SWG Exploit Discussion - Offsets - Post your findings : Star Wars Galaxies Premium Cheats

Appears to be no changes from today's patch... all my addresses are still working.

I'm interested in this discussion, and I have some questions:
How are we supposed to use these offsets to develop some complex bots?
Is there a preferred language?
How can we help and investigate to find more of these offsets (I'd like to find groupmates max hp, current hp; way of firing specials, etc...)?

kishlorn wrote:I'm interested in this discussion, and I have some questions:
How are we supposed to use these offsets to develop some complex bots?
Is there a preferred language?
How can we help and investigate to find more of these offsets (I'd like to find groupmates max hp, current hp; way of firing specials, etc...)?

How are we supposed to use these offsets to develop some complex bots?
Use them in your scripts.

Is there a preferred language?
Most people use autoit, because it's handy-dandy for mouse-keyboard interaction, but feel free to use whatever you want.

How can we help and investigate to find more of these offsets (I'd like to find groupmates max hp, current hp; way of firing specials, etc...)?
Cheat engine is good to find memory locations, and can also be used for pointer scanning. I'm not great at that however, so can't help more with that.

As for firing specials, me and tnok85 figured out an easy way to do this (Writing a few memory locations to make the game thing the right mouse is pressed, and setting the secondary ability), and will be released soon-ish as part as a fully configurable medic healer/buff bot

r04r wrote:

kishlorn wrote:I'm interested in this discussion, and I have some questions:
How are we supposed to use these offsets to develop some complex bots?
Is there a preferred language?
How can we help and investigate to find more of these offsets (I'd like to find groupmates max hp, current hp; way of firing specials, etc...)?

How are we supposed to use these offsets to develop some complex bots?
Use them in your scripts.

Is there a preferred language?
Most people use autoit, because it's handy-dandy for mouse-keyboard interaction, but feel free to use whatever you want.

How can we help and investigate to find more of these offsets (I'd like to find groupmates max hp, current hp; way of firing specials, etc...)?
Cheat engine is good to find memory locations, and can also be used for pointer scanning. I'm not great at that however, so can't help more with that.

As for firing specials, me and tnok85 figured out an easy way to do this (Writing a few memory locations to make the game thing the right mouse is pressed, and setting the secondary ability), and will be released soon-ish as part as a fully configurable medic healer/buff bot

I'm software engineer IRL, so I'm quite familiar with programming... I've made an autoit macro for example which can handle a spy in dwb to farm a wrath and it's working perfectly: it's able to retrieve the current hp level based on pixel colors, detect when he's in combat, cloak, use autoattack and specials, handle CDs, etc... I made a RE macro, crafting macro from scratch as well...

So now I'd like to make for example a prog which could handle a medic completly managing the group healing taking prof priorities into account, etc... so I could run heroics with my 3 others combat chars on my own.

I think this would be too complicated for an autoit macro... But anyway, I don't even know how to use these offsets using autoit? Isnt there a guide for creating custom bots using these offsets with something more serious than autoit (C/C++/java/.Net or whatever, if there's a simple way to write in swg memory, I could always write an API for the community so everyone can make his own bot easier)?

I don't see why it would be too complicated for autoit, what you're describing wouldn't require that much logic.
We're all using nomadmemory with an addition for scanning for signatures, but I'll attach it here.

No documentation here, besides for the nomadmemory, because it's just for myself so far. Might add documentation in later, but it should all be straight forward.

kishlorn wrote:

r04r wrote:

kishlorn wrote:I'm interested in this discussion, and I have some questions:
How are we supposed to use these offsets to develop some complex bots?
Is there a preferred language?
How can we help and investigate to find more of these offsets (I'd like to find groupmates max hp, current hp; way of firing specials, etc...)?

How are we supposed to use these offsets to develop some complex bots?
Use them in your scripts.

Is there a preferred language?
Most people use autoit, because it's handy-dandy for mouse-keyboard interaction, but feel free to use whatever you want.

How can we help and investigate to find more of these offsets (I'd like to find groupmates max hp, current hp; way of firing specials, etc...)?
Cheat engine is good to find memory locations, and can also be used for pointer scanning. I'm not great at that however, so can't help more with that.

As for firing specials, me and tnok85 figured out an easy way to do this (Writing a few memory locations to make the game thing the right mouse is pressed, and setting the secondary ability), and will be released soon-ish as part as a fully configurable medic healer/buff bot

I'm software engineer IRL, so I'm quite familiar with programming... I've made an autoit macro for example which can handle a spy in dwb to farm a wrath and it's working perfectly: it's able to retrieve the current hp level based on pixel colors, detect when he's in combat, cloak, use autoattack and specials, handle CDs, etc... I made a RE macro, crafting macro from scratch as well...

So now I'd like to make for example a prog which could handle a medic completly managing the group healing taking prof priorities into account, etc... so I could run heroics with my 3 others combat chars on my own.

