Locked
Home » Forums » Legacy & Archived » Archived Content » Star Wars Galaxies » Star Wars Galaxies Premium Cheats

SWG Exploit Discussion - Offsets - Post your findings : Star Wars Galaxies Premium Cheats
Posted: March 28th, 2011
evilfigment
User avatar
Total Posts:261 Joined:2008
Ok ONE RULE... dont post direct addresses, you must only post offsets that stem from a class or struct (base pointer).

Code: Register to unlock hidden link

Const $X[2] = ["1BD2F20", "5C"]
Const $Y[2] = ["1BD2F20", "7C"]
Const $Z[2] = ["1BD2F20", "6C"]
Const $Health[3] = ["1BD2F20", "570", "0"]
Const $Action[3] = ["1BD2F20", "570", "8"]
Const $HealthTotal[3] = ["1BD2F20", "5A8", "0"]
Const $ActionTotal[3] = ["1BD2F20", "5A8", "8"]
Const $Speed[2] = ["1BD2F20", "7DC"]
Const $Level[2] = ["1BD2F20", "A80"]
r04r wrote:

Code: Register to unlock hidden link

Const $InventoryDescription[6] = ["1C61F08", "B4", "CC", "BC", "114", "1A"]
Const $InventoryCount[6] = ["1C61F08", "B4", "A8", "11C", "120", "2"]
Const $InventoryTitle[6] = ["1C61F08", "B4", "A8", "A4", "120", "0"]

Const $ChatBuffer[6] = ["1CC9C90", "B4", "0", "0", "64", "10"]
tnok85 wrote:Target distance in meters, float: "SwgClient_r.exe"+01861F08 + 10C + 20 + 12C + 174
Target current HP, float: "SwgClient_r.exe"+01835108 + 42C + 0 + 454
Target max HP, float: "SwgClient_r.exe"+01835108 + 42C + 0 + 428
Target name, string: "SwgClient_r.exe"+01861F08 + 120 + 8C + 184 + 120 + 0
Autoattack, byte, 1/0: SwgClient_r.exe+183F094


Attachments:
ReClass_v1.0.4.rar Register to unlock hidden link
a struct/class reversing tool.
(3.16 MiB) Downloaded 45 times


Last edited by evilfigment on March 30th, 2011, 4:54 pm, edited 30 times in total.
Posted: March 28th, 2011
rugburn
User avatar
Total Posts:375 Joined:2006
Although I'm looking at this through my smart phone. Can you actually change your lvl in cheat engine?
Posted: March 28th, 2011
evilfigment
User avatar
Total Posts:261 Joined:2008
yes but its only client side, i only added it for people making bots so they can decide what heal / attacks to use etc.
Posted: March 28th, 2011
tnok85
Total Posts:47 Joined:2008
Offset 34 (same base) gives you the player cell. If anybody can find a use for this...
Posted: March 28th, 2011
evilfigment
User avatar
Total Posts:261 Joined:2008
base+0x64 = (Float)fModelVerticalScale
Posted: March 28th, 2011
rugburn
User avatar
Total Posts:375 Joined:2006
evilfigment wrote:base+0x64 = (Float)fModelVerticalScale
Looks like this changes the height of your character. But client side of course. Being such a nub at this I'm hoping I understand it a bit more.
Posted: March 29th, 2011
vinnyboy32
User avatar
Total Posts:1872 Joined:2006
This has been moved to a confirmed section for safety purposes. Cuervo and I aren't sure if Non-premium members can see posts in non-confirmed sections.

So continue the discussion here. :)

_________________
Your Friendly Neighborhood Moderator!
Read The FAQ - Register to unlock hidden link
Posted: March 29th, 2011
evilfigment
User avatar
Total Posts:261 Joined:2008
come on guys.. surely you must of found some, anyhow ive added a few more to help you.
Posted: March 29th, 2011
rugburn
User avatar
Total Posts:375 Joined:2006
evilfigment wrote:come on guys.. surely you must of found some, anyhow ive added a few more to help you.
Evil, I think the problem is people dont know how to use it. I was finally able to watch the video, and decided to copy it to the letter. I was pm'd a couple of times by people not understanding, and I pm'd you with no response on how to get it to work. Otherwise, I would be giving input.

