Log in

View Full Version : [11.02] Blackd Tibia addresses 11.02 - 11.03



blackd
12-06-2016, 17:50
; [[[[[[[[[[[[[[[[[[[[[[[[[[[
; BEGIN - MEMORY PATHS
version=11.02
tibiamainname=client
tibiaclassname=Qt5QWindowOwnDCIcon
tibiatitle=Tibia
tibiamainname_updater=tibia
tibiaclassname_updater=Qt5QWindowIcon
tibiatitle_updater=Tibia
adrSelectedItem_height="Qt5Widgets.dll" + 00401DC4 > 70 > 4 > a8

adrGameRect_Width_Double="Qt5Core.dll" + 004555C8 > 8 > 10C > 18 > 4 > 74 > 4 > 88

adrChatLog_tabStruct="Qt5Core.dll" + 4555C8 > 8 > 118
SELECTEDCHANNEL_FirstLineText_Unicode="Qt5Core.dll " + 004555C8 > 8 > 118 > 64 > 18 > 0 > 8 > 10

adrSkills_CollectionStart="Qt5Core.dll" + 004555C8 > 8 > 124 > 60 > c4
adrSkills_CollectionCount="Qt5Core.dll" + 004555C8 > 8 > 124 > 60 > c8
adrMyHP="Qt5Core.dll" + 004555C8 > 8 > 124 > 60 > 18
adrMyMaxHP="Qt5Core.dll" + 004555C8 > 8 > 124 > 60 > 1A
adrCapacity="Qt5Core.dll" + 004555C8 > 8 > 124 > 60 > 1C
adrMaxCapacity="Qt5Core.dll" + 004555C8 > 8 > 124 > 60 > 20
adrExperience="Qt5Core.dll" + 004555C8 > 8 > 124 > 60 > 28
adrLevel="Qt5Core.dll" + 004555C8 > 8 > 124 > 60 > 30
adrMyMana="Qt5Core.dll" + 004555C8 > 8 > 124 > 60 > 60
adrMyMaxMana="Qt5Core.dll" + 004555C8 > 8 > 124 > 60 > 62
adrMySoul="Qt5Core.dll" + 004555C8 > 8 > 124 > 60 > 64

adrXPos="Qt5Core.dll" + 004555C8 > 8 > 134 > 24 > 18
adrYPos="Qt5Core.dll" + 004555C8 > 8 > 134 > 24 > 1C
adrZPos="Qt5Core.dll" + 004555C8 > 8 > 134 > 24 > 20
adrMiniMapRect_Y_Double="Qt5Core.dll" + 004555C8 > 8 > 134 > 24 > 8 > 4 > 90
adrMiniMapRect_Width_Double="Qt5Core.dll" + 004555C8 > 8 > 134 > 24 > 8 > 4 > 98
adrMiniMapRect_Height_Double="Qt5Core.dll" + 004555C8 > 8 > 134 > 24 > 8 > 4 > A0
adrMiniMapDisplay_MinX="Qt5Core.dll" + 004555C8 > 8 > 134 > 24 > 2c > 20
adrMiniMapDisplay_MinY="Qt5Core.dll" + 004555C8 > 8 > 134 > 24 > 2c > 24
adrMiniMapDisplay_Z="Qt5Core.dll" + 004555C8 > 8 > 134 > 24 > 2c > 28
adrMiniMapDisplay_SizeX="Qt5Core.dll" + 004555C8 > 8 > 134 > 24 > 2c > 30
adrMiniMapDisplay_SizeY="Qt5Core.dll" + 004555C8 > 8 > 134 > 24 > 2c > 34
adrMiniMapDisplay_Zoom_PointSize1_Float="Qt5Core.dll" + 004555C8 > 8 > 134 > 24 > 2c > 48
adrStatus_CountAndListStart="Qt5Core.dll" + 4555C8 > 8 > 134 > 28 > 68 > C
adrInventory_AmmoCount="Qt5Core.dll" + 004555C8 > 8 > 134 > 28 > 58 > 38 > 24
adrInventory_AmmoCount_String="Qt5Core.dll" + 004555C8 > 8 > 134 > 28 > 58 > 38 > 24 > 10

adrServerList_CollectionStart="Qt5Core.dll" + 4555C8 > 8 > 168 > 54 > 18 > 2c
adrServerList_CollectionCount="Qt5Core.dll" + 4555C8 > 8 > 168 > 54 > 18 > 30

adrBattlelist_CollectionStart="Qt5Core.dll" + 004555C8 > 8 > 1E4 > 104 > 14
adrBattlelist_CollectionCount="Qt5Core.dll" + 004555C8 > 8 > 1E4 > 104 > 18
adrNewRedSquare="Qt5Core.dll" + 004555C8 > 8 > 1E4 > 104 > 28
adrConnectionKey="Qt5Core.dll" + 004555C8 > 8 > 1E4 > 330 > 90 > C8
adrSelectedCharName="Qt5Core.dll" + 004555C8 > 8 > 1E4 > 330 > 9C
adrSelectedCharName_Text="Qt5Core.dll" + 004555C8 > 8 > 1E4 > 330 > 9C > 10
adrInventory_CollectionStart="Qt5Core.dll" + 004555C8 > 8 > 1E4 > 124 > 1c > 14
adrInventory_CollectionCount="Qt5Core.dll" + 004555C8 > 8 > 1E4 > 124 > 1c > 18

adrSpeakCurrentSendTxt="Qt5Core.dll" + 004555C8 > 8 > 1F4 > 24 > 4 > E8 > 4 > 134
adrSpeakCursorPosition="Qt5Core.dll" + 004555C8 > 8 > 1F4 > 24 > 4 > E8 > 4 > 1A0

adrSelectedCharName_afterCharList="Qt5Core.dll" + 004555C8 > 8 > 328 > 18 > 60 > 0
adrSelectedCharName_afterCharList_Text="Qt5Core.dll" + 004555C8 > 8 > 328 > 18 > 60 > 0 > 10
adrSelectedServerURL_afterCharList="Qt5Core.dll" + 004555C8 > 8 > 328 > 18 > 60 > 4
adrSelectedServerURL_afterCharList_Text="Qt5Core.dll" + 004555C8 > 8 > 328 > 18 > 60 > 4 > 10
adrSelectedServerPORT_afterCharList="Qt5Core.dll" + 004555C8 > 8 > 328 > 18 > 60 > 8
adrSelectedServerNAME_afterCharList="Qt5Core.dll" + 004555C8 > 8 > 328 > 18 > 60 > C
adrSelectedServerNAME_afterCharList_Text="Qt5Core.dll" + 004555C8 > 8 > 328 > 18 > 60 > C > 10

offSetSquare_ARGB_8bytes=&H84


; ]]]]]]]]]]]]]]]]]]]]]]]]]]]
; END - MEMORY PATHS

blackd
12-07-2016, 01:26
New version required a slight update in the packet parser. I uploaded the new version of Blackd Proxy right now.

konikito
12-07-2016, 10:26
You'r Great!!

JavaMaste
12-10-2016, 14:53
Hey Daniel.

You surely don't remember me, but we used to discuss a lot about programming on tpforums so many years ago.

I developed a live-statistics display software in Java for Tibia 11 for personal use, however I have been trying to identify item ids within an equipment slot, within a container or even after being clicked, however it seems like they are not stored anymore in memory -or at least not as before-. Have you been able to find a way to read any equipment id?

EDIT: I was able to find some ids after you "look" at an item, the ids have changed.. Here's a list of some of them for you guys to test (I still have to find the memory path)

Scarf 17536
Legion Helmet 21632
Leather Boots 20224
Plate Shield 20992
Meat 13760
Rope 14336
Shovel 15168
Mana Potion 19456

Regards.

blackd
12-11-2016, 19:18
Player inventory is stored in memory, in a collection.
adrInventory_CollectionStart="Qt5Core.dll" + 004555C8 > 8 > 1E4 > 124 > 1c > 14
adrInventory_CollectionCount="Qt5Core.dll" + 004555C8 > 8 > 1E4 > 124 > 1c > 18
Inventory tileIDs can be obtained with following steps over each collection item: > 14 > 8

The only problem is it does not seem to store ammo count. However, the ammo count can be obtained, in a Qstring, in following path:
adrInventory_AmmoCount="Qt5Core.dll" + 004555C8 > 8 > 134 > 28 > 58 > 38 > 24
adrInventory_AmmoCount_String="Qt5Core.dll" + 004555C8 > 8 > 134 > 28 > 58 > 38 > 24 > 10

Veasst
12-18-2016, 01:38
Hello!
I think I'll join You guys with that all Tibia 11 things... I've got one question. How did You manage to get QT5Core.dll as a result? Tried to get the cap pointer and got like 4 pointers (all of them work), but they're in QT5Gui.dll and QT5Widget.dll (2+2). Never got any result with QT5Core.dll.
Also how do You get the health? Did something change now? Your address returns something else than expected.

Thanks!

blackd
12-18-2016, 10:03
Sorry, I don’t remember what version and settings I had when I obtained that base as part of the results. Nowadays I don’t get it but somehow it still works.
About hp: it is 2 bytes. You should only try to read 2 bytes there.

Veasst
12-18-2016, 16:39
Ahh... Ok. Everything works now. Thanks.