I think this would be too complicated for an autoit macro... But anyway, I don't even know how to use these offsets using autoit? Isnt there a guide for creating custom bots using these offsets with something more serious than autoit (C/C++/java/.Net or whatever, if there's a simple way to write in swg memory, I could always write an API for the community so everyone can make his own bot easier)?

If you want really make an advanced bot i recommend using a combination of C++ and C#. I use C++ to initialize the .net framework inside the swg process and load my managed library into the process. I also hook the Directx interface for more customization like ingame gui's and keyboard hooks.

You will be able to access memory directly too since your library is loaded in the swg process so no worries about slowdowns with fast memory polling.

You can execute swg functions to do stuff that is hard to do externally, example.. toolbar actions are no longer needed, just issue the command strings to the function to execute it.

You can add your own commands to the game by hooking the command parser and interpreting your custom commands before passing control to the game.

You can also hook the vtable functions that swg uses to do its core client routines and create an event based system for whatever you deem neccesary.

The list can go on.. but you get the idea, and the best part is that all this can be done while the game is in the background/minimized or ran in an inactive virtual machine.

evilfigment wrote: If you want really make an advanced bot i recommend using a combination of C++ and C#. I use C++ to initialize the .net framework inside the swg process and load my managed library into the process. I also hook the Directx interface for more customization like ingame gui's and keyboard hooks.

You will be able to access memory directly too since your library is loaded in the swg process so no worries about slowdowns with fast memory polling.

You can execute swg functions to do stuff that is hard to do externally, example.. toolbar actions are no longer needed, just issue the command strings to the function to execute it.

You can add your own commands to the game by hooking the command parser and interpreting your custom commands before passing control to the game.

You can also hook the vtable functions that swg uses to do its core client routines and create an event based system for whatever you deem neccesary.

The list can go on.. but you get the idea, and the best part is that all this can be done while the game is in the background/minimized or ran in an inactive virtual machine.

You really should consider posting a guide (As in, read this, read that, try this, try that) on how you achieve all this. Wouldn't mind spending a few weeks learning all that because it sounds like pretty awesome knowledge in general.

I've searched around, but haven't really managed to find any good "beginner" guides for creating injected libraries and how to interact with them.

r04r wrote:

evilfigment wrote: If you want really make an advanced bot i recommend using a combination of C++ and C#. I use C++ to initialize the .net framework inside the swg process and load my managed library into the process. I also hook the Directx interface for more customization like ingame gui's and keyboard hooks.

You will be able to access memory directly too since your library is loaded in the swg process so no worries about slowdowns with fast memory polling.

You can execute swg functions to do stuff that is hard to do externally, example.. toolbar actions are no longer needed, just issue the command strings to the function to execute it.

You can add your own commands to the game by hooking the command parser and interpreting your custom commands before passing control to the game.

You can also hook the vtable functions that swg uses to do its core client routines and create an event based system for whatever you deem neccesary.

The list can go on.. but you get the idea, and the best part is that all this can be done while the game is in the background/minimized or ran in an inactive virtual machine.

You really should consider posting a guide (As in, read this, read that, try this, try that) on how you achieve all this. Wouldn't mind spending a few weeks learning all that because it sounds like pretty awesome knowledge in general.

I've searched around, but haven't really managed to find any good "beginner" guides for creating injected libraries and how to interact with them.

Agreed... particularly with injection to send keys to a background/minimized window. Would be very grateful for a nudge in that direction.

tnok85 wrote:

r04r wrote:

evilfigment wrote: If you want really make an advanced bot i recommend using a combination of C++ and C#. I use C++ to initialize the .net framework inside the swg process and load my managed library into the process. I also hook the Directx interface for more customization like ingame gui's and keyboard hooks.

You will be able to access memory directly too since your library is loaded in the swg process so no worries about slowdowns with fast memory polling.

You can execute swg functions to do stuff that is hard to do externally, example.. toolbar actions are no longer needed, just issue the command strings to the function to execute it.

You can add your own commands to the game by hooking the command parser and interpreting your custom commands before passing control to the game.

You can also hook the vtable functions that swg uses to do its core client routines and create an event based system for whatever you deem neccesary.

The list can go on.. but you get the idea, and the best part is that all this can be done while the game is in the background/minimized or ran in an inactive virtual machine.

You really should consider posting a guide (As in, read this, read that, try this, try that) on how you achieve all this. Wouldn't mind spending a few weeks learning all that because it sounds like pretty awesome knowledge in general.

I've searched around, but haven't really managed to find any good "beginner" guides for creating injected libraries and how to interact with them.

Agreed... particularly with injection to send keys to a background/minimized window. Would be very grateful for a nudge in that direction.

