registersymbol(CUser::ItemDelete)

// CUser::ItemDelete(user, bag, slot, move)
define(CUser::ItemDeleteSlot, ps_game.exe+728E0)
registersymbol(CUser::ItemDeleteSlot)

// SConnection::Send(user, packet, length)
define(SConnection::Send, ps_game.exe+ED0E0)
registersymbol(SConnection::Send)

// CUser::UseSkillUser(user, target, skill, time)
define(CUser::UseSkillUser, ps_game.exe+5B0B0)
registersymbol(CUser::UseSkillUser)

// CUser::UseSkillMob(user, mob, skill, time)
define(CUser::UseSkillMob, ps_game.exe+5B270)
registersymbol(CUser::UseSkillMob)

// CUser::EnableAttackRange (player parameter)
define(CUser::EnableAttackRangePlayer, ps_game.exe+57F50)
registersymbol(CUser::EnableAttackRangePlayer)

// CUser::EnableAttackRange (Mob parameter)
define(CUser::EnableAttackRangeMob, ps_game.exe+58000)
registersymbol(CUser::EnableAttackRangeMob)

// CZone::EnterUser(ecx=user, edi=zone)
define(CZone::EnterUser, ps_game.exe+2A420)
registersymbol(CZone::EnterUser)

// CZone::SendUserShape(target=edx, id=ecx, zone=this)
define(CZone::SendUserShape, ps_game.exe+268B0)
registersymbol(CZone::SendUserShape)

// stdcall CUser::StatusDeathResult(user)
define(CUser::StatusDeathResult, ps_game.exe+9CFC0)
registersymbol(CUser::StatusDeathResult)

// CZone::MobGen(id=ecx, count=eax, pos, zone)
define(CZone::MobGen, ps_game.exe+245A0)
registersymbol(CZone::MobGen)

// CZone::NpcCreate(zone=ecx, pos=edi, type, typeId)
define(CZone::NpcCreate, ps_game.exe+255D0)
registersymbol(CZone::NpcCreate)

// CNpcData::GetNpc(ecx=type, eax=id)
define(CNpcData::GetNpc, ps_game.exe+24450)
registersymbol(CNpcData::GetNpc)

// CObjectConnection::PSendViewCombat(user, priority, data, length)?
define(CObjectConnection::PSendViewCombat, ps_game.exe+D56D0)
registersymbol(CObjectConnection::PSendViewCombat)

Custom user list

These scripts set up a custom list of characters that are connected to the game world, so that we may easily iterate over user instances and operate on them, or gather metrics.

Code:

{
 Author: Cups, 29th April 2019

 Represents a custom chunk of memory for storing things that
 may be used by enternal services and/or this game server.
}
[ENABLE]
alloc(cups, 1024)

// The player count and player list
alloc(CupsPlayerCount,     4)
alloc(CupsPlayerList,      4096)

// The npc count and npc list
alloc(CupsNpcCount,        4)
alloc(CupsNpcList,         16384)

// The mob count and mob list
alloc(CupsMobCount,        4)
alloc(CupsMobList,         32768)

// Store references to the various memory chunks
cups:
dd CupsPlayerCount
dd CupsPlayerList
dd CupsNpcCount
dd CupsNpcList
dd CupsMobCount
dd CupsMobList

// Store a reference to the chunk of memory
Cups::Pointer:
dd cups

registersymbol(CupsPlayerCount)
registersymbol(CupsPlayerList)
registersymbol(CupsNpcCount)
registersymbol(CupsNpcList)
registersymbol(CupsMobCount)
registersymbol(CupsMobList)

[DISABLE]
dealloc(cups)
dealloc(CupsPlayerCount)
dealloc(CupsPlayerList)
dealloc(CupsNpcCount)
dealloc(CupsNpcList)
dealloc(CupsMobCount)
dealloc(CupsMobList)

unregistersymbol(CupsPlayerCount)
unregistersymbol(CupsPlayerList)
unregistersymbol(CupsNpcCount)
unregistersymbol(CupsNpcList)
unregistersymbol(CupsMobCount)
unregistersymbol(CupsMobList)

Cups::Pointer:
dd 0

Code:

{
 Author: Cups, 26th April 2019

 Contains a list of players that are currently online in the game world
}
[ENABLE]
alloc(register_player,      128)
label(register_player_loop)
label(register_player_loop_exit)
label(register_player_exit)
alloc(deregister_player,    128)
label(deregister_player_replace)
label(deregister_player_exit)
registersymbol(register_player)
registersymbol(deregister_player)

{
 A function designed to add a player's pointer
 to the list of online players, and increment the player
 count.

 Usage:
 push player
 call Shaiya::Players::Register
}
register_player:

// Preserve the stack
push ebp
mov ebp, esp
pushad
pushfd

// Move the player pointer
mov edx,[ebp+08]

// If the player pointer is invalid, do nothing (this shouldn't even happen)
test edx,edx
je register_player_exit

// Increment the player count, and set the indexer to 0
inc [CupsPlayerCount]
xor ebx,ebx
xor edi,edi
xor eax,eax

// Loop through the current list, find a free space
register_player_loop:
mov ebx,eax
imul ebx,4
add ebx,CupsPlayerList
cmp [ebx],0
je register_player_loop_exit
inc eax
jmp register_player_loop

// Free space was found
register_player_loop_exit:
mov [edx+CUser.ListIndex],eax
mov dword ptr [ebx],edx

// Restore the stack
register_player_exit:
popfd
popad
pop ebp
retn 4

{
 A function designed to remove a player's pointer
 from the list of online players, and decrement the player
 count.

 Usage:
 push player
 call deregister_player
}
deregister_player:

// Preserve the stack
push ebp
mov ebp, esp
pushad
pushfd

// Move the player pointer
mov edx,[ebp+08]

// Decrement the player count
dec [CupsPlayerCount]

// EBX is the current index of the player
mov ebx,[edx+CUser.ListIndex]
mov [edx+CUser.ListIndex],0 // Clear the index memory of the current player

// Grab the address of the last player in the list
mov eax,[CupsPlayerCount]
imul eax,#4
add eax,CupsPlayerList
mov edx,[eax]

// If the player doesn't exist, exit the function
test edx,edx
jne deregister_player_replace

// Remove the current player
imul ebx,#4
add ebx,CupsPlayerList
mov [ebx],0
jmp deregister_player_exit

// Move the player into the current slot
deregister_player_replace:
mov [edx+CUser.ListIndex],ebx
imul ebx,#4
add ebx,CupsPlayerList
mov [ebx],edx
mov [eax],0

// Exit the function
deregister_player_exit:

// Restore the stack
popfd
popad
pop ebp
retn 4

[DISABLE]
dealloc(register_player)
dealloc(deregister_player)
unregistersymbol(register_player)
unregistersymbol(deregister_player)
unregistersymbol(player_count)
unregistersymbol(player_list)

Code:

{
 Author: Cups, 26th April 2019

 Registers a player to our player list when they enter
 the game world
}
[ENABLE]
alloc(hook, 128)

hook:
push edi
call register_player
cmp byte ptr [edi+CUser.AdminStatus],0A
jmp ps_game.exe+55B1F

ps_game.exe+55B18:
jmp hook
db 90 90

[DISABLE]
dealloc(hook)

ps_game.exe+55B18:
cmp byte ptr [edi+CUser.AdminStatus],0A

Code:

{
 Author: Cups, 26th April 2019

 Deregisters a player from our player list when they
 exit the game world
}
[ENABLE]
alloc(hook, 128)

hook:
push ebx
call deregister_player
cmp byte ptr [edi+CUser.AdminStatus],0A
jmp ps_game.exe+55CC3

ps_game.exe+55CBC:
jmp hook
db 90 90

[DISABLE]
dealloc(hook)

ps_game.exe+55CBC:
cmp byte ptr [edi+CUser.AdminStatus],0A

Code:

{
 Author: Cups, 13th May 2019

 Contains a list of npcs that currently exist in the game world
}
[ENABLE]
alloc(register_npc,      128)
label(register_npc_loop)
label(register_npc_loop_exit)
label(register_npc_exit)
alloc(deregister_npc,    128)
label(deregister_npc_replace)
label(deregister_npc_exit)
registersymbol(register_npc)
registersymbol(deregister_npc)

{
 A function designed to add a npc's pointer
 to the list of npcs, and increment the npc
 count.

 Usage:
 push npc
 call register_npc
}
register_npc:

// Preserve the stack
push ebp
mov ebp, esp
pushad
pushfd

// Move the npc pointer
mov edx,[ebp+08]

// If the npc pointer is invalid, do nothing (this shouldn't even happen)
test edx,edx
je register_npc_exit

// Increment the npc count, and set the indexer to 0
inc [CupsNpcCount]
xor ebx,ebx
xor edi,edi
xor eax,eax

// Loop through the current list, find a free space
register_npc_loop:
mov ebx,eax
imul ebx,4
add ebx,CupsNpcList
cmp [ebx],0
je register_npc_loop_exit
inc eax
jmp register_npc_loop

// Free space was found
register_npc_loop_exit:
mov [edx+CNpc.ListIndex],eax
mov dword ptr [ebx],edx

// Restore the stack
register_npc_exit:
popfd
popad
pop ebp
retn 4

{
 A function designed to remove a npc's pointer
 from the list of npcs, and decrement the npc
 count.