You cant assume people understand this stuff in generalizations. Heck, I dont even know if the video is about swg.

Btw, the sig thing I got to work, I was able to follow and understand that.
Posted: March 29th, 2011
evilfigment
User avatar
Total Posts:261 Joined:2008
That tool aint required, its just makes things easier when you know how to use it. These can be reversed using any generic memory viewer like cheat engine etc. "Browse Memory" in cheat engine and goto the base pointer location, try toggling display types in the cheat engine dump to spot different things.

I'm just posting this stuff to try and motivate bot makers into making more complex bots rather than basic macro based stuff, ive already reversed this data a while back i just dont want to spoonfeed all the info so people/other sites can make bots and sell em etc.

Hint: Your targetID is in the struct too ;)
Posted: March 30th, 2011
r04r
User avatar
Total Posts:387 Joined:2009
Alright, no idea if I'm posting this correctly, but here's what I'm currently using for my inventory sorter (Release coming soon):

Const $inventoryDescription[6] = ["1C61F08", "B4", "CC", "BC", "114", "1A"]
Const $inventoryCount[6] = ["1C61F08", "B4", "A8", "11C", "120", "2"]
Const $inventoryTitle[6] = ["1C61F08", "B4", "A8", "A4", "120", "0"]

Format above is, first one is the base pointer, the rest are the offsets on each pointer jump. They're all strings (wchars for people making the objects in autoit)

Big kudos to tnok85 on finding these pointers.


Last edited by r04r on March 30th, 2011, 3:45 am, edited 1 time in total.
Posted: March 30th, 2011
cuervogold
User avatar
Total Posts:1087 Joined:2007
eVc, r04r,

Great work and great posts!

_________________
Cuervo, the drink.
Posted: March 30th, 2011
r04r
User avatar
Total Posts:387 Joined:2009
Oh, and here's something to read out the chat:
Const $chat[6] = ["1CC9C90", "B4", "0", "0", "64", "10"]

But that gets MASSIVE so I'm not sure how useful that is. Need to see if I can find another address which just contains the last line. Pretty sure there is one for that as well.



Uses for the X/Y/Z coordinates:
Path recorder/replayer (Will release this soon*)
Position locker; set it back every 5 seconds. Useful when sampling. (Will release this soon*)
Position nudger to go in a straight line back and forth. Battling on usefulness with the path recorder. Will also release this soon*


* When I'm happy with how they perform
Posted: March 30th, 2011
evilfigment
User avatar
Total Posts:261 Joined:2008
Nice find tnok/r0ar, and yea there is a buffer for the last chat line but i found that it misses the 1st char.
Added speed for ye but remem theres a backup speed address that gets checked against this value.

PS: theres two other floats too, i wont post them here because they can be abused for running with stasis/snares and when a gm freezes you etc. But they can be useful for your bot to prevent any user input interference with your pathing, pm me if you need em.

Edit: They can also be used to check if a GM has frozen you to halt your bot and alert the user or shutdown the game :)
Posted: March 30th, 2011
tnok85
Total Posts:47 Joined:2008
Target distance in meters, float: "SwgClient_r.exe"+01861F08 + 10C + 20 + 12C + 174
Target current HP, float: "SwgClient_r.exe"+01835108 + 42C + 0 + 454
Target max HP, float: "SwgClient_r.exe"+01835108 + 42C + 0 + 428
Target name, string: "SwgClient_r.exe"+01861F08 + 120 + 8C + 184 + 120 + 0
Autoattack, byte, 1/0: SwgClient_r.exe+183F094
Ready to join the community? Click here and see all of the benefits!
blue large dotWho is online
Users browsing this forum: No registered users and 3 guests
Locked
‹ Return to "Star Wars Galaxies Premium Cheats"