It must be really powerful indeed, but here is a question that popped up in my mind when you talked about loading your own library into swg process: how is that detectable? (from SOE side I mean)

Anyway, I'd also be very interested in a guide... Anyone could always try to gather the information, but from my experience, I know how time consuming and boring it is when you don't even know where to start...

tnok85 wrote:Target distance in meters, float: "SwgClient_r.exe"+01861F08 + 10C + 20 + 12C + 174
Target current HP, float: "SwgClient_r.exe"+01835108 + 42C + 0 + 454
Target max HP, float: "SwgClient_r.exe"+01835108 + 42C + 0 + 428
Target name, string: "SwgClient_r.exe"+01861F08 + 120 + 8C + 184 + 120 + 0
Autoattack, byte, 1/0: SwgClient_r.exe+183F094

I was wondering if you could tell me how I can find these addresses and offsets by myself using cheat engine ? Because I did the tutorial, but finding multiple level pointer is really smoother in the actual tutorial than in Swg. Also, I don't get my target's hp when I use this atm.

I can manage to get to the value pointed bythe following address and offsets by myself(even though I don't know how you found it)

evilfigment wrote:Const $Health[3] = ["1BD2F20", "570", "0"]

I'd like to get the same infos for all groupmates and also their profession for example

r04r wrote:As for firing specials, me and tnok85 figured out an easy way to do this (Writing a few memory locations to make the game thing the right mouse is pressed, and setting the secondary ability), and will be released soon-ish as part as a fully configurable medic healer/buff bot

Will you release the code ? How do you select the right ability ? Do you use any keyboard input on toolbar or not at all?

Has anyone thought about making a guide on these stuff? It'd probably take some time, but opening this knowledge to the community would definitly decrease your own workload on these stuff while everyone could make their own scripts. It'd also mean a lot more different bots available for the community...

Is there a tut or something on how to do this..total n00b although I used to write progs for my VIC 20 but havnt been playing in the modern IT world much. Any help would be great.☺

A fairly useful technique ive found is to do a memory comparison with cheat engine. Say for instance... read memory, turn on autoattack, reread memory and compare and filter all that has changed value. Keep on repeating till you narrow down the addresses that are/are not changing and most of the time you will find the offset you're changing. Pattern searching is a little more complex, however.

A great start would be to read the cheat engine forums for tutorials etc. The tutorial program that comes with cheat engine is good for starting out too, follow that, if you get stuck read up on it, then retry. Once your comfortable with how cheat engine works you could look at more advanced stuff or expand your knowledge into different things.

I recommend all these links as ive learnt alot from them over the years, learn as much as you can, practice as much as you can and stick at it, its a great hobby. Note: I didnt just use these sites, feel free to crawl the internet for all the info you need but these sites will bring up alot of topics that will get the ball rolling.

Newbies:
Register to unlock hidden link

Beginner:
Register to unlock hidden link

Experienced:
Register to unlock hidden link

And once you feel you have nothing left to learn from those... give this a try..

Basic->Professional
Register to unlock hidden link - game orientated hacking site, most major bot makers are a member of, or began here.

Register to unlock hidden link - for reversing protections and anti-hack methods (some will push you out of your comfort zone no matter what knowledge you have)

Heres a site that has some nice articles, plugins and scripts for ollydbg/ida etc. Register to unlock hidden link

If your interested in programming i highly recommend you learn C++ and C# as most games are coded in C++ and C# will give you knowledge with the .Net Framework (most open source bots are coded in c# for you to learn from).


Oh and remember... some GOOD MUSIC when hacking works wonders

evilfigment wrote:A great start would be to read the cheat engine forums for tutorials etc. The tutorial program that comes with cheat engine is good for starting out too, follow that, if you get stuck read up on it, then retry. Once your comfortable with how cheat engine works you could look at more advanced stuff or expand your knowledge into different things.

I recommend all these links as ive learnt alot from them over the years, learn as much as you can, practice as much as you can and stick at it, its a great hobby. Note: I didnt just use these sites, feel free to crawl the internet for all the info you need but these sites will bring up alot of topics that will get the ball rolling.

Newbies:
Register to unlock hidden link

Beginner:
Register to unlock hidden link

Experienced:
Register to unlock hidden link

And once you feel you have nothing left to learn from those... give this a try..

Basic->Professional
Register to unlock hidden link - game orientated hacking site, most major bot makers are a member of, or began here.

Register to unlock hidden link - for reversing protections and anti-hack methods (some will push you out of your comfort zone no matter what knowledge you have)

Heres a site that has some nice articles, plugins and scripts for ollydbg/ida etc. Register to unlock hidden link

If your interested in programming i highly recommend you learn C++ and C# as most games are coded in C++ and C# will give you knowledge with the .Net Framework (most open source bots are coded in c# for you to learn from).


Oh and remember... some GOOD MUSIC when hacking works wonders

I recommend The Offspring, live in Leeds!!

You guys...... anyway thanks for the tips☺ My personal favorite is Sigue sigue sputnik. but I am an old fart!!!☺☺☺