 Usage:
 push npc
 call deregister_npc
}
deregister_npc:

// Preserve the stack
push ebp
mov ebp, esp
pushad
pushfd

// Move the npc pointer
mov edx,[ebp+08]

// Decrement the npc count
dec [CupsNpcCount]

// EBX is the current index of the npc
mov ebx,[edx+CNpc.ListIndex]
mov [edx+CNpc.ListIndex],0 // Clear the index memory of the current npc

// Grab the address of the last npc in the list
mov eax,[CupsNpcCount]
imul eax,#4
add eax,CupsNpcList
mov edx,[eax]

// If the npc doesn't exist, exit the function
test edx,edx
jne deregister_npc_replace

// Remove the current npc
imul ebx,#4
add ebx,CupsNpcList
mov [ebx],0
jmp deregister_npc_exit

// Move the npc into the current slot
deregister_npc_replace:
mov [edx+CNpc.ListIndex],ebx
imul ebx,#4
add ebx,CupsNpcList
mov [ebx],edx
mov [eax],0

// Exit the function
deregister_npc_exit:

// Restore the stack
popfd
popad
pop ebp
retn 4

[DISABLE]
dealloc(register_npc)
dealloc(deregister_npc)
unregistersymbol(register_npc)
unregistersymbol(deregister_npc)

Code:

{
 Author: Cups, 26th April 2019

 Registers a player to our player list when they enter
 the game world
}
[ENABLE]
alloc(hook, 128)
label(return)

hook:
push esi
call register_npc
sub esp,1C
push ebx
push ebp
jmp return

ps_game.exe+1D3A0:
jmp hook
return:

[DISABLE]
dealloc(hook)

ps_game.exe+1D3A0:
sub esp,1C
push ebx
push ebp

Code:

{
 Author: Cups, 26th April 2019

 Deregisters a npc from our npc list when they
 exit the game world
}
[ENABLE]
alloc(hook, 128)
label(return)

hook:
push esi
call deregister_npc
sub esp,08
push ebx
push edi
jmp return

ps_game.exe+1E3B0:
jmp hook
return:

[DISABLE]
dealloc(hook)

ps_game.exe+1E3B0:
sub esp,08
push ebx
push edi

Function wrappers

Code:

alloc(player_delete_item, 128)
registersymbol(player_delete_item)

{
Deletes an item from the player

Usage:
push player
push item
call DeleteItem
}
player_delete_item:
push ebp
mov ebp, esp

// Preserve the state of our registers
pushad
pushfd

mov edi,[ebp+08] // Item
mov ebx,[ebp+0C] // Player

// ECX = Type, EDX = TypeID
movzx ecx,[edi+40]
movzx edx,[edi+41]

// Delete the item
push edx
push ecx
push ebx
call CUser::ItemDelete

// Restore the stack
popfd
popad
pop ebp
retn #8

Code:

{
Author: Cups

A function wrapper used to give a player an item

Usage:
push player
push type
push type_id
call create_item_player
}
[ENABLE]
alloc(create_item_player, 128)
label(exit)
registersymbol(create_item_player)

// Creates an item for a player (player, type, typeid)
create_item_player:
push ebp // Save EBP
mov ebp, esp // Move the current stack to EBP
mov ecx,[ebp+8] // TypeID
mov eax,[ebp+0C] // Type
mov edi,[ebp+10] // Player
call CGameData::GetItemInfo // Result is now in EAX

// If the item info pointer is 0, don't create the item
cmp eax,0
je exit

// Player needs to be in ECX
mov ecx,edi
push #1 // Item count
push eax // Item data
call CUser::ItemCreate

exit:
pop ebp // Restore EBP to it's previous value
retn 0C // Restore the stack

Code:

// Author: Cups
// A function wrapper used to send a packet to a user
//
// Usage:
// push player
// push packet
// push length
// call send_packet_player
[ENABLE]
alloc(send_packet_player, 128)
registersymbol(send_packet_player)

// Send a packet to a user
send_packet_player:
push ebp // Save EBP
mov ebp, esp // Move the current stack to EBP
mov edx,[ebp+8] // Length
mov eax,[ebp+0C] // Packet
mov edi,[ebp+10] // Player

// Preserve the state of ECX
push ecx

// The player for the SConnection::Send
mov ecx,edi

// Push the packet length
push edx

// Push the packet data
push eax

// Call the function
call SConnection::Send

// Restore the state of ECX
pop ecx

pop ebp // Restore EBP to it's previous value
retn 0C // Restore the stack

Custom functions

Code:

{
 Author: Cups, 29th April 2019

 Checks the state of timed maps and teleports players out
 if the map has closed.
}
[ENABLE]
alloc(timed_maps, 1024)
label(procedure)
label(map_loop)
label(loop_continue)
label(map_count)
label(map_list)
label(teleport_positions)
label(teleport_positions_light)
label(teleport_positions_fury)
label(teleport_positions_loop)
label(teleport_positions_bind)
label(teleport_positions_return)
label(time)
createthread(procedure)

timed_maps:

// The number of maps to check
map_count:
dd #1

{
 The list of map data to process. Format should be:

 dd #map_id_to_check
 dd #fury_destination_map (float)destX (float)destY (float)destZ
 dd #light_destination_map (float)destX (float)destY (float)destZ
}
map_list:

// Oblivion Insula
dd #64
dd #0 (float)100.00        (float)95.30              (float)42.30
dd #1 (float)20.00         (float)63.00              (float)10.00

// The procedure to check maps
procedure:

// Sleep for 1 second
push #1000
call KERNEL32.Sleep

// The current indexer
mov edx,[map_count]
mov ebp,map_list

// Loop through the maps
map_loop:
test edx,edx
je procedure
dec edx // EDX is the current map index
mov esi,edx
imul esi,#36
mov eax,[map_list+esi]
push edx

// Get the map pointer
imul eax,#520
mov ecx,[CWorld::Instance]
add eax,[ecx+CWorld.MapList]
test eax,eax
je procedure

// Move the map into edi
mov edi,eax

// If map can be entered
push time
push edi
call ps_game.exe+2F770
test eax,eax
jne loop_continue // Continue if the map is still open

mov edi,[edi] // CZone instance for the map
call ps_game.exe+29A00 // Move all users to the respawn location

// Continue the thread
loop_continue:
pop edx
jmp map_loop

// The time that the map will close
time:
db 00 00 00 00

// Define the teleport positions
teleport_positions:
pushad
pushfd

// The current map index and list
mov eax,[map_count]

// Loop through the maps
teleport_positions_loop:
test eax,eax
je teleport_positions_return
dec eax // EDX is the current map index
mov ecx,eax
imul ecx,#36
add ecx,map_list // EBP is the current map

// If we are not supposed to be checking this map, continue on with the loop
mov edx,[ecx]
cmp [ebx+CMap.Id],edx
jne teleport_positions_loop

// If the player to check for is a Light
cmp byte ptr [esi+CUser.Faction],0
jne teleport_positions_fury

// Configure the position offset for the Light
teleport_positions_light:
add ecx,#20
jmp teleport_positions_bind

// Configure the position offset for the Fury
teleport_positions_fury:
add ecx,#4

// Bind the destination positions
teleport_positions_bind:

// Teleport Type and Delay
mov [esi+CUser.TeleportType],#1
mov [esi+CUser.TeleportDelay],#1000

// Destination Map
mov edx,[ecx]
mov [esi+CUser.TeleportMapId],edx

// DestinationX
mov edx,[ecx+4]
mov [esi+CUser.TeleportDestX],edx

// DestinationZ
mov edx,[ecx+8]
mov [esi+CUser.TeleportDestZ],edx

// DestinationY
mov edx,[ecx+0C]
mov [esi+CUser.TeleportDestY],edx

popfd
popad
jmp ps_game.exe+29ADA

// Return control to the original procedure
teleport_positions_return:
popfd
popad
cmp dword ptr [esi+0000587C],00
jmp ps_game.exe+29A81

// Insert the teleport position call
ps_game.exe+29A76:
jmp teleport_positions
nop

Code:

{
 Author: Cups, 27th April 2019

 Changes the time required to wait after
 pressing the "Resurrect on Leader" button
}
[ENABLE]
ps_game.exe+78EA2:
add eax,#5000

[DISABLE]
ps_game.exe+78EA2:
add eax,#30000

Code:

{
Author: Cups, 13th March 2018

Customises the "item creation" system at the Professional Blacksmith
}
[ENABLE]
alloc(item_creation, 4096) // Allocate enough bytes for all of our operations
label(CreationNoticePacket)
label(ItemCombination_Count)
label(ItemCombinations)
label(ItemRemake)
label(ItemRemake_Success)
label(ItemRemake_Success_Packet)
label(ItemRemake_Failed)
label(ItemRemake_Failed_Packet)
label(ItemRemake_Exit)
label(ItemComboCheck)
label(ItemComboCheck_Loop)
label(ItemComboCheck_Loop_Continue)
label(ItemComboCheck_Loop_Exit)

// Newly allocated memory
item_creation:

CreationNoticePacket:
db 0B F9
db #38
db 'You have successfully crafted an item!'
db 00

// The number of item combinations
ItemCombination_Count:
dd #4

// The item combinations (Third, Second, First, Result)
ItemCombinations:
dd #10065        #10065       #10065      #30001 // Queen Mab x 3
dd #100133       #100132      #100131     #91001
dd #100171       #100171      #100171     #100192
dd #30065        #28046       #30064      #30066

// The packet sent upon a successful item remake
ItemRemake_Success_Packet:
db 07 08 00

// The packet sent upon a failed item remake
ItemRemake_Failed_Packet:
db 07 08 02

{
Checks if an item is contained in a combination, and if so, returns
the item to create.

Usage:
push first_item
push second_item
push third_item
call ItemComboCheck
}
ItemComboCheck:
push ebp
mov ebp, esp

// Preserve the state of our registers
pushad
pushfd

// The items to check (Third, Second, First)
mov edx,[ebp+08]
mov ebx,[ebp+0C]
mov edi,[ebp+10]

// Define the items as their ids
mov edx,[edx+30]
mov edx,[edx]
mov ebx,[ebx+30]
mov ebx,[ebx]
mov edi,[edi+30]
mov edi,[edi]

// ESI = Item Array, EBX = Item Count
mov eax,[ItemCombination_Count]
mov esi,ItemCombinations

// Start of our loop
ItemComboCheck_Loop:
cmp eax,0
je ItemComboCheck_Loop_Exit

// If the first items are equal
cmp edx,[esi]
jne ItemComboCheck_Loop_Continue

// If the second items are equal
cmp ebx,[esi+04]
jne ItemComboCheck_Loop_Continue

// If the third items are equal
cmp edi,[esi+08]
jne ItemComboCheck_Loop_Continue

// Store the result on the stack
mov eax,dword ptr [esi+0C]
mov [ebp+08],eax

// Restore the registers
popfd
popad

// Set the result as the fourth item
mov eax,[ebp+08]

// Restore the stack
pop ebp
retn #12

// Continue iterating to the next item
ItemComboCheck_Loop_Continue:
dec eax
add esi,#16
jmp ItemComboCheck_Loop

// Exit the loop
ItemComboCheck_Loop_Exit:

// Restore the stack
popfd
popad
mov eax,0
pop ebp
retn #12

{
CUser::ItemRemake(CUser*, void* packet)

Packet structure:
07 08 = opcode
byte[3] = bags
byte[3] = slots
}
ItemRemake:

// Preserve the state of the stack
push ebp
mov ebp,esp

// Define the values from our stack parameters
// EBX = Current Player
mov esi,[ebp+08] // Packet

// Skip the opcode of the packet - it's not required
add esi,#2

// Preserve the state of our registers
push edx
push ecx
push edi
push ebx

// Check that the bags are under 5
cmp byte ptr [esi],#5
jg ItemRemake_Exit
cmp byte ptr [esi+1],#5
jg ItemRemake_Exit
cmp byte ptr [esi+2],#5
jg ItemRemake_Exit

// Check that the slots are under 23
cmp byte ptr [esi+3],#23
jg ItemRemake_Exit
cmp byte ptr [esi+4],#23
jg ItemRemake_Exit
cmp byte ptr [esi+5],#23
jg ItemRemake_Exit

// The location of an item is defined as:
// Player+0x1C0 + (Bag * 0x60) + (Slot * 0x4)

// Allocate bytes on the stack for our items
sub esp,#12

// Get the first item
movzx eax,[esi] // The bag
movzx ecx,[esi+3] // The slot
push ebx
push eax
push ecx
call GetItemAtPosition
mov [esp],eax

// Get the second item
movzx eax,[esi+1] // The bag
movzx ecx,[esi+4] // The slot
push ebx
push eax
push ecx
call GetItemAtPosition
mov [esp+4],eax

// Get the third item
movzx eax,[esi+2] // The bag
movzx ecx,[esi+5] // The slot
push ebx
push eax
push ecx
call GetItemAtPosition
mov [esp+8],eax

// If the items don't exist, do nothing
cmp dword ptr [esp],#0
je ItemRemake_Exit
cmp dword ptr [esp+4],#0
je ItemRemake_Exit
cmp dword ptr [esp+8],#0
je ItemRemake_Exit

// ECX is the current item to check
mov ecx,[esp+4]

// If any of the items are the same, do nothing
cmp [esp],ecx
je ItemRemake_Exit
mov ecx,[esp+8]
cmp [esp],ecx
je ItemRemake_Exit
cmp ecx,[esp+4]
je ItemRemake_Exit

// Check if the item is in a combination
push [esp]
push [esp+4]
push [esp+8]
call ItemComboCheck

// Restore the player pointer
pop ebx

// If the item is in a combination
cmp eax,0
jne ItemRemake_Success

// Failed to remake the item
jmp ItemRemake_Failed

// Send the successful remake packet
ItemRemake_Success:

// Delete the items
{
push ebx
push edi
call player_delete_item
push ebx
push esi
call player_delete_item
push ebx
push ecx
call player_delete_item
}
// EAX is the item to create, we need to calculate the type and typeid
mov edx,0 // Clear the dividend
mov ecx,#1000 // Divisor
div ecx // EAX = Quotient, EDX = Remainder

// Push the player, type and type id, and create the item
push ebx
push eax
push edx
call create_item_player

// Push the player, packet and length
push ebx
push ItemRemake_Success_Packet
push #3
call send_packet_player

// Send the notice packet
push ebx
push CreationNoticePacket
push #41
call send_packet_player

jmp ItemRemake_Exit

// Send the failed remake packet
ItemRemake_Failed:

// Push the player, packet and length
push ebx
push ItemRemake_Failed_Packet
push #3
call send_packet_player

// Restore the stack
ItemRemake_Exit:
add esp,#12
pop edx
pop ecx
pop edi

mov esp,ebp
pop ebp
ret #4

// Jump to our new procedure
ps_game.exe+6D950:
jmp ItemRemake
nop

[DISABLE]
dealloc(item_creation)

// Restore the original CUser::ItemRemake procedure
ps_game.exe+6D950:
sub esp,#752

Code:

{
Author: Cups, 6th March 2018

Removes the fee on removing an item from the Warehouse
}
[ENABLE]

// Player Warehouse
ps_game.exe+68ECB:
mov eax,0
db 90 90 90 90 90 90

// Guild Warehouse
ps_game.exe+35C86:
mov eax,0
db 90 90 90 90 90 90

[DISABLE]

// Player Warehouse
ps_game.exe+68ECB:
movzx eax,byte ptr [esi+42]
imul eax,[ecx+00000084]

// Guild Warehouse
ps_game.exe+35C86:
movzx ecx,byte ptr [ecx+42]
imul ecx,[eax+00000084]

Code:

{
Author: Cups, 7th March 2018

Disallows usage of specific items, unless they are in a guild that is currently
rank 1 from GRB.
}
[ENABLE]
alloc(item_check, 1024)
alloc(restricted_items_array, 1024)
label(item_count)
label(restricted_items)
label(restricted_loop)
label(loop_exit)
label(is_guild_rank1)
label(original_code)
label(disallow_item_use)
label(return)

// The memory used for our restricted item array
restricted_items_array:

// The number of items that are restricted
item_count:
dd #0

// The list of restricted item ids
restricted_items:
dd #0

// Checks the item in use (EBX = Item Pointer, EBP = Player)
item_check:

// Preserve the state of EAX and EDX
push eax
push edx

// Move the type to eax
movzx eax,[ebx+40]
mov edx,#1000

// Multiple the type by 1000
mul edx // EAX is now (type * 1000)

// Add the type id, eax is now a 4-byte item id
movzx edx,[ebx+41]
add eax,edx

// EDX is now the number of items in the restricted item array
mov edx,[item_count]

// Preserve the state of EDI - it will be our iterator
push edi

// Set EDI to the start of our array
mov edi,restricted_items

// Beginning of our loop
restricted_loop:

// If no items are left, exit the loop
cmp edx,0
je loop_exit
cmp eax,[edi]
je is_guild_rank1
add edi,4
sub edx,1
jmp restricted_loop

// Exit the loop
loop_exit:

// Restore the state of our iterator
pop edi

// The original code that we overwrote
original_code:
mov [esp+2C],ebx
test ebx,ebx
pop eax
pop edx
jmp return

// Check if the user is in a rank 1 guild
is_guild_rank1:

// If the player is not in a guild, disallow the item use
cmp dword ptr [ebp+1800],0
je disallow_item_use

// edi is now the CGuild ptr
mov edi,[ebp+1810]

// If the guild is not rank 1, disallow the item use
cmp byte ptr [edi+48],1
pop edi
jne disallow_item_use
jmp original_code

// Disallow the item usage
disallow_item_use:
pop edx
pop eax
jmp ps_game.exe+74698 // Jump to a call for CUser::ItemUseError

// Jump to our item check call
ps_game.exe+72E0A:
jmp item_check
nop
return:

[DISABLE]
dealloc(item_check)
dealloc(restricted_items_array)

ps_game.exe+72E0A:
mov [esp+2C],ebx
test ebx,ebx

Code:

{
Author: Cups, 6th March 2018

Allows users with an admin status to join a manual raid
}
[ENABLE]
alloc(raid_autojoin_override, 128)
alloc(raid_autojoin_override2, 128)
define(allow_join, ps_game.exe+50507)
define(allow_join2, ps_game.exe+7580D)
label(return)
label(return2)

// Override the check for joining a manual raid
raid_autojoin_override2:

// If the user has an admin status
cmp [ebp+CUser.AdminStatus],#11
jl allow_join2

// If the user is not an admin, check if the raid is manual before allowing entry
cmp byte ptr [eax+00000115],00
jmp return2

// Override the check for joining a manual raid
raid_autojoin_override:

// If the user has an admin status
cmp [ebx+5808],#11
jl allow_join

// If the user is not an admin, check if the raid is manual before allowing entry
cmp byte ptr [eax+00000115],00
jmp return

// Checks if the raid is manual
ps_game.exe+757DE:
jmp raid_autojoin_override2
db 90 90
return2:

// Checks if the raid is manual
ps_game.exe+504FE:
jmp raid_autojoin_override
db 90 90
return:

[DISABLE]
dealloc(raid_autojoin_override)

ps_game.exe+504FE:
cmp byte ptr [eax+00000115],00

ps_game.exe+757DE:
cmp byte ptr [eax+00000115],00

Code:

{
Author: Cups, 6th March 2018

Allows users with an admin status to join a raid regardless of it's faction
}
[ENABLE]
alloc(raid_faction_override, 128)
define(allow_join, ps_game.exe+757D8)
label(return)

// Override the check for faction when joining a raid
raid_faction_override:

// If the user has an admin status
cmp [ebp+5808],#11
jl allow_join

// If the user is not an admin, check if the raid is of the same faction
cmp dl,[edi+0000012D]
jmp return

// Checks if the user is in the same faction
ps_game.exe+757C0:
jmp raid_faction_override
db 90
return:

[DISABLE]
dealloc(raid_autojoin_override)

ps_game.exe+757C0:
cmp dl,[edi+0000012D]

Code:

{
 Author: Cups, 8th May 2019

 Stops deaths from being incremented in PvP.
}
[ENABLE]
ps_game.exe+67EFE:
db 90 90 90 90 90 90
[DISABLE]
ps_game.exe+67EFE:
mov [esi+CUser.Deaths],eax

Code:

{
 Author: Cups, 21st May 2019

 Modifies the check for maximum enchant level based on the
 level of the item.
}
[ENABLE]

// Allocate extra memory for our new check
alloc(enchant_check, 128)
label(check_15)
label(check_30)
label(return)

// The maximum enchant levels for Lv15, Lv30, and Lv31+
define(max_enchant_15, #5)
define(max_enchant_30, #7)
define(max_enchant_31, #10)

// The new enchant cap check
enchant_check:
push eax
xor eax,eax

// Grab the level of the item being enchanted
mov eax,[edi+30]
mov ax,word ptr [eax+2E]

// If the level is 15 or lower
cmp ax,#15
jle check_15

// If the level is 30 or lower
cmp ax,#30
jle check_30

// Check the 31+ enchant cap
pop eax
cmp byte ptr [esp+13],max_enchant_31
jmp return

// Check the 30 enchant cap
check_30:
pop eax
cmp byte ptr [esp+13],max_enchant_30
jmp return

// Check the 15 enchant cap
check_15:
pop eax
cmp byte ptr [esp+13],max_enchant_15
jmp return

// Insert the jump to our new enchant cap check
ps_game.exe+6CCBD:
jmp enchant_check
return:

[DISABLE]
dealloc(enchant_check)

ps_game.exe+6CCBD:
cmp byte ptr [esp+13],#20

Code:

{
 Author: Cups, 8th May 2019

 Adds support for an item effect to spawn a mob at the player's location
}
[ENABLE]
alloc(SpawnMobItemEffect,        128)
registersymbol(SpawnMobItemEffect)

{
 Gets executed when a player uses an item that should spawn a mob.

 ESI = Player
 EAX = Variant
}
SpawnMobItemEffect:

// Push the current zone
mov ecx,[esi+CUser.Zone]
push ecx

// Grab the current position
mov ecx,eax
lea ebx,[esi+CUser.PosX]
mov eax,1 // The number of mobs to spawn
call CZone::MobGen
retn

[DISABLE]
dealloc(SpawnMobItemEffect)
unregistersymbol(SpawnMobItemEffect)

Code:

{
 Author: Cups, 8th May 2019

 Adds support for an item effect to spawn an NPC at the player's location
}
[ENABLE]
alloc(SpawnNpcItemEffect,        128)
alloc(HeightOffset,              4)
registersymbol(SpawnNpcItemEffect)

// The height offset for spawning a NPC properly
HeightOffset:
dd (float)0.9

{
 Gets executed when a player uses an item that should spawn an NPC.

 ESI = Player
 EAX = Variant
}
SpawnNpcItemEffect:

// Allocate 12 bytes on the stack for the position
sub esp,0C

// Move the X and Z values
mov edx,[esi+CUser.PosX]
mov [esp],edx
mov edx,[esi+CUser.PosZ]
mov [esp+8],edx

// Load the user's height and decrement 0.9
fld dword ptr [esi+CUser.PosY]
fsub dword ptr [HeightOffset]
fstp dword ptr [esp+4]

// Grab the current position
mov edi,esp

// Divide the variant by 1000
xor edx,edx
mov ecx,#1000
div ecx
push edx
push eax

// Move the zone into ECX
mov ecx,[esi+CUser.Zone]
call CZone::NpcCreate
add esp,0C

retn

[DISABLE]
dealloc(SpawnNpcItemEffect)
dealloc(HeightOffset)
unregistersymbol(SpawnNpcItemEffect)

Code:

 Author: Cups, 8th May 2019

 Adds support for handling custom item effects
}
[ENABLE]
alloc(EffectList,          1024)
alloc(ItemEffectHook,      128)
label(Success)
label(Exit)
label(Return)

{
 The list of functions to execuute at specific effect types. This
 list starts at effect 80.
}
EffectList:
dd SpawnMobItemEffect      // 80
dd SpawnNpcItemEffect      // 81

{
 Checks for the effect value of an item, and if it matches any
 in the effect list, executes the item.

 EAX = Item Definition
 ECX = Item effect
 ESI = Player
}
ItemEffectHook:
movzx ecx,byte ptr [eax+46] // ECX is the item effect
push ebx
push edx

// EBX is the item effect type
cmp ecx,#80
jl Exit // If lower than 80, exit the procedure
mov ebx,ecx
sub ebx,#80

// EDX is the function pointer
mov edx,[ebx*4+EffectList]

// If no function exists for the effect, exit the hook
test edx,edx
je Exit

// Call the item effect function
pushad
pushfd
mov eax,[eax+stItemInfo.Variant]
call edx
popfd
popad
jmp Success

// Successful execution
Success:
pop edx
pop ebx
jmp ps_game.exe+73197

// Exit the item effect hook
Exit:
pop edx
pop ebx
jmp Return

// Insert the hook
ps_game.exe+73163:
jmp ItemEffectHook
db 90 90
Return:

[DISABLE]
dealloc(EffectList)
dealloc(ItemEffectHook)

ps_game.exe+73163:
movzx ecx,byte ptr [eax+46]
cmp ecx,4C

Code:

{
 Author: Cups, 12th May 2019

 Allows admin characters to ignore the distance checks
 when running, as Ep8 enables invisible GMs to move quicker
 than normally allowed.
}
[ENABLE]
alloc(Hook, 128)
label(Return)

Hook:
call ps_game.exe+78240
cmp [edi+CUser.AdminStatus],0
je Return
xor eax,eax
jmp Return

ps_game.exe+78670:
jmp Hook
Return:

[DISABLE]
dealloc(Hook, 128)

ps_game.exe+78670:
call ps_game.exe+78240

Code:

// Disables the call to the database for /warning (fixes SQL injection via warning)
[ENABLE]
ps_game.exe+836C6:
jmp ps_game.exe+841B8

[DISABLE]
ps_game.exe+836C6:
mov ebx,[esp+18]
push edi

Save this as "Shaiya.CSX" and import it to cheat engine to enable usage of named fields in scripts / debugging (has several identified structures to make development easier)

Code:

<Structures>
  <Structure Name="CUser" AutoFill="0" AutoCreate="1" DefaultHex="0" AutoDestroy="0" DoNotSaveLocal="0" RLECompression="1" AutoCreateStructsize="4096">
    <Elements>
      <Element Offset="208" Vartype="Float" Bytesize="4" Description="PosX" DisplayMethod="Unsigned Integer"/>
      <Element Offset="212" Vartype="Float" Bytesize="4" Description="PosZ" DisplayMethod="Unsigned Integer"/>
      <Element Offset="216" Vartype="Float" Bytesize="4" Description="PosY" DisplayMethod="Unsigned Integer"/>
      <Element Offset="224" Vartype="Pointer" Bytesize="4" ChildStruct="CZone" Description="Zone" DisplayMethod="Unsigned Integer"/>
      <Element Offset="296" Vartype="4 Bytes" Bytesize="4" Description="CharId" DisplayMethod="Unsigned Integer"/>
      <Element Offset="300" Vartype="Byte" Bytesize="1" Description="Slot" DisplayMethod="Unsigned Integer"/>
      <Element Offset="301" Vartype="Byte" Bytesize="1" Description="Faction" DisplayMethod="Unsigned Integer"/>
      <Element Offset="302" Vartype="Byte" Bytesize="1" Description="Family" DisplayMethod="Unsigned Integer"/>
      <Element Offset="303" Vartype="Byte" Bytesize="1" Description="Mode" DisplayMethod="Unsigned Integer"/>
      <Element Offset="304" Vartype="Byte" Bytesize="1" Description="Hair" DisplayMethod="Unsigned Integer"/>
      <Element Offset="305" Vartype="Byte" Bytesize="1" Description="Face" DisplayMethod="Unsigned Integer"/>
      <Element Offset="306" Vartype="Byte" Bytesize="1" Description="Height" DisplayMethod="Unsigned Integer"/>
      <Element Offset="307" Vartype="Byte" Bytesize="1" Description="Gender" DisplayMethod="Unsigned Integer"/>
      <Element Offset="308" Vartype="Byte" Bytesize="1" Description="Job" DisplayMethod="Unsigned Integer"/>
      <Element Offset="310" Vartype="2 Bytes" Bytesize="2" Description="Level" DisplayMethod="Unsigned Integer"/>
      <Element Offset="312" Vartype="2 Bytes" Bytesize="2" Description="Statpoints" DisplayMethod="Unsigned Integer"/>
      <Element Offset="314" Vartype="2 Bytes" Bytesize="2" Description="Skillpoints" DisplayMethod="Unsigned Integer"/>
      <Element Offset="316" Vartype="4 Bytes" Bytesize="4" Description="Experience" DisplayMethod="Unsigned Integer"/>
      <Element Offset="320" Vartype="4 Bytes" Bytesize="4" Description="Money" DisplayMethod="Unsigned Integer"/>
      <Element Offset="328" Vartype="4 Bytes" Bytesize="4" Description="Kills" DisplayMethod="Unsigned Integer"/>
      <Element Offset="332" Vartype="4 Bytes" Bytesize="4" Description="Deaths" DisplayMethod="Unsigned Integer"/>
      <Element Offset="336" Vartype="4 Bytes" Bytesize="4" Description="Victories" DisplayMethod="Unsigned Integer"/>
      <Element Offset="340" Vartype="4 Bytes" Bytesize="4" Description="Defeats" DisplayMethod="Unsigned Integer"/>
      <Element Offset="344" Vartype="4 Bytes" Bytesize="4" Description="KillRank" DisplayMethod="Unsigned Integer"/>
      <Element Offset="348" Vartype="4 Bytes" Bytesize="4" Description="DeathRank" DisplayMethod="Unsigned Integer"/>
      <Element Offset="354" Vartype="2 Bytes" Bytesize="2" Description="Direction" DisplayMethod="Unsigned Integer"/>
      <Element Offset="356" Vartype="2 Bytes" Bytesize="2" Description="HG" DisplayMethod="Unsigned Integer"/>
      <Element Offset="358" Vartype="2 Bytes" Bytesize="2" Description="VG" DisplayMethod="Unsigned Integer"/>
      <Element Offset="360" Vartype="Byte" Bytesize="1" Description="CG" DisplayMethod="Unsigned Integer"/>
      <Element Offset="361" Vartype="Byte" Bytesize="1" Description="OG" DisplayMethod="Unsigned Integer"/>
      <Element Offset="362" Vartype="2 Bytes" Bytesize="2" Description="IG" DisplayMethod="Unsigned Integer"/>
      <Element Offset="364" Vartype="2 Bytes" Bytesize="2" Description="STR" DisplayMethod="Unsigned Integer"/>
      <Element Offset="366" Vartype="2 Bytes" Bytesize="2" Description="DEX" DisplayMethod="Unsigned Integer"/>
      <Element Offset="368" Vartype="2 Bytes" Bytesize="2" Description="INT" DisplayMethod="Unsigned Integer"/>
      <Element Offset="370" Vartype="2 Bytes" Bytesize="2" Description="WIS" DisplayMethod="Unsigned Integer"/>
      <Element Offset="372" Vartype="2 Bytes" Bytesize="2" Description="REC" DisplayMethod="Unsigned Integer"/>
      <Element Offset="374" Vartype="2 Bytes" Bytesize="2" Description="LUC" DisplayMethod="Unsigned Integer"/>
      <Element Offset="376" Vartype="4 Bytes" Bytesize="4" Description="MaxHitpoints" DisplayMethod="Unsigned Integer"/>
      <Element Offset="380" Vartype="4 Bytes" Bytesize="4" Description="MaxMana" DisplayMethod="Unsigned Integer"/>
      <Element Offset="384" Vartype="4 Bytes" Bytesize="4" Description="MaxStamina" DisplayMethod="Unsigned Integer"/>
      <Element Offset="388" Vartype="String" Bytesize="32" Description="Name" DisplayMethod="Unsigned Integer"/>
      <Element Offset="2736" Vartype="4 Bytes" Bytesize="4" Description="DoubleWarehouse" DisplayMethod="Unsigned Integer"/>
      <Element Offset="4636" Vartype="4 Bytes" Bytesize="4" Description="AbilityStr" DisplayMethod="Unsigned Integer"/>
      <Element Offset="4640" Vartype="4 Bytes" Bytesize="4" Description="AbilityDex" DisplayMethod="Unsigned Integer"/>
      <Element Offset="4644" Vartype="4 Bytes" Bytesize="4" Description="AbilityInt" DisplayMethod="Unsigned Integer"/>
      <Element Offset="4648" Vartype="4 Bytes" Bytesize="4" Description="AbilityWis" DisplayMethod="Unsigned Integer"/>
      <Element Offset="4652" Vartype="4 Bytes" Bytesize="4" Description="AbilityRec" DisplayMethod="Unsigned Integer"/>
      <Element Offset="4656" Vartype="4 Bytes" Bytesize="4" Description="AbilityLuc" DisplayMethod="Unsigned Integer"/>
      <Element Offset="4660" Vartype="4 Bytes" Bytesize="4" Description="Hitpoints" DisplayMethod="Unsigned Integer"/>
      <Element Offset="4664" Vartype="4 Bytes" Bytesize="4" Description="Mana" DisplayMethod="Unsigned Integer"/>
      <Element Offset="4668" Vartype="4 Bytes" Bytesize="4" Description="Stamina" DisplayMethod="Unsigned Integer"/>
      <Element Offset="4696" Vartype="4 Bytes" Bytesize="4" Description="RegenHitpoints" DisplayMethod="Unsigned Integer"/>
      <Element Offset="4700" Vartype="4 Bytes" Bytesize="4" Description="RegenMana" DisplayMethod="Unsigned Integer"/>
      <Element Offset="4704" Vartype="4 Bytes" Bytesize="4" Description="RegenStamina" DisplayMethod="Unsigned Integer"/>
      <Element Offset="4848" Vartype="4 Bytes" Bytesize="4" Description="AbilityAttackRange" DisplayMethod="Unsigned Integer"/>
      <Element Offset="4852" Vartype="4 Bytes" Bytesize="4" Description="AbilityAttackSpeed" DisplayMethod="Unsigned Integer"/>
      <Element Offset="4856" Vartype="4 Bytes" Bytesize="4" Description="AbilityMoveSpeed" DisplayMethod="Unsigned Integer"/>
      <Element Offset="4860" Vartype="4 Bytes" Bytesize="4" Description="AbilityCritChance" DisplayMethod="Unsigned Integer"/>
      <Element Offset="4864" Vartype="4 Bytes" Bytesize="4" Description="PotentialMotive" DisplayMethod="Unsigned Integer"/>
      <Element Offset="4876" Vartype="4 Bytes" Bytesize="4" Description="NumBagsUnlocked" DisplayMethod="Unsigned Integer"/>
      <Element Offset="4996" Vartype="4 Bytes" Bytesize="4" Description="AbilityHitChance" DisplayMethod="Unsigned Integer"/>
      <Element Offset="5000" Vartype="4 Bytes" Bytesize="4" Description="AbilityAttackPower" DisplayMethod="Unsigned Integer"/>
      <Element Offset="5004" Vartype="4 Bytes" Bytesize="4" Description="AbilityPhysicalEvasion" DisplayMethod="Unsigned Integer"/>
      <Element Offset="5008" Vartype="4 Bytes" Bytesize="4" Description="AbilityPhysicalDefenceReduction" DisplayMethod="Unsigned Integer"/>
      <Element Offset="5016" Vartype="4 Bytes" Bytesize="4" Description="AbilityRangeAttackPower" DisplayMethod="Unsigned Integer"/>
      <Element Offset="5020" Vartype="4 Bytes" Bytesize="4" Description="AbilityRangeEvasion" DisplayMethod="Unsigned Integer"/>
      <Element Offset="5024" Vartype="4 Bytes" Bytesize="4" Description="AbilityRangeDefenceReduction" DisplayMethod="Unsigned Integer"/>
      <Element Offset="5028" Vartype="4 Bytes" Bytesize="4" Description="AbilityMagicHitChance" DisplayMethod="Unsigned Integer"/>
      <Element Offset="5032" Vartype="4 Bytes" Bytesize="4" Description="AbilityMagicAttackPower" DisplayMethod="Unsigned Integer"/>
      <Element Offset="5040" Vartype="4 Bytes" Bytesize="4" Description="AbilityMagicResist" DisplayMethod="Unsigned Integer"/>
      <Element Offset="5044" Vartype="4 Bytes" Bytesize="4" Description="AbilityDarknessBlow" DisplayMethod="Unsigned Integer"/>
      <Element Offset="5088" Vartype="4 Bytes" Bytesize="4" Description="AbilityDarknessBlow2" DisplayMethod="Unsigned Integer"/>
      <Element Offset="5132" Vartype="4 Bytes" Bytesize="4" Description="AbilitySilentBlow" DisplayMethod="Unsigned Integer"/>
      <Element Offset="5188" Vartype="Byte" Bytesize="1" Description="IsDead" DisplayMethod="Unsigned Integer"/>
      <Element Offset="5196" Vartype="Byte" Bytesize="1" Description="MovementStatus" DisplayMethod="Unsigned Integer"/>
      <Element Offset="6132" Vartype="Pointer" Bytesize="4" ChildStruct="CParty" Description="Party" DisplayMethod="Unsigned Integer"/>
      <Element Offset="6144" Vartype="4 Bytes" Bytesize="4" Description="GuildId" DisplayMethod="Unsigned Integer"/>
      <Element Offset="6148" Vartype="4 Bytes" Bytesize="4" Description="GuildRank" DisplayMethod="Unsigned Integer"/>
      <Element Offset="6160" Vartype="Pointer" Bytesize="4" ChildStruct="CGuild" Description="Guild" DisplayMethod="Unsigned Integer"/>
      <Element Offset="21892" Vartype="4 Bytes" Bytesize="4" Description="LastEnterGrbTick" DisplayMethod="Unsigned Integer"/>
      <Element Offset="22528" Vartype="8 Bytes" Bytesize="8" Description="SessionId" DisplayMethod="Unsigned Integer"/>
      <Element Offset="22536" Vartype="Byte" Bytesize="1" Description="AdminStatus" DisplayMethod="Unsigned Integer"/>
      <Element Offset="22548" Vartype="Byte" Bytesize="1" Description="IsVisible" DisplayMethod="Unsigned Integer"/>
      <Element Offset="22549" Vartype="Byte" Bytesize="1" Description="IsAttackable" DisplayMethod="Unsigned Integer"/>
      <Element Offset="22572" Vartype="4 Bytes" Bytesize="4" Description="UserId" DisplayMethod="Unsigned Integer"/>
      <Element Offset="22580" Vartype="String" Bytesize="32" Description="Username" DisplayMethod="Unsigned Integer"/>
      <Element Offset="22708" Vartype="4 Bytes" Bytesize="4" Description="TeleportType" DisplayMethod="Unsigned Integer"/>
      <Element Offset="22712" Vartype="4 Bytes" Bytesize="4" Description="TeleportDelay" DisplayMethod="Unsigned Integer"/>
      <Element Offset="22716" Vartype="4 Bytes" Bytesize="4" Description="TeleportMapId" DisplayMethod="Unsigned Integer"/>
      <Element Offset="22720" Vartype="Float" Bytesize="4" Description="TeleportDestX" DisplayMethod="Unsigned Integer"/>
      <Element Offset="22724" Vartype="Float" Bytesize="4" Description="TeleportDestZ" DisplayMethod="Unsigned Integer"/>
      <Element Offset="22728" Vartype="Float" Bytesize="4" Description="TeleportDestY" DisplayMethod="Unsigned Integer"/>
      <Element Offset="22860" Vartype="4 Bytes" Bytesize="4" Description="AbilityCharm" DisplayMethod="Unsigned Integer"/>
      <Element Offset="22864" Vartype="4 Bytes" Bytesize="4" Description="AbilityExtraGold" DisplayMethod="Unsigned Integer"/>
      <Element Offset="22868" Vartype="4 Bytes" Bytesize="4" Description="AbilityEndurance" DisplayMethod="Unsigned Integer"/>
      <Element Offset="22872" Vartype="4 Bytes" Bytesize="4" Description="AbilityPreventExpLoss" DisplayMethod="Unsigned Integer"/>
      <Element Offset="22876" Vartype="4 Bytes" Bytesize="4" Description="AbilityPreventItemDrop" DisplayMethod="Unsigned Integer"/>
      <Element Offset="22880" Vartype="4 Bytes" Bytesize="4" Description="AbilityPreventEquipDrop" DisplayMethod="Unsigned Integer"/>
      <Element Offset="22884" Vartype="4 Bytes" Bytesize="4" Description="AbilityWarehouseRecall" DisplayMethod="Unsigned Integer"/>
      <Element Offset="22888" Vartype="4 Bytes" Bytesize="4" Description="AbilityDoubleWarehouse" DisplayMethod="Unsigned Integer"/>
      <Element Offset="22892" Vartype="4 Bytes" Bytesize="4" Description="AbilityPvpExp" DisplayMethod="Unsigned Integer"/>
      <Element Offset="22900" Vartype="4 Bytes" Bytesize="4" Description="AbilityContiRes" DisplayMethod="Unsigned Integer"/>
      <Element Offset="23232" Vartype="4 Bytes" Bytesize="4" Description="Points" DisplayMethod="Unsigned Integer"/>
      <Element Offset="23236" Vartype="Byte" Bytesize="1" Description="IsBuying" DisplayMethod="Unsigned Integer"/>
    </Elements>
  </Structure>
  <Structure Name="ItemContainer" AutoFill="0" AutoCreate="1" DefaultHex="0" AutoDestroy="0" DoNotSaveLocal="0" RLECompression="1" AutoCreateStructsize="4096">
    <Elements>
      <Element Offset="0" Vartype="Pointer" Bytesize="4" ChildStruct="CItem" DisplayMethod="Unsigned Integer"/>
      <Element Offset="4" Vartype="Pointer" Bytesize="4" ChildStruct="CItem" DisplayMethod="Unsigned Integer"/>
      <Element Offset="8" Vartype="Pointer" Bytesize="4" ChildStruct="CItem" DisplayMethod="Unsigned Integer"/>
      <Element Offset="12" Vartype="Pointer" Bytesize="4" ChildStruct="CItem" DisplayMethod="Unsigned Integer"/>
      <Element Offset="16" Vartype="Pointer" Bytesize="4" ChildStruct="CItem" DisplayMethod="Unsigned Integer"/>
      <Element Offset="20" Vartype="Pointer" Bytesize="4" ChildStruct="CItem" DisplayMethod="Unsigned Integer"/>
      <Element Offset="24" Vartype="Pointer" Bytesize="4" ChildStruct="CItem" DisplayMethod="Unsigned Integer"/>
      <Element Offset="28" Vartype="Pointer" Bytesize="4" ChildStruct="CItem" DisplayMethod="Unsigned Integer"/>
      <Element Offset="32" Vartype="Pointer" Bytesize="4" ChildStruct="CItem" DisplayMethod="Unsigned Integer"/>
      <Element Offset="36" Vartype="Pointer" Bytesize="4" ChildStruct="CItem" DisplayMethod="Unsigned Integer"/>
      <Element Offset="40" Vartype="Pointer" Bytesize="4" ChildStruct="CItem" DisplayMethod="Unsigned Integer"/>
      <Element Offset="44" Vartype="Pointer" Bytesize="4" ChildStruct="CItem" DisplayMethod="Unsigned Integer"/>
      <Element Offset="48" Vartype="Pointer" Bytesize="4" ChildStruct="CItem" DisplayMethod="Unsigned Integer"/>
      <Element Offset="52" Vartype="Pointer" Bytesize="4" ChildStruct="CItem" DisplayMethod="Unsigned Integer"/>
      <Element Offset="56" Vartype="Pointer" Bytesize="4" ChildStruct="CItem" DisplayMethod="Unsigned Integer"/>
      <Element Offset="60" Vartype="Pointer" Bytesize="4" ChildStruct="CItem" DisplayMethod="Unsigned Integer"/>
      <Element Offset="64" Vartype="Pointer" Bytesize="4" ChildStruct="CItem" DisplayMethod="Unsigned Integer"/>
      <Element Offset="68" Vartype="Pointer" Bytesize="4" ChildStruct="CItem" DisplayMethod="Unsigned Integer"/>
      <Element Offset="72" Vartype="Pointer" Bytesize="4" ChildStruct="CItem" DisplayMethod="Unsigned Integer"/>
      <Element Offset="76" Vartype="Pointer" Bytesize="4" ChildStruct="CItem" DisplayMethod="Unsigned Integer"/>
      <Element Offset="80" Vartype="Pointer" Bytesize="4" ChildStruct="CItem" DisplayMethod="Unsigned Integer"/>
      <Element Offset="84" Vartype="Pointer" Bytesize="4" ChildStruct="CItem" DisplayMethod="Unsigned Integer"/>
      <Element Offset="88" Vartype="Pointer" Bytesize="4" ChildStruct="CItem" DisplayMethod="Unsigned Integer"/>
      <Element Offset="92" Vartype="Pointer" Bytesize="4" ChildStruct="CItem" DisplayMethod="Unsigned Integer"/>
    </Elements>
  </Structure>
  <Structure Name="CItem" AutoFill="0" AutoCreate="1" DefaultHex="0" AutoDestroy="0" DoNotSaveLocal="0" RLECompression="1" AutoCreateStructsize="4096">
    <Elements>
      <Element Offset="65" Vartype="Byte" Bytesize="1" Description="Type" DisplayMethod="Unsigned Integer"/>
      <Element Offset="66" Vartype="Byte" Bytesize="1" Description="TypeID" DisplayMethod="Unsigned Integer"/>
      <Element Offset="67" Vartype="Byte" Bytesize="1" Description="Count" DisplayMethod="Unsigned Integer"/>
      <Element Offset="69" Vartype="2 Bytes" Bytesize="2" Description="Endurance" DisplayMethod="Unsigned Integer"/>
      <Element Offset="71" Vartype="Array of byte" Bytesize="6" Description="Lapis" DisplayMethod="Unsigned Integer"/>
      <Element Offset="77" Vartype="String" Bytesize="21" Description="Craftname" DisplayMethod="Unsigned Integer"/>
      <Element Offset="98" Vartype="4 Bytes" Bytesize="4" Description="MakeTime" DisplayMethod="Unsigned Integer"/>
      <Element Offset="102" Vartype="Byte" Bytesize="1" Description="MakeType" DisplayMethod="Unsigned Integer"/>
      <Element Offset="114" Vartype="Byte" Bytesize="1" Description="DropType" DisplayMethod="Unsigned Integer"/>
      <Element Offset="115" Vartype="4 Bytes" Bytesize="4" Description="DropId" DisplayMethod="Unsigned Integer"/>
      <Element Offset="119" Vartype="4 Bytes" Bytesize="4" Description="DropMoney" DisplayMethod="Unsigned Integer"/>
      <Element Offset="123" Vartype="Array of byte" Bytesize="22" Description="ExpansionAddValue" DisplayMethod="Unsigned Integer"/>
    </Elements>
  </Structure>
  <Structure Name="CZone" AutoFill="0" AutoCreate="1" DefaultHex="0" AutoDestroy="0" DoNotSaveLocal="0" RLECompression="1" AutoCreateStructsize="4096">
    <Elements>
      <Element Offset="0" Vartype="4 Bytes" Bytesize="4" Description="Id" DisplayMethod="Unsigned Integer"/>
    </Elements>
  </Structure>
  <Structure Name="stPartyUser" AutoFill="0" AutoCreate="1" DefaultHex="0" AutoDestroy="0" DoNotSaveLocal="0" RLECompression="1" AutoCreateStructsize="4096">
    <Elements>
      <Element Offset="0" Vartype="4 Bytes" Bytesize="4" Description="Index" DisplayMethod="Unsigned Integer"/>
      <Element Offset="4" Vartype="Pointer" Bytesize="4" ChildStruct="CUser" Description="CUser" DisplayMethod="Unsigned Integer"/>
    </Elements>
  </Structure>
  <Structure Name="CParty" AutoFill="0" AutoCreate="1" DefaultHex="0" AutoDestroy="0" DoNotSaveLocal="0" RLECompression="1" AutoCreateStructsize="4096">
    <Elements>
      <Element Offset="0" Vartype="4 Bytes" Bytesize="4" Description="Id" DisplayMethod="Unsigned Integer"/>
      <Element Offset="4" Vartype="4 Bytes" Bytesize="4" Description="LeaderIndex" DisplayMethod="Unsigned Integer"/>
      <Element Offset="8" Vartype="Array of byte" Bytesize="240" Description="Members" DisplayMethod="Unsigned Integer"/>
      <Element Offset="248" Vartype="4 Bytes" Bytesize="4" Description="ItemDivType" DisplayMethod="Unsigned Integer"/>
      <Element Offset="252" Vartype="4 Bytes" Bytesize="4" Description="ItemDivSeq" DisplayMethod="Unsigned Integer"/>
      <Element Offset="256" Vartype="4 Bytes" Bytesize="4" Description="MaxUserLevel" DisplayMethod="Unsigned Integer"/>
      <Element Offset="260" Vartype="4 Bytes" Bytesize="4" Description="SubLeaderIndex" DisplayMethod="Unsigned Integer"/>
      <Element Offset="264" Vartype="Byte" Bytesize="1" Description="IsRaid" DisplayMethod="Unsigned Integer"/>
      <Element Offset="265" Vartype="Byte" Bytesize="1" Description="IsAutoJoin" DisplayMethod="Unsigned Integer"/>
    </Elements>
  </Structure>
  <Structure Name="CGuild" AutoFill="0" AutoCreate="1" DefaultHex="0" AutoDestroy="0" DoNotSaveLocal="0" RLECompression="1" AutoCreateStructsize="4096">
    <Elements>
      <Element Offset="0" Vartype="4 Bytes" Bytesize="4" Description="Id" DisplayMethod="Unsigned Integer"/>
      <Element Offset="4" Vartype="String" Bytesize="25" Description="Name" DisplayMethod="Unsigned Integer"/>
      <Element Offset="29" Vartype="String" Bytesize="21" Description="LeaderName" DisplayMethod="Unsigned Integer"/>
      <Element Offset="52" Vartype="4 Bytes" Bytesize="4" Description="OfficerCount" DisplayMethod="Unsigned Integer"/>
      <Element Offset="56" Vartype="4 Bytes" Bytesize="4" Description="Faction" DisplayMethod="Unsigned Integer"/>
      <Element Offset="64" Vartype="Byte" Bytesize="1" Description="Rank" DisplayMethod="Unsigned Integer"/>
      <Element Offset="68" Vartype="4 Bytes" Bytesize="4" Description="Etin" DisplayMethod="Unsigned Integer"/>
      <Element Offset="72" Vartype="4 Bytes" Bytesize="4" Description="KeepEtin" DisplayMethod="Unsigned Integer"/>
      <Element Offset="76" Vartype="Byte" Bytesize="1" Description="HasHouse" DisplayMethod="Unsigned Integer"/>
      <Element Offset="77" Vartype="Byte" Bytesize="1" Description="BoughtHouse" DisplayMethod="Unsigned Integer"/>
      <Element Offset="78" Vartype="String" Bytesize="65" Description="Message" DisplayMethod="Unsigned Integer"/>
      <Element Offset="144" Vartype="4 Bytes" Bytesize="4" Description="GrbPointsEarned" DisplayMethod="Unsigned Integer"/>
      <Element Offset="148" Vartype="4 Bytes" Bytesize="4" Description="EtinReturnCount" DisplayMethod="Unsigned Integer"/>
      <Element Offset="152" Vartype="4 Bytes" Bytesize="4" Description="RankJoinCount" DisplayMethod="Unsigned Integer"/>
      <Element Offset="156" Vartype="Array of byte" Bytesize="960" Description="GuildBank" DisplayMethod="Unsigned Integer"/>
    </Elements>
  </Structure>
  <Structure Name="CMap" AutoFill="0" AutoCreate="1" DefaultHex="0" AutoDestroy="0" DoNotSaveLocal="0" RLECompression="1" AutoCreateStructsize="4096">
    <Elements>
      <Element Offset="0" Vartype="Pointer" Bytesize="4" ChildStruct="CZone" Description="Zone" DisplayMethod="Unsigned Integer"/>
      <Element Offset="4" Vartype="4 Bytes" Bytesize="4" Description="Size" DisplayMethod="Unsigned Integer"/>
    </Elements>
  </Structure>
  <Structure Name="CZoneNode" AutoFill="0" AutoCreate="1" DefaultHex="0" AutoDestroy="0" DoNotSaveLocal="0" RLECompression="1" AutoCreateStructsize="4096">
    <Elements>
      <Element Offset="0" Vartype="Pointer" Bytesize="4" ChildStruct="CMap" Description="Map" DisplayMethod="Unsigned Integer"/>
      <Element Offset="4" Vartype="Pointer" Bytesize="4" ChildStruct="CZone" Description="Zone" DisplayMethod="Unsigned Integer"/>
    </Elements>
  </Structure>
  <Structure Name="CWorld" AutoFill="0" AutoCreate="1" DefaultHex="0" AutoDestroy="0" DoNotSaveLocal="0" RLECompression="1" AutoCreateStructsize="4096">
    <Elements>
      <Element Offset="0" Vartype="4 Bytes" Bytesize="4" Description="ZoneAllocId" DisplayMethod="Unsigned Integer"/>
      <Element Offset="4" Vartype="Pointer" Bytesize="4" ChildStruct="CZoneNode" Description="ZoneList" DisplayMethod="Unsigned Integer"/>
      <Element Offset="8" Vartype="4 Bytes" Bytesize="4" Description="MapCount" DisplayMethod="Unsigned Integer"/>
      <Element Offset="12" Vartype="Pointer" Bytesize="4" ChildStruct="CMap" Description="MapList" DisplayMethod="Unsigned Integer"/>
    </Elements>
  </Structure>
  <Structure Name="stItemInfo" AutoFill="0" AutoCreate="1" DefaultHex="0" AutoDestroy="0" DoNotSaveLocal="0" RLECompression="1" AutoCreateStructsize="4096">
    <Elements>
      <Element Offset="0" Vartype="4 Bytes" Bytesize="4" Description="ItemId" DisplayMethod="Unsigned Integer"/>
      <Element Offset="4" Vartype="String" Bytesize="32" Description="Name" DisplayMethod="Unsigned Integer"/>
      <Element Offset="36" Vartype="Byte" Bytesize="1" Description="Type" DisplayMethod="Unsigned Integer"/>
      <Element Offset="37" Vartype="Byte" Bytesize="1" Description="TypeId" DisplayMethod="Unsigned Integer"/>
      <Element Offset="38" Vartype="Byte" Bytesize="1" Description="Faction" DisplayMethod="Unsigned Integer"/>
      <Element Offset="39" Vartype="Array of byte" Bytesize="6" Description="Job" DisplayMethod="Unsigned Integer"/>
      <Element Offset="46" Vartype="2 Bytes" Bytesize="2" Description="LevelReq" DisplayMethod="Unsigned Integer"/>
      <Element Offset="48" Vartype="Byte" Bytesize="1" Description="Mode" DisplayMethod="Unsigned Integer"/>
      <Element Offset="50" Vartype="Byte" Bytesize="1" Description="Group" DisplayMethod="Unsigned Integer"/>
      <Element Offset="60" Vartype="2 Bytes" Bytesize="2" Description="LapisLevelReq" DisplayMethod="Unsigned Integer"/>
      <Element Offset="62" Vartype="2 Bytes" Bytesize="2" Description="MaxReroll" DisplayMethod="Unsigned Integer"/>
      <Element Offset="66" Vartype="2 Bytes" Bytesize="2" Description="AttackRange" DisplayMethod="Unsigned Integer"/>
      <Element Offset="68" Vartype="Byte" Bytesize="1" Description="AttackSpeed" DisplayMethod="Unsigned Integer"/>
      <Element Offset="69" Vartype="Byte" Bytesize="1" Description="Element" DisplayMethod="Unsigned Integer"/>
      <Element Offset="70" Vartype="Byte" Bytesize="1" Description="Special" DisplayMethod="Unsigned Integer"/>
      <Element Offset="71" Vartype="Byte" Bytesize="1" Description="Slots" DisplayMethod="Unsigned Integer"/>
      <Element Offset="72" Vartype="Byte" Bytesize="1" Description="MoveSpeed" DisplayMethod="Unsigned Integer"/>
      <Element Offset="73" Vartype="Byte" Bytesize="1" Description="Server" DisplayMethod="Unsigned Integer"/>
      <Element Offset="74" Vartype="Byte" Bytesize="1" Description="ItemGroup" DisplayMethod="Unsigned Integer"/>
      <Element Offset="75" Vartype="Byte" Bytesize="1" Description="StackSize" DisplayMethod="Unsigned Integer"/>
      <Element Offset="76" Vartype="Array of byte" Bytesize="6" Description="Quality" DisplayMethod="Unsigned Integer"/>
      <Element Offset="82" Vartype="Array of byte" Bytesize="6" Description="Effect1" DisplayMethod="Unsigned Integer"/>
      <Element Offset="88" Vartype="Array of byte" Bytesize="6" Description="Effect2" DisplayMethod="Unsigned Integer"/>
      <Element Offset="94" Vartype="Array of byte" Bytesize="6" Description="Effect3" DisplayMethod="Unsigned Integer"/>
      <Element Offset="100" Vartype="Array of byte" Bytesize="6" Description="Effect4" DisplayMethod="Unsigned Integer"/>
      <Element Offset="106" Vartype="2 Bytes" Bytesize="2" Description="Hitpoints" DisplayMethod="Unsigned Integer"/>
      <Element Offset="108" Vartype="2 Bytes" Bytesize="2" Description="Stamina" DisplayMethod="Unsigned Integer"/>
      <Element Offset="110" Vartype="2 Bytes" Bytesize="2" Description="Mana" DisplayMethod="Unsigned Integer"/>
      <Element Offset="112" Vartype="2 Bytes" Bytesize="2" Description="Str" DisplayMethod="Unsigned Integer"/>
      <Element Offset="114" Vartype="2 Bytes" Bytesize="2" Description="Dex" DisplayMethod="Unsigned Integer"/>
      <Element Offset="116" Vartype="2 Bytes" Bytesize="2" Description="Rec" DisplayMethod="Unsigned Integer"/>
      <Element Offset="118" Vartype="2 Bytes" Bytesize="2" Description="Int" DisplayMethod="Unsigned Integer"/>
      <Element Offset="120" Vartype="2 Bytes" Bytesize="2" Description="Wis" DisplayMethod="Unsigned Integer"/>
      <Element Offset="122" Vartype="2 Bytes" Bytesize="2" Description="Luc" DisplayMethod="Unsigned Integer"/>
      <Element Offset="124" Vartype="2 Bytes" Bytesize="2" Description="Grade" DisplayMethod="Unsigned Integer"/>
      <Element Offset="126" Vartype="2 Bytes" Bytesize="2" Description="Drop" DisplayMethod="Unsigned Integer"/>
      <Element Offset="128" Vartype="4 Bytes" Bytesize="4" Description="BuyValue" DisplayMethod="Unsigned Integer"/>
      <Element Offset="132" Vartype="4 Bytes" Bytesize="4" Description="SellValue" DisplayMethod="Unsigned Integer"/>
    </Elements>
  </Structure>
  <Structure Name="stTarget" AutoFill="0" AutoCreate="1" DefaultHex="0" AutoDestroy="0" DoNotSaveLocal="0" RLECompression="1" AutoCreateStructsize="4096">
    <Elements>
      <Element Offset="0" Vartype="4 Bytes" Bytesize="4" Description="Type" DisplayMethod="Unsigned Integer"/>
      <Element Offset="4" Vartype="4 Bytes" Bytesize="4" Description="Id" DisplayMethod="Unsigned Integer"/>
    </Elements>
  </Structure>
  <Structure Name="stSkillInfo" AutoFill="0" AutoCreate="1" DefaultHex="0" AutoDestroy="0" DoNotSaveLocal="0" RLECompression="1" AutoCreateStructsize="4096">
    <Elements>
      <Element Offset="0" Vartype="2 Bytes" Bytesize="2" Description="Id" DisplayMethod="Unsigned Integer"/>
      <Element Offset="2" Vartype="Byte" Bytesize="1" Description="Level" DisplayMethod="Unsigned Integer"/>
      <Element Offset="3" Vartype="String" Bytesize="32" Description="Name" DisplayMethod="Unsigned Integer"/>
      <Element Offset="35" Vartype="2 Bytes" Bytesize="2" Description="Level" DisplayMethod="Unsigned Integer"/>
      <Element Offset="37" Vartype="Byte" Bytesize="1" Description="Faction" DisplayMethod="Unsigned Integer"/>
      <Element Offset="38" Vartype="Array of byte" Bytesize="6" Description="Job" DisplayMethod="Unsigned Integer"/>
      <Element Offset="44" Vartype="Byte" Bytesize="1" Description="Mode" DisplayMethod="Unsigned Integer"/>
      <Element Offset="45" Vartype="Byte" Bytesize="1" Description="Skillpoint" DisplayMethod="Unsigned Integer"/>
      <Element Offset="46" Vartype="Byte" Bytesize="1" Description="_TypeShow" DisplayMethod="Unsigned Integer"/>
      <Element Offset="47" Vartype="Byte" Bytesize="1" Description="_TypeAttack" DisplayMethod="Unsigned Integer"/>
      <Element Offset="48" Vartype="Byte" Bytesize="1" Description="_TypeEffect" DisplayMethod="Unsigned Integer"/>
      <Element Offset="49" Vartype="Byte" Bytesize="1" Description="_Type" DisplayMethod="Unsigned Integer"/>
      <Element Offset="50" Vartype="Array of byte" Bytesize="16" Description="Weapon" DisplayMethod="Unsigned Integer"/>
      <Element Offset="66" Vartype="2 Bytes" Bytesize="2" Description="StaminaCost" DisplayMethod="Unsigned Integer"/>
      <Element Offset="68" Vartype="2 Bytes" Bytesize="2" Description="ManaCost" DisplayMethod="Unsigned Integer"/>
      <Element Offset="70" Vartype="Byte" Bytesize="1" Description="CastTime" DisplayMethod="Unsigned Integer"/>
      <Element Offset="71" Vartype="2 Bytes" Bytesize="2" Description="Cooldown" DisplayMethod="Unsigned Integer"/>
      <Element Offset="73" Vartype="Byte" Bytesize="1" Description="AttackRange" DisplayMethod="Unsigned Integer"/>
      <Element Offset="74" Vartype="Byte" Bytesize="1" Description="StateType" DisplayMethod="Unsigned Integer"/>
      <Element Offset="75" Vartype="Byte" Bytesize="1" Description="Element" DisplayMethod="Unsigned Integer"/>
      <Element Offset="76" Vartype="2 Bytes" Bytesize="2" Description="Disable" DisplayMethod="Unsigned Integer"/>
      <Element Offset="78" Vartype="2 Bytes" Bytesize="2" Description="PrevSkill" DisplayMethod="Unsigned Integer"/>
      <Element Offset="80" Vartype="Byte" Bytesize="1" Description="SuccessType" DisplayMethod="Unsigned Integer"/>
      <Element Offset="81" Vartype="Byte" Bytesize="1" Description="SuccessValue" DisplayMethod="Unsigned Integer"/>
      <Element Offset="82" Vartype="Byte" Bytesize="1" Description="TargetType" DisplayMethod="Unsigned Integer"/>
      <Element Offset="83" Vartype="Byte" Bytesize="1" Description="ApplyRange" DisplayMethod="Unsigned Integer"/>
      <Element Offset="84" Vartype="Byte" Bytesize="1" Description="HitCount" DisplayMethod="Unsigned Integer"/>
      <Element Offset="85" Vartype="4 Bytes" Bytesize="4" Description="Duration" DisplayMethod="Unsigned Integer"/>
      <Element Offset="89" Vartype="Array of byte" Bytesize="2" Description="ByWeapon" DisplayMethod="Unsigned Integer"/>
      <Element Offset="91" Vartype="Byte" Bytesize="1" Description="WeaponValue" DisplayMethod="Unsigned Integer"/>
      <Element Offset="92" Vartype="Byte" Bytesize="1" Description="Bag" DisplayMethod="Unsigned Integer"/>
      <Element Offset="93" Vartype="2 Bytes" Bytesize="2" Description="Threat" DisplayMethod="Unsigned Integer"/>
      <Element Offset="95" Vartype="Byte" Bytesize="1" Description="DamageType" DisplayMethod="Unsigned Integer"/>
      <Element Offset="96" Vartype="2 Bytes" Bytesize="2" Description="HealthDamage" DisplayMethod="Unsigned Integer"/>
      <Element Offset="98" Vartype="2 Bytes" Bytesize="2" Description="StaminaDamage" DisplayMethod="Unsigned Integer"/>
      <Element Offset="100" Vartype="2 Bytes" Bytesize="2" Description="ManaDamage" DisplayMethod="Unsigned Integer"/>
      <Element Offset="102" Vartype="Byte" Bytesize="1" Description="TimeDamageType" DisplayMethod="Unsigned Integer"/>
      <Element Offset="103" Vartype="2 Bytes" Bytesize="2" Description="HealthTimeDamage" DisplayMethod="Unsigned Integer"/>
      <Element Offset="105" Vartype="2 Bytes" Bytesize="2" Description="StaminaTimeDamage" DisplayMethod="Unsigned Integer"/>
      <Element Offset="107" Vartype="2 Bytes" Bytesize="2" Description="ManaTimeDamage" DisplayMethod="Unsigned Integer"/>
      <Element Offset="109" Vartype="2 Bytes" Bytesize="2" Description="HealthAdditionalDamage" DisplayMethod="Unsigned Integer"/>
      <Element Offset="111" Vartype="2 Bytes" Bytesize="2" Description="StaminaAdditionalDamage" DisplayMethod="Unsigned Integer"/>
      <Element Offset="113" Vartype="2 Bytes" Bytesize="2" Description="ManaAdditionalDamage" DisplayMethod="Unsigned Integer"/>
      <Element Offset="115" Vartype="Array of byte" Bytesize="9" Description="Ability" DisplayMethod="Unsigned Integer"/>
      <Element Offset="124" Vartype="2 Bytes" Bytesize="2" Description="HealthHeal" DisplayMethod="Unsigned Integer"/>
      <Element Offset="126" Vartype="2 Bytes" Bytesize="2" Description="StaminaHeal" DisplayMethod="Unsigned Integer"/>
      <Element Offset="128" Vartype="2 Bytes" Bytesize="2" Description="ManaHeal" DisplayMethod="Unsigned Integer"/>
      <Element Offset="130" Vartype="2 Bytes" Bytesize="2" Description="HealthTimeHeal" DisplayMethod="Unsigned Integer"/>
      <Element Offset="132" Vartype="2 Bytes" Bytesize="2" Description="StaminaTimeHeal" DisplayMethod="Unsigned Integer"/>
      <Element Offset="134" Vartype="2 Bytes" Bytesize="2" Description="ManaTimeHeal" DisplayMethod="Unsigned Integer"/>
      <Element Offset="136" Vartype="Byte" Bytesize="1" Description="DefenceType" DisplayMethod="Unsigned Integer"/>
      <Element Offset="137" Vartype="Byte" Bytesize="1" Description="DefenceValue" DisplayMethod="Unsigned Integer"/>
      <Element Offset="138" Vartype="Byte" Bytesize="1" Description="LimitHitpoints" DisplayMethod="Unsigned Integer"/>
      <Element Offset="139" Vartype="Byte" Bytesize="1" Description="RemoveOnDeath" DisplayMethod="Unsigned Integer"/>
      <Element Offset="140" Vartype="2 Bytes" Bytesize="2" Description="ChangeType" DisplayMethod="Unsigned Integer"/>
      <Element Offset="142" Vartype="2 Bytes" Bytesize="2" Description="ChangeLevel" DisplayMethod="Unsigned Integer"/>
      <Element Offset="144" Vartype="4 Bytes" Bytesize="4" Description="ItemLink" DisplayMethod="Unsigned Integer"/>
    </Elements>
  </Structure>
  <Structure Name="CSkill" AutoFill="0" AutoCreate="1" DefaultHex="0" AutoDestroy="0" DoNotSaveLocal="0" RLECompression="1" AutoCreateStructsize="4096">
    <Elements>
      <Element Offset="0" Vartype="4 Bytes" Bytesize="4" Description="LocalId" DisplayMethod="Unsigned Integer"/>
      <Element Offset="4" Vartype="4 Bytes" Bytesize="4" Description="Id" DisplayMethod="Unsigned Integer"/>
      <Element Offset="8" Vartype="4 Bytes" Bytesize="4" Description="Level" DisplayMethod="Unsigned Integer"/>
      <Element Offset="12" Vartype="4 Bytes" Bytesize="4" Description="Number" DisplayMethod="Unsigned Integer"/>
      <Element Offset="16" Vartype="4 Bytes" Bytesize="4" Description="TickFreq" DisplayMethod="Unsigned Integer"/>
      <Element Offset="20" Vartype="4 Bytes" Bytesize="4" Description="Cooldown" DisplayMethod="Unsigned Integer"/>
      <Element Offset="24" Vartype="4 Bytes" Bytesize="4" Description="EndTime" DisplayMethod="Unsigned Integer"/>
      <Element Offset="28" Vartype="4 Bytes" Bytesize="4" Description="PrevTick" DisplayMethod="Unsigned Integer"/>
      <Element Offset="32" Vartype="Pointer" Bytesize="4" ChildStruct="stTarget" Description="Target" DisplayMethod="Unsigned Integer"/>
      <Element Offset="36" Vartype="Pointer" Bytesize="4" ChildStruct="stSkillInfo" Description="Definition" DisplayMethod="Unsigned Integer"/>
    </Elements>
  </Structure>
</Structures>

Призрак урана · 08/17/2019, 21:23

I will add a few functions too, some may be incorrect. For those who want to find more, I advise you to use IDA with ep 4 server files (with * .pdb)

Spoiler