Page 1 of 3
SWG Exploit Discussion - Offsets - Post your findings
Posted: March 28th, 2011, 4:25 am
by evilfigment
Ok
ONE RULE... dont post direct addresses, you must only post offsets that stem from a class or struct (base pointer).
Code: Register to unlock hidden link
Const $X[2] = ["1BD2F20", "5C"]
Const $Y[2] = ["1BD2F20", "7C"]
Const $Z[2] = ["1BD2F20", "6C"]
Const $Health[3] = ["1BD2F20", "570", "0"]
Const $Action[3] = ["1BD2F20", "570", "8"]
Const $HealthTotal[3] = ["1BD2F20", "5A8", "0"]
Const $ActionTotal[3] = ["1BD2F20", "5A8", "8"]
Const $Speed[2] = ["1BD2F20", "7DC"]
Const $Level[2] = ["1BD2F20", "A80"]
r04r wrote:
Code: Register to unlock hidden link
Const $InventoryDescription[6] = ["1C61F08", "B4", "CC", "BC", "114", "1A"]
Const $InventoryCount[6] = ["1C61F08", "B4", "A8", "11C", "120", "2"]
Const $InventoryTitle[6] = ["1C61F08", "B4", "A8", "A4", "120", "0"]
Const $ChatBuffer[6] = ["1CC9C90", "B4", "0", "0", "64", "10"]
tnok85 wrote:Target distance in meters, float: "SwgClient_r.exe"+01861F08 + 10C + 20 + 12C + 174
Target current HP, float: "SwgClient_r.exe"+01835108 + 42C + 0 + 454
Target max HP, float: "SwgClient_r.exe"+01835108 + 42C + 0 + 428
Target name, string: "SwgClient_r.exe"+01861F08 + 120 + 8C + 184 + 120 + 0
Autoattack, byte, 1/0: SwgClient_r.exe+183F094
Re: Offsets - Post your findings
Posted: March 28th, 2011, 10:48 am
by rugburn
Although I'm looking at this through my smart phone. Can you actually change your lvl in cheat engine?
Re: Offsets - Post your findings
Posted: March 28th, 2011, 11:38 am
by evilfigment
yes but its only client side, i only added it for people making bots so they can decide what heal / attacks to use etc.
Re: Offsets - Post your findings
Posted: March 28th, 2011, 11:47 am
by tnok85
Offset 34 (same base) gives you the player cell. If anybody can find a use for this...
Re: Offsets - Post your findings
Posted: March 28th, 2011, 6:03 pm
by evilfigment
base+0x64 = (Float)fModelVerticalScale
Re: Offsets - Post your findings
Posted: March 28th, 2011, 10:15 pm
by rugburn
evilfigment wrote:base+0x64 = (Float)fModelVerticalScale
Looks like this changes the height of your character. But client side of course. Being such a nub at this I'm hoping I understand it a bit more.
Re: Offsets - Post your findings
Posted: March 29th, 2011, 11:49 am
by vinnyboy32
This has been moved to a confirmed section for safety purposes. Cuervo and I aren't sure if Non-premium members can see posts in non-confirmed sections.
So continue the discussion here.
Re: SWG Exploit Discussion - Offsets - Post your findings
Posted: March 29th, 2011, 5:31 pm
by evilfigment
come on guys.. surely you must of found some, anyhow ive added a few more to help you.
Re: SWG Exploit Discussion - Offsets - Post your findings
Posted: March 29th, 2011, 6:31 pm
by rugburn
evilfigment wrote:come on guys.. surely you must of found some, anyhow ive added a few more to help you.
Evil, I think the problem is people dont know how to use it. I was finally able to watch the video, and decided to copy it to the letter. I was pm'd a couple of times by people not understanding, and I pm'd you with no response on how to get it to work. Otherwise, I would be giving input.
You cant assume people understand this stuff in generalizations. Heck, I dont even know if the video is about swg.
Btw, the sig thing I got to work, I was able to follow and understand that.
Re: SWG Exploit Discussion - Offsets - Post your findings
Posted: March 29th, 2011, 7:15 pm
by evilfigment
That tool aint required, its just makes things easier when you know how to use it. These can be reversed using any generic memory viewer like cheat engine etc. "Browse Memory" in cheat engine and goto the base pointer location, try toggling display types in the cheat engine dump to spot different things.
I'm just posting this stuff to try and motivate bot makers into making more complex bots rather than basic macro based stuff, ive already reversed this data a while back i just dont want to spoonfeed all the info so people/other sites can make bots and sell em etc.
Hint: Your targetID is in the struct too
Re: SWG Exploit Discussion - Offsets - Post your findings
Posted: March 30th, 2011, 3:42 am
by r04r
Alright, no idea if I'm posting this correctly, but here's what I'm currently using for my inventory sorter (Release coming soon):
Const $inventoryDescription[6] = ["1C61F08", "B4", "CC", "BC", "114", "1A"]
Const $inventoryCount[6] = ["1C61F08", "B4", "A8", "11C", "120", "2"]
Const $inventoryTitle[6] = ["1C61F08", "B4", "A8", "A4", "120", "0"]
Format above is, first one is the base pointer, the rest are the offsets on each pointer jump. They're all strings (wchars for people making the objects in autoit)
Big kudos to tnok85 on finding these pointers.
Re: SWG Exploit Discussion - Offsets - Post your findings
Posted: March 30th, 2011, 3:44 am
by cuervogold
eVc, r04r,
Great work and great posts!
Re: SWG Exploit Discussion - Offsets - Post your findings
Posted: March 30th, 2011, 3:51 am
by r04r
Oh, and here's something to read out the chat:
Const $chat[6] = ["1CC9C90", "B4", "0", "0", "64", "10"]
But that gets MASSIVE so I'm not sure how useful that is. Need to see if I can find another address which just contains the last line. Pretty sure there is one for that as well.
Uses for the X/Y/Z coordinates:
Path recorder/replayer (Will release this soon*)
Position locker; set it back every 5 seconds. Useful when sampling. (Will release this soon*)
Position nudger to go in a straight line back and forth. Battling on usefulness with the path recorder. Will also release this soon*
* When I'm happy with how they perform
Re: SWG Exploit Discussion - Offsets - Post your findings
Posted: March 30th, 2011, 2:08 pm
by evilfigment
Nice find tnok/r0ar, and yea there is a buffer for the last chat line but i found that it misses the 1st char.
Added speed for ye but remem theres a backup speed address that gets checked against this value.
PS: theres two other floats too, i wont post them here because they can be abused for running with stasis/snares and when a gm freezes you etc. But they can be useful for your bot to prevent any user input interference with your pathing, pm me if you need em.
Edit: They can also be used to check if a GM has frozen you to halt your bot and alert the user or shutdown the game
Re: SWG Exploit Discussion - Offsets - Post your findings
Posted: March 30th, 2011, 3:22 pm
by tnok85
Target distance in meters, float: "SwgClient_r.exe"+01861F08 + 10C + 20 + 12C + 174
Target current HP, float: "SwgClient_r.exe"+01835108 + 42C + 0 + 454
Target max HP, float: "SwgClient_r.exe"+01835108 + 42C + 0 + 428
Target name, string: "SwgClient_r.exe"+01861F08 + 120 + 8C + 184 + 120 + 0
Autoattack, byte, 1/0: SwgClient_r.exe+